ServiceNow and Ansible Spoke

[@torrescouto]

4:29 Where do you create that user?

[@alexdworjan]

The servicenow user is a local user I created within Automation controller: docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.4/html-single/automation_controller_user_guide/index#proc-controller-creating-a-user. I created them as a System Administrator, but you could create a normal user and assign execute permissions to the jobs or workflows you want to run from ServiceNow

[@andrewamadorchavira3705]

Thanks for the video, I just have some question :D The certificate has to be from ansible tower? how do I get it? is this step important? Also, the servicenow user on 4:29, did you create it on ansible or ServiceNow?

[@alexdworjan]

The Certificate needs to be from automation controller or the load balancer you are pointing ServiceNow at (depending on where you have TLS termination set). This is required because otherwise ServiceNow will reject the connection as an invalid cert (unless you are leveraging a public Certificate Authority). The Servicenow user is a local user I've created within Ansible. This is acting as a service account for all automation triggered from ServiceNow

[@kerrymason6371]

Thanks Alex for the video! can you explain what you had to do for the certificate - this is at about 2:43 into the video is what I am referring to thank you!

[@alexdworjan]

So that's just using the SSL certificate that I had already attached to my controller instances (/etc/tower/tower.cert). So this should come from your certificate authority (I see LetsEncrypt used often, but your business should already have something established). For it to properly work in ServiceNow, you'll need the full SSL certificate chain in controller and then uploaded to ServiceNow as I show at that portion of the video

[@kerrymason6371]

@@alexdworjan we use the containerized solution I think that would change how we use the certificate correct?

[@alexdworjan]

@@kerrymason6371 The certificate itself would still be generated in the same way, but it wouldn't be in the same location since you'd create a TLS secret and then update your automation controller CR with route_tls_secret under spec pointing to the TLS secret you just created: access.redhat.com/solutions/3109871

[@mariajosesilva1923]

Hello, does it works with Ansible Automation Platform? because the ansible spoke from servicenow requires Ansible Tower which is the older version. Appreciate the answer.

[@alexdworjan]

Yes, I have this working with AAP 2.4. The api endpoints have not changed so the process is exactly the same for Tower and AAP 2.0-2.4

[@bharathreddy5047]

Hi Alex, thanks for the clear explanation but I think I'm missing some step when job completed successfully in tower how we can get response back and update it in Servicenow?

[@alexdworjan]

So that's why I have a workflow and not just a job template. If you notice in the video, I shift to the second job template "ServiceNow Catalog Update" which includes the servicenow.itsm.api module to provide the exact updates that I want back to the job. This isn't an automatic process. In the first job template I use the set_stats module github.com/shadowman-lab/Ansible-Config/blob/main/roles/shadowman_patching/tasks/patch_linux.yml, to get the exact information I want to update servicenow in the "work_notes" variable and then pass it to a separate JT that calls this role: github.com/shadowman-lab/Ansible-SNOW/blob/main/roles/servicenow_catalog/tasks/main.yml

[@shanecummins253]

HI Alex currently we have a work flow that deploys Vm's adds the Vm to the domain install software etc.. but is it poosible to trigger a work flow from a SNOW catalgo request ? thanks Shane

[@alexdworjan]

That's actually what most of my catalog items are triggering. I had to modify the spoke plugin to make it work github.com/shadowman-lab/Ansible-SNOW/tree/main/SNOWSetup#update-spoke-actions-for-workflow-job-templates

[@ASK-wb2er]

Hi Alex, for an example I have service now request which was created by user for accessing to linux server, so ansible has to pick that ticket and then it has to grant the access to based on snow request details, and the request should get closed once the access has granted. Finally email has to be trigger to the user for confirmation saying that your request has been processed and try to login to the server. how to achieve this kind of requirement? Thanks, Alan

[@alexdworjan]

The request itself (some sort of catalog item inside ServiceNow), would automatically send the information to AAP based on what information you pass in the Extra Arguments section which would pass the information you need to AAP (probably user, access level, server, request number). Then in AAP I would have a workflow, one JT would handle the access, one would handle closing the request in ServiceNow, one would handle the e-mail to the end user

[@stephaneesnault]

Hi Alex, thanks for the time used to make this clear video. Do you know is it's possible to connect to AWX ansible platform ? because AWX is free to just testing spoke ansible if we don't have ansible Tower or AAP.

[@alexdworjan]

Yes, it should work with AWX as well since it's essentially making an API call from ServiceNow. As long as the endpoint matches what you have in AWX, it would work