Dynatrace-Ansible integration token

[erh_inetum]

Hi,

Does someone know if it's possible doing Dynatrace and Ansible integration using Ansible bearer token instead of user and password?

Could OAuth credentials 2.0 in Custom Integration be used to configure Ansible Bearer token?

Thanks in advance.

Regards,

Elena.

[ManuelWarum]

Hi Elena, thanks for reaching out!

I assume this is about AWX. For this, we currently only support basic authentication. There are some tentative plans to also support OAuth, but we don't have it planned yet. Please let us know if this is important to you. We'll see if this is something we can address in the future.

[erh_inetum]

Hi Manuel,

Yes, we're using AWX.

We think it's important to use Ansible bearer token for API use, as in this case. The token is more restrictive in permissions and makes it easier to use the API (with the token you simply do an HTTP POST to the method that launches the task, with username/password you first have to log in to get the CSRF token and the session to be able to launch the task). Also, a user can have multiple tokens, so it is easier to manage permissions, more granular, and you can segment permissions management. If a token is compromised, it's deleted and a new one is created, affecting only one AWX-Other_system integration. If a user password is compromised, the password must be changed in AWX and on all systems using it.

Thanks,

Elena.

[erh_inetum · Accepted solution]

Hi again @ManuelWarum ,

We've created the following product idea.

Regards,

Elena.