Skip to main content

Ansible Automation Platform Secretless Authentication

Ansible Automation Platform supports OIDC authentication for accessing cloud providers and managed nodes.

Overview​

Ansible Automation Platform's OIDC support enables playbook execution without storing cloud credentials or SSH keys. This provides:

  • No Stored Credentials: OIDC tokens replace cloud provider credentials
  • Cloud Provider Integration: AWS, GCP, Azure authentication
  • Credential-Free Execution: Dynamic credential provisioning
  • Enhanced Security: Temporary credentials for automation jobs

Key Capabilities​

  • OIDC authentication for cloud providers
  • Integration with cloud provider identity systems
  • Job-level credential provisioning
  • Organization and team-level controls

Contributing​

This page is a placeholder. We need your help to create comprehensive documentation!

What we need:

  • Complete setup guide for Ansible Automation Platform OIDC
  • Cloud provider credential configuration
  • Job template setup with OIDC
  • AWS, GCP, Azure collection configuration
  • Kubernetes inventory with workload identity
  • Troubleshooting authentication issues
  • Best practices for credential management
  • Migration from stored credentials

How to contribute:

Resources​