AWX/Tower Job Approval

I’ve been trying to look into some sort of job request and approval functionality from any software out there.

Similar to Cloudforms/ManageIQ where you can intergrate tower and have users request servers to be provisioned.

Does anyone here know of any software out there that allow users to request to run a job and have it approved. At the moment in AWX if a user or team has permissions to run a playbook (e.g. a security scan playbook) then that user can scan any server they have access to at anytime, With manageiq you can request to have a provision playbook executed and then an admin approves it.
The only other option in AWX is to have the admins running playbooks like security scans as delegating full control of a job to be used whenever they like isn’t viable

Hi Martyn

Cloudforms/ManageIQ would do it, if you’re looking for a technical focussed solution.
If you want to wrap a more generic business type model around it then something like https://www.jbpm.org/ or JBoss BPM Suite would be ideal.
This will allow you to define business process modelling and flows and then call out to the likes of AWX/Tower via it’s API to do the heavy technical lifting.

Regards
Phil.

Hi,

Thanks for that i’ll look into jbpm. ManageIQ works well for provisioning as requesting a ‘service’ as they call it, launches a the playbooks you have setup to provision a server, then it adds a service into the UI essentially representing that server showing what resources it has, who owns it and allowing you to request its deletion.

Running normal non provisioning playbooks like running a security scan playbook wouldn’t work as each time you request the run it would create a service just laying around that doesn’t make sense in the context of that playbook. this is understandable though as ManageIQ/Cloudforms is made for provisioning and it having that service representing the VM you created makes sense