Hands-on demos for Red Hat solution architects and consultants. Order a pre-built environment on demo.redhat.com or install on any AAP deployment.
Enterprise-grade patching workflow with EBS snapshots, parallel RHEL and Windows paths, automatic rollback on failure, and a consolidated compliance report.
One-click workflow to provision a full demo stack — VPC, keypair, and five VMs (2 Windows, 2 RHEL, 1 report server) — with inventory sync and VPC report.
Have a demo idea? Fork the repo, add your playbook, and open a PR. Follow the contributing guide to get started.
| Demo | Category | Tags | Author | |
|---|---|---|---|---|
| 💥 |
Tear down all five stack VMs, VPC, and keypair created by Deploy Cloud Stack, then sync inventory.
|
Cloud | Matthew Fernandez |
|
| ☁️ |
Create an AWS VPC with subnet, security group, and route table in a selected region.
|
Cloud | ||
| ☁️ |
Create an AWS EC2 keypair, deriving the public key from the APD Machine Credential's private key.
|
Cloud | ||
| ☁️ |
Create an EC2 instance from a blueprint (RHEL 7/8/9, Windows Core/Full, AL2023) with full tagging support.
|
Cloud | ||
| ☁️ |
Terminate an EC2 instance by Name tag and region.
|
Cloud | ||
| ☁️ |
Change the instance type of a running EC2 instance and refresh the AWS inventory.
|
Cloud | ||
| ☁️ |
Create EBS snapshots of EC2 instances for backup and recovery.
|
Cloud | ||
| ☁️ |
Restore EC2 instance volumes from their latest EBS snapshot.
|
Cloud | ||
| ☁️ |
Create or delete VPC peering infrastructure in AWS for direct network connectivity between VPCs.
|
Cloud | ||
| ☁️ |
Create or delete transit gateway infrastructure in AWS for hub-and-spoke network connectivity.
|
Cloud | ||
| ☁️ |
Generate a VPC infrastructure report and publish it to an S3 bucket.
|
Cloud | ||
| 🐧 |
Register a RHEL server with the Red Hat Portal and Insights using an activation key and org ID.
|
Linux | ||
| 🐧 |
Run troubleshooting commands to find top CPU and memory consumers on a system for incident response.
|
Linux | ||
| 🐧 |
Grant temporary sudo access to a user with automatic time-based cleanup.
|
Linux | ||
| 🐧 |
Apply updates or audit for missing patches and produce an HTML report of systems with missing updates.
|
Linux | ||
| 🐧 |
Start a named service on a target system.
|
Linux | ||
| 🐧 |
Stop a named service on a target system.
|
Linux | ||
| 🐧 |
Execute a shell script or command across a group of systems as root, with RBAC-controlled access.
|
Linux | ||
| 🐧 |
Run a fact, package, and service scan against a system and store results in the AAP fact cache.
|
Linux | ||
| 🐧 |
Install and run an Apache webserver in a Podman container with a configurable home page message.
|
Linux | ||
| 🐧 |
Apply RHEL System Roles (e.g. SELinux, timesync) to servers using the redhat.rhel_system_roles collection.
|
Linux | ||
| 🐧 |
Install and configure the RHEL Web Console (Cockpit) using the cockpit system role with minimal, default, or full package sets.
|
Linux | ||
| 🐧 |
Remediate systems that are out of compliance by applying enforcement rules from a compliance scan.
|
Linux | ||
| 🐧 |
Apply the RHEL STIG security hardening configuration using DISA Supplemental Automation Content.
|
Linux | ||
| 🐧 |
Apply remediation from Compliance as Code to enforce CIS, HIPAA, OSPP, PCI-DSS, or STIG compliance profiles.
|
Linux | ||
| 🐧 |
Run an OpenSCAP report against a compliance profile and optionally serve results via httpd on the target host.
|
Linux | ||
| 🐧 |
Run a compliance scan based on profiles configured in Red Hat Insights. Systems must be registered and associated with a profile.
|
Linux | ||
| 🐧 |
Install a named application package on target systems.
|
Linux | ||
| 🐧 |
End-to-end compliance workflow that generates an OpenSCAP report, refreshes inventory, and enforces remediation on findings.
|
Linux | ||
| 🪟 |
Install the IIS web server feature with a configurable index.html page.
|
Windows | ||
| 🪟 |
Apply Windows updates by category (Security, Critical, Service Packs, etc.) with optional reboot control.
|
Windows | ||
| 🪟 |
Rollback a Windows deployment or clean up resources with a custom message.
|
Windows | ||
| 🪟 |
Verify WinRM connectivity to Windows hosts.
|
Windows | ||
| 🪟 |
Install multiple packages using the Chocolatey package manager and verify versions.
|
Windows | ||
| 🪟 |
Install a single named package using the Chocolatey package manager.
|
Windows | ||
| 🪟 |
Run an arbitrary PowerShell script on Windows hosts (default: retrieve running services).
|
Windows | ||
| 🪟 |
Run a PowerShell script on domain-joined Windows hosts using Kerberos authentication.
|
Windows | ||
| 🪟 |
Run a PowerShell script from source control to query running or stopped services.
|
Windows | ||
| 🪟 |
Configure password complexity requirements using PowerShell Desired State Configuration (DSC).
|
Windows | ||
| 🪟 |
Create a new Active Directory domain on a Windows server.
|
Windows | ||
| 🪟 |
Join a Windows computer to an existing Active Directory domain.
|
Windows | ||
| 🪟 |
Helpdesk portal to create a new user in Active Directory with full contact details.
|
Windows | ||
| 🪟 |
Apply Windows Server DISA STIG security hardening configuration.
|
Windows | ||
| 🪟 |
One-click workflow to provision a domain controller and two domain-joined Windows hosts in AWS, including Kerberos validation.
|
Windows | ||
| 🚀 |
Provision an AWS nested-virt hypervisor, deploy a containerlab Cisco lab (n9kv + cat8kv), and sync ContainerLab Inventory.
|
Network | Matthew Fernandez |
|
| 💥 |
Tear down the containerlab topology and delete the AWS hypervisor, VPC, subnet, security group, and keypair.
|
Network | Matthew Fernandez |
|
| 🌐 |
Apply baseline banner, NTP, and SNMP configuration to containerlab Cisco NX-OS and IOS-XE devices.
|
Network | ||
| 🌐 |
Gather facts from containerlab Cisco NX-OS and IOS-XE devices and display hostname, version, model, and interfaces.
|
Network | ||
| 🌐 |
Run the DISA STIG role against containerlab IOS-XE devices to audit and enforce configuration compliance.
|
Network | ||
| 🌐 |
Back up running configurations from containerlab NX-OS and IOS-XE devices to the execution node.
|
Network | ||
| 🔥 |
End-to-end workflow to deploy a Palo Alto firewall instance in AWS, configure security rules, and set up a protected webserver.
|
Network | ||
| ⎈ |
Install and deploy an Event-Driven Ansible (EDA) Controller instance using the AAP OpenShift operator.
|
Openshift | ||
| ⎈ |
Install the OpenShift Container Native Virtualization (CNV) operator and all required dependencies.
|
Openshift | ||
| ⎈ |
Provision a RHEL 8 or 9 virtual machine in OpenShift Virtualization with SSH keys and RHSM registration.
|
Openshift | ||
| ⎈ |
Delete virtual machines in OpenShift CNV by host string pattern.
|
Openshift | ||
| ⎈ |
Install and deploy Red Hat OpenShift Dev Spaces for cloud-based development environments.
|
Openshift | ||
| ⎈ |
Install and deploy GitLab on an OpenShift cluster.
|
Openshift | ||
| ⎈ |
Workflow to deploy virtualized infrastructure (RHEL 8 + RHEL 9 VMs) in OpenShift Virtualization with inventory sync.
|
Openshift | ||
| ⎈ |
Snapshot CNV virtual machines, apply patches, and automatically restore from snapshot on failure.
|
Openshift | ||
| 🛰️ |
Register a RHEL server with Red Hat Satellite using an activation key in the format RHEL
|
Satellite | ||
| 🛰️ |
Run an OpenSCAP compliance scan and report results back to Red Hat Satellite.
|
Satellite | ||
| 🛰️ |
Publish a new version of a Satellite content view to begin the patching promotion lifecycle.
|
Satellite | ||
| 🛰️ |
Promote a content view version from one lifecycle environment to the next (e.g. Dev → QA → Prod).
|
Satellite | ||
| 🛰️ |
End-to-end patching workflow for the Dev environment: sync Satellite inventory, publish content view, check for updates, and apply patches with approval gate.
|
Satellite | ||
| 🌹 |
Automated ROSA cluster lifecycle: preflight checks, STS creation, readiness verification, and safe destruction with destroy-on-failure guardrails.
|
Infrastructure | ||
| 🌹 |
Validate AWS identity, ROSA token, EIP quota, and account roles before attempting cluster creation.
|
Infrastructure | ||
| 🌹 |
Create a ROSA cluster in STS mode with auto-provisioned account roles, EIP management, and configurable compute options.
|
Infrastructure | ||
| 🌹 |
Poll ROSA cluster status until ready, then create a cluster-admin user and display login credentials.
|
Infrastructure | ||
| 🌹 |
Tear down a ROSA cluster by name and wait for full resource cleanup including AWS infrastructure.
|
Infrastructure |
