mas-cli 20.2.1__tar.gz → 21.1.0__tar.gz

{mas_cli-20.2.1/src/mas_cli.egg-info → mas_cli-21.1.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mas-cli
-Version: 20.2.1
+Version: 21.1.0
 Summary: Python Admin CLI for Maximo Application Suite
 Home-page: https://github.com/ibm-mas/cli
 Author: David Parker

{mas_cli-20.2.1 → mas_cli-21.1.0}/src/mas/cli/__init__.py

@@ -10,4 +10,4 @@
 
 from .cli import BaseApp  # noqa: F401
 
-__version__ = "20.2.1"  # Python module compatible semver
+__version__ = "21.1.0"  # Python module compatible semver

{mas_cli-20.2.1 → mas_cli-21.1.0}/src/mas/cli/aiservice/install/app.py

@@ -37,9 +37,7 @@ from ...install.catalogs import supportedCatalogs
 # AI Service utilizes two distinct databases: DB2 is employed by the AiBroker component.
 # By default, AiService will deploy DB2 within the same namespace as MAS (db2u), but it will be configured as a separate DB2 instance.
 
-from ...install.settings.mongodbSettings import MongoDbSettingsMixin
-from ...install.settings.db2Settings import Db2SettingsMixin
-from ...install.settings.additionalConfigs import AdditionalConfigsMixin
+from ...install.settings import InstallSettingsMixin
 
 from mas.cli.validators import (
     InstanceIDFormatValidator,
@@ -57,11 +55,12 @@ from mas.devops.data import getCatalog, NoSuchCatalogError
 from mas.devops.tekton import (
     installOpenShiftPipelines,
     updateTektonDefinitions,
-    prepareAiServicePipelinesNamespace,
     prepareInstallSecrets,
     testCLI,
     launchInstallPipeline
 )
+from mas.devops.pre_install import applyPreInstallMASRBAC, permissionCheckForRBAC
+from mas.devops.utils import isVersionEqualOrAfter
 
 logger = logging.getLogger(__name__)
 
@@ -75,7 +74,73 @@ def logMethodCall(func):
     return wrapper
 
 
-class AiServiceInstallApp(BaseApp, aiServiceInstallArgBuilderMixin, aiServiceInstallSummarizerMixin, MongoDbSettingsMixin, Db2SettingsMixin, AdditionalConfigsMixin, ConfigGeneratorMixin):
+class AiServiceInstallApp(BaseApp, aiServiceInstallArgBuilderMixin, aiServiceInstallSummarizerMixin, InstallSettingsMixin, ConfigGeneratorMixin):
+
+    def evaluatePreInstallRBACAccess(self) -> None:
+        self.applyPreInstallMASRBAC = False
+
+        if not isVersionEqualOrAfter('9.2.0', self.getParam("aiservice_channel")):
+            return
+
+        if self.getParam("skip_preinstall_rbac") == "true":
+            return
+
+        permissionResults = permissionCheckForRBAC(self.dynamicClient)
+        hasPreInstallRBACAccess = all(result["allowed"] for result in permissionResults)
+
+        if hasPreInstallRBACAccess:
+            self.applyPreInstallMASRBAC = True
+            return
+
+        if self.isInteractiveMode:
+            self.printDescription([
+                "",
+                f"You selected the '{self.getParam('permission_mode')}' permission mode.",
+                "The pre-install RBAC required for this permission mode has not been applied by your current cluster login.",
+                "This step must be completed by an OpenShift cluster administrator before AI Service installation can continue.",
+                "Ask your OpenShift administrator to run 'mas pre-install' for this AI Service instance.",
+                "If that has already been done, you can continue the installation without applying it again."
+            ])
+
+            if not self.yesOrNo("Has your OpenShift administrator already run 'mas pre-install' for this AI Service installation"):
+                self.fatalError("Installation aborted. Ask your OpenShift administrator to run 'mas pre-install' for this AI Service installation and then run 'mas aiservice-install' again with --skip-preinstall-rbac.")
+        else:
+            self.fatalError(
+                "\n".join([
+                    f"You selected the '{self.getParam('permission_mode')}' permission mode.",
+                    "The pre-install RBAC required for this permission mode has not been applied by your current cluster login.",
+                    "This step must be completed by an OpenShift cluster administrator before AI Service installation can continue.",
+                    "Ask your OpenShift administrator to run 'mas pre-install' for this installation and then rerun 'mas aiservice-install' with --skip-preinstall-rbac."
+                ])
+            )
+
+    def configPermissionMode(self) -> None:
+        if self.showAdvancedOptions:
+            self.printH1("Configure Permission Mode")
+            self.printDescription([
+                "Choose how AI Service should be installed with respect to permissions:",
+                "",
+                "  1. <b>cluster</b> - Install with ClusterRoles (default)",
+                "     - AI Service has cluster-level access to manage its resources across the cluster",
+                "     - CLI pre-installs ClusterRoles to grant delegated admin permissions to AI Service service accounts",
+                "",
+                "  2. <b>namespaced</b> - Install with namespace-scoped Roles only",
+                "     - No ClusterRoles are installed in this mode",
+                "     - CLI pre-installs namespace-scoped Roles in prepared namespaces to grant delegated admin permissions",
+                "     - AI Service can manage resources only in namespaces prepared by the OpenShift admin",
+                "",
+                "  3. <b>minimal</b> - Install with essential namespace-scoped Roles only",
+                "     - No ClusterRoles are installed in this mode",
+                "     - Only essential permissions required for AI Service are applied",
+                "     - AI Service can manage only the resources covered by these essential permissions"
+            ])
+
+            permissionModeInt = self.promptForInt("Permission Mode", default=1, min=1, max=3)
+            permissionModeMap = {1: "cluster", 2: "namespaced", 3: "minimal"}
+            self.setParam("permission_mode", permissionModeMap[permissionModeInt])
+        elif self.getParam("permission_mode") == "":
+            self.setParam("permission_mode", "cluster")
+
     @logMethodCall
     def processCatalogChoice(self) -> list:
         self.catalogDigest = self.chosenCatalog["catalog_digest"]
@@ -131,6 +196,7 @@ class AiServiceInstallApp(BaseApp, aiServiceInstallArgBuilderMixin, aiServiceIns
             "There are two flavours of the interactive install to choose from: <u>Simplified</u> and <u>Advanced</u>.  The simplified option will present fewer dialogs, but you lose the ability to configure the following aspects of the installation:",
             " - Configure certificate issuer",
             " - Enable IPv6 SingleStack networking for services",
+            " - Customize Scheduling configuration for AI workloads(Training pipeline & Inference services) for AI Service tenant"
         ])
         self.showAdvancedOptions = self.yesOrNo("Show advanced installation options")
 
@@ -148,6 +214,7 @@ class AiServiceInstallApp(BaseApp, aiServiceInstallArgBuilderMixin, aiServiceIns
 
         self.storageClassProvider = "custom"
         self.slsLicenseFileLocal = None
+        self.db2LicenseFileLocal = None
 
         # Catalog
         self.configCatalog()
@@ -176,6 +243,14 @@ class AiServiceInstallApp(BaseApp, aiServiceInstallArgBuilderMixin, aiServiceIns
         self.configMongoDb()
         self.setDB2DefaultChannel()
         self.setDB2DefaultSettings()
+        self.printDescription([
+            "Db2 Universal Operator for v12 onwards requires to add a License activation key",
+            "If you don't have a license press enter to continue."
+        ])
+        self.db2LicenseFileLocal = self.promptForFile("Db2 License file", envVar="DB2_LICENSE_FILE", default="", mustExist=False)
+        # Permission mode prompt (especially in dev mode)
+        if isVersionEqualOrAfter('9.2.0', self.getParam("aiservice_channel")):
+            self.configPermissionMode()
 
     @logMethodCall
     def nonInteractiveMode(self) -> None:
@@ -188,6 +263,9 @@ class AiServiceInstallApp(BaseApp, aiServiceInstallArgBuilderMixin, aiServiceIns
 
         self.storageClassProvider = "custom"
         self.slsLicenseFileLocal = None
+        self.db2LicenseFileLocal = None
+
+        self.aiserviceTenantSchedulingConfigFileLocal = None
 
         self.approvals = {
             "approval_aiservice": {"id": "aiservice"},
@@ -250,6 +328,11 @@ class AiServiceInstallApp(BaseApp, aiServiceInstallArgBuilderMixin, aiServiceIns
                 if len(value) == 0 or len(value) > 4:
                     self.fatalError(f"Unsupported value for --s3-bucket-prefix(Must be 1-4 characters long): {value}")
 
+            elif key == "tenant_scheduling_config_file":
+                # No need to perform validation if file exist here, as it has been already validated by argParser type check.
+                if value is not None and value != "":
+                    self.aiserviceTenantSchedulingConfigFileLocal = value
+
             elif key == "non_prod":
                 if not value:
                     self.operationalMode = 1
@@ -297,6 +380,9 @@ class AiServiceInstallApp(BaseApp, aiServiceInstallArgBuilderMixin, aiServiceIns
                 if value is not None and value != "":
                     self.slsLicenseFileLocal = value
                     self.setParam("sls_action", "install")
+            elif key == "db2_license_file":
+                if value is not None and value != "":
+                    self.db2LicenseFileLocal = value
             elif key == "dedicated_sls":
                 if value:
                     self.setParam("sls_namespace", f"mas-{self.args.aiservice_instance_id}-sls")
@@ -328,7 +414,7 @@ class AiServiceInstallApp(BaseApp, aiServiceInstallArgBuilderMixin, aiServiceIns
                             self.fatalError(f"Unsupported format for {key} ({value}).  Expected int:int:boolean")
 
             # Arguments that we don't need to do anything with
-            elif key in ["accept_license", "dev_mode", "skip_pre_check", "skip_grafana_install", "no_confirm", "help", "advanced", "simplified"]:
+            elif key in ["accept_license", "dev_mode", "skip_pre_check", "skip_preinstall_rbac", "skip_grafana_install", "no_confirm", "help", "advanced", "simplified"]:
                 pass
 
             elif key == "manual_certificates":
@@ -364,6 +450,13 @@ class AiServiceInstallApp(BaseApp, aiServiceInstallArgBuilderMixin, aiServiceIns
             self.validateCatalogSource()
             self.licensePrompt()
 
+        if self.getParam("permission_mode") != "" and not isVersionEqualOrAfter('9.2.0', self.getParam("aiservice_channel")):
+            self.fatalError("--permission-mode is supported only for AI Service releases aligned to MAS 9.2.0 and later")
+
+        # Set default permission_mode for 9.2.0+ if not provided
+        if isVersionEqualOrAfter('9.2.0', self.getParam("aiservice_channel")) and self.getParam("permission_mode") == "":
+            self.setParam("permission_mode", "cluster")
+
     @logMethodCall
     def install(self, argv):
         """
@@ -403,6 +496,9 @@ class AiServiceInstallApp(BaseApp, aiServiceInstallArgBuilderMixin, aiServiceIns
         if args.skip_pre_check:
             self.setParam("skip_pre_check", "true")
 
+        if hasattr(args, 'skip_preinstall_rbac') and args.skip_preinstall_rbac:
+            self.setParam("skip_preinstall_rbac", "true")
+
         if instanceId is None:
             self.printH1("Set Target OpenShift Cluster")
             # Connect to the target cluster
@@ -444,8 +540,13 @@ class AiServiceInstallApp(BaseApp, aiServiceInstallArgBuilderMixin, aiServiceIns
         else:
             self.nonInteractiveMode()
 
-        # Set up the sls license file
+        self.evaluatePreInstallRBACAccess()
+
+        # Set up the sls and db2 license file
         self.slsLicenseFile()
+        self.db2LicenseFile()
+
+        self.aiserviceConfig()
 
         # Show a summary of the installation configuration
         self.printH1("Non-Interactive Install Command")
@@ -480,20 +581,15 @@ class AiServiceInstallApp(BaseApp, aiServiceInstallArgBuilderMixin, aiServiceIns
 
             with Halo(text=f'Preparing namespace ({pipelinesNamespace})', spinner=self.spinner) as h:
                 createNamespace(self.dynamicClient, pipelinesNamespace)
-                prepareAiServicePipelinesNamespace(
-                    dynClient=self.dynamicClient,
-                    instanceId=self.getParam("aiservice_instance_id"),
-                    storageClass=self.pipelineStorageClass,
-                    accessMode=self.pipelineStorageAccessMode,
-                    configureRBAC=(self.getParam("service_account_name") == "")
-                )
                 prepareInstallSecrets(
                     dynClient=self.dynamicClient,
                     namespace=pipelinesNamespace,
                     slsLicenseFile=self.slsLicenseFileSecret,
+                    db2LicenseFile=self.db2LicenseFileSecret,
                     additionalConfigs=self.additionalConfigsSecret,
                     podTemplates=self.podTemplatesSecret,
                     certs=self.certsSecret,
+                    aiserviceConfig=self.aiserviceConfigSecret,
                     slack_token=self.getParam("slack_token"),
                     slack_channel=self.getParam("slack_channel")
                 )
@@ -502,6 +598,17 @@ class AiServiceInstallApp(BaseApp, aiServiceInstallArgBuilderMixin, aiServiceIns
 
                 h.stop_and_persist(symbol=self.successIcon, text=f"Namespace is ready ({pipelinesNamespace})")
 
+            if self.applyPreInstallMASRBAC:
+                with Halo(text=f"Setting up pre-install RBAC for AI Service instance {self.getParam('aiservice_instance_id')}...", spinner=self.spinner) as h:
+                    applyPreInstallMASRBAC(
+                        dynClient=self.dynamicClient,
+                        masVersion=".".join(self.getParam("aiservice_channel").split(".")[:2]),
+                        masInstanceId=self.getParam("aiservice_instance_id"),
+                        permissionMode=self.getParam("permission_mode"),
+                        selectedApps=["aiservice"]
+                    )
+                    h.stop_and_persist(symbol=self.successIcon, text=f"Pre-install RBAC for AI Service is ready for {self.getParam('aiservice_instance_id')}")
+
             with Halo(text='Testing availability of MAS CLI image in cluster', spinner=self.spinner) as h:
                 testCLI()
                 h.stop_and_persist(symbol=self.successIcon, text="MAS CLI image deployment test completed")
@@ -598,6 +705,23 @@ class AiServiceInstallApp(BaseApp, aiServiceInstallArgBuilderMixin, aiServiceIns
         self.setParam("tenant_entitlement_start_date", today.strftime('%Y-%m-%d'))
         self.promptForString("Entitlement end date (YYYY-MM-DD)", "tenant_entitlement_end_date", default=oneyear.strftime('%Y-%m-%d'))
 
+        self.aiserviceTenantSchedulingConfigFileLocal = None
+        self.configSchedulingConstraints()
+
+    @logMethodCall
+    def configSchedulingConstraints(self):
+        if self.showAdvancedOptions:
+            self.printH1("Scheduling configuration for AI Workloads")
+            self.printDescription(content=[
+                "AI Service supports configuring tolerations and nodeSelector per tenant to schedule AI workloads(training pipelines & Inference services) on dedicated nodes.",
+                "To configure tolerations and nodeSelector, create a YAML configuration file",
+                "The YAML file must contain `pipeline` and/or `predictor` objects. Each object can have:",
+                "  `tolerations`: List of Kubernetes tolerations (required fields: `key`, `operator`, `effect`)",
+                "  `nodeSelector`: Dictionary of node label key-value pairs",
+            ])
+
+            self.aiserviceTenantSchedulingConfigFileLocal = self.promptForFile("Scheduling configuration YAML file", mustExist=True, envVar="AISERVICE_TENANT_SCHEDULING_CONFIG_FILE")
+
     def _setMinioStorageDefaults(self) -> None:
         """
         Set MinIO storage defaults when MinIO is being installed in-cluster.

{mas_cli-20.2.1 → mas_cli-21.1.0}/src/mas/cli/aiservice/install/argBuilder.py

@@ -96,6 +96,10 @@ class aiServiceInstallArgBuilderMixin():
             command += f"  --dev-mode{newline}"
         if self.getParam('skip_pre_check') is True:
             command += f"  --skip-pre-check{newline}"
+        if self.getParam('permission_mode') != "":
+            command += f"  --permission-mode \"{self.getParam('permission_mode')}\"{newline}"
+        if self.getParam('skip_preinstall_rbac') != "":
+            command += f"  --skip-preinstall-rbac{newline}"
         if self.getParam('image_pull_policy') != "":
             command += f"  --image-pull-policy {self.getParam('image_pull_policy')}{newline}"
         if self.getParam('service_account_name') != "":
@@ -172,6 +176,8 @@ class aiServiceInstallArgBuilderMixin():
             command += f"  --tenant-entitlement-start-date \"{self.getParam('tenant_entitlement_start_date')}\"{newline}"
         if self.getParam('tenant_entitlement_end_date') != "":
             command += f"  --tenant-entitlement-end-date \"{self.getParam('tenant_entitlement_end_date')}\"{newline}"
+        if self.aiserviceTenantSchedulingConfigFileLocal:
+            command += f"  --tenant-scheduling-config-file \"{self.aiserviceTenantSchedulingConfigFileLocal}\"{newline}"
 
         if self.getParam('rsl_url') != "":
             command += f"  --rsl-url \"{self.getParam('rsl_url')}\"{newline}"
@@ -184,6 +190,8 @@ class aiServiceInstallArgBuilderMixin():
 
         if self.getParam('db2_channel') != "":
             command += f"  --db2-channel \"{self.getParam('db2_channel')}\"{newline}"
+        if self.db2LicenseFileLocal:
+            command += f"  --db2-license-file \"{self.db2LicenseFileLocal}\""
 
         command += "  --accept-license --no-confirm"
         return command

{mas_cli-20.2.1 → mas_cli-21.1.0}/src/mas/cli/aiservice/install/argParser.py

@@ -23,7 +23,7 @@ def isValidFile(parser, arg) -> str:
 
 
 aiServiceinstallArgParser = argparse.ArgumentParser(
-    prog="mas install-aiservice",
+    prog="mas aiservice-install",
     description="\n".join([
         f"IBM Maximo Application Suite Admin CLI v{packageVersion}",
         "Install Aiservice by configuring and launching the Tekton Pipeline.\n",
@@ -435,6 +435,20 @@ aiserviceAdvancedArgGroup.add_argument(
     required=False,
     help="Provide the name of the Issuer to configure AI Service to issue certificates",
 )
+aiserviceAdvancedArgGroup.add_argument(
+    "--permission-mode",
+    dest="permission_mode",
+    required=False,
+    choices=["cluster", "namespaced", "minimal"],
+    help="The permission mode used to determine which pre-install RBAC manifests are applied for AI Service (MAS 9.2+ advanced option)"
+)
+aiserviceAdvancedArgGroup.add_argument(
+    "--skip-preinstall-rbac",
+    dest="skip_preinstall_rbac",
+    required=False,
+    action="store_true",
+    help="Skip pre-install RBAC setup (non-interactive mode only)"
+)
 aiserviceAdvancedArgGroup.add_argument(
     "--enable-ipv6",
     dest="enable_ipv6",
@@ -444,6 +458,13 @@ aiserviceAdvancedArgGroup.add_argument(
     action="store_const",
     const="true"
 )
+aiserviceAdvancedArgGroup.add_argument(
+    "--tenant-scheduling-config-file",
+    dest="tenant_scheduling_config_file",
+    required=False,
+    help="Path to the YAML file that contains the scheduling configuration for tenant",
+    type=lambda x: isValidFile(aiServiceinstallArgParser, x)
+)
 
 
 # IBM Db2 Universal Operator
@@ -460,7 +481,11 @@ db2ArgGroup.add_argument(
     required=False,
     help="Subscription channel for Db2u"
 )
-
+db2ArgGroup.add_argument(
+    "--db2-license-file",
+    required=False,
+    help="Db2 License File for Db2"
+)
 
 # Development Mode
 # -----------------------------------------------------------------------------
@@ -538,6 +563,18 @@ otherArgGroup.add_argument(
     required=False,
     help="Run the install pipeline under a custom service account (also disables creation of the default 'pipeline' service account)",
 )
+otherArgGroup.add_argument(
+    "--slack-token",
+    dest="slack_token",
+    required=False,
+    help="Slack bot token for sending pipeline notifications"
+)
+otherArgGroup.add_argument(
+    "--slack-channel",
+    dest="slack_channel",
+    required=False,
+    help="Slack channel(s) for notifications (comma-separated for multiple channels)"
+)
 
 otherArgGroup.add_argument(
     "-h", "--help",

{mas_cli-20.2.1 → mas_cli-21.1.0}/src/mas/cli/aiservice/install/params.py

@@ -40,6 +40,7 @@ optionalParams = [
     "db2_timezone",
     "db2_namespace",
     "db2_channel",
+    "db2_license_file",
     "db2_affinity_key",
     "db2_affinity_value",
     "db2_tolerate_key",
@@ -100,10 +101,14 @@ optionalParams = [
     "rsl_token",
     "rsl_ca_crt",
     "environment_type",
+    "configure_aiassistant",
 
     # Certificate Issuer
     "aiservice_certificate_issuer",
 
+    # permission mode
+    "permission_mode",
+
     # Enable IPv6 networking
     "enable_ipv6",
 

{mas_cli-20.2.1 → mas_cli-21.1.0}/src/mas/cli/aiservice/install/summarizer.py

@@ -46,17 +46,23 @@ class aiServiceInstallSummarizerMixin():
         self.printParamSummary("Release", "aiservice_channel")
         self.printParamSummary("Instance ID", "aiservice_instance_id")
         self.printParamSummary("Environment Type", "environment_type")
+        if self.getParam("permission_mode") not in [None, ""]:
+            self.printParamSummary("Permission Mode", "permission_mode")
+            self.printSummary("Skip Pre-Install RBAC", "Yes" if self.getParam('skip_preinstall_rbac') == "true" else "No")
 
         if "aiservice_certificate_issuer" in self.params:
             self.printParamSummary("Certificate Issuer", "aiservice_certificate_issuer")
 
         self.printParamSummary("Configure AI Service to run in IPv6 mode", "enable_ipv6")
 
-        self.printH2("AI Service Tenant Entitlement")
+        self.printH2("AI Service Tenant Configuration")
         self.printParamSummary("Entitlement Type", "tenant_entitlement_type")
         self.printParamSummary("Start Date", "tenant_entitlement_start_date")
         self.printParamSummary("End Date", "tenant_entitlement_end_date")
 
+        if self.aiserviceTenantSchedulingConfigFileLocal:
+            self.printSummary("Scheduling configuration file", self.aiserviceTenantSchedulingConfigFileLocal)
+
         self.printH2("S3 Configuration")
         # self.printParamSummary("Storage provider", "aiservice_s3_provider")
         if self.getParam("minio_root_user") is not None and self.getParam("minio_root_user") != "":

{mas_cli-20.2.1 → mas_cli-21.1.0}/src/mas/cli/aiservice/upgrade/argParser.py

@@ -61,6 +61,18 @@ otherArgGroup.add_argument(
     default=False,
     help="Configure upgrade for development mode",
 )
+otherArgGroup.add_argument(
+    "--slack-token",
+    dest="slack_token",
+    required=False,
+    help="Slack bot token for sending pipeline notifications"
+)
+otherArgGroup.add_argument(
+    "--slack-channel",
+    dest="slack_channel",
+    required=False,
+    help="Slack channel(s) for notifications (comma-separated for multiple channels)"
+)
 otherArgGroup.add_argument(
     '-h', "--help",
     action='help',

{mas_cli-20.2.1 → mas_cli-21.1.0}/src/mas/cli/cli.py

@@ -120,7 +120,7 @@ class BaseApp(PrintMixin, PromptMixin):
         logging.getLogger('asyncio').setLevel(logging.INFO)
 
         # Supports extended semver, unlike mas.cli.__version__
-        self.version: str = "20.2.1"
+        self.version: str = "21.1.0"
         self.h1count: int = 0
         self.h2count: int = 0
 

{mas_cli-20.2.1 → mas_cli-21.1.0}/src/mas/cli/gencfg.py

@@ -60,6 +60,52 @@ class ConfigGeneratorMixin():
             f.write(cfg)
             f.write('\n')
 
+    def generateAiCfg(self, instanceId: str, scope: str, destination: str, workspaceId: str = "") -> None:
+        templateFile = path.join(self.templatesDir, "aicfg.yml.j2")
+        with open(templateFile) as tFile:
+            template = Template(tFile.read())
+
+        if scope == "workspace":
+            assert workspaceId != ""
+
+        name = self.promptForString("Configuration Display Name", default="AI Service Configuration")
+        url = self.promptForString("AI Service URL")
+        tenantId = self.promptForString("AI Service Tenant ID")
+        apikey = self.promptForString("AI Service API Key", isPassword=True)
+
+        enabled = self.yesOrNo("Enable AI Service (set aiService.enabled to true)")
+        aiAssistantEnabled = self.yesOrNo("Enable AI Assistant Agent (AI assistant for MAS)")
+        sslEnabled = self.yesOrNo("Enable SSL Connection")
+
+        if sslEnabled:
+            sslCertFile = self.promptForFile("Path to certificate file")
+            with open(sslCertFile) as cFile:
+                certLocalFileContent = cFile.read()
+        else:
+            certLocalFileContent = ""
+
+        cfg = template.render(
+            scope=scope,
+
+            mas_instance_id=instanceId,
+            mas_workspace_id=workspaceId,
+
+            cfg_display_name=name,
+
+            ai_url=url,
+            ai_tenant_id=tenantId,
+            ai_apikey=apikey,
+            ai_enabled=enabled,
+            ai_assistant_enabled=aiAssistantEnabled,
+
+            ai_ssl_enabled=sslEnabled,
+            ai_cert_local_file_content=certLocalFileContent
+        )
+
+        with open(destination, 'w') as f:
+            f.write(cfg)
+            f.write('\n')
+
     def generateMongoCfg(self, instanceId: str, destination: str) -> None:
         templateFile = path.join(self.templatesDir, "suite_mongocfg.yml.j2")