Cisco ISE Provider

Installation

The Cisco ISE provider is available as a package in all Pulumi languages:

• JavaScript/TypeScript: @pulumi/ise
• Python: pulumi-ise
• Go: github.com/pulumi/pulumi-ise/sdk/go/ise
• .NET: Pulumi.Ise
• Java: com.pulumi/ise

Overview

The ISE provider provides resources to interact with a Cisco ISE (Identity Service Engine) instance. It communicates with ISE via the REST API.

This provider uses both, the ERS and Open API. Instructions on how to enable API access can be found here: https://developer.cisco.com/docs/identity-services-engine/latest/#!cisco-ise-api-framework

All resources and functions have been tested with the following releases.

Example Usage

# Pulumi.yaml provider configuration file
name: configuration-example
runtime:
config:
    ise:password:
        value: password
    ise:url:
        value: https://10.1.1.1
    ise:username:
        value: admin

Configuration Reference

• insecure (Boolean) Allow insecure HTTPS client. This can also be set as the ISE_INSECURE environment variable. Defaults to true.
• password (String, Sensitive) Password for the ISE instance. This can also be set as the ISE_PASSWORD environment variable.
• requestTimeout (Number) HTTP request timeout in seconds for REST API calls. This can also be set as the ISE_REQUEST_TIMEOUT environment variable. Defaults to 60. Increase this value when working with complex nested policy conditions (e.g., 7-level nesting may require 180-300 seconds).
• retries (Number) Number of retries for REST API calls. This can also be set as the ISE_RETRIES environment variable. Defaults to 3.
• url (String) URL of the Cisco ISE instance. This can also be set as the ISE_URL environment variable.
• username (String) Username for the ISE instance. This can also be set as the ISE_USERNAME environment variable.