IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  ISVA/IVIA Automated configuration

    Posted Thu January 02, 2025 01:09 PM

    Hi,

    What would you suggest in order to recreate an ISVA/IVIA environment from scratch (including configuration) using some automated tool? (preferably in a container/Kubernetes environment)

    We found 2 possible solutions that seems concurrent:
    1) https://github.com/IBM-Security/isam-ansible-collection  and https://github.com/IBM-Security/ibmsecurity  

    2) https://github.com/lachlan-ibm/verify_access_autoconf  and https://github.com/lachlan-ibm/pyisva

    Is there one solution more adapted to appliances and the other one more adapted to containers?

    The 2nd solution (autoconf) looks promising and is mentioned in https://github.com/IBM-Security/verify-access-container-deployment/blob/master/README.md#automated-configuration but this part does not seems to be up to date


    Thanks a lot for your help

    Kind regards



    ------------------------------
    Stéphane MASSON
    ------------------------------


  • 2.  RE: ISVA/IVIA Automated configuration

    Posted Wed January 22, 2025 10:35 AM

    Hi Stephane,

    the Ansible solution is suited to keep multiple environments up to date, and has idempotency (so you can repeatedly run it, and only changes will be applied.).   

    It does not include the initial setup of the appliances nor the containers, so you start with an empty, running appliance or container setup .. 

    The Ansible collection is also suited for both the appliance and the container versions , since the Rest API is (mostly) the same for both flavors.  That is also true for the autoconf solution, btw.

    The ibm.isam collection and ibmsecurity python library are mostly up to date with version 10.0.8 at this moment.



    ------------------------------
    Tom Bosmans
    ------------------------------