Wednesday, June 12, 2019

Automation (scripted) in a restricted access environment

I'm curious if anyone has come across this before and if they've found any workable solutions when trying to integration python/robot into a network management org. We are looking at off the shelf solutions, but that is a ways off so users are trying to perform a variety of different automation tasks in the interim. It's fairly limited to information gathering/audit/small config changes/etc. but we seem to be blocked at every point from a policy/security aspect.

  • Laptops don't have rights generally to install software. Even if something like installing python is authorized, installing modules with pip is blocked by a download policy.
  • Standalone jump boxes don't have direct internet access and internal repositories don't provide anything close to useful.
  • External resources or sandbox environments where we could run some of the tooling, don't have access to resources to take anything beyond concept.

If it were a matter of getting one or a handful of pieces of software approved, that might be doable, but that kills most of the flexibility that something like python could bring. I'm trying hard not to go down a shadow IT path but I'm starting to run out of ideas that are even worth presenting.



No comments:

Post a Comment