Zscaler Internet Access (ZIA): Installation & Configuration

Installation

The Pulumi ZIA provider is available as a package in all Pulumi languages:

• JavaScript/TypeScript: @bdzscaler/pulumi-zia
• Python: zscaler_pulumi_zia
• Go: github.com/zscaler/pulumi-zia/sdk/go/zia
• .NET: zscaler.PulumiPackage.Zia

Provider Binary

The ZIA provider binary is a third party binary. It can be installed using the pulumi plugin command.

pulumi plugin install resource zia <version> --server github://api.github.com/zscaler

Replace the version string with your desired version.

Setup

To provision resources with the Pulumi ZIA provider, you need to have ZIA credentials. Zscaler maintains documentation on how to create API keys here

Set environment variables

Once you have provisioned these credentials, you can set environment variables to provision resources in ZIA:

$ export ZIA_USERNAME=<ZIA_USERNAME>
$ export ZIA_PASSWORD=<ZIA_PASSWORD>
$ export ZIA_API_KEY=<ZIA_API_KEY>
$ export ZIA_CLOUD=<ZIA_CLOUD>

$ export ZIA_USERNAME=<ZIA_USERNAME>
$ export ZIA_PASSWORD=<ZIA_PASSWORD>
$ export ZIA_API_KEY=<ZIA_API_KEY>
$ export ZIA_CLOUD=<ZIA_CLOUD>

> $env:ZIA_USERNAME = "<ZIA_USERNAME>"
> $env:ZIA_PASSWORD = "<ZIA_PASSWORD>"
> $env:ZIA_API_KEY = "<ZIA_API_KEY>"
> $env:ZIA_CLOUD = "<ZIA_CLOUD>"

Configuration Options

Use pulumi config set zia:<option> or pass options to the constructor of new zia.Provider.

Zscaler Sandbox Authentication

The ZIA provider requires both the ZIA_CLOUD and ZIA_SANDBOX_TOKEN in order to authenticate to the Zscaler Cloud Sandbox environment. For details on how obtain the API Token visit the Zscaler help portal About Sandbox API Token