Given this is an undocumented, nonpublic API that has been "reverse engineered" from browser web tools for usage, it is paramount to enable thorough testing to automate the validation of the module against new and existing ISE software versions. The current set of tests are mostly sufficient, though the given APIs are all GET requests (e.g. no create/update/delete actions). As those non-read-only features are added in, testing will expand and perhaps have more complexity.

This is, of course, a challenge given this is not a SaaS and needs an actual server running the specific software version with a consistent set of test data. While creating and hosting the servers are pretty straightforward (licensing notwithstanding), the actual data in the system is more difficult to make consistent.

I'm approaching from the mindset of testing against a newly installed ISE instance with no configuration changes.

Thing simple to make consistent:

• Context Visibility: Endpoints - either CSV import or API push pre-test
• Context Visibility: Users - when making endpoints, assigning users to endpoints make them appear here. Otherwise, this is more of a "running state" dataset.
• RADIUS/TACACS Policy Sets - can use default policy sets for tests out of the box and TACACS policy sets are present in API even when service is not enabled.

Thing difficult to make consistent:

• Context Visibility: Network Devices - this is populated from NAD information on incoming auth requests
• RADIUS Live Logs - real-time authentications which require NADs to be configured in ISE and on an actual NAD to send authentication with expected parameters. Could potentially be fully automated using ISE APIs to create NAD and something like node-radius to simulate a client or, perhaps more simply via python: py-radius allows simple CLI usage after pip install.
• TACACS Live Logs - more real-time auths, but with TACACS - ISE side easy enough and could try node-tacacs-plus. While not node, this client seems pretty simple for testing purposes and is written in python by the ansible team: tacacs_plus on python