I’ve been a big fan of Terraform for quite some time but one of the things I have been complaining about has been some things which have not been possible when you use Terraform modules. Why do we use modules? It gives us a way to reuse our code so that each resource creation is…
Security in Oracle Cloud Infrastructure and why you should care less about it
I recently attended Accenture’s Oracle leadership council and was asked to speak about Oracle Cloud Infrastructure security. I’ve said that I’m definitely not an expert on security and that’s why the subject was actually a cool one to speak about! If you’ve used any of the major cloud providers (Azure, AWS, GCP) you know the…
Taking a ride with OCI autoscaling and instance pools
Some time ago Oracle Cloud Infrastructure introduced features around autoscaling and instance pools. This in short means you have an instance pool which uses image from the instance configuration you have defined. Instance pool has minimum number of instances you want to keep running and with autoscaling you can add scaling out or in depending…
Series – Get your database running with Terraform part 10: Summary
My idea on writing this guide was to provide overview what components you need when you create a database in Oracle Cloud Infrastructure. Even thought there are several components once you do it few times you get an understanding what you need and it comes a breeze to create these. Most issues I have seen…
Series – Get your database running with Terraform part 9: Database
At this point I have created everything else apart from the database. For the database we have few options starting if we would like to have Baremetal, Virtual Machine or Exadata. In this demo I’m going to create VM single-node database but I could create it as RAC database as well with two nodes. Similar…
Series – Get your database running with Terraform part 8: Compute
Before creating database I will create jump host on public subnet so we will be able to access our database once it’s created. If I would have connection setup to our corporate network I could access the private subnet directly if my network configuration would allow it. This way I can limit the surface on…
Series – Get your database running with Terraform part 7: Subnets
Now we have everything else setup on the network side apart from subnets. Subnets are continuous IP address blocks which don’t overlap with any other subnet IP address block in your VCN. Things to remember: As time of writing this Oracle has released new functionality regarding subnets, regional subnets. Earlier each subnet was tied in…
Series – Get your database running with Terraform part 6: Security Lists
Before we can create the subnets we still need to create security lists. They will control what ingress and egress traffic will be allowed within subnets. I will create two security lists for this project, one for private subnet and another one for public subnet. Security lists can have have multiple rules in them and…
Series – Get your database running with Terraform part 5: Route Tables
Now when we have created IGW and NAT GW on previous post it’s time to create route tables which will send traffic outside from your VCN to the destination you require. It can be for example to your on-premise network (via DRG) or to object storage (via Service GW). Or it can be towards public…
Series – Get your database running with Terraform part 4: IGW and NAT GW
Previous part three on creating VCN can be found from here. Now let’s start with basics. What are IGW and NAT GW. Internet Gateway (IGW) in OCI is the connection point which routes your VCN traffic from and to public Internet depending on what traffic you allow through your security lists. If you use an…