Deploy OCI Identity Components Before Provisioning Oracle Analytics Services

Published August 29, 2024.

Introduction Oracle Analytics Platform

The Oracle Analytics platform comprises OAC (Oracle Analytics Cloud) and OAS (Oracle Analytics Server). It supports the efforts of every analytics user role. AI and ML are embedded throughout the platform to accelerate productivity and power better business decisions. Features include:

Data visualization and storytelling
Machine learning
Mobile analytics
Open data source connectivity
Data preparation and enrichment
Enterprise data modeling

OAC PLATFORM

About

This post is a member of the Oracle Analytics Terraform series and a sequel to the Prepare for Oracle Analytics Services post. It guides you in deploying initial OCI (Oracle Cloud Infrastructure) identity components for Oracle Analytics services using OCI Cloud Shell and the OCI Terraform provider.

It includes architectural diagrams, a deployment module, and links to other references.

Prerequisites

Following the guidance in this post requires:

An existing OCI tenancy.
An OCI Administrator with the authority to:
- Manage Compartments
- Manage Identity Domains
- Manage Policies
- Use Cloud She

Topics

Architecture
Components
Deployment
Removal
Call to Action

Architecture

Initial State

This diagram depicts the OCI region in a customer tenancy where Oracle Analytics services are deployed.

Prepared State

This diagram depicts the recommended initial OCI components before provisioning Oracle Analytics services.

Components

The components are descriptions are found in the Prepare for Oracle Analytics Services post.

Deployment

An OCI cloud shell simplifies OCI authentication and provides a standardized method for various workstations.

These initial components are deployed using a package of OCI Terraform resources run in an OCI Cloud Shell:

An example compartment.
- An example identity domain.
  - An example user account.
- If the deployment region is not the tenancy’s home region, the example identity domain is replicated to the region where components are deployed.
Example policies.

Follow these steps to deploy the example components:

The example compartment is created as a child compartment under the compartment hosting the identity domain you have signed into.

Sign in to the OCI Tenancy console.
- Change to the designated OCI Region for Oracle Analytics services.
Download the deployment module (INIT_OA_COMPONENTS.zip) from here.
Upload the deployment module. Click on
Developer Tools and select Cloud Shell.
- Click on the
  Gear Icon and select Upload.
  - Drop or Select the ZIP archive package.
  - Click Upload.
- In Cloud Shell, decompress the uploaded package.

cd; [ -d INIT_OA_COMPONENTS ] && rm -r INIT_OA_COMPONENTS; unzip INIT_OA_COMPONENTS.zip;

Deploy the components.

cd ~/INIT_OA_COMPONENTS; source setup.sh \
> >(tee -a INIT_OA_COMPONENTS_setup.log) 2> >(tee -a INIT_OA_COMPONENTS_setup.log >&2)

Note: Wait for all components to finish. Domain replication, if necessary, can take 10 minutes or more.

Important : Look for an email from Oracle <no-reply@oracle.com> with the subject of “Secondary domain creation”. Click Sign In and create/reset a password for the Example.ServiceAdmin user account.

Secondary_Domaiin_Creation

Optionally, view the setup log file.

cd ~/INIT_OA_COMPONENTS; more INIT_OA_COMPONENTS_setup.log;

Save the terraform state.

Additional blog posts in this series build upon the components just deployed. These examples have you sign in as the Example.ServiceAdmin user created in the new Example_Domain. As this is a different user account, the terraform state must be downloaded and uploaded to that user’s cloud shell.

Download the terraform state zip file. The file’s name, e.g., INIT_OA_COMPONENTS-2024-09-03-04:46:59.zip, is displayed in the last line of the setup output. Double-click the file name to copy it to the clipboard.

Click on the
Gear Icon and select Download.
- Paste the Terraform state zip file name.
- Click Download.

Validate the components using the OCI console.
- Navigate to Identity & Security > Compartments.
  - Navigate to the parent compartment.
  - View the child compartment, i.e., Demo_Compartment.
- Navigate to Identity & Security > Domains.
  - Select the Demo_Compartment.
  - Click and view the example identity domain, i.e., Example_Domain.
  - From the menu on the left of the screen, click Users and view the example User, i.e., Example.ServiceAdmin.
- Navigate to Identity & Security > Policies
  - Select the Parent Compartment.
  - Click the example policy, i.e., Example_Policy, and view the policy rule.

Removal

If desired, the deployed components can be removed by following these steps:

Note: The example identity domain is deactivated before the components are removed.

Sign in to the OCI Tenancy console.
Change to the designated OCI Region for Oracle Analytics services.
Click on
Developer Tools and select Cloud Shell.
Run the removal script.

Note: When prompted to approve the destroy step, type yes (case-sensitive).
Wait for all components to finish. Compartment removal can take 10 – 30 minutes or more.

cd ~/INIT_OA_COMPONENTS; source remove.sh > >(tee -a INIT_OA_COMPONENTS_remove.log) 2> >(tee -a INIT_OA_COMPONENTS_remove.log >&2)

Optionally, view the removal log file.

cd ~/INIT_OA_COMPONENTS; more INIT_OA_COMPONENTS_remove.log;

Validate the component removal using the OCI console.
- Navigate to Identity & Security > Compartments.
  - Navigate to the parent compartment.
    - Ensure the Example_Compartment has been removed.
- Navigate to Identity & Security > Policies.
  - Select the parent compartment.
    - Ensure the Example_Policy has been removed.