Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Terraform on Oracle Cloud Deep Dive for Oracle ...

Terraform on Oracle Cloud Deep Dive for Oracle DBAs - LAOUC Tour '23 - Panama

Cloud services offer inexpensive, limitless resources where database teams can practice and validate performance tuning, high availability, and patching. But, navigating a cloud interface to create hosts, assign disks, and configure networking takes time and effort. And you still have to install software and prepare the environment! Enter Terraform—an automation tool that streamlines and simplifies infrastructure builds. In this deep dive session, database administrators experience the basics of provisioning a database and supporting infrastructure on Oracle Cloud with Terraform. No prior experience with Terraform or Oracle Cloud is required!

Sean Scott

August 02, 2023
Tweet

More Decks by Sean Scott

Other Decks in Technology

Transcript

  1. Terraform on Oracle Cloud A Primer for Database Administrators @ViscosityNA

    www.viscosityna.com Latin America Community Tour '23 - Panama August 2, 2023 Sean Scott Oracle ACE Director DoK Community Ambassador Managing Principal Consultant @oraclesean linkedin.com/in/soscott/ [email protected]
  2. DATABASE RELIABILITY ENGINEERING ⁘ DEVOPS & AUTOMATION 
 HIGH AVAILABILITY

    ⁘ BUSINESS CONTINUITY ⁘ DISASTER RECOVERY 
 MODERNIZATION ⁘ OBSERVABILITY ⁘ ENGINEERED SYSTEMS AutoUpgrade ⁘ Zero Downtime Migrations ⁘ Patching Real Application Clusters ⁘ Data Guard ⁘ Sharding Docker/Containers ⁘ Terraform ⁘ Ansible Exadata ⁘ Oracle Database Appliance AHF ⁘ TFA ⁘ GIMR ⁘ CHA @ViscosityNA www.viscosityna.com Sean Scott Oracle ACE Director DoK Community Ambassador Managing Principal Consultant @oraclesean linkedin.com/in/soscott/ [email protected]
  3. @ViscosityNA www.viscosityna.com Oracle on Docker Running Oracle Databases in Linux

    Containers Download a free sample chapter: 
 https:/ /oraclesean.com 20% Discount Code: OracleDocker https:/ /link.springer.com
  4. @ViscosityNA www.viscosityna.com @ViscosityNA www.viscosityna.com Latin "terra" (earth), English "form" ter•ra•form

    verb To transform an environment to support life www.viscosityna.com @ViscosityNA
  5. An Infrastructure as Code (IaC) tool from Hashicorp. Terraform defines,

    provisions and manages cloud & on-premises infrastructure. @ViscosityNA www.viscosityna.com Ter•ra•form noun
  6. @ViscosityNA www.viscosityna.com "The steps for building a 10 liter fish

    tank are:" • Get fish tank a, pump b, heater c... • Assemble them per... • Add x liters water... • Add y grams salt... • Set temperature to z°C... • Add n fish... Scales poorly! Imperative languages
  7. @ViscosityNA www.viscosityna.com Tell the expert: Scale and shape Special needs,

    requirements What you already have Declarative languages These "experts"are 
 Terraform providers
  8. @ViscosityNA www.viscosityna.com Providers are implementation experts • Understand dependencies •

    Interpret configurations • Build the declared infrastructure Available for OCI, Azure, AWS, GCP, on-premises, etc. Terraform provider
  9. @ViscosityNA www.viscosityna.com Generate an OCI public key Identity & Security

    → Users Choose a user to run Terraform Select "API Keys" in the Resources menu Click the "Add API Key" button @ViscosityNA www.viscosityna.com
  10. @ViscosityNA www.viscosityna.com Generate an OCI public key (continued) • Follow

    the dialog instructions • Click the "Add" button • Copy the key fingerprint @ViscosityNA www.viscosityna.com
  11. @ViscosityNA www.viscosityna.com Get the tenancy_ocid Click the profile at top

    right and select "Tenancy" from the menu Use the "Copy" link under "Tenancy information" @ViscosityNA www.viscosityna.com
  12. @ViscosityNA www.viscosityna.com Get the user_ocid Use the "Copy" link under

    "User information" Click the profile at top right and select "User Settings" from the menu @ViscosityNA www.viscosityna.com
  13. @ViscosityNA www.viscosityna.com Get the Region Identifier Copy the 
 Region

    Identifier Click the profile at top right and select the region dropdown from the menu @ViscosityNA www.viscosityna.com
  14. @ViscosityNA www.viscosityna.com Get the private key path and fingerprint fingerprint

    The fingerprint generated 
 during API key creation private_key_path Path used to create the keys @ViscosityNA www.viscosityna.com
  15. @ViscosityNA www.viscosityna.com Start a new Terraform project Create a project

    directory & add files: • providers.tf • variables.tf • terraform.tfvars • main.tf • outputs.tf @ViscosityNA Project files: https:/ /github.com/oraclesean/terraform-for-oracle-dbas
  16. @ViscosityNA www.viscosityna.com Writing Terraform configurations with style • Everything in

    a single file: main.tf • Separate files for each resource: • More portable/reusable code • compute.tf • vcn.tf • storage.tf • variables.tf @ViscosityNA
  17. @ViscosityNA www.viscosityna.com providers.tf provider "oci" { tenancy_ocid = var.tenancy_ocid region

    = var.region user_ocid = var.user_ocid fingerprint = var.fingerprint private_key_path = var.private_key_path } Terraform variables Value assignments
  18. @ViscosityNA www.viscosityna.com variables.tf # Terraform tenancy variables variable "tenancy_ocid" {}

    variable "region" {} variable "user_ocid" {} variable "fingerprint" {} variable "private_key_path" {} Variable definitions Value assignment could go here
  19. @ViscosityNA www.viscosityna.com terraform.tfvars # Terraform tenancy variable values tenancy_ocid =

    Your tenancy_ocid region = Your region identifier user_ocid = Your user_ocid fingerprint = Your fingerprint private_key_path = Your private_key_path Same variables as defined in variables.tf Hard-coded variable assignments Limiting hard-coded value assignments to terraform.tfvars means no changes are needed elsewhere to run this same configuration on different tenancies, to scale the configuration, etc.!
  20. @ViscosityNA www.viscosityna.com Test the configuration • From the project directory

    run: terraform init terraform plan terraform apply @ViscosityNA www.viscosityna.com
  21. @ViscosityNA www.viscosityna.com terraform init > terraform init Initializing the backend...

    Initializing provider plugins... - Finding latest version of hashicorp/oci... - Installing hashicorp/oci v4.76.0... - Installed hashicorp/oci v4.76.0 (signed by HashiCorp) Terraform has been successfully initialized! You may now begin working with Terraform. Try running "terraform plan" to see any changes that are required for your infrastructure. All Terraform commands should now work. If you ever set or change modules or backend configuration for Terraform, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary.
  22. @ViscosityNA www.viscosityna.com terraform plan > terraform plan No changes. Your

    infrastructure matches the configuration. Terraform has compared your real infrastructure against your configuration and found no differences, so no changes are needed.
  23. @ViscosityNA www.viscosityna.com terraform apply > terraform apply No changes. Your

    infrastructure matches the configuration. Terraform has compared your real infrastructure against your configuration and found no differences, so no changes are needed. Apply complete! Resources: 0 added, 0 changed, 0 destroyed.
  24. @ViscosityNA www.viscosityna.com Add an Autonomous Database resource • Add the

    ADB configuration in main.tf • Add ADB variables to variables.tf • Add ADB values to terraform.tfvars • Add output variables to output.tf @ViscosityNA
  25. @ViscosityNA www.viscosityna.com main.tf # Autonomous database resource resource "oci_database_autonomous_database" "autonomous_db"

    { compartment_id = var.tenancy_ocid # (Creates in root) db_name = var.db_name display_name = var.display_name db_version = var.db_version db_workload = var.db_workload cpu_core_count = var.cpu_core_count data_storage_size_in_tbs = var.data_storage_size_in_tbs is_free_tier = var.is_free_tier license_model = var.license_model admin_password = var.admin_password } Type of resource Name we're giving to the Terraform resource Information the provider needs to create an ADB Values used to create the ADB
  26. @ViscosityNA www.viscosityna.com Add database variables to variables.tf # Autonomous DB

    variables variable "db_name" { type = string } variable "display_name" { type = string } variable "admin_password" { type = string } Variable definitions
  27. @ViscosityNA www.viscosityna.com Add database variables to variables.tf variable "db_version" {

    type = string default = "21c" # Options are 19c, 21c } variable "db_workload" { type = string default = "OLTP" # Options are: OLTP, DW, AJD, APEX } Variable definition block Set variable type Assign a default value
  28. @ViscosityNA www.viscosityna.com Add database variables to variables.tf variable "cpu_core_count" {

    type = number default = 1 } variable "data_storage_size_in_tbs" { type = number default = 1 }
  29. @ViscosityNA www.viscosityna.com Add database variables to variables.tf variable "is_free_tier" {

    type = string default = "true" # Must be false for AJD, APEX } variable "license_model" { type = string default = "LICENSE_INCLUDED" }
  30. @ViscosityNA www.viscosityna.com Add database values to terraform.tfvars # Autonomous database

    variable values db_name = "ADB21C" display_name = "ADB21C" admin_password = "XXXXXXXXXXXXXXXXXXXXXX" # Default overrides #db_version = #db_workload = #cpu_core_count = #data_storage_size_in_tbs = #is_free_tier = #license_model = ADB values likely to change for each DB To override defaults, un-comment the line and set a value
  31. @ViscosityNA www.viscosityna.com outputs.tf output "db_name" { value = oci_database_autonomous_database.autonomous_db.display_name }

    output "db_state" { value = oci_database_autonomous_database.autonomous_db.state } resource "oci_database_autonomous_database" "autonomous_db" { compartment_id = var.tenancy_ocid db_name = var.db_name display_name = var.display_name ... }
  32. @ViscosityNA www.viscosityna.com terraform plan > terraform plan Terraform used the

    selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: + create Terraform will perform the following actions: # oci_database_autonomous_database.autonomous_db will be created + resource "oci_database_autonomous_database" "autonomous_db" { + actual_used_data_storage_size_in_tbs = (known after apply) + admin_password = (sensitive value) ...
  33. @ViscosityNA www.viscosityna.com terraform plan (Continued) ... Plan: 1 to add,

    0 to change, 0 to destroy. Changes to Outputs: + db_name = "ADB21C" + db_state = (known after apply) ──────────────────────────────────────────────────────────────────────────── Note: You didn't use the -out option to save this plan, so Terraform can't guarantee to take exactly these actions if you run "terraform apply" now.
  34. @ViscosityNA www.viscosityna.com terraform apply > terraform apply ... Plan: 1

    to add, 0 to change, 0 to destroy. Changes to Outputs: + db_name = "ADB21C" + db_state = (known after apply) Do you want to perform these actions? Terraform will perform the actions described above. Only 'yes' will be accepted to approve. Enter a value: yes
  35. @ViscosityNA www.viscosityna.com ... Enter a value: yes oci_database_autonomous_database.autonomous_db: Creating... oci_database_autonomous_database.autonomous_db:

    Still creating... [10s elapsed] ... oci_database_autonomous_database.autonomous_db: Creation complete after 1m31s Apply complete! Resources: 1 added, 0 changed, 0 destroyed. Outputs: db_name = "ADB21C" db_state = "AVAILABLE" terraform apply (Continued)