Skip to content

Commit cff5402

Browse files
authored
Synchronize changes from internal repo for 19.3.0.3.4 release (#52)
Release 19.3.0.3.4
1 parent 18e3358 commit cff5402

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

49 files changed

+951
-509
lines changed

CHANGELOG.md

Lines changed: 87 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,53 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
66

77
## [Unreleased]
88

9+
## [19.3.0.3.4]
10+
11+
### Added
12+
- Integration with Oracle Notification Service topic for Essbase lifecycle events.
13+
- Integration with Oracle Monitoring Service for Essbase process and volume metrics collection.
14+
- Support for private load balancer configuration for internal access.
15+
- Support monitoring script to publish metrics to OCI Monitoring service for operational support.
16+
- Added temp volume (default 64Gb) to store temporary runtime data. This does not participate in backup/restore lifecycle events.
17+
- Crash dump location updated to store under the temp volume.
18+
19+
### Changed
20+
- Essbase stack configuration is started in the background using cloud-init.
21+
- Allows the remove of the SSH key pair used for provisioning.
22+
- Allows for bastion host to be an optional component.
23+
- Reorganized the layout of the guided UI.
24+
- Updated ssh public key input type to utilize the native control.
25+
- Reduced default size of config volume to 64Gb.
26+
- Support minimum size for the data volume at 256Gb.
27+
- Support for changing the Essbase compute instance shape.
28+
- Update bastion subscription to handle terms and conditions properly.
29+
- Rename variable `mp_listing_id` to `essbase_listing_id`.
30+
- Rename variable `mp_listing_resource_version` to `essbase_listing_resource_version`.
31+
- Rename variable `mp_listing_resource_id` to `essbase_listing_resource_id`.
32+
- Rename variable `service_name` to `stack_display_name` to reflect its role.
33+
- Rename variable `idcs_client_tenant` to `idcs_tenant`.
34+
- Rename variable `ssh_public_key` to `ssh_authorized_keys`.
35+
- Support selection of availability domain for bastion host.
36+
- Support specifying instance hostname prefix and network dns label to help with disaster-recovery use cases.
37+
- Experimental: Support for flex compute shapes.
38+
- Experimental: Support for disabling internal httpd proxy.
39+
40+
### Image Details
41+
- [Oracle-Linux-7.8-2020.07.28-0](https://docs.cloud.oracle.com/en-us/iaas/images/image/229363c7-b01f-4b71-8c19-0661df7e16b5/)
42+
- Oracle Fusion Middleware 12.2.1.3.0 GA
43+
- Oracle Essbase 19.3.0.0.0 GA
44+
- Oracle JDK 8 update 261 Server JRE
45+
- Applied patches:
46+
- 28186730 - OPatch 13.9.4.2.4 for FMW/WLS 12.2.1.3.0 and 12.2.1.4.0
47+
- 30965714 - WebLogic Patch Set Update 12.2.1.3.200227
48+
- 31470751 - Coherence 12.2.1.3.10 Cumulative Patch using OPatch
49+
- 31532341 - ADF Bundle Patch 12.2.1.3.200623
50+
- 30146350 - OPSS Bundle Patch 12.2.1.3.191015
51+
- 29650702 - FMW Platform 12.2.1.3.0 SPU April 2019
52+
- 20623024 - RCU Patch
53+
- 29840258 - RCU Patch for invalid FMWREGISTRY password
54+
- 30977621 - Essbase 19.3.0.3.4 Cumulative Bundle Patch
55+
956
## [19.3.0.2.3-1]
1057

1158
### Changed
@@ -18,10 +65,17 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
1865
- Use pre-built OCI image for bastion instances. This image is prebuilt with the configuration changes that were previously applied during the provisioning process.
1966
- Revert change for whitelisting VCN for provisioned Autonomous Database. This resolves some intermittent issues that were seen preventing the compute node from properly access the database during provisioning.
2067

21-
### Noteworthy Image Changes
22-
- Update base image to [Oracle-Linux-7.7-2020.02.21-0](https://docs.cloud.oracle.com/en-us/iaas/images/image/957e74db-0375-4918-b897-a8ce93753ad9/).
23-
- Apply Essbase Cumulative Bundle Patch (30464311).
24-
- Added security-util.sh script to register users with Essbase roles.
68+
### Image Details
69+
- [Oracle-Linux-7.7-2020.02.21-0](https://docs.cloud.oracle.com/en-us/iaas/images/image/957e74db-0375-4918-b897-a8ce93753ad9/)
70+
- Oracle Fusion Middleware 12.2.1.3.0 GA
71+
- Oracle Essbase 19.3.0.0.0 GA
72+
- Oracle JDK 8 update 241 Server JRE
73+
- Applied Patches:
74+
- 28186730
75+
- 30675853 - WebLogic Patch Set Update January 2020
76+
- 30146350 - OPSS Bundle Patch October 2019
77+
- 30464311 - Essbase Cumulative Bundle Patch
78+
- 29840258 - RCU Patch for invalid FMWREGISTRY password
2579

2680
## [19.3.0.0.2]
2781

@@ -43,11 +97,15 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
4397
- Rename variable `create_private_subnet` to `create_private_application_subnet`
4498
- Rename variable `assign_public_ip` to `assign_instance_public_ip`
4599

46-
### Noteworthy Image Changes
47-
- Update base image to [Oracle-Linux-7.7-2020.01.28-0](https://docs.cloud.oracle.com/en-us/iaas/images/image/0a72692a-bdbb-46fc-b17b-6e0a3fedeb23/).
48-
- Update JDK to Oracle Java 8u241 - Server JRE.
49-
- Apply WebLogic Patch Set Update January 2020 (30675853).
50-
- Apply OPSS Patch Bundle October 2019 (30146350).
100+
### Image Details
101+
- [Oracle-Linux-7.7-2020.01.28-0](https://docs.cloud.oracle.com/en-us/iaas/images/image/0a72692a-bdbb-46fc-b17b-6e0a3fedeb23/)
102+
- Oracle Fusion Middleware 12.2.1.3.0 GA
103+
- Oracle Essbase 19.3.0.0.0 GA
104+
- Applied Patches
105+
- 28186730
106+
- 30675853 - WebLogic Patch Set Update January 2020
107+
- 30146350 - OPSS Bundle Patch October 2019
108+
- 29840258 - RCU Patch for invalid FMWREGISTRY password
51109

52110
## [19.3.0.0.1]
53111
### Added
@@ -62,3 +120,23 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
62120
- Fix Use HTTPS selection to show up when Provision Load Balancer is selected.
63121
- Support Use Existing Database without requiring using an existing network.
64122

123+
### Image Details
124+
- Oracle Fusion Middleware 12.2.1.3.0 GA
125+
- Oracle Essbase 19.3.0.0.0 GA
126+
- Applied Patches
127+
- 28186730
128+
- 29814665 - WebLogic Patch Set Update July 2019
129+
- 29680122 - OPSS Bundle Patch July 2019
130+
- 29135930 - XML Stream Patch
131+
- 29840258 - RCU Patch for invalid FMWREGISTRY password
132+
133+
## [19.3.0.0.0]
134+
135+
### Image Details
136+
- Oracle Fusion Middleware 12.2.1.3.0 GA
137+
- Oracle Essbase 19.3.0.0.0 GA
138+
- Applied Patches
139+
- 28186730
140+
- 29814665 - WebLogic Patch Set Update July 2019
141+
- 29680122 - OPSS Bundle Patch July 2019
142+

README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ The above digram shows the default topology supported by the terraform scripts.
2323

2424
![Full Topology Diagram](./images/image-full_topology.png)
2525

26-
The above digram shows the full topology supported by the terraform scripts. In this scenario, the application subnet is private. To access the Essbase user interface, an OCI load balancer is provisioned in another public regional subnet. A bastion host is also provisioned to support connectivity from the Resource Manager.
26+
The above digram shows the full topology supported by the terraform scripts. In this scenario, the application subnet is private. To access the Essbase user interface, an OCI load balancer is provisioned in either public or private regional subnet. A bastion host (optional) is provisioned to allow access through a public ip address.
2727

2828
## Before You Begin with Oracle Essbase
2929

VARIABLES.md

Lines changed: 25 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -20,78 +20,83 @@
2020
| Name | Required | Default | Description |
2121
| ---- | -------- | ------- | ----------- |
2222
| compartment_ocid | Y | | The target compartment OCID in which all provisioned resources will be created. |
23-
| service_name | N | | Display name prefix for all generated resources. If not specified, this will be automatically generated. |
23+
| stack_display_name | N | | Display name prefix for all generated resources. If not specified, this will be automatically generated. |
2424

25-
## KMS Variables
25+
## Vault Variables
2626
| Name | Required | Default | Description |
2727
| ---- | -------- | ------- | ----------- |
2828
| kms_key_id | Y | | The OCID for the encryption key used for the provided credentials. |
29-
| kms_crypto_endpoint | Y | | The crypto endpoint for the KMS vault. |
29+
| kms_crypto_endpoint | Y | | The crypto endpoint for the vault. |
30+
31+
## Notification Details
32+
| Name | Required | Default | Description |
33+
| ---- | -------- | ------- | ----------- |
34+
| notification_topic_id | N | | The target notification topic OCID to send events. |
3035

3136
## Network Details
3237
| Name | Required | Default | Description |
3338
| ---- | -------- | ------- | ----------- |
3439
| use_existing_vcn | N | false | Select this option to support deployment of Essbase components into an existing virtual cloud network (VCN). |
35-
| existing_vcn_compartment_id | if `use_existing_vcn=true` | | The OCID the compartment containing the target VCN. |
3640
| existing_vcn_id | if `use_existing_vcn=true` | | An existing VCN in which to create the compute resources. |
37-
| existing_application_subnet_compartment_id | if `use_existing_vcn=true` | | The compartment containing the target application subnet. |
3841
| existing_application_subnet_id | if `use_existing_vcn=true` | | An existing subnet for the target Essbase instance. |
39-
| existing_bastion_subnet_compartment_id | if `use_existing_vcn=true` | | The compartment containing the target bastion subnet. |
4042
| existing_bastion_subnet_id | if `use_existing_vcn=true` | | An existing subnet for creating the bastion host |
41-
| existing_load_balancer_subnet_compartment_id | Y, if `use_existing_vcn=true` | | The compartment containing the target load balancer subnets. |
4243
| existing_load_balancer_subnet_id | if `use_existing_vcn=true` | | An existing subnet to use for the load balancer. |
4344
| existing_load_balancer_subnet_id_2 | if `use_existing_vcn=true` | | An existing subnet to use for the second load balancer node. This field is required only if you are not using regional subnets. |
4445
| vcn_cidr | N | 10.0.0.0/16 | The CIDR to assign to the new virtual cloud network (VCN) to create for this service. |
46+
| vcn_dns_label | N | | The DNS label to assign to the VCN. If not provided, the value will be randomly generated. |
4547
| application_subnet_cidr | N | 10.0.1.0/24 | The CIDR to assign to the subnet for the target Essbase compute node. This will be created as a regional subnet. |
4648
| bastion_subnet_cidr | N | 10.0.3.0/24 | The CIDR to assign to the subnet for the bastion host. This will be created as a regional subnet. |
4749
| load_balancer_subnet_cidr | N | 10.0.4.0/24 | The CIDR to assign to the subnet for the load balancer. This will be created as regional subnet. |
48-
| create_private_application_subnet | N | false | Create a private subnet for the Essbase node. A bastion host will be also created. |
4950

5051
## Load Balancer Details
5152
| Name | Required | Default | Description |
5253
| ---- | -------- | ------- | ----------- |
5354
| create_load_balancer | N | false | Provision a load balancer in Oracle Cloud Infrastructure. The load balancer will be provisioned with a demo certificate. The use of demo certificate is not recommended for production workloads. |
55+
| create_public_load_balancer | N | true | Provision the load balancer with a public IP address. |
5456
| load_balancer_shape | N | 100Mbps | Select which load balancer shape. |
5557

5658
## Bastion Details
5759
| Name | Required | Default | Description |
5860
| ---- | -------- | ------- | ----------- |
59-
| bastion_instance_shape | N | VM.Standard.E2.1 | The shape for the bastion compute instance. |
61+
| create_bastion | N | false | Create a bastion host. |
62+
| bastion_instance_shape | if `create_bastion=true` | VM.Standard.E2.1 | The shape for the bastion compute instance. |
63+
| bastion_availability_domain | if `create_bastion=true` | | The target availability domain for the bastion. |
6064

6165
## Essbase instance details
6266
| Name | Required | Default | Description |
6367
| ---- | -------- | ------- | ----------- |
6468
| instance_shape | N | VM.Standard2.4 | The shape for the Essbase compute instance. |
6569
| instance_availability_domain | Y | | Availability domain in region |
66-
| ssh_public_key | Y | | Use the corresponding private key to access the Essbase compute instance. |
70+
| instance_hostname_label_prefix | N | | Prefix for the hostname label to which the compute instance will be assigned. If not provided, a randomly generated value will be used. |
71+
| ssh_authorized_keys | Y | | Use the corresponding private key to access the Essbase compute instance. |
6772
| data_volume_size | N | 1024 | Define the target size of the data volume, which stores the Essbase application data. |
68-
| config_volume_size | N | 512 | Define the target size of the configuration volume, which stored the Essbase system data, such as logs. |
73+
| config_volume_size | N | 64 | Define the target size of the configuration volume, which stored the Essbase system data, such as logs. |
74+
| temp_volume_size | N | 64 | Defined the target size of runtime temporary data. |
6975
| essbase_admin_username | N | admin | The name of the Essbase system administrator. |
70-
| essbase_admin_password_encrypted | Y | | The password for the Essbase system administrator, encrypted with the provided KMS key. Use a password that starts with a letter, is between 8 and 30 characters long, contains at least one number, and, optionally, any number of the special characters (`$` `#` `_`). For example, `Ach1z0#d`. |
76+
| essbase_admin_password_encrypted | Y | | The password for the Essbase system administrator, encrypted with the provided vaule key. Use a password that starts with a letter, is between 8 and 30 characters long, contains at least one number, and, optionally, any number of the special characters (`$` `#` `_`). For example, `Ach1z0#d`. |
7177
| rcu_schema_prefix | N | | Schema prefix to use when running RCU. A value with be automatically generated if not specified. |
72-
| assign_instance_public_ip | N | true | If the subnet allows for a public ip address, assign one to the Essbase instance. |
78+
| create_public_essbase_instance | N | false | Create the Essbase compute instance with a public IP address. |
79+
| enable_essbase_monitoring | N | false | If enabled, the Essbase compute instance will emit telemetry data to the OCI Monitoring service. |
80+
| enable_embedded_proxy | N | true | Expiremental: If disabled, the Essbase compute instance will not enable an Apache http proxy for IDCS integration. |
7381

7482
## Security Details
7583
| Name | Required | Default | Description |
7684
| ---- | -------- | ------- | ----------- |
7785
| security_mode | N | idcs | Choose embedded LDAP or integration with Identity Cloud Service (IDCS). The use of embedded LDAP is not recommended for production workloads. |
78-
| idcs_client_tenant | if `security_mode=idcs` | | The ID of your Identity Cloud Service instance, which typically has the format idcs-<guid>, and is part of the host name that you use to access Identity Cloud Service. |
86+
| idcs_tenant | if `security_mode=idcs` | | The ID of your Identity Cloud Service instance, which typically has the format idcs-<guid>, and is part of the host name that you use to access Identity Cloud Service. |
7987
| idcs_client_id | if `security_mode=idcs` | | The client ID for the IDCS application. |
80-
| idcs_client_secret_encrypted | if `security_mode=idcs` | | The client secret for the IDCS application, encrypted with the provided KMS key. |
88+
| idcs_client_secret_encrypted | if `security_mode=idcs` | | The client secret for the IDCS application, encrypted with the provided vault key. |
8189
| idcs_external_admin_username | if `security_mode=idcs` | | A user id to be registered as an Essbase administrator. This user must exist in the provided Identity Cloud Service instance. |
8290

8391
## Database Details
8492
| Name | Required | Default | Description |
8593
| ---- | -------- | ------- | ----------- |
8694
| use_existing_db | N | false | Select this option to enable support of an existing database for the internal Essbase repository. |
8795
| existing_db_type | N | Autonomous Database | Select which database you will use |
88-
| existing_db_compartment_id | N | | Target database compartment |
8996
| existing_db_id | N | | Target ATP database in which to create the Essbase schema. |
90-
| db_admin_password_encrypted | if `existing_db_type=Autonomous Database` | | The password for the database administrator, encrypted with the provided KMS key. Use a password that starts with a letter, is between 12 and 30 characters long, contains at least one number, and at least one of the special characters (`$` `#` `_`). For example, `BEstr0ng_#12`. |
97+
| db_admin_password_encrypted | if `existing_db_type=Autonomous Database` | | The password for the database administrator, encrypted with the provided vault key. Use a password that starts with a letter, is between 12 and 30 characters long, contains at least one number, and at least one of the special characters (`$` `#` `_`). For example, `BEstr0ng_#12`. |
9198
| db_license_model | N | LICENSE_INCLUDED | |
92-
| existing_oci_db_system_id | N | | Target database system in which to create the Essbase schema. |
93-
| existing_oci_db_system_dbhome_id | N | | The database home within the DB System |
9499
| existing_oci_db_system_database_id | N | | The database within the DB System in which to create the Essbase schema. |
95100
| existing_oci_db_system_database_pdb_name | N | | The name of the pdb in the target database. Required if not using the default pdb created during database provision. |
96101
| oci_db_admin_username | N | SYS | The username for the database administrator. |
97-
| oci_db_admin_password_encrypted | if `existing_db_type=OCI` | | The password for the database administrator, encrypted with the provided KMS key. Use a password that starts with a letter, is between 12 and 30 characters long, contains at least one number, and at least one of the special characters (`$` `#` `_`). For example, `BEstr0ng_#12`. |
102+
| oci_db_admin_password_encrypted | if `existing_db_type=OCI` | | The password for the database administrator, encrypted with the provided vault key. Use a password that starts with a letter, is between 12 and 30 characters long, contains at least one number, and at least one of the special characters (`$` `#` `_`). For example, `BEstr0ng_#12`. |

bastion-image/packer/build.pkr.hcl

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
## Copyright (c) 2020, Oracle and/or its affiliates.
2-
## Licensed under the Universal Permissive License v1.0 as shown at http://oss.oracle.com/licenses/upl.
2+
## Licensed under the Universal Permissive License v1.0 as shown at https://oss.oracle.com/licenses/upl.
33

44
locals {
55

bastion-image/packer/scripts/setup.sh

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
#!/bin/bash -e
22
#
33
# Copyright (c) 2019, 2020, Oracle and/or its affiliates.
4-
# Licensed under the Universal Permissive License v1.0 as shown at http://oss.oracle.com/licenses/upl.
4+
# Licensed under the Universal Permissive License v1.0 as shown at https://oss.oracle.com/licenses/upl.
55
#
66

77
set +o history

images/image-default_topology.png

-1.25 KB
Loading

images/image-full_topology.png

-2.09 KB
Loading
Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
## Copyright (c) 2019, 2020, Oracle and/or its affiliates.
2-
## Licensed under the Universal Permissive License v1.0 as shown at http://oss.oracle.com/licenses/upl.
2+
## Licensed under the Universal Permissive License v1.0 as shown at https://oss.oracle.com/licenses/upl.
33

44
# Listing details for the Essbase custom image for Bring Your Own License.
5-
mp_listing_id="ocid1.appcataloglisting.oc1..aaaaaaaaqyxur5zacfln6epkbm46sdu5whf6zepbm43b63rm44d5hnm2ft5a"
6-
mp_listing_resource_version="19.3.0.0.3-2004011557"
7-
mp_listing_resource_id="ocid1.image.oc1..aaaaaaaaxzey5mtlw7kdxhql2y3wlmnu6bt4jh5hy5y7rcajmdhrty5hvefa"
5+
essbase_listing_id="ocid1.appcataloglisting.oc1..aaaaaaaaqyxur5zacfln6epkbm46sdu5whf6zepbm43b63rm44d5hnm2ft5a"
6+
essbase_listing_resource_version="19.3.0.3.4-2008280915"
7+
essbase_listing_resource_id="ocid1.image.oc1..aaaaaaaakxp6ug736flztridneayd6jye7xpyr3che352475a6stmj7p7j2q"
Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
## Copyright (c) 2020, Oracle and/or its affiliates.
2-
## Licensed under the Universal Permissive License v1.0 as shown at http://oss.oracle.com/licenses/upl.
2+
## Licensed under the Universal Permissive License v1.0 as shown at https://oss.oracle.com/licenses/upl.
33

44
# Listing details for the Essbase custom image for Universal Credits.
5-
mp_listing_id="ocid1.appcataloglisting.oc1..aaaaaaaanstxnoz6uttexhw5jfpqhu4gkwsp2ebmw4i2p7gkq65sr3e7z4gq"
6-
mp_listing_resource_version="19.3.0.0.3-2004011557"
7-
mp_listing_resource_id="ocid1.image.oc1..aaaaaaaal6buavzgpciviq6cxl5mvszi34azgsrsroezd2sn4ikcmv5tpopa"
5+
essbase_listing_id="ocid1.appcataloglisting.oc1..aaaaaaaanstxnoz6uttexhw5jfpqhu4gkwsp2ebmw4i2p7gkq65sr3e7z4gq"
6+
essbase_listing_resource_version="19.3.0.3.4-2008280915"
7+
essbase_listing_resource_id="ocid1.image.oc1..aaaaaaaactj6h7kr4q6z5lqjvjwlzgsy7ib4y6zajpbpmxzev3paierlkyla"

0 commit comments

Comments
 (0)