Why you should avoid giving inspect/read all-resources policy in OCI

I've already seen many cases where a customer needs to give some read-only access on their tenancy to contractors / auditors / non-admin users. The easiest thing to is usually give "read" (or the more restrictive "inspect") all-resources policy to that user's group. In this article I will show how a user can use that …

Continue reading

Get your Tenancy OCID using a single oci-cli command

If you need to get your Tenancy OCID to use in some of your scripts, there is no simple oci-cli command that will do it for you. However, using some parameters you can get the raw output: $ oci iam compartment list \ --all \ --compartment-id-in-subtree true \ --access-level ACCESSIBLE \ --include-root \ --raw-output \ …

Continue reading

SPOUG 2020 - Deep dive into Oracle Cloud metadata

Click here to download my session slides. 0

How to access internal OCI DBaaS backup Object Storage bucket

This article will show how can you access the data that oracle stores in the internal hidden buckets, mainly used for "*aaS" backups. Update: Oracle has now an official tool for that: MV2BUCKET. It's fully supported and available in the MOS note below. Consider using it instead of the manual approach:(OCI) mv2bucket - Oracle Managed …

Continue reading

Enable YUM in OCI DBaaS Compute Instances

If you have some DBaaS computes nodes in your OCI, you will note that they don't come with any YUM repo configured by default. This is purposely architect to avoid you from installing or messing the system that you should be using "As a Service". [root@db19c ~]# yum install swift Loaded plugins: versionlock There are …

Continue reading