Merge pull request #1879 from oracle/release_gh

Releasing version 4.122.0
oracle · May 24, 2023 · 82b2b18 · 82b2b18
2 parents 38c434c + d6f963b
commit 82b2b18
Show file tree

Hide file tree

Showing 526 changed files with 5,490 additions and 1,108 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,3 +1,18 @@
+## 4.122.0 (May 24, 2023)
+
+### Added
+- Remove hardcoded passwords from golden_gate integration test codes
+- ExaDB-C@C (EXACC) Data Plane Guest VMs (API/UI Only)
+- Support for Node Subsetting | ADB-D
+- Support for DNS Secondary Egress and creating DNS zones from zone files
+- Support for unified agent config CRI parser
+- Support for Create oci_dns_rrsets data source
+- Changes for setting resource ID in state file before workrequest completion
+### Bug Fix
+- Populate user resource optional fields only if they arent empty
+- Remove system tags from SZ requests
+- adding fix for cloudguard detector rule condition paramter unmarshalling issue
+
 ## 4.121.0 (May 17, 2023)
 
 ### Added

diff --git a/examples/cloudguard/security_zone/security_zone.tf b/examples/cloudguard/security_zone/security_zone.tf
@@ -77,8 +77,4 @@ resource "oci_cloud_guard_security_zone" "test_security_zone" {
   #Optional
   description   = "${var.security_zone_description}"
 
-  //Added only because we are testing this in a splat-disabled env
-  lifecycle {
-    ignore_changes = [system_tags]
-  }
 }
diff --git a/examples/cloudguard/security_zone_recipe/security_zone_recipe.tf b/examples/cloudguard/security_zone_recipe/security_zone_recipe.tf
@@ -66,8 +66,4 @@ resource "oci_cloud_guard_security_recipe" "test_security_recipe" {
   #Optional
   description       = "${var.security_recipe_description}"
 
-  //Added only because we are testing this in a splat-disabled env
-  lifecycle {
-    ignore_changes = [system_tags]
-  }
 }
diff --git a/examples/database/atp-d/main.tf b/examples/database/atp-d/main.tf
@@ -59,6 +59,10 @@ resource "oci_database_autonomous_container_database" "test_autonomous_container
   db_version          = "19.18.0.1.0"
 }
 
+variable "cloud_exadata_infrastructure_un_allocated_resource_db_servers" {
+  default = []
+}
+
 resource "random_string" "autonomous_database_admin_password" {
   length      = 16
   min_numeric = 1
@@ -146,4 +150,7 @@ output "autonomous_container_databases" {
 data "oci_database_cloud_exadata_infrastructure_un_allocated_resource" "test_cloud_exadata_infrastructure_un_allocated_resources" {
   #Required
   cloud_exadata_infrastructure_id = oci_database_cloud_exadata_infrastructure.test_cloud_exadata_infrastructure.id
+
+  #Optional
+  db_servers = var.cloud_exadata_infrastructure_un_allocated_resource_db_servers
 }
diff --git a/examples/dns/global/rrset.tf b/examples/dns/global/rrset.tf
@@ -50,3 +50,8 @@ data "oci_dns_rrset" "test_rrset" {
   zone_name_or_id = oci_dns_zone.zone3.id
 }
 
+data "oci_dns_rrsets" "test_rrsets" {
+  domain          = "el.${oci_dns_zone.zone3.name}"
+  rtype           = "CNAME"
+  zone_name_or_id = oci_dns_zone.zone3.id
+}
diff --git a/examples/dns/global/zone.tf b/examples/dns/global/zone.tf
@@ -17,35 +17,35 @@ resource "oci_dns_zone" "zone1" {
   zone_type      = "PRIMARY"
 }
 
-resource "oci_dns_zone" "zone3" {
-  compartment_id = var.compartment_ocid
-  name           = "${data.oci_identity_tenancy.tenancy.name}-${random_string.random_prefix.result}-tf-example3-primary.oci-dns1"
-  zone_type      = "PRIMARY"
-}
-
 resource "oci_dns_tsig_key" "test_tsig_key" {
   algorithm      = "hmac-sha1"
   compartment_id = var.compartment_ocid
-  name           = "${random_string.random_prefix.result}-test_tsig_key-name"
+  name           = "${random_string.random_prefix.result}-test-tsig-key-name"
   secret         = "c2VjcmV0"
 }
 
 resource "oci_dns_zone" "zone2" {
   compartment_id = var.compartment_ocid
-  name           = "${data.oci_identity_tenancy.tenancy.name}-${random_string.random_prefix.result}-tf-example-secondary.oci-dns2"
-  zone_type      = "SECONDARY"
+  name           = "${data.oci_identity_tenancy.tenancy.name}-${random_string.random_prefix.result}-tf-example2-primary.oci-dns2"
+  zone_type      = "PRIMARY"
 
-  external_masters {
+  external_downstreams {
     address     = "77.64.12.1"
     tsig_key_id = oci_dns_tsig_key.test_tsig_key.id
   }
 
-  external_masters {
+  external_downstreams {
     address     = "77.64.12.2"
     tsig_key_id = oci_dns_tsig_key.test_tsig_key.id
   }
 }
 
+resource "oci_dns_zone" "zone3" {
+  compartment_id = var.compartment_ocid
+  name           = "${data.oci_identity_tenancy.tenancy.name}-${random_string.random_prefix.result}-tf-example3-primary.oci-dns1"
+  zone_type      = "PRIMARY"
+}
+
 data "oci_dns_zones" "zs" {
   compartment_id = var.compartment_ocid
   name_contains  = "example"

diff --git a/examples/dns/private/rrset/rrset.tf b/examples/dns/private/rrset/rrset.tf
@@ -65,3 +65,10 @@ data "oci_dns_rrset" "test_rrset" {
   view_id         = oci_dns_view.test_view.id
 }
 
+data "oci_dns_rrsets" "test_rrsets" {
+  domain          = "el.${oci_dns_zone.zone3.name}"
+  rtype           = "CNAME"
+  zone_name_or_id = oci_dns_zone.zone3.id
+  scope           = "PRIVATE"
+  view_id         = oci_dns_view.test_view.id
+}
diff --git a/examples/dns/zone_file/provider.tf b/examples/dns/zone_file/provider.tf
@@ -0,0 +1,33 @@
+// Copyright (c) 2017, 2023, Oracle and/or its affiliates. All rights reserved.
+// Licensed under the Mozilla Public License v2.0
+
+/*
+ * Provider config for dns sample
+ */
+
+variable "tenancy_ocid" {
+}
+
+variable "user_ocid" {
+}
+
+variable "fingerprint" {
+}
+
+variable "private_key_path" {
+}
+
+variable "compartment_ocid" {
+}
+
+variable "region" {
+}
+
+provider "oci" {
+  region           = var.region
+  tenancy_ocid     = var.tenancy_ocid
+  user_ocid        = var.user_ocid
+  fingerprint      = var.fingerprint
+  private_key_path = var.private_key_path
+}
+
diff --git a/examples/dns/zone_file/zone.tf b/examples/dns/zone_file/zone.tf
@@ -0,0 +1,40 @@
+// Copyright (c) 2017, 2023, Oracle and/or its affiliates. All rights reserved.
+// Licensed under the Mozilla Public License v2.0
+
+/*
+ * This file demonstrates creating a zone from a zone file using terraform.
+ */
+
+/*
+ * Step 1: Create the zone from the zone file.
+ *         Run Terraform plan/apply and wait until the zone has been created. Note the OCID of the zone.
+ * Step 2: Uncomment the oci_dns_zone below, and comment out the oci_dns_action_create_zone_from_zone_file
+           Run `terraform import oci_dns_zone.zone ZONE_OCID`, replacing ZONE_OCID with the OCID of the zone from step 1.
+ * Step 3: Run Terraform plan/apply.
+           Terraform will show that it is deleting the oci_dns_action_create_zone_from_zone_file resource, but the zone will not be deleted. The zone is now fully managed by the oci_dns_zone resource.
+ */
+
+resource "random_string" "random_prefix" {
+  length  = 4
+  number  = false
+  special = false
+}
+
+data "oci_identity_tenancy" "tenancy" {
+  tenancy_id = var.tenancy_ocid
+}
+
+locals {
+  zone_name = "${data.oci_identity_tenancy.tenancy.name}-${random_string.random_prefix.result}-tf-example-primary.oci-dns1"
+}
+
+resource "oci_dns_action_create_zone_from_zone_file" "zonefile" {
+  compartment_id = var.compartment_ocid
+  create_zone_from_zone_file_details = "$ORIGIN ${local.zone_name}.\n$TTL 3600\n${local.zone_name}.	IN	SOA	ns1.${local.zone_name}. admin.${local.zone_name}. ( 1 7200 3600 14400 3600)\n${local.zone_name}.	IN	NS	ns1.${local.zone_name}."
+}
+
+#resource "oci_dns_zone" "zone" {
+#  name = local.zone_name
+#  compartment_id = var.compartment_ocid
+#  zone_type = "PRIMARY"
+#}
diff --git a/examples/identity_domains/api_key.tf b/examples/identity_domains/api_key.tf
@@ -46,7 +46,7 @@ resource "oci_identity_domains_api_key" "test_api_key" {
   schemas       = ["urn:ietf:params:scim:schemas:oracle:idcs:apikey"]
 
   #Optional
-  attribute_sets = []
+  attribute_sets = ["all"]
   attributes     = ""
   authorization  = var.api_key_authorization
   description    = var.api_key_description
@@ -68,6 +68,13 @@ resource "oci_identity_domains_api_key" "test_api_key" {
     #must be a user that exists
     value = oci_identity_domains_user.test_user.id
   }
+
+  lifecycle {
+    ignore_changes = [
+      // ignore fields that will never be returned
+      urnietfparamsscimschemasoracleidcsextensionself_change_user
+    ]
+  }
 }
 
 data "oci_identity_domains_api_keys" "test_api_keys" {

diff --git a/examples/identity_domains/auth_token.tf b/examples/identity_domains/auth_token.tf
@@ -44,7 +44,7 @@ resource "oci_identity_domains_auth_token" "test_auth_token" {
   schemas       = ["urn:ietf:params:scim:schemas:oracle:idcs:authToken"]
 
   #Optional
-  attribute_sets = []
+  attribute_sets = ["all"]
   attributes     = ""
   authorization  = var.auth_token_authorization
   description    = var.auth_token_description
@@ -70,6 +70,14 @@ resource "oci_identity_domains_auth_token" "test_auth_token" {
     #must be a user that exists
     value = oci_identity_domains_user.test_user.id
   }
+
+  lifecycle {
+    ignore_changes = [
+      // ignore fields that will never be returned
+      status,
+      urnietfparamsscimschemasoracleidcsextensionself_change_user
+    ]
+  }
 }
 
 data "oci_identity_domains_auth_tokens" "test_auth_tokens" {

diff --git a/examples/identity_domains/authentication_factor_settings.tf b/examples/identity_domains/authentication_factor_settings.tf
@@ -477,6 +477,9 @@ resource "oci_identity_domains_authentication_factor_setting" "test_authenticati
   }
   user_enrollment_disabled_factors = var.authentication_factor_setting_user_enrollment_disabled_factors
   yubico_otp_enabled               = var.authentication_factor_setting_yubico_otp_enabled
+  lifecycle {
+    ignore_changes = [schemas]
+  }
 }
 
 data "oci_identity_domains_authentication_factor_settings" "test_authentication_factor_settings" {

diff --git a/examples/identity_domains/customer_secret_key.tf b/examples/identity_domains/customer_secret_key.tf
@@ -48,7 +48,7 @@ resource "oci_identity_domains_customer_secret_key" "test_customer_secret_key" {
   schemas       = ["urn:ietf:params:scim:schemas:oracle:idcs:customerSecretKey"]
 
   #Optional
-  attribute_sets = []
+  attribute_sets = ["all"]
   attributes     = ""
   authorization  = var.customer_secret_key_authorization
   description    = var.customer_secret_key_description
@@ -75,6 +75,14 @@ resource "oci_identity_domains_customer_secret_key" "test_customer_secret_key" {
     #must be a user that exists
     value = oci_identity_domains_user.test_user.id
   }
+
+  lifecycle {
+    ignore_changes = [
+      // ignore fields that will never be returned
+      status,
+      urnietfparamsscimschemasoracleidcsextensionself_change_user
+    ]
+  }
 }
 
 data "oci_identity_domains_customer_secret_keys" "test_customer_secret_keys" {

diff --git a/examples/identity_domains/dynamic_resource_group.tf b/examples/identity_domains/dynamic_resource_group.tf
@@ -66,7 +66,7 @@ resource "oci_identity_domains_dynamic_resource_group" "test_dynamic_resource_gr
   schemas       = ["urn:ietf:params:scim:schemas:oracle:idcs:DynamicResourceGroup"]
 
   #Optional
-  attribute_sets = []
+  attribute_sets = ["all"]
   attributes     = ""
   authorization  = var.dynamic_resource_group_authorization
   description    = var.dynamic_resource_group_description
@@ -94,6 +94,9 @@ resource "oci_identity_domains_dynamic_resource_group" "test_dynamic_resource_gr
       value = var.dynamic_resource_group_urnietfparamsscimschemasoracleidcsextension_oci_tags_freeform_tags_value
     }
   }
+  lifecycle {
+    ignore_changes = [schemas]
+  }
 }
 
 data "oci_identity_domains_dynamic_resource_groups" "test_dynamic_resource_groups" {

diff --git a/examples/identity_domains/group.tf b/examples/identity_domains/group.tf
@@ -129,7 +129,7 @@ resource "oci_identity_domains_group" "test_group" {
   schemas       = ["urn:ietf:params:scim:schemas:core:2.0:Group"]
 
   #Optional
-  attribute_sets = []
+  attribute_sets = ["all"]
   attributes     = ""
   authorization  = var.group_authorization
   external_id    = "externalId"
@@ -196,6 +196,9 @@ resource "oci_identity_domains_group" "test_group" {
     #Optional
     requestable = var.group_urnietfparamsscimschemasoracleidcsextensionrequestable_group_requestable
   }
+  lifecycle {
+    ignore_changes = [schemas]
+  }
 }
 
 data "oci_identity_domains_groups" "test_groups" {

diff --git a/examples/identity_domains/identity_domain.tf b/examples/identity_domains/identity_domain.tf
@@ -6,3 +6,12 @@ variable "identity_domain_id" {
 data "oci_identity_domain" "test_domain" {
   domain_id = var.identity_domain_id
 }
+
+
+variable "identity_domain_id_for_my_endpoint" {
+  default = ""
+}
+
+data "oci_identity_domain" "test_domain_for_my_endpoint" {
+  domain_id = var.identity_domain_id_for_my_endpoint
+}
diff --git a/examples/identity_domains/identity_provider.tf b/examples/identity_domains/identity_provider.tf
@@ -335,7 +335,7 @@ resource "oci_identity_domains_identity_provider" "test_identity_provider" {
 
   #Optional
   assertion_attribute   = var.identity_provider_assertion_attribute
-  attribute_sets        = []
+  attribute_sets        = ["all"]
   attributes            = ""
   authn_request_binding = var.identity_provider_authn_request_binding
   authorization         = var.identity_provider_authorization
@@ -447,6 +447,9 @@ resource "oci_identity_domains_identity_provider" "test_identity_provider" {
   }
   user_mapping_method          = var.identity_provider_user_mapping_method
   user_mapping_store_attribute = var.identity_provider_user_mapping_store_attribute
+  lifecycle {
+    ignore_changes = [schemas]
+  }
 }
 
 data "oci_identity_domains_identity_providers" "test_identity_providers" {

diff --git a/examples/identity_domains/kmsi_setting.tf b/examples/identity_domains/kmsi_setting.tf
@@ -57,7 +57,7 @@ resource "oci_identity_domains_kmsi_setting" "test_kmsi_setting" {
   schemas         = ["urn:ietf:params:scim:schemas:oracle:idcs:KmsiSettings"]
 
   #Optional
-  attribute_sets             = []
+  attribute_sets             = ["all"]
   attributes                 = ""
   authorization              = var.kmsi_setting_authorization
   external_id                = "externalId"

diff --git a/examples/identity_domains/my_api_key.tf b/examples/identity_domains/my_api_key.tf
@@ -49,7 +49,7 @@ variable "my_api_key_user_value" {
 
 resource "oci_identity_domains_my_api_key" "test_my_api_key" {
   #Required
-  idcs_endpoint = data.oci_identity_domain.test_domain.url
+  idcs_endpoint = data.oci_identity_domain.test_domain_for_my_endpoint.url
   key           = var.my_api_key_key
   schemas       = ["urn:ietf:params:scim:schemas:oracle:idcs:apikey"]
 
@@ -73,11 +73,17 @@ resource "oci_identity_domains_my_api_key" "test_my_api_key" {
   }
   */
 
+  lifecycle {
+    ignore_changes = [
+      // ignore fields that will never be returned
+      tags
+    ]
+  }
 }
 
 data "oci_identity_domains_my_api_keys" "test_my_api_keys" {
   #Required
-  idcs_endpoint = data.oci_identity_domain.test_domain.url
+  idcs_endpoint = data.oci_identity_domain.test_domain_for_my_endpoint.url
 
   #Optional
   my_api_key_count  = var.my_api_key_my_api_key_count