oci_golden_gate_deployment
This resource provides the Deployment resource in Oracle Cloud Infrastructure Golden Gate service.
Creates a new Deployment.
Example Usage
resource "oci_golden_gate_deployment" "test_deployment" {
#Required
compartment_id = var.compartment_id
cpu_core_count = var.deployment_cpu_core_count
deployment_type = var.deployment_deployment_type
display_name = var.deployment_display_name
is_auto_scaling_enabled = var.deployment_is_auto_scaling_enabled
license_model = var.deployment_license_model
subnet_id = oci_core_subnet.test_subnet.id
#Optional
defined_tags = {"foo-namespace.bar-key"= "value"}
deployment_backup_id = oci_golden_gate_deployment_backup.test_deployment_backup.id
description = var.deployment_description
environment_type = var.deployment_environment_type
fqdn = var.deployment_fqdn
freeform_tags = {"bar-key"= "value"}
is_public = var.deployment_is_public
load_balancer_subnet_id = oci_core_subnet.test_subnet.id
locks {
#Required
type = var.deployment_locks_type
#Optional
message = var.deployment_locks_message
}
maintenance_configuration {
#Optional
bundle_release_upgrade_period_in_days = var.deployment_maintenance_configuration_bundle_release_upgrade_period_in_days
interim_release_upgrade_period_in_days = var.deployment_maintenance_configuration_interim_release_upgrade_period_in_days
is_interim_release_auto_upgrade_enabled = var.deployment_maintenance_configuration_is_interim_release_auto_upgrade_enabled
major_release_upgrade_period_in_days = var.deployment_maintenance_configuration_major_release_upgrade_period_in_days
security_patch_upgrade_period_in_days = var.deployment_maintenance_configuration_security_patch_upgrade_period_in_days
}
maintenance_window {
#Required
day = var.deployment_maintenance_window_day
start_hour = var.deployment_maintenance_window_start_hour
}
nsg_ids = var.deployment_nsg_ids
ogg_data {
#Required
deployment_name = oci_golden_gate_deployment.test_deployment.name
#Optional
admin_password = var.deployment_ogg_data_admin_password
admin_username = var.deployment_ogg_data_admin_username
certificate = var.deployment_ogg_data_certificate
credential_store = var.deployment_ogg_data_credential_store
group_to_roles_mapping {
#Required
security_group_id = oci_identity_group.test_group.id
#Optional
administrator_group_id = oci_identity_group.test_group.id
operator_group_id = oci_identity_group.test_group.id
user_group_id = oci_identity_group.test_group.id
}
identity_domain_id = oci_identity_domain.test_domain.id
key = var.deployment_ogg_data_key
ogg_version = var.deployment_ogg_data_ogg_version
password_secret_id = oci_vault_secret.test_secret.id
}
state = var.deployment_state
}
Argument Reference
The following arguments are supported:
compartment_id
- (Required) (Updatable) The OCID of the compartment being referenced.cpu_core_count
- (Required) (Updatable) The Minimum number of OCPUs to be made available for this Deployment.defined_tags
- (Optional) (Updatable) Tags defined for this resource. Each key is predefined and scoped to a namespace. Example:{"foo-namespace.bar-key": "value"}
deployment_backup_id
- (Optional) The OCID of the backup being referenced.deployment_type
- (Required) The type of deployment, which can be any one of the Allowed values. NOTE: Use of the value ‘OGG’ is maintained for backward compatibility purposes. Its use is discouraged in favor of ‘DATABASE_ORACLE’.description
- (Optional) (Updatable) Metadata about this specific object.display_name
- (Required) (Updatable) An object’s Display Name.environment_type
- (Optional) (Updatable) Specifies whether the deployment is used in a production or development/testing environment.fqdn
- (Optional) (Updatable) A three-label Fully Qualified Domain Name (FQDN) for a resource.freeform_tags
- (Optional) (Updatable) A simple key-value pair that is applied without any predefined name, type, or scope. Exists for cross-compatibility only. Example:{"bar-key": "value"}
is_auto_scaling_enabled
- (Required) (Updatable) Indicates if auto scaling is enabled for the Deployment’s CPU core count.is_public
- (Optional) (Updatable) True if this object is publicly available.license_model
- (Required) (Updatable) The Oracle license model that applies to a Deployment.load_balancer_subnet_id
- (Optional) The OCID of a public subnet in the customer tenancy. Can be provided only for public deployments. If provided, the loadbalancer will be created in this subnet instead of the service tenancy. For backward compatiblity this is an optional property for now, but it will become mandatory (for public deployments only) after October 1, 2024.locks
- (Optional) Locks associated with this resource.message
- (Optional) A message added by the creator of the lock. This is typically used to give an indication of why the resource is locked.type
- (Required) Type of the lock.
maintenance_configuration
- (Optional) (Updatable) Defines the maintenance configuration for create operation.bundle_release_upgrade_period_in_days
- (Optional) (Updatable) Defines auto upgrade period for bundle releases. Manually configured period cannot be longer than service defined period for bundle releases. This period must be shorter or equal to major release upgrade period. Not passing this field during create will equate to using the service default.interim_release_upgrade_period_in_days
- (Optional) (Updatable) Defines auto upgrade period for interim releases. This period must be shorter or equal to bundle release upgrade period.is_interim_release_auto_upgrade_enabled
- (Optional) (Updatable) By default auto upgrade for interim releases are not enabled. If auto-upgrade is enabled for interim release, you have to specify interimReleaseUpgradePeriodInDays too.major_release_upgrade_period_in_days
- (Optional) (Updatable) Defines auto upgrade period for major releases. Manually configured period cannot be longer than service defined period for major releases. Not passing this field during create will equate to using the service default.security_patch_upgrade_period_in_days
- (Optional) (Updatable) Defines auto upgrade period for releases with security fix. Manually configured period cannot be longer than service defined period for security releases. Not passing this field during create will equate to using the service default.
maintenance_window
- (Optional) (Updatable) Defines the maintenance window for create operation, when automatic actions can be performed.day
- (Required) (Updatable) Days of the week.start_hour
- (Required) (Updatable) Start hour for maintenance period. Hour is in UTC.
nsg_ids
- (Optional) (Updatable) An array of Network Security Group OCIDs used to define network access for either Deployments or Connections.ogg_data
- (Optional) (Updatable) Deployment Data for creating an OggDeploymentadmin_password
- (Optional) (Updatable) The password associated with the GoldenGate deployment console username. The password must be 8 to 30 characters long and must contain at least 1 uppercase, 1 lowercase, 1 numeric, and 1 special character. Special characters such as ‘$’, ‘^’, or ‘?’ are not allowed. This field will be deprecated and replaced by “passwordSecretId”.admin_username
- (Optional) (Updatable) The GoldenGate deployment console username.certificate
- (Optional) (Updatable) The base64 encoded content of the PEM file containing the SSL certificate.credential_store
- (Optional) (Updatable) The type of credential store for OGG.deployment_name
- (Required) The name given to the GoldenGate service deployment. The name must be 1 to 32 characters long, must contain only alphanumeric characters and must start with a letter.group_to_roles_mapping
- (Optional) (Updatable) Defines the IDP Groups to GoldenGate roles mapping. This field is used only for IAM deployment and does not have any impact on non-IAM deployments. For IAM deployment, when user does not specify this mapping, then it has null value and default mapping is used. User belonging to each group can only perform the actions according to the role the respective group is mapped to.administrator_group_id
- (Optional) (Updatable) The OCID of the IDP group which will be mapped to goldengate role administratorGroup. It grants full access to the user, including the ability to alter general, non-security related operational parameters and profiles of the server.operator_group_id
- (Optional) (Updatable) The OCID of the IDP group which will be mapped to goldengate role operatorGroup. It allows users to perform only operational actions, like starting and stopping resources. Operators cannot alter the operational parameters or profiles of the MA server.security_group_id
- (Required) (Updatable) The OCID of the IDP group which will be mapped to goldengate role securityGroup. It grants administration of security related objects and invoke security related service requests. This role has full privileges.user_group_id
- (Optional) (Updatable) The OCID of the IDP group which will be mapped to goldengate role userGroup. It allows information-only service requests, which do not alter or affect the operation of either the MA. Examples of query and read-only information include performance metric information and resource status and monitoring information
identity_domain_id
- (Optional) (Updatable) The OCID of the Identity Domain when IAM credential store is used.key
- (Optional) (Updatable) The base64 encoded content of the PEM file containing the private key.ogg_version
- (Optional) Version of OGGpassword_secret_id
- (Optional) (Updatable) The OCID of the Secret where the deployment password is stored.
subnet_id
- (Required) (Updatable) The OCID of the subnet of the deployment’s private endpoint. The subnet must be a private subnet. For backward compatibility, public subnets are allowed until May 31 2025, after which the private subnet will be enforced.state
- (Optional) (Updatable) The target state for the deployment. Could be set to ACTIVE or INACTIVE. By setting this value to ACTIVE terraform will perform start operation, if your deployment is not ACTIVE already. Setting value to INACTIVE will stop your deployment.
** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values
Attributes Reference
The following attributes are exported:
category
- The deployment category defines the broad separation of the deployment type into three categories. Currently the separation is ‘DATA_REPLICATION’, ‘STREAM_ANALYTICS’ and ‘DATA_TRANSFORMS’.compartment_id
- The OCID of the compartment being referenced.cpu_core_count
- The Minimum number of OCPUs to be made available for this Deployment.defined_tags
- Tags defined for this resource. Each key is predefined and scoped to a namespace. Example:{"foo-namespace.bar-key": "value"}
deployment_backup_id
- The OCID of the backup being referenced.deployment_diagnostic_data
- Information regarding the deployment diagnostic collectionbucket
- Name of the bucket where the object is to be uploaded in the object storagediagnostic_state
- The state of the deployment diagnostic collection.namespace
- Name of namespace that serves as a container for all of your bucketsobject
- Name of the diagnostic collected and uploaded to object storagetime_diagnostic_end
- The time until which the diagnostic collection should collect the logs. The format is defined by RFC3339, such as2016-08-25T21:10:29.600Z
.time_diagnostic_start
- The time from which the diagnostic collection should collect the logs. The format is defined by RFC3339, such as2016-08-25T21:10:29.600Z
.
deployment_type
- The type of deployment, which can be any one of the Allowed values. NOTE: Use of the value ‘OGG’ is maintained for backward compatibility purposes. Its use is discouraged in favor of ‘DATABASE_ORACLE’.deployment_url
- The URL of a resource.description
- Metadata about this specific object.display_name
- An object’s Display Name.environment_type
- Specifies whether the deployment is used in a production or development/testing environment.fqdn
- A three-label Fully Qualified Domain Name (FQDN) for a resource.freeform_tags
- A simple key-value pair that is applied without any predefined name, type, or scope. Exists for cross-compatibility only. Example:{"bar-key": "value"}
id
- The OCID of the deployment being referenced.ingress_ips
- List of ingress IP addresses from where the GoldenGate deployment connects to this connection’s privateIp. Customers may optionally set up ingress security rules to restrict traffic from these IP addresses.ingress_ip
- A Private Endpoint IPv4 or IPv6 Address created in the customer’s subnet.
is_auto_scaling_enabled
- Indicates if auto scaling is enabled for the Deployment’s CPU core count.is_healthy
- True if all of the aggregate resources are working correctly.is_latest_version
- Indicates if the resource is the the latest available version.is_public
- True if this object is publicly available.is_storage_utilization_limit_exceeded
- Deprecated: This field is not updated and will be removed in future versions. If storage utilization exceeds the limit, the respective warning message will appear in deployment messages, which can be accessed through /messages?deploymentId=. Indicator will be true if the amount of storage being utilized exceeds the allowable storage utilization limit. Exceeding the limit may be an indication of a misconfiguration of the deployment’s GoldenGate service.license_model
- The Oracle license model that applies to a Deployment.lifecycle_details
- Describes the object’s current state in detail. For example, it can be used to provide actionable information for a resource in a Failed state.lifecycle_sub_state
- Possible GGS lifecycle sub-states.load_balancer_id
- The OCID of the loadbalancer in the customer’s subnet. The loadbalancer of the public deployment created in the customer subnet.load_balancer_subnet_id
- The OCID of a public subnet in the customer tenancy. Can be provided only for public deployments. If provided, the loadbalancer will be created in this subnet instead of the service tenancy. For backward compatiblity this is an optional property for now, but it will become mandatory (for public deployments only) after October 1, 2024.locks
- Locks associated with this resource.message
- A message added by the creator of the lock. This is typically used to give an indication of why the resource is locked.related_resource_id
- The id of the resource that is locking this resource. Indicates that deleting this resource will remove the lock.time_created
- When the lock was created.type
- Type of the lock.
maintenance_configuration
- Attributes for configuring automatic deployment maintenance.bundle_release_upgrade_period_in_days
- Defines auto upgrade period for bundle releases. Manually configured period cannot be longer than service defined period for bundle releases. This period must be shorter or equal to major release upgrade period. Not passing this field during create will equate to using the service default.interim_release_upgrade_period_in_days
- Defines auto upgrade period for interim releases. This period must be shorter or equal to bundle release upgrade period.is_interim_release_auto_upgrade_enabled
- By default auto upgrade for interim releases are not enabled. If auto-upgrade is enabled for interim release, you have to specify interimReleaseUpgradePeriodInDays too.major_release_upgrade_period_in_days
- Defines auto upgrade period for major releases. Manually configured period cannot be longer than service defined period for major releases. Not passing this field during create will equate to using the service default.security_patch_upgrade_period_in_days
- Defines auto upgrade period for releases with security fix. Manually configured period cannot be longer than service defined period for security releases. Not passing this field during create will equate to using the service default.
maintenance_window
- Defines the maintenance window, when automatic actions can be performed.day
- Days of the week.start_hour
- Start hour for maintenance period. Hour is in UTC.
next_maintenance_action_type
- Type of the next maintenance.next_maintenance_description
- Description of the next maintenance.nsg_ids
- An array of Network Security Group OCIDs used to define network access for either Deployments or Connections.ogg_data
- Deployment Data for an OggDeploymentadmin_username
- The GoldenGate deployment console username.certificate
- The base64 encoded content of the PEM file containing the SSL certificate.credential_store
- The type of credential store for OGG.deployment_name
- The name given to the GoldenGate service deployment. The name must be 1 to 32 characters long, must contain only alphanumeric characters and must start with a letter.group_to_roles_mapping
- Defines the IDP Groups to GoldenGate roles mapping. This field is used only for IAM deployment and does not have any impact on non-IAM deployments. For IAM deployment, when user does not specify this mapping, then it has null value and default mapping is used. User belonging to each group can only perform the actions according to the role the respective group is mapped to.administrator_group_id
- The OCID of the IDP group which will be mapped to goldengate role administratorGroup. It grants full access to the user, including the ability to alter general, non-security related operational parameters and profiles of the server.operator_group_id
- The OCID of the IDP group which will be mapped to goldengate role operatorGroup. It allows users to perform only operational actions, like starting and stopping resources. Operators cannot alter the operational parameters or profiles of the MA server.security_group_id
- The OCID of the IDP group which will be mapped to goldengate role securityGroup. It grants administration of security related objects and invoke security related service requests. This role has full privileges.user_group_id
- The OCID of the IDP group which will be mapped to goldengate role userGroup. It allows information-only service requests, which do not alter or affect the operation of either the MA. Examples of query and read-only information include performance metric information and resource status and monitoring information
identity_domain_id
- The OCID of the Identity Domain when IAM credential store is used.ogg_version
- Version of OGGpassword_secret_id
- The OCID of the Secret where the deployment password is stored.
private_ip_address
- The private IP address in the customer’s VCN representing the access point for the associated endpoint service in the GoldenGate service VCN.public_ip_address
- The public IP address representing the access point for the Deployment.state
- Possible lifecycle states.storage_utilization_in_bytes
- The amount of storage being utilized (in bytes)subnet_id
- The OCID of the subnet of the deployment’s private endpoint. The subnet must be a private subnet. For backward compatibility, public subnets are allowed until May 31 2025, after which the private subnet will be enforced.system_tags
- The system tags associated with this resource, if any. The system tags are set by Oracle Cloud Infrastructure services. Each key is predefined and scoped to namespaces. For more information, see Resource Tags. Example:{orcl-cloud: {free-tier-retain: true}}
time_created
- The time the resource was created. The format is defined by RFC3339, such as2016-08-25T21:10:29.600Z
.time_of_next_maintenance
- The time of next maintenance schedule. The format is defined by RFC3339, such as2016-08-25T21:10:29.600Z
.time_ogg_version_supported_until
- The time until OGG version is supported. After this date has passed OGG version will not be available anymore. The format is defined by RFC3339, such as2016-08-25T21:10:29.600Z
.time_updated
- The time the resource was last updated. The format is defined by RFC3339, such as2016-08-25T21:10:29.600Z
.time_upgrade_required
- Note: Deprecated: Use timeOfNextMaintenance instead, or related upgrade records to check, when deployment will be forced to upgrade to a newer version. Old description: The date the existing version in use will no longer be considered as usable and an upgrade will be required. This date is typically 6 months after the version was released for use by GGS. The format is defined by RFC3339, such as2016-08-25T21:10:29.600Z
.
Timeouts
The timeouts
block allows you to specify timeouts for certain operations:
* create
- (Defaults to 20 minutes), when creating the Deployment
* update
- (Defaults to 20 minutes), when updating the Deployment
* delete
- (Defaults to 20 minutes), when destroying the Deployment
Import
Deployments can be imported using the id
, e.g.
$ terraform import oci_golden_gate_deployment.test_deployment "id"