oci_jms_fleet_advanced_feature_configuration
This resource provides the Fleet Advanced Feature Configuration resource in Oracle Cloud Infrastructure Jms service.
Update advanced feature configurations for the Fleet. Ensure that the namespace and bucket storage are created prior to turning on the JfrRecording or CryptoEventAnalysis feature.
Example Usage
resource "oci_jms_fleet_advanced_feature_configuration" "test_fleet_advanced_feature_configuration" {
#Required
fleet_id = oci_jms_fleet.test_fleet.id
#Optional
advanced_usage_tracking {
#Optional
is_enabled = var.fleet_advanced_feature_configuration_advanced_usage_tracking_is_enabled
}
analytic_bucket_name = oci_objectstorage_bucket.test_bucket.name
analytic_namespace = var.fleet_advanced_feature_configuration_analytic_namespace
crypto_event_analysis {
#Optional
is_enabled = var.fleet_advanced_feature_configuration_crypto_event_analysis_is_enabled
summarized_events_log {
#Required
log_group_id = oci_logging_log_group.test_log_group.id
log_id = oci_logging_log.test_log.id
}
}
java_migration_analysis {
#Optional
is_enabled = var.fleet_advanced_feature_configuration_java_migration_analysis_is_enabled
}
jfr_recording {
#Optional
is_enabled = var.fleet_advanced_feature_configuration_jfr_recording_is_enabled
}
lcm {
#Optional
is_enabled = var.fleet_advanced_feature_configuration_lcm_is_enabled
post_installation_actions {
#Optional
add_logging_handler = var.fleet_advanced_feature_configuration_lcm_post_installation_actions_add_logging_handler
disabled_tls_versions = var.fleet_advanced_feature_configuration_lcm_post_installation_actions_disabled_tls_versions
global_logging_level = var.fleet_advanced_feature_configuration_lcm_post_installation_actions_global_logging_level
minimum_key_size_settings {
#Optional
certpath {
#Optional
key_size = var.fleet_advanced_feature_configuration_lcm_post_installation_actions_minimum_key_size_settings_certpath_key_size
name = var.fleet_advanced_feature_configuration_lcm_post_installation_actions_minimum_key_size_settings_certpath_name
}
jar {
#Optional
key_size = var.fleet_advanced_feature_configuration_lcm_post_installation_actions_minimum_key_size_settings_jar_key_size
name = var.fleet_advanced_feature_configuration_lcm_post_installation_actions_minimum_key_size_settings_jar_name
}
tls {
#Optional
key_size = var.fleet_advanced_feature_configuration_lcm_post_installation_actions_minimum_key_size_settings_tls_key_size
name = var.fleet_advanced_feature_configuration_lcm_post_installation_actions_minimum_key_size_settings_tls_name
}
}
proxies {
#Optional
ftp_proxy_host = var.fleet_advanced_feature_configuration_lcm_post_installation_actions_proxies_ftp_proxy_host
ftp_proxy_port = var.fleet_advanced_feature_configuration_lcm_post_installation_actions_proxies_ftp_proxy_port
http_proxy_host = var.fleet_advanced_feature_configuration_lcm_post_installation_actions_proxies_http_proxy_host
http_proxy_port = var.fleet_advanced_feature_configuration_lcm_post_installation_actions_proxies_http_proxy_port
https_proxy_host = var.fleet_advanced_feature_configuration_lcm_post_installation_actions_proxies_https_proxy_host
https_proxy_port = var.fleet_advanced_feature_configuration_lcm_post_installation_actions_proxies_https_proxy_port
socks_proxy_host = var.fleet_advanced_feature_configuration_lcm_post_installation_actions_proxies_socks_proxy_host
socks_proxy_port = var.fleet_advanced_feature_configuration_lcm_post_installation_actions_proxies_socks_proxy_port
use_system_proxies = var.fleet_advanced_feature_configuration_lcm_post_installation_actions_proxies_use_system_proxies
}
should_replace_certificates_operating_system = var.fleet_advanced_feature_configuration_lcm_post_installation_actions_should_replace_certificates_operating_system
}
}
performance_tuning_analysis {
#Optional
is_enabled = var.fleet_advanced_feature_configuration_performance_tuning_analysis_is_enabled
}
}
Argument Reference
The following arguments are supported:
advanced_usage_tracking
- (Optional) (Updatable) AdvancedUsageTracking configurationis_enabled
- (Optional) (Updatable) AdvancedUsageTracking flag to store enabled or disabled status.
analytic_bucket_name
- (Optional) (Updatable) Bucket name required to store JFR and related data.analytic_namespace
- (Optional) (Updatable) Namespace for the Fleet advanced feature.crypto_event_analysis
- (Optional) (Updatable) CryptoEventAnalysis configurationis_enabled
- (Optional) (Updatable) CryptoEventAnalysis flag to store enabled or disabled status.summarized_events_log
- (Optional) (Updatable) Summarized events log for advanced feature.
fleet_id
- (Required) The OCID of the Fleet.java_migration_analysis
- (Optional) (Updatable) JavaMigrationAnalysis configurationis_enabled
- (Optional) (Updatable) JavaMigrationAnalysis flag to store enabled or disabled status.
jfr_recording
- (Optional) (Updatable) JfrRecording configurationis_enabled
- (Optional) (Updatable) JfrRecording flag to store enabled or disabled status.
lcm
- (Optional) (Updatable) Enable lifecycle management and set post action configurations.is_enabled
- (Optional) (Updatable) Lifecycle management flag to store enabled or disabled status.post_installation_actions
- (Optional) (Updatable) List of available post actions you can execute after the successful Java installation.add_logging_handler
- (Optional) (Updatable) Sets FileHandler and ConsoleHandler as handlers in logging.properties file.disabled_tls_versions
- (Optional) (Updatable) The following post JRE installation actions are supported by the field:- Disable TLS 1.0 , TLS 1.1
global_logging_level
- (Optional) (Updatable) Sets the logging level in logging.properties file.minimum_key_size_settings
- (Optional) (Updatable) testcertpath
- (Optional) (Updatable) Updates the minimum key size for the specified encryption algorithm. The JDK property jdk.certpath.disabledAlgorithms will be updated with the following supported actions:- Changing minimum key length for RSA signed jars
- Changing minimum key length for EC
- Changing minimum key length for DSA
key_size
- (Optional) (Updatable) Key size for the encryption algorithm. Allowed values: 256 for EC, 2048 for DH/DSA/RSAname
- (Optional) (Updatable) The algorithm name.
jar
- (Optional) (Updatable) Updates the minimum key size for the specified encryption algorithm. The JDK property jdk.jar.disabledAlgorithms will be updated with the following supported actions:- Changing minimum key length for RSA signed jars
- Changing minimum key length for EC
- Changing minimum key length for DSA
key_size
- (Optional) (Updatable) Key size for the encryption algorithm. Allowed values: 256 for EC, 2048 for DH/DSA/RSAname
- (Optional) (Updatable) The algorithm name.
tls
- (Optional) (Updatable) Updates the minimum key size for the specified encryption algorithm. The JDK property jdk.tls.disabledAlgorithms will be updated with the following supported actions:- Changing minimum key length for Diffie-Hellman
key_size
- (Optional) (Updatable) Key size for the encryption algorithm. Allowed values: 256 for EC, 2048 for DH/DSA/RSAname
- (Optional) (Updatable) The algorithm name.
proxies
- (Optional) (Updatable) List of proxy properties to be configured in net.properties file.ftp_proxy_host
- (Optional) (Updatable) Ftp host to be set in net.properties file.ftp_proxy_port
- (Optional) (Updatable) Ftp port number to be set in net.properties file.http_proxy_host
- (Optional) (Updatable) Http host to be set in net.properties file.http_proxy_port
- (Optional) (Updatable) Http port number to be set in net.properties file.https_proxy_host
- (Optional) (Updatable) Https host to be set in net.properties file.https_proxy_port
- (Optional) (Updatable) Https port number to be set in net.properties file.socks_proxy_host
- (Optional) (Updatable) Socks host to be set in net.properties file.socks_proxy_port
- (Optional) (Updatable) Socks port number to be set in net.properties file.use_system_proxies
- (Optional) (Updatable) Sets “java.net.useSystemProxies=true” in net.properties when they exist.
should_replace_certificates_operating_system
- (Optional) (Updatable) Restores JDK root certificates with the certificates that are available in the operating system. The following action is supported by the field:- Replace JDK root certificates with a list provided by the operating system.
performance_tuning_analysis
- (Optional) (Updatable) Performance tuning analysis configurationis_enabled
- (Optional) (Updatable) PerformanceTuningAnalysis flag to store enabled or disabled status
** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values
Attributes Reference
The following attributes are exported:
advanced_usage_tracking
- AdvancedUsageTracking configurationis_enabled
- AdvancedUsageTracking flag to store enabled or disabled status.
analytic_bucket_name
- Bucket name required to store JFR and related data.analytic_namespace
- Namespace for the Fleet advanced feature.crypto_event_analysis
- CryptoEventAnalysis configurationjava_migration_analysis
- JavaMigrationAnalysis configurationis_enabled
- JavaMigrationAnalysis flag to store enabled or disabled status.
jfr_recording
- JfrRecording configurationis_enabled
- JfrRecording flag to store enabled or disabled status.
lcm
- Enable lifecycle management and set post action configurations.is_enabled
- Lifecycle management flag to store enabled or disabled status.post_installation_actions
- List of available post actions you can execute after the successful Java installation.add_logging_handler
- Sets FileHandler and ConsoleHandler as handlers in logging.properties file.disabled_tls_versions
- The following post JRE installation actions are supported by the field:- Disable TLS 1.0 , TLS 1.1
global_logging_level
- Sets the logging level in logging.properties file.minimum_key_size_settings
- testcertpath
- Updates the minimum key size for the specified encryption algorithm. The JDK property jdk.certpath.disabledAlgorithms will be updated with the following supported actions:- Changing minimum key length for RSA signed jars
- Changing minimum key length for EC
- Changing minimum key length for DSA
key_size
- Key size for the encryption algorithm. Allowed values: 256 for EC, 2048 for DH/DSA/RSAname
- The algorithm name.
jar
- Updates the minimum key size for the specified encryption algorithm. The JDK property jdk.jar.disabledAlgorithms will be updated with the following supported actions:- Changing minimum key length for RSA signed jars
- Changing minimum key length for EC
- Changing minimum key length for DSA
key_size
- Key size for the encryption algorithm. Allowed values: 256 for EC, 2048 for DH/DSA/RSAname
- The algorithm name.
tls
- Updates the minimum key size for the specified encryption algorithm. The JDK property jdk.tls.disabledAlgorithms will be updated with the following supported actions:- Changing minimum key length for Diffie-Hellman
key_size
- Key size for the encryption algorithm. Allowed values: 256 for EC, 2048 for DH/DSA/RSAname
- The algorithm name.
proxies
- List of proxy properties to be configured in net.properties file.ftp_proxy_host
- Ftp host to be set in net.properties file.ftp_proxy_port
- Ftp port number to be set in net.properties file.http_proxy_host
- Http host to be set in net.properties file.http_proxy_port
- Http port number to be set in net.properties file.https_proxy_host
- Https host to be set in net.properties file.https_proxy_port
- Https port number to be set in net.properties file.socks_proxy_host
- Socks host to be set in net.properties file.socks_proxy_port
- Socks port number to be set in net.properties file.use_system_proxies
- Sets “java.net.useSystemProxies=true” in net.properties when they exist.
should_replace_certificates_operating_system
- Restores JDK root certificates with the certificates that are available in the operating system. The following action is supported by the field:- Replace JDK root certificates with a list provided by the operating system.
performance_tuning_analysis
- Performance tuning analysis configurationis_enabled
- PerformanceTuningAnalysis flag to store enabled or disabled status
time_last_modified
- The date and time of the last modification to the Fleet Agent Configuration (formatted according to RFC3339).
Timeouts
The timeouts
block allows you to specify timeouts for certain operations:
* create
- (Defaults to 20 minutes), when creating the Fleet Advanced Feature Configuration
* update
- (Defaults to 20 minutes), when updating the Fleet Advanced Feature Configuration
* delete
- (Defaults to 20 minutes), when destroying the Fleet Advanced Feature Configuration
Import
FleetAdvancedFeatureConfigurations can be imported using the id
, e.g.
$ terraform import oci_jms_fleet_advanced_feature_configuration.test_fleet_advanced_feature_configuration "fleets/{fleetId}/advancedFeatureConfiguration"