README instructions for terraform deployment

Signed-off-by: majolr <[email protected]>

Author: majolr

askme/README.md

@@ -13,6 +13,11 @@ AskME is a suite of features designed to empower users to maximize the potential
 
 5.	Knowledge Base Management: Users can create and delete the vector tables.
 
+## Getting Started
+
+You must have an OCI account. [Click here](https://docs.oracle.com/en/cloud/paas/content-cloud/administer/create-and-activate-oracle-cloud-account.html) for more information about Oracle Cloud account creation and activation. Free-tier accounts are currently not supported for the deployment of AskME resources.
+
+There are required OCI resources (see the [Terraform documentation](./terraform/README.md) for more information) that are needed for this tutorial.
 
 ## Contributing
 

askme/terraform/README.md

@@ -0,0 +1,188 @@
+[![License: UPL](https://img.shields.io/badge/license-UPL-green)](https://img.shields.io/badge/license-UPL-green) [![Quality gate](https://sonarcloud.io/api/project_badges/quality_gate?project=oracle-devrel_tech-content-heatwave)](https://sonarcloud.io/dashboard?id=oracle-devrel_tech-content-heatwave)
+
+# Deploy AskME resources with terraform
+
+This section explains how to deploy AskME in your tenancy, using the OCI Cloud Shell and terraform. The following resources are created during the process:
+-	A dynamic group and a policy in the root compartment
+-	A Compartment for the AskME resources
+-	An Object Storage bucket containing two documents
+-	A Compute Instance to run the AskME app
+-	A MySQL DBSystem with a HeatWave cluster
+-	A Vault, a Vault key and three Vault secrets
+-	A VCN with an Internet Gateway, two Security Lists and two Subnets
+
+The application can then be accessed from your local machine, using local port forwarding, as detailed in [step 8](#step-8-use-askme).
+
+## Step 1: Open OCI Cloud Shell
+Sign In to [your OCI tenancy](http://cloud.oracle.com/), switch to a [region supporting OCI Generative AI](https://docs.oracle.com/en-us/iaas/Content/generative-ai/overview.htm#regions) (e.g: US Midwest), and open the Cloud Shell.
+You need to have the [Administrator role](https://docs.oracle.com/en-us/iaas/Content/Identity/roles/understand-administrator-roles.htm) to deploy the AskME resources in your tenancy.
+
+![OCI starting page](assets/oci_home_page.png)
+
+![OCI starting page, developer tools](assets/oci_home_page_dev_tools.png)
+
+## Step 2: Get the repository archive
+In the Cloud Shell interface, fetch the tech-content-heatwave repository archive.
+
+Command:
+```
+wget -O tech-content-heatwave.zip -nv https://github.com/oracle-devrel/tech-content-heatwave/archive/refs/heads/tech-content-heatwave_askme.zip
+```
+
+![Cloud Shell: get repository archive](assets/cloud_shell_fetch.png)
+
+## Step 3: Unzip the archive
+Command:
+```
+unzip tech-content-heatwave.zip '*/askme/*' -d tech-content-heatwave
+```
+
+![Cloud Shell: unzip repository archive](assets/cloud_shell_unzip.png)
+
+## Step 4: Change directory to the terraform folder
+Command:
+```
+cd tech-content-heatwave/*/askme/terraform
+```
+
+## Step 5 (optional): Create a screen session to run terraform
+Command:
+```
+screen -S askme_session
+```
+
+## Step 6: Run the setup script
+Run the script `askme_setup.sh`, and follow the instructions. Additional information will be asked by the script to setup the DBSystem and the compute instance.
+
+Command:
+```
+sh askme_setup.sh
+```
+
+![Cloud Shell: Run deployment script](assets/cloud_shell_script.png)
+
+### Step 6.a: Compartment name
+
+Name of the AskME demo compartment to create (default: `heatwave-genai-askme`).
+
+If your tenancy already contains a compartment with the default name `heatwave-genai-askme`, please provide another compartment name and press Enter. Otherwise, no need to provide a value, press Enter and the default value will be used.
+
+![Deployment script: compartment input parameter](assets/cloud_shell_script_compartment.png)
+
+
+### Step 6.b: Allowed IPv4 CIDR block
+
+Set of IPv4 addresses (CIDR notation) allowed to connect to the compute instance.
+
+The CIDR notation follows the format: `a.b.c.d/e` where `a`, `b`, `c` and `d` are numbers between 0 and 255, and `e` is a number between 0 and 32. More information about the CIDR block notation in the [Network Overview](https://docs.oracle.com/en-us/iaas/Content/Network/Concepts/overview.htm#:~:text=CIDR%20NOTATION) page.
+
+![Deployment script: IPv4 CIDR block input parameter](assets/cloud_shell_script_ip_cidr.png)
+
+### Step 6.c: SSH authorized key
+
+Content of the SSH public key file (OpenSSH format) located in your local machine. More information about SSH keys in the [Key Pair management and generation](https://docs.oracle.com/en-us/iaas/Content/Compute/Tasks/managingkeypairs.htm) page.
+
+![Deployment script: SSH authorized key input parameter](assets/cloud_shell_script_ssh.png)
+
+## Step 7: Resource deployment
+Wait until the terraform deployment finishes. Expected deployment time: 30-40 minutes.
+
+## Step 8: Use AskME
+Connect to the AskME compute instance and access the streamlit page.
+Follow the instructions provided in the Cloud Shell output. The instructions should look similar to this:
+```
+================================================
+Open a terminal in your local computer, and run:
+  ssh -L 8501:localhost:8501 [email protected]
+Then in your web browser, open the URL:
+  127.0.0.1:8501
+================================================
+```
+
+This information can be displayed again with the command `sh askme_output.sh` from the location described in [step 4](#step-4-change-directory-to-the-terraform-folder).
+
+
+# Cleanup AskME resources with terraform
+
+This section explains how to remove AskME resources from your tenancy, using the OCI Cloud Shell and terraform.
+
+#### Warning: Cleanup setup requirement
+Please make sure that the AskME resources have been created following the [deployment instructions](#deploy-askme-resources-with-terraform), and that the setup folders/files located in [deployment step 4](#step-4-change-directory-to-the-terraform-folder) have not been modified or removed since the last deployment.
+
+More specifically, please make sure that the file `terraform.tfstate` still exists there. If not, all resources described in the [deployment instructions](#deploy-askme-resources-with-terraform) need to be removed manually.
+
+#### Warning: Cleanup retention period
+There is a retention period of 30 days before the OCI Vault can be removed, blocking the compartment deletion. Please rerun the [cleanup step 2](#step-2-run-the-cleanup-script) again after 30 days to complete the cleanup process.
+
+## Step 1: Remove Vector Tables in the AskME app (if any)
+Follow the instructions in [step 8](#step-8-use-askme) to access the streamlit page.
+In the `Knowledge Base Management` tab, go to the section `Reset Knowledge Base` and follow the page instructions to remove all vector store tables.
+
+![Remove Vector Tables from AskME](assets/askme_reset_kb.png)
+
+## Step 2: Run the cleanup script
+Follow the instructions in [deployment step 1](#step-1-open-oci-cloud-shell) and [deployment step 4](#step-4-change-directory-to-the-terraform-folder) to use the Cloud Shell from the right location.
+
+Run the script `sh askme_cleanup.sh`, and follow the instructions. Additional information will be asked by the script to choose the right compartment name.
+
+Command:
+```
+sh askme_cleanup.sh
+```
+
+![Cloud Shell: Run deployment script](assets/cloud_shell_script_cleanup.png)
+
+### Step 2.a: Compartment name
+
+Name of the AskME demo compartment to delete (default: `heatwave-genai-askme`).
+
+If you used a custom compartment name in [deployment step 6.a](#step-6a-compartment-name), please provide the same compartment name here and press Enter. Otherwise, no need to provide a value, press Enter and the default value will be used.
+
+![Cleanup script: compartment input parameter](assets/cloud_shell_script_compartment.png)
+
+
+# Troubleshooting
+
+## Compartment already exists
+
+![Troubleshooting: compartment already exists](assets/troubleshooting_compartment_exists.png)
+
+If the compartment already exists in your tenancy, please rerun the [step 6](#step-6-run-the-setup-script) and specify another compartment name in [step 6.a](#step-6a-compartment-name).
+
+## Current OCI region does not support Generative AI
+
+![Troubleshooting: region does not support GenAI](assets/troubleshooting_region_genai_support.png)
+
+Please close the current Cloud Shell session:
+
+![Exit Cloud Shell](assets/cloud_shell_exit.png)
+
+![Exit Cloud Shell Confirm](assets/cloud_shell_exit_confirm.png)
+
+Then change the OCI Console region to a [region supporting OCI Generative AI](https://docs.oracle.com/en-us/iaas/Content/generative-ai/overview.htm#regions) (e.g: US Midwest):
+
+![Change OCI Region](assets/oci_home_page_change_region.png)
+
+Then reopen the Cloud Shell ([step 1](#step-1-open-oci-cloud-shell)) and in the same folder as in [step 4](#step-4-change-directory-to-the-terraform-folder), please rerun [step 6](#step-6-run-the-setup-script).
+
+## Compartment name length must be between 4 and 20
+
+![Troubleshooting: bad compartment name format](assets/troubleshooting_compartment_name_format.png)
+
+Please rerun [step 6](#step-6-run-the-setup-script) and use a smaller/longer compartment name in [step 6.a](#step-6a-compartment-name).
+
+## Invalid IPv4 CIDR block notation
+
+![Troubleshooting: bad IPv4 CIDR format](assets/troubleshooting_cidr_format.png)
+
+Please rerun [step 6](#step-6-run-the-setup-script) and provide a valid IPv4 block range in [step 6.b](#step-6b-allowed-ipv4-cidr-block), following the CIDR block notation.
+
+More information about the CIDR block notation in the [Network Overview](https://docs.oracle.com/en-us/iaas/Content/Network/Concepts/overview.htm#:~:text=CIDR%20NOTATION) page.
+
+## The SSH public key value must follow the OpenSSH format
+
+![Troubleshooting: bad SSH public key format](assets/troubleshooting_ssh_key_format.png)
+
+Please rerun [step 6](#step-6-run-the-setup-script) and provide a valid SSH public key in [step 6.c](#step-6c-ssh-authorized-key), following the OpenSSH format.
+
+More information about SSH keys in the [Key Pair management and generation](https://docs.oracle.com/en-us/iaas/Content/Compute/Tasks/managingkeypairs.htm) page.

askme/terraform/askme_output.sh

@@ -0,0 +1,21 @@
+#!/bin/bash
+# Copyright (c) 2025 Oracle and/or its affiliates.
+# Licensed under the Universal Permissive License (UPL), Version 1.0.
+
+set -e  # Exit script if any command fails
+
+terraform init >/dev/null
+public_ip=`terraform output -json askme_instance_public_ip 2>/dev/null || echo ""`
+public_ip=`echo $public_ip | tr -d '"'`
+if [ -z "$public_ip" ]
+then
+    echo "No terraform resource detected.."
+    echo "Please run the deployment instructions to create the resources."
+else
+    echo "================================================"
+    echo "Open a terminal in your local computer, and run:"
+    echo "  ssh -L 8501:localhost:8501 opc@$public_ip"
+    echo "Then in your web browser, open the URL:"
+    echo "  127.0.0.1:8501"
+    echo "================================================"
+fi

askme/terraform/askme_setup.sh

@@ -6,10 +6,4 @@ set -e  # Exit script if any command fails
 
 terraform init
 TF_VAR_TENANCY=$OCI_TENANCY TF_VAR_REGION=$OCI_REGION terraform apply -auto-approve
-public_ip=`terraform output -raw askme_instance_public_ip`
-echo "================================================"
-echo "Open a terminal in your local computer, and run:"
-echo "  ssh -L 8501:localhost:8501 opc@$public_ip"
-echo "Then in your web browser, open the URL:"
-echo "  127.0.0.1:8501"
-echo "================================================"
+sh askme_output.sh