Skip to content

Commit b0934fb

Browse files
AlexanderHodickeAlexanderHodicke
authored
Merge branch 'main' into dependabot/pip/ai/generative-ai-service/image-to-text/streamlit-1.37.0
2 parents 0247890 + d989900 commit b0934fb

File tree

9 files changed

+193
-129
lines changed

9 files changed

+193
-129
lines changed

‎cloud-infrastructure/ai-infra-gpu/ai-infrastructure/rag-langchain-vllm-mistral/files/requirements.txt

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
aiohttp==3.10.2
1+
aiohttp==3.10.11
22
aiosignal==1.3.1
33
annotated-types==0.6.0
44
anyio==4.3.0

‎cloud-infrastructure/private-cloud-and-edge/compute-cloud-at-customer/hsp/README.md

Lines changed: 0 additions & 98 deletions
Original file line numberDiff line numberDiff line change
@@ -1,99 +1 @@
1-
# C3 Hosting Service Provider - IAM Policies for Isolation
2-
3-
Reviewed: 18.11.2024
4-
5-
The Hosting Service Provider (HSP) model on Compute Cloud@Customer (C3) allows
6-
hosting for multiple end customers, each isolated in a dedicated compartment
7-
with separate VCN(s) per customer. To ensure the end customer can only
8-
create resources in just their own compartment, a set of IAM policies are
9-
required.
10-
11-
The HSP documentation suggests the following policies per end customer
12-
based on an example with two hosting customers, A & B. They assume that
13-
each end customer will have two roles for their
14-
staff: Customer Administrator and Customer End User. 
15-
16-
## Example Policies for Customer Administrator
17-
```
18-
Allows the group specified to use all C3 services in the compartment
19-
listed:
20-
21-
Allow group CustA-Admin-grp to manage all-resources in compartment
22-
path:to:CustA
23-
24-
Allow group CustB-Admin-grp to manage all-resources in compartment
25-
path:to:CustB
26-
```
27-
Note that the above policy grants permissions in the CustA and CustB
28-
compartments of the C3 but **also in the same compartment in the OCI
29-
tenancy**! To prevent permissions being granted in the OCI tenancy
30-
append a condition such as:
31-
32-
```Allow group CustA-Admin-grp to manage all-resources in compartment
33-
path:to:CustA where all {request.region != 'LHR',request.region !=
34-
'FRA'}
35-
36-
Allow group CustB-Admin-grp to manage all-resources in compartment
37-
path:to:CustB where all {request.region != 'LHR',request.region !=
38-
'FRA'}
39-
```
40-
In the example above the condition prevents resource creation in London
41-
and Frankfurt regions. Adjust the list to include all regions the
42-
tenancy is subscribed to.
43-
44-
The path to the end user compartment must be explicitly stated, using
45-
the comma format, relative to the compartment where the policy is
46-
created. 
47-
48-
## Example Policies for Customer End User
49-
```
50-
Allow group CustA-Users-grp to manage instance-family in compartment
51-
path:to:CustA
52-
Allow group CustA-Users-grp to use volume-family in compartment
53-
path:to:CustA
54-
Allow group CustA-Users-grp to use virtual-network-family in compartment
55-
path:to:CustA
56-
Allow group CustB-Users-grp to manage instance-family in compartment
57-
path:to:CustB
58-
Allow group CustB-Users-grp to use volume-family in compartment
59-
path:to:CustB
60-
Allow group CustB-Users-grp to use virtual-network-family in compartment
61-
path:to:CustB
62-
```
63-
As above append a condition to limit permissions to the C3 and prevent
64-
resource creation in OCI regions:
65-
```
66-
Allow group CustA-Users-grp to manage instance-family in compartment
67-
path:to:CustA where all {request.region != 'LHR',request.region !=
68-
'FRA'}
69-
Allow group CustA-Users-grp to use volume-family in compartment
70-
path:to:CustA where all {request.region != 'LHR',request.region !=
71-
'FRA'}
72-
Allow group CustA-Users-grp to use virtual-network-family in compartment
73-
path:to:CustA where all {request.region != 'LHR',request.region !=
74-
'FRA'}
75-
Allow group CustB-Users-grp to manage instance-family in compartment
76-
path:to:CustB where all {request.region != 'LHR',request.region !=
77-
'FRA'}
78-
Allow group CustB-Users-grp to use volume-family in compartment
79-
path:to:CustB where all {request.region != 'LHR',request.region !=
80-
'FRA'}
81-
Allow group CustB-Users-grp to use virtual-network-family in compartment
82-
path:to:CustB where all {request.region != 'LHR',request.region !=
83-
'FRA'}
84-
```
85-
## Common Policy
86-
87-
Currently any user of a C3 needs access to certain resources located at
88-
the tenancy level to use IaaS resources in the web UI.
89-
Backup policies, tag namespaces, platform images, all reside at the
90-
tenancy level and need a further policy to allow normal use of C3 IaaS
91-
services. Note that this is a subtle difference to the behaviour on OCI. 
92-
93-
An extra policy as below is required (where CommonGroup contains **all**
94-
HSP users on the C3):
95-
```
96-
allow group CommonGroup to read all-resources in tenancy where
97-
target.compartment.name='root-compartment-name'
98-
```
991

‎cloud-infrastructure/private-cloud-and-edge/compute-cloud-at-customer/hsp/iam-policies-for-isolation/README.md

Lines changed: 99 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,99 @@
1+
# C3 Hosting Service Provider - IAM Policies for Isolation
2+
3+
Reviewed: 18.11.2024
4+
5+
The Hosting Service Provider (HSP) model on Compute Cloud@Customer (C3) allows
6+
hosting for multiple end customers, each isolated in a dedicated compartment
7+
with separate VCN(s) per customer. To ensure the end customer can only
8+
create resources in just their own compartment, a set of IAM policies are
9+
required.
10+
11+
The HSP documentation suggests the following policies per end customer
12+
based on an example with two hosting customers, A & B. They assume that
13+
each end customer will have two roles for their
14+
staff: Customer Administrator and Customer End User. 
15+
16+
## Example Policies for Customer Administrator
17+
```
18+
Allows the group specified to use all C3 services in the compartment
19+
listed:
20+
21+
Allow group CustA-Admin-grp to manage all-resources in compartment
22+
path:to:CustA
23+
24+
Allow group CustB-Admin-grp to manage all-resources in compartment
25+
path:to:CustB
26+
```
27+
Note that the above policy grants permissions in the CustA and CustB
28+
compartments of the C3 but **also in the same compartment in the OCI
29+
tenancy**! To prevent permissions being granted in the OCI tenancy
30+
append a condition such as:
31+
32+
```Allow group CustA-Admin-grp to manage all-resources in compartment
33+
path:to:CustA where all {request.region != 'LHR',request.region !=
34+
'FRA'}
35+
36+
Allow group CustB-Admin-grp to manage all-resources in compartment
37+
path:to:CustB where all {request.region != 'LHR',request.region !=
38+
'FRA'}
39+
```
40+
In the example above the condition prevents resource creation in London
41+
and Frankfurt regions. Adjust the list to include all regions the
42+
tenancy is subscribed to.
43+
44+
The path to the end user compartment must be explicitly stated, using
45+
the colon delimited format, relative to the compartment where the policy is
46+
created. 
47+
48+
## Example Policies for Customer End User
49+
```
50+
Allow group CustA-Users-grp to manage instance-family in compartment
51+
path:to:CustA
52+
Allow group CustA-Users-grp to use volume-family in compartment
53+
path:to:CustA
54+
Allow group CustA-Users-grp to use virtual-network-family in compartment
55+
path:to:CustA
56+
Allow group CustB-Users-grp to manage instance-family in compartment
57+
path:to:CustB
58+
Allow group CustB-Users-grp to use volume-family in compartment
59+
path:to:CustB
60+
Allow group CustB-Users-grp to use virtual-network-family in compartment
61+
path:to:CustB
62+
```
63+
As above append a condition to limit permissions to the C3 and prevent
64+
resource creation in OCI regions:
65+
```
66+
Allow group CustA-Users-grp to manage instance-family in compartment
67+
path:to:CustA where all {request.region != 'LHR',request.region !=
68+
'FRA'}
69+
Allow group CustA-Users-grp to use volume-family in compartment
70+
path:to:CustA where all {request.region != 'LHR',request.region !=
71+
'FRA'}
72+
Allow group CustA-Users-grp to use virtual-network-family in compartment
73+
path:to:CustA where all {request.region != 'LHR',request.region !=
74+
'FRA'}
75+
Allow group CustB-Users-grp to manage instance-family in compartment
76+
path:to:CustB where all {request.region != 'LHR',request.region !=
77+
'FRA'}
78+
Allow group CustB-Users-grp to use volume-family in compartment
79+
path:to:CustB where all {request.region != 'LHR',request.region !=
80+
'FRA'}
81+
Allow group CustB-Users-grp to use virtual-network-family in compartment
82+
path:to:CustB where all {request.region != 'LHR',request.region !=
83+
'FRA'}
84+
```
85+
## Common Policy
86+
87+
Currently any user of a C3 needs access to certain resources located at
88+
the tenancy level to use IaaS resources in the web UI.
89+
Backup policies, tag namespaces, platform images, all reside at the
90+
tenancy level and need a further policy to allow normal use of C3 IaaS
91+
services. Note that this is a subtle difference to the behaviour on OCI. 
92+
93+
An extra policy as below is required (where CommonGroup contains **all**
94+
HSP users on the C3):
95+
```
96+
allow group CommonGroup to read all-resources in tenancy where
97+
target.compartment.name='root-compartment-name'
98+
```
99+

‎cloud-infrastructure/private-cloud-and-edge/compute-cloud-at-customer/hsp/restrict-access-to-oci-console/README.md

Lines changed: 34 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,34 @@
1+
# C3 HSP - Restricting Access to the OCI Console
2+
3+
In the HSP scenario where end users are not employees of the rack
4+
operator it's probably not appropriate for them to be able to access the
5+
OCI console and to, possibly, create resources in the public cloud.
6+
7+
In an OCI tenancy using Identity Domains, i.e. all new tenancies, then
8+
there is an option to use [IAM Sign-On
9+
Policies](https://docs.oracle.com/en-us/iaas/Content/Identity/signonpolicies/managingsignonpolicies.htm#understand-sign-policies)
10+
to prevent access to the OCI Console. There is a [specific Sign-On
11+
Policy that controls access to the OCI
12+
Console](https://docs.oracle.com/en-us/iaas/Content/Identity/signonpolicies/managingsignonpolicies.htm#understand-sign-policies__securitypolicy-console-signonpolicy)
13+
and adding a new Sign-On Rule will disable access. Note that all users
14+
of a C3 must be created in the **default identity domain**. The Security
15+
Policy for OCI Console sign-on policy is activated by default and
16+
preconfigured with Oracle security best practices. Once located a new
17+
Sign-On rule as below will deny access to a specifed group:
18+
![](./files/media/image1.png)
19+
20+
Once the new Sign-On rule is created then it should be added to the
21+
Policy as shown, in this case before the MFA rule: 
22+
23+
![](./files/media/image2.png)
24+
25+
Note!
26+
27+
Even with OCI console access disabled there are still "live" OCI users
28+
who will have access to create/delete/modify resources via teh API in the OCI tenancy
29+
as well as the C3 as the policies and compartments are common across
30+
both. It would be wise to further restrict the capability of these users
31+
as per
32+
<https://docs.oracle.com/en-us/iaas/Content/Identity/users/edit-users-capabilities.htm>. 
33+
34+
Ideally a policy should be implemented that restricts permissions **only** to the C3, see [this](../iam-policies-for-isolation/README.md) note.

‎cloud-infrastructure/private-cloud-and-edge/compute-cloud-at-customer/hsp/restrict-access-to-oci-console/files/media/image1.png

154 KB
Loading

‎cloud-infrastructure/private-cloud-and-edge/compute-cloud-at-customer/hsp/restrict-access-to-oci-console/files/media/image2.png

770 KB
Loading

‎data-platform/data-development/sql/README.md

Lines changed: 41 additions & 21 deletions
Original file line numberDiff line numberDiff line change
@@ -2,52 +2,68 @@
22

33
Welcome to the SQL repository of the Data Development team at Oracle. This repository is designed to provide comprehensive resources, tips, and tools to help you master SQL and leverage the latest features of Oracle23ai. Below you'll find an index to all the sections available in this repository, along with a brief introduction to what you can expect in each section.
44

5-
Reviewed: 23.10.2024
5+
Structured Query Language (SQL) is the standard programming language used for managing and manipulating relational databases. SQL allows you to perform a variety of operations such as querying data, updating records, creating and modifying schema, and controlling access to the database. It is a crucial skill for data developers and analysts, enabling efficient data retrieval and manipulation to support data-driven decision-making.
6+
7+
PL/SQL, the Oracle procedural extension of SQL, is a portable, high-performance transaction-processing language. PL/SQL offers several advantages over other programming languages: from being tightly integrated with SQL to leveraging High Performance and High Productivity. PL/SQL is a portable and scalable Procedural Language which also increase Manageability and support for Object Oriented Programming.
8+
9+
Reviewed: 18.11.2024
610

711
# Table of Contents
8-
- [What is SQL?](#what-is-sql);
9-
- [SQL Tools](#sql-tools);
10-
- [SQL Tips](#sql-tips);
11-
- [SQL Oracle23ai](#sql-oracle23ai);
12-
- [SQL DO It Yourself](#sql-do-it-yourself)
12+
- [Team Publications](#team-publications);
1313
- [Useful Links](#useful-links);
1414

15+
[What is SQL? ]: #
1516

16-
# What is SQL?
17+
[ SQL Tools ]: #
18+
[ SQL Tips ]: #
19+
[ SQL Oracle23ai ]: #
20+
[ SQL DO It Yourself ]: #
1721

18-
Structured Query Language (SQL) is the standard programming language used for managing and manipulating relational databases. SQL allows you to perform a variety of operations such as querying data, updating records, creating and modifying schema, and controlling access to the database. It is a crucial skill for data developers and analysts, enabling efficient data retrieval and manipulation to support data-driven decision-making.
22+
23+
# Team Publications
24+
- [23ai New Features Series - Part 1](https://www.linkedin.com/posts/sonnemeyer_23aispecialists-23ainewsabrpart1-developer-activity-7196221427056889856-3HF2?utm_source=share&utm_medium=member_desktop) - 23ai Database New Features on Linkedin Post - I
25+
- [23ai New Features Series - Part 2](https://www.linkedin.com/posts/cristina-varas-menadas-591825119_oracle-oracle23ai-sql-activity-7198945654272864256-wduQ/?utm_source=share&utm_medium=member_ios) - 23ai Database New Features on Linkedin Post - II
26+
- [23ai New Features Series - Part 3](https://www.linkedin.com/posts/sonnemeyer_23aispecialists-23ainewsabrpart3-developer-activity-7201958687005982721-Oo3B?utm_source=share&utm_medium=member_desktop) - 23ai Database New Features on Linkedin Post - III
27+
- [23ai New Features Series - Part 4](https://www.linkedin.com/posts/sonnemeyer_23aispecialists-23ainewsabrpart4-teammates-activity-7204946957843267584-x664?utm_source=share&utm_medium=member_desktop) - 23ai Database New Features on Linkedin Post - IV
28+
- [23ai New Features Series - Part 5](https://www.linkedin.com/posts/ppaolucci_cristinavarasmenadas-sonjameyer-activity-7207374755878887425-a--C?utm_source=share&utm_medium=member_desktop) - 23ai Database New Features on Linkedin Post - V
1929

2030

21-
# SQL Tools
31+
## SQL Tools
2232

23-
In the [SQL Tools](SQL_Tools/README.md) section, you'll find a collection of essential tools and utilities that can help streamline your SQL development process. This includes:
33+
[SQL Tools](SQL_Tools/README.md): In this section, you'll find a collection of essential tools and utilities that can help streamline your SQL development process. This includes:
2434
- SQL client software recommendations
2535
- Database management tools
2636
- Productivity-enhancing plugins and extensions
2737

2838

29-
# SQL Tips
39+
[# SQL Tips]: #
40+
41+
[ The SQL Tips(SQL_Tips/README.md) section is dedicated to providing ]: #
42+
43+
[practical advice and best practices for writing efficient and effective SQL]: #
44+
45+
<!-- [ queries. Topics covered include]:
46+
47+
[ - Query optimization techniques]: #
48+
[ - Common pitfalls and how to avoid them ]: #
49+
[ - Advanced SQL functions and their use cases]: -->
3050

31-
The [SQL Tips](SQL_Tips/README.md) section is dedicated to providing practical advice and best practices for writing efficient and effective SQL queries. Topics covered include:
32-
- Query optimization techniques
33-
- Common pitfalls and how to avoid them
34-
- Advanced SQL functions and their use cases
3551

3652

37-
# SQL Oracle23ai
53+
[# SQL Oracle23ai ]: #
3854

39-
Explore the latest advancements with Oracle's cutting-edge AI capabilities in the [SQL Oracle23ai](SQL_Oracle23ai/README.md) section. Here, you will find:
55+
<!-- Explore the latest advancements with Oracle's cutting-edge AI capabilities in the [SQL Oracle23ai](SQL_Oracle23ai/README.md) section. Here, you will find:
4056
- New features and enhancements in Oracle23ai
4157
- Tutorials on integrating AI with your SQL queries
42-
- Case studies and real-world applications of Oracle23ai
58+
- Case studies and real-world applications of Oracle23ai -->
4359

4460

45-
# SQL Do It Yourself
61+
<!-- # SQL Do It Yourself
4662
4763
The [SQL Do It Yourself](SQL_Do_It_Yourself/README.md) section encourages hands-on learning by providing a variety of exercises and projects. This includes:
4864
- Practice problems with solutions
4965
- Step-by-step project guides
50-
- Interactive SQL challenges to test your skills
66+
- Interactive SQL challenges to test your skills -->
5167

5268

5369
# Useful Links
@@ -58,10 +74,14 @@ To support your development journey, here are some valuable resources related to
5874
- [Oracle Live SQL](https://livesql.oracle.com/)
5975
- [Oracle Learning Library](https://www.oracle.com/learning-library/)
6076
- [Oracle Database 23ai: Application Development](https://www.oracle.com/database/technologies/application-development.html)
77+
- [@ThatJeffSmith](https://www.thatjeffsmith.com/)
78+
- [SQL Blog by Chris Saxon](https://blogs.oracle.com/sql)
79+
- [The Magic of SQL by Chris Saxon - YouTube Channel](https://www.youtube.com/c/TheMagicofSQL)
80+
- [SQL and Database explained! By Connor McDonald - YouTube Channel](https://www.youtube.com/@DatabaseDude)
6181

6282
---
6383

64-
We hope you find these resources helpful in your SQL journey. If you have any questions or suggestions, please feel free to contribute or reach out to the team. Happy querying!
84+
<!-- We hope you find these resources helpful in your SQL journey. If you have any questions or suggestions, please feel free to contribute or reach out to the team. Happy querying! -->
6585

6686

6787
# License

‎data-platform/data-development/sql/sql-oracle23ai/README.md

Lines changed: 9 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -90,7 +90,7 @@ To look for examples and deep dive into Oracle 23ai New Features in Database spe
9090
This asset contains a brief set of Oracle Database 23ai new features examples which are then included in a specific asset file for consultation.
9191
The list of New Features will be periodically updated and adjusted.
9292

93-
--## Features
93+
<!-- --## Features
9494
--### Aggregation over INTERVAL Data Types
9595
-- - **Description**: Pass INTERVAL data types to SUM and AVG aggregate functions.
9696
-- - **Example**: ```sqlSELECT SUM(interval_column) FROM table_name;`
@@ -138,16 +138,20 @@ The list of New Features will be periodically updated and adjusted.
138138
-- - **Example**: `INSERT INTO table_name VALUES (1, 'value');`
139139
-- ### Ubiquitous Search With DBMS_SEARCH Packages
140140
-- - **Description**: Index multiple schema objects for full-text search using DBMS_SEARCH.
141-
-- - **Example**: `EXEC DBMS_SEARCH.CREATE_INDEX('index_name', 'table_name');`
141+
-- - **Example**: `EXEC DBMS_SEARCH.CREATE_INDEX('index_name', 'table_name');-->
142+
143+
144+
142145

143146

144147

145148
# Team Publications
149+
146150
- [23ai New Features Series - Part 1](https://www.linkedin.com/posts/sonnemeyer_23aispecialists-23ainewsabrpart1-developer-activity-7196221427056889856-3HF2?utm_source=share&utm_medium=member_desktop)
147151
- [23ai New Features Series - Part 2](https://www.linkedin.com/posts/cristina-varas-menadas-591825119_oracle-oracle23ai-sql-activity-7198945654272864256-wduQ/?utm_source=share&utm_medium=member_ios)
148152
- [23ai New Features Series - Part 3](https://www.linkedin.com/posts/sonnemeyer_23aispecialists-23ainewsabrpart3-developer-activity-7201958687005982721-Oo3B?utm_source=share&utm_medium=member_desktop)
149153
- [23ai New Features Series - Part 4](https://www.linkedin.com/posts/sonnemeyer_23aispecialists-23ainewsabrpart4-teammates-activity-7204946957843267584-x664?utm_source=share&utm_medium=member_desktop)
150-
- [23ai New Features Series - Part 5](https://www.linkedin.com/posts/ppaolucci_cristinavarasmenadas-sonjameyer-activity-7207374755878887425-a--C?utm_source=share&utm_medium=member_desktop)
154+
- [23ai New Features Series - Part 5](https://www.linkedin.com/posts/ppaolucci_cristinavarasmenadas-sonjameyer-activity-7207374755878887425-a--C?utm_source=share&utm_medium=member_desktop) -->
151155

152156

153157

@@ -156,10 +160,10 @@ The list of New Features will be periodically updated and adjusted.
156160
- [Oracle Database 23ai New Features](https://apex.oracle.com/database-features/)
157161

158162

159-
# Release Information
163+
<!-- # Release Information
160164
- **Version**: 23ai
161165
- **Applicable Offerings**: All Oracle Database offerings .................
162-
For more detailed information, please visit the [Oracle Database Features](https://apex.oracle.com/database-features/) page.
166+
For more detailed information, please visit the [Oracle Database Features](https://apex.oracle.com/database-features/) page. -->
163167

164168
# License
165169

0 commit comments

Comments
 (0)