Development (#318)

skommala · abhijit-paranjpe · telake · web-flow · commit ac1bd3c42973 · 2025-05-02T14:40:21.000-07:00
Merge from development into main

---------

Co-authored-by: Abhijit Paranjpe &lt;109541284+abhijit-paranjpe@users.noreply.github.com&gt;
Co-authored-by: telake &lt;tim.lake@oracle.com&gt;
Co-authored-by: Roberto Sanchez Herrera &lt;roberto.s.sanchez@oracle.com&gt;
Co-authored-by: P M Darshan &lt;p.m.darshan@oracle.com&gt;
Co-authored-by: C R Aniruddh Srivatsa &lt;c.r.aniruddh.srivatsa@oracle.com&gt;
Co-authored-by: Mahuwa Barman &lt;106961326+Mahuwa-Barman@users.noreply.github.com&gt;
Co-authored-by: Chintamani Bhat &lt;chintamani.bhat@oracle.com&gt;
Co-authored-by: Sarada Kommalapati &lt;sarada.kommlapati@oracle.com&gt;
Co-authored-by: Adrian Padilla Duarte &lt;adrian.padilla@oracle.com&gt;
Co-authored-by: Mahuwa-Barman &lt;mahuwa.barman@oracle.com&gt;
Co-authored-by: srjanaki &lt;srinath.janakiraman@oracle.com&gt;
Co-authored-by: ManviGupta-prog &lt;Manvi.g.gupta@oracle.com&gt;
Co-authored-by: Ananya Tripathi &lt;ananya.tripathi@oracle.com&gt;
diff --git a/terraform/images/mp_image_ee_byol.tfvars b/terraform/images/mp_image_ee_byol.tfvars
@@ -1,12 +1,13 @@
 # Copyright (c) 2023,2024, Oracle and/or its affiliates.
 # Licensed under the Universal Permissive License v1.0 as shown at https://oss.oracle.com/licenses/upl.
 
-tf_script_version        = "25.1.3-250310205030"
+tf_script_version        = "25.2.1-250501174252"
 use_marketplace_image    = true
 listing_id               = "ocid1.appcataloglisting.oc1..aaaaaaaawd5ti5ldjzdppppi675onvo3mvjcwt64jjey7rib3beau2ngkl2q"
-listing_resource_version = "25.1.3-ol8.8-23.12.13-250310-1"
-instance_image_id        = "ocid1.image.oc1..aaaaaaaa2vaqsz6evogb5jr2dhpdlbyqcnyydpcdljpi5plemo2roru6ld3a"
+listing_resource_version = "25.2.1-ol8.8-23.12.13-250501-1"
+instance_image_id        = "ocid1.image.oc1..aaaaaaaajrz5nejct4fotwr32os5vstdxmqei6kmdg3pdbawmb5z45do7z3a"
 
 ucm_listing_id               = "ocid1.appcataloglisting.oc1..aaaaaaaa653zc2e4fsem5hhwinmfgnv3xp4dmbq6c6gvf45okxf6xz3smhiq"
-ucm_listing_resource_version = "25.1.3-ol8.8-23.12.13-250310-1"
-ucm_instance_image_id        = "ocid1.image.oc1..aaaaaaaat4dyc73wuxeccdsegmjgdbt7v3xxtdcwo6hgbvdep5xe2mybvmva"
+ucm_listing_resource_version = "25.2.1-ol8.8-23.12.13-250501-1"
+ucm_instance_image_id        = "ocid1.image.oc1..aaaaaaaaoz7wfnqx73jwv7wi7ygvl6u7ibqkx5fkxtuojslub2zg3rt243ya"
+
diff --git a/terraform/images/mp_image_ee_ucm.tfvars b/terraform/images/mp_image_ee_ucm.tfvars
@@ -1,8 +1,9 @@
 # Copyright (c) 2023,2024, Oracle and/or its affiliates.
 # Licensed under the Universal Permissive License v1.0 as shown at https://oss.oracle.com/licenses/upl.
 
-tf_script_version        = "25.1.3-250310205030"
+tf_script_version        = "25.2.1-250501174252"
 use_marketplace_image    = true
 listing_id               = "ocid1.appcataloglisting.oc1..aaaaaaaa653zc2e4fsem5hhwinmfgnv3xp4dmbq6c6gvf45okxf6xz3smhiq"
-listing_resource_version = "25.1.3-ol8.8-23.12.13-250310-1"
-instance_image_id        = "ocid1.image.oc1..aaaaaaaat4dyc73wuxeccdsegmjgdbt7v3xxtdcwo6hgbvdep5xe2mybvmva"
+listing_resource_version = "25.2.1-ol8.8-23.12.13-250501-1"
+instance_image_id        = "ocid1.image.oc1..aaaaaaaaoz7wfnqx73jwv7wi7ygvl6u7ibqkx5fkxtuojslub2zg3rt243ya"
+
diff --git a/terraform/images/mp_image_se_byol.tfvars b/terraform/images/mp_image_se_byol.tfvars
@@ -1,8 +1,8 @@
 # Copyright (c) 2023,2024, Oracle and/or its affiliates.
 # Licensed under the Universal Permissive License v1.0 as shown at https://oss.oracle.com/licenses/upl.
 
-tf_script_version        = "25.1.3-250310205030"
+tf_script_version        = "25.2.1-250501174252"
 use_marketplace_image    = true
 listing_id               = "ocid1.appcataloglisting.oc1..aaaaaaaaalcwal6mfwjbezzqyj3waoxrvigml4n3lcn3hfday3ozetjqn25a"
-listing_resource_version = "25.1.3-ol8.8-23.12.13-250310-1"
-instance_image_id        = "ocid1.image.oc1..aaaaaaaa3qzkazz7it2emgju5btaccnkro6wbz6mmbw7np3im6nky7srqsva"
+listing_resource_version = "25.2.1-ol8.8-23.12.13-250501-1"
+instance_image_id        = "ocid1.image.oc1..aaaaaaaanbgbtvim2nr2qzg2w5ojoizpbynwjxlxkwdoxlr2wh2254t5sklq"
diff --git a/terraform/images/mp_image_suite_byol.tfvars b/terraform/images/mp_image_suite_byol.tfvars
@@ -1,12 +1,12 @@
 # Copyright (c) 2023,2024, Oracle and/or its affiliates.
 # Licensed under the Universal Permissive License v1.0 as shown at https://oss.oracle.com/licenses/upl.
 
-tf_script_version        = "25.1.3-250310205030"
+tf_script_version        = "25.2.1-250501174252"
 use_marketplace_image    = true
 listing_id               = "ocid1.appcataloglisting.oc1..aaaaaaaajl5w3d76x5vdc4n7oqjpsxh4jtwivclvvp6gj4em3kufju6sftga"
-listing_resource_version = "25.1.3-ol8.8-23.12.13-250310-1"
-instance_image_id        = "ocid1.image.oc1..aaaaaaaa3qzkazz7it2emgju5btaccnkro6wbz6mmbw7np3im6nky7srqsva"
+listing_resource_version = "25.2.1-ol8.8-23.12.13-250501-1"
+instance_image_id        = "ocid1.image.oc1..aaaaaaaamoezz5gwft4hyerr2er6y3cy2gpqyucuyvwuwqixwmdyqonegfwa"
 
 ucm_listing_id               = "ocid1.appcataloglisting.oc1..aaaaaaaaq2vkow7zwkxg6ky4zxsnckdlfgtgmg7i4kkyev3y6zyo72mpkgza"
-ucm_listing_resource_version = "25.1.3-ol8.8-23.12.13-250310-1"
-ucm_instance_image_id        = "ocid1.image.oc1..aaaaaaaab346dek7j74rmxvm2hx2cquyncuvrxzwxyyswiqek4mwg52o4iia"
+ucm_listing_resource_version = "25.2.1-ol8.8-23.12.13-250501-1"
+ucm_instance_image_id        = "ocid1.image.oc1..aaaaaaaaphngemq3h2c3tt4wym5oofln7vhyp7cwk2jko7bsqhrxoezdccma"
diff --git a/terraform/images/mp_image_suite_ucm.tfvars b/terraform/images/mp_image_suite_ucm.tfvars
@@ -1,9 +1,8 @@
 # Copyright (c) 2023,2024, Oracle and/or its affiliates.
 # Licensed under the Universal Permissive License v1.0 as shown at https://oss.oracle.com/licenses/upl.
 
-tf_script_version        = "25.1.3-250310205030"
+tf_script_version        = "25.2.1-250501174252"
 use_marketplace_image    = true
 listing_id               = "ocid1.appcataloglisting.oc1..aaaaaaaaq2vkow7zwkxg6ky4zxsnckdlfgtgmg7i4kkyev3y6zyo72mpkgza"
-listing_resource_version = "25.1.3-ol8.8-23.12.13-250310-1"
-instance_image_id        = "ocid1.image.oc1..aaaaaaaab346dek7j74rmxvm2hx2cquyncuvrxzwxyyswiqek4mwg52o4iia"
-
+listing_resource_version = "25.2.1-ol8.8-23.12.13-250501-1"
+instance_image_id        = "ocid1.image.oc1..aaaaaaaaphngemq3h2c3tt4wym5oofln7vhyp7cwk2jko7bsqhrxoezdccma"
diff --git a/terraform/locals.tf b/terraform/locals.tf
@@ -190,6 +190,14 @@ locals {
   is_rms_private_endpoint_required  = var.is_rms_private_endpoint_required && var.wls_existing_vcn_id != "" && var.wls_subnet_id != "" && !local.assign_weblogic_public_ip ? true : false
   add_new_rms_private_endpoint      = local.is_rms_private_endpoint_required && var.add_rms_private_endpoint == "Create New Resource Manager Endpoint" ? true : false
   add_existing_rms_private_endpoint = local.is_rms_private_endpoint_required && var.add_rms_private_endpoint == "Use Existing Resource Manager Endpoint" ? true : false
+  
+  # OS Management Hub
+  enable_osmh                     = var.enable_osmh
+  select_existing_profile         = var.select_existing_profile
+  create_profile                  = (local.enable_osmh && !local.select_existing_profile) ? true : false
+  profile_ocid                    = local.select_existing_profile ? var.profile_ocid : ""
+  profile_compartment_id          = var.profile_compartment_id
+  profile_name                    = var.profile_name
 
   # Secured Production Mode
   preserve_boot_properties          = var.configure_secure_mode ? var.preserve_boot_properties : true
diff --git a/terraform/main.tf b/terraform/main.tf
@@ -238,6 +238,7 @@ module "policies" {
   use_apm_service                  = local.use_apm_service
   apm_domain_compartment_id        = local.apm_domain_compartment_id
   use_autoscaling                  = var.use_autoscaling
+  enable_osmh                      = var.enable_osmh
   ocir_auth_token_id               = var.ocir_auth_token_id
   add_fss                          = var.add_fss
   add_load_balancer                = local.add_load_balancer
@@ -588,6 +589,13 @@ module "observability-autoscaling" {
   }
 }
 
+module "observability-osmh"{
+  source              = "./modules/observability/osmh"
+  count               = local.create_profile ? 1 : 0
+  tenancy_id          = var.tenancy_ocid
+  display_name        = var.profile_name
+  compartment_id      = local.profile_compartment_id
+}
 
 module "compute" {
   source                 = "./modules/compute/wls_compute"
@@ -606,8 +614,7 @@ module "compute" {
   wls_subnet_id          = var.wls_subnet_id
   region                 = var.region
   ssh_public_key         = var.ssh_public_key
-  compute_nsg_ids        = local.compute_nsg_ids
-
+  compute_nsg_ids        = local.compute_nsg_ids  
   tenancy_id                = var.tenancy_ocid
   tf_script_version         = var.tf_script_version
   use_regional_subnet       = local.use_regional_subnet
@@ -632,6 +639,7 @@ module "compute" {
   wls_server_startup_args   = var.wls_server_startup_args
   wls_existing_vcn_id       = var.wls_existing_vcn_id
   create_policies           = var.create_policies
+  enable_osmh               = var.enable_osmh
   place_all_compute_in_same_ad = var.place_all_compute_in_same_ad
 
   # Secured Production Mode
@@ -704,6 +712,8 @@ module "compute" {
   log_group_id    = element(concat(module.observability-common[*].log_group_id, [""]), 0)
   use_oci_logging = var.use_oci_logging
 
+  profile_ocid = var.profile_ocid == "" ? (element(concat(module.observability-osmh[*].profile_ocid, [""]), 0)) : var.profile_ocid
+
   use_apm_service           = local.use_apm_service
   apm_domain_compartment_id = local.apm_domain_compartment_id
   apm_domain_id             = var.apm_domain_id
diff --git a/terraform/modules/compute/instance/instance.tf b/terraform/modules/compute/instance/instance.tf
@@ -59,6 +59,6 @@ resource "oci_core_instance" "these" {
   }
 
   lifecycle {
-    ignore_changes = [metadata, shape, shape_config, source_details, defined_tags, freeform_tags]
+    ignore_changes = [metadata, shape, shape_config, source_details, defined_tags, freeform_tags, agent_config]
   }
 }
diff --git a/terraform/modules/compute/wls_compute/observability_variables.tf b/terraform/modules/compute/wls_compute/observability_variables.tf
@@ -88,3 +88,11 @@ variable "scaleout_notification_topic_id" {
   type        = string
   description = "The OCID of the notification topic for scale out operation"
 }
+variable "profile_ocid"{
+  type        = string
+  description = "The OCID of the created profile"
+}
+variable "enable_osmh"{
+  type        = bool
+  description = "Indicating that OSMH is enabled"
+}
diff --git a/terraform/modules/compute/wls_compute/variables.tf b/terraform/modules/compute/wls_compute/variables.tf
@@ -351,4 +351,5 @@ variable "certificate_id" {
   type        = string
   description = "The OCID of the SSL certificate to configure a secure WebLogic domain"
   default     = ""
-}
+}
+
diff --git a/terraform/modules/compute/wls_compute/wls_compute.tf b/terraform/modules/compute/wls_compute/wls_compute.tf
@@ -176,6 +176,9 @@ module "wls-instances" {
 
       log_group_id    = var.log_group_id
       use_oci_logging = var.use_oci_logging
+      
+      enable_osmh      = var.enable_osmh
+      profile_ocid     = var.profile_ocid
 
       mount_ip    = var.mount_ip
       mount_path  = var.mount_path
@@ -213,4 +216,3 @@ module "wls-instances" {
     }
   }
 }
-
diff --git a/terraform/modules/observability/osmh/create_profile.tf b/terraform/modules/observability/osmh/create_profile.tf
@@ -0,0 +1,23 @@
+resource "oci_os_management_hub_software_source_change_availability_management" "software_source_change_availability_management" {
+   for_each = toset(local.filtered_sources)  
+
+  software_source_availabilities {
+    software_source_id  = each.value  
+    availability_at_oci = var.software_availabilty
+  }
+}
+
+resource "oci_os_management_hub_profile" "create_profile" {
+    compartment_id      = var.compartment_id
+    display_name        = var.display_name
+    profile_type        = var.profile_type
+    software_source_ids = local.filtered_sources
+    arch_type           = var.arch_type
+    is_default_profile  = var.is_default_profile
+    os_family           = var.os_family
+    registration_type   = var.registration_type
+    vendor_name         = var.vendor_name
+    depends_on = [
+    oci_os_management_hub_software_source_change_availability_management.software_source_change_availability_management
+  ]
+}
diff --git a/terraform/modules/observability/osmh/datasources.tf b/terraform/modules/observability/osmh/datasources.tf
@@ -0,0 +1,6 @@
+data "oci_identity_tenancy" "tenancy_info" {
+    tenancy_id = var.tenancy_id
+}
+data "oci_os_management_hub_software_sources" "all_tenancy_osmh_software_sources" {
+  compartment_id = data.oci_identity_tenancy.tenancy_info.id
+}
diff --git a/terraform/modules/observability/osmh/locals.tf b/terraform/modules/observability/osmh/locals.tf
@@ -0,0 +1,18 @@
+locals {
+  all_tenancy_osmh_software_sources = data.oci_os_management_hub_software_sources.all_tenancy_osmh_software_sources.software_source_collection[0].items
+  software_source_names = [
+    "ol8_addons-x86_64",
+    "ol8_appstream-x86_64",
+    "ol8_baseos_latest-x86_64",
+    "ol8_ksplice-x86_64",
+    "ol8_mysql80_connectors_community-x86_64",
+    "ol8_mysql80_tools_community-x86_64",
+    "ol8_uekr7-x86_64",
+    "ol8_mysql80_community-x86_64"
+  ]
+
+  filtered_sources = [
+    for src in local.all_tenancy_osmh_software_sources : src.id
+    if contains(local.software_source_names, src.display_name)
+  ]
+}
diff --git a/terraform/modules/observability/osmh/outputs.tf b/terraform/modules/observability/osmh/outputs.tf
@@ -0,0 +1,4 @@
+output "profile_ocid" {
+  value = oci_os_management_hub_profile.create_profile.id
+}
+
diff --git a/terraform/modules/observability/osmh/variables.tf b/terraform/modules/observability/osmh/variables.tf
@@ -0,0 +1,67 @@
+variable "display_name" {
+  description = "The display name for the profile"
+  type        = string
+}
+
+variable "profile_type" {
+  description = "The type of the profile (e.g., SOFTWARESOURCE)"
+  type        = string
+  default     = "SOFTWARESOURCE"
+}
+
+variable "arch_type" {
+  description = "The architecture type of the profile"
+  type        = string
+  default     = "X86_64"
+}
+
+variable "description" {
+  description = "A description for the profile"
+  type        = string
+  default     = ""
+}
+
+variable "os_family" {
+  description = "The operating system family for the profile (e.g., LINUX, WINDOWS)"
+  type        = string
+  default     = "ORACLE_LINUX_8"
+
+}
+
+variable "registration_type" {
+  description = "The registration type for the profile"
+  type        = string
+  default     = "OCI_LINUX"
+}
+
+variable "software_source_ids" {
+  description = "List of software source IDs associated with the profile"
+  type        = list(string)
+  default     = []
+}
+
+variable "vendor_name" {
+  description = "The vendor name for the profile"
+  type        = string
+  default     = "ORACLE"
+}
+
+variable "compartment_id" {
+  description = "The OCID of the compartment where the profile will be created"
+  type        = string
+}
+
+variable "is_default_profile" {
+  description = "Indicates whether this profile is the default profile"
+  type        = bool
+  default     = false
+}
+variable "tenancy_id" {
+  description = "The OCID of the tenancy"
+  type        = string
+}
+variable "software_availabilty" {
+  description = "Availability at OCI for the software sources"
+  type        = string
+  default     = "SELECTED"
+}
diff --git a/terraform/modules/policies/groups.tf b/terraform/modules/policies/groups.tf
@@ -3,7 +3,7 @@
 
 resource "oci_identity_dynamic_group" "wlsc_instance_principal_group" {
   compartment_id = var.tenancy_id
-  description    = "Dynamic group to allow access to resources with specific tags and allow instances to call osms services"
+  description    = "Dynamic group to allow access to resources with specific tags and allow instances to call oracle cloud agent services"
   matching_rule  = "ALL { ${local.compartment_rule}, ${var.dynamic_group_rule} }"
   name           = "${local.label_prefix}-wlsc-principal-group"
 
diff --git a/terraform/modules/policies/locals.tf b/terraform/modules/policies/locals.tf
@@ -17,9 +17,7 @@ locals {
   core_policy_statement1 = "Allow dynamic-group ${oci_identity_dynamic_group.wlsc_instance_principal_group.name} to manage instances in compartment id ${var.compartment_id}"
   core_policy_statement2 = "Allow dynamic-group ${oci_identity_dynamic_group.wlsc_instance_principal_group.name} to manage volumes in compartment id ${var.compartment_id}"
   core_policy_statement3 = "Allow dynamic-group ${oci_identity_dynamic_group.wlsc_instance_principal_group.name} to manage volume-attachments in compartment id ${var.compartment_id}"
-  # These policy statements are required to register Compute instances with the OS Management service
-  osms_policy_statement1 = "Allow dynamic-group ${oci_identity_dynamic_group.wlsc_instance_principal_group.name} to read instance-family in compartment id ${var.compartment_id}"
-  osms_policy_statement2 = "Allow dynamic-group ${oci_identity_dynamic_group.wlsc_instance_principal_group.name} to use osms-managed-instances in compartment id ${var.compartment_id}"
+  core_policy_statement4 = "Allow dynamic-group ${oci_identity_dynamic_group.wlsc_instance_principal_group.name} to read instance-family in compartment id ${var.compartment_id}"
   # This policy with "inspect virtual-network-family" verb is needed to read VCN information like CIDR, etc, for VCN validation
   network_policy_statement1 = var.network_compartment_id != "" ? "Allow dynamic-group ${oci_identity_dynamic_group.wlsc_instance_principal_group.name} to inspect virtual-network-family in compartment id ${var.network_compartment_id}" : ""
   secrets_policy_statement1 = "Allow dynamic-group ${oci_identity_dynamic_group.wlsc_instance_principal_group.name} to read secret-bundles in tenancy where target.secret.id = '${var.wls_admin_password_id}'"
@@ -40,7 +38,7 @@ locals {
   apm_domain_policy_statement = var.use_apm_service ? "Allow dynamic-group ${oci_identity_dynamic_group.wlsc_instance_principal_group.name} to use apm-domains in compartment id ${var.apm_domain_compartment_id}" : ""
   # This policy with "use load_balancer" verb is needed to create load balancer for new vcn
   lb_policy_statement = var.add_load_balancer ? length(oci_identity_dynamic_group.wlsc_instance_principal_group) > 0 ? "Allow dynamic-group ${oci_identity_dynamic_group.wlsc_instance_principal_group.name} to use load-balancers in compartment id ${var.network_compartment_id}" : "" : ""
-  service_statements = compact([local.core_policy_statement1, local.core_policy_statement2, local.core_policy_statement3, local.osms_policy_statement1, local.osms_policy_statement2, local.network_policy_statement1, local.secrets_policy_statement1, local.secrets_policy_statement2,
+  service_statements = compact([local.core_policy_statement1, local.core_policy_statement2, local.core_policy_statement3, local.core_policy_statement4, local.network_policy_statement1, local.secrets_policy_statement1, local.secrets_policy_statement2,
     local.atp_policy_statement1, local.atp_policy_statement2, local.atp_policy_statement3, local.oci_db_policy_statement1, local.oci_db_policy_statement2, local.oci_db_policy_statement3, local.logging_policy,
     local.apm_domain_policy_statement, local.lb_policy_statement
   ])
@@ -54,6 +52,11 @@ locals {
   plugin_policy_statement2 = "Allow dynamic-group ${oci_identity_dynamic_group.wlsc_instance_principal_group.name} to use wlms-managed-instance-plugins in tenancy"
   plugin_policy_statement = compact([local.plugin_policy_statement1, local.plugin_policy_statement2])
 
+  # Policies required for enabling the OSMH plugin
+  osmh_policy_statement1 = var.enable_osmh? "Allow dynamic-group ${oci_identity_dynamic_group.wlsc_instance_principal_group.name} to manage osmh-family in tenancy" : ""
+  osmh_policy_statement2 = var.enable_osmh? "Allow dynamic-group ${oci_identity_dynamic_group.wlsc_instance_principal_group.name} to {OSMH_MANAGED_INSTANCE_ACCESS} in tenancy where request.principal.id = target.managed-instance.id" : ""
+  osmh_policy_statement  = compact([local.osmh_policy_statement1, local.osmh_policy_statement2])
+
   #Policies for WLS instance principal dynamic group
   autoscaling_statement1 = var.use_autoscaling ? "Allow dynamic-group ${oci_identity_dynamic_group.wlsc_instance_principal_group.name} to use repos in tenancy" : ""
   autoscaling_statement2 = var.use_autoscaling ? "Allow dynamic-group ${oci_identity_dynamic_group.wlsc_instance_principal_group.name} to manage functions-family in compartment id ${var.compartment_id}" : ""
@@ -129,7 +132,7 @@ locals {
   secure_mode_statement  = compact([local.secure_mode_statement1, local.secure_mode_statement2, local.secure_mode_statement3, local.secure_mode_statement4, local.secure_mode_statement5, local.secure_mode_secrets_policy_statement1, local.secure_mode_secrets_policy_statement2])
 
   #TODO: When other categories with more statements are added here, concat them with service_statements
-  policy_statements = concat(local.service_statements, local.cloning_policy_statement, local.plugin_policy_statement, local.secure_mode_statement)
+  policy_statements = concat(local.service_statements, local.cloning_policy_statement, local.plugin_policy_statement, local.secure_mode_statement, local.osmh_policy_statement)
 
   reserved_ips_info = var.compartment_id == "" ? [{ id = var.resource_name_prefix }] : []
 
diff --git a/terraform/modules/policies/variables.tf b/terraform/modules/policies/variables.tf
@@ -223,3 +223,8 @@ variable "wls_secondary_admin_password_id" {
   type        = string
   description = "The OCID of the vault secret with the password for secondary WebLogic administration user"
 }
+variable "enable_osmh" {
+  type = bool
+  description = "Indicating that OSMH is enabled"
+}
+  
diff --git a/terraform/schema.yaml b/terraform/schema.yaml
diff --git a/terraform/schema_14110.yaml b/terraform/schema_14110.yaml
diff --git a/terraform/schema_14120.yaml b/terraform/schema_14120.yaml
diff --git a/terraform/variables.tf b/terraform/variables.tf

Original file line number	Diff line number	Diff line change
`@@ -59,6 +59,6 @@ resource "oci_core_instance" "these" {`
`59`	`59`	`}`
`60`	`60`
`61`	`61`	`lifecycle {`
`62`		`- ignore_changes = [metadata, shape, shape_config, source_details, defined_tags, freeform_tags]`
	`62`	`+ ignore_changes = [metadata, shape, shape_config, source_details, defined_tags, freeform_tags, agent_config]`
`63`	`63`	`}`
`64`	`64`	`}`