Merge pull request #2088 from oracle/release_gh

Releasing version 5.37.0

Author: jiaqchenO

CHANGELOG.md

@@ -1,3 +1,17 @@
+## 5.37.0 (April 09, 2024)
+
+### Added
+- Stack Monitoring: Extensibility support phase 2
+- Support for DNS-Aware Healthcheck Backend
+- Support for NLB Instantaneous Backend Failover
+- Support for DataFlow Composite Resource Principal Support
+- DataFlow Composite Resource Principal Support Optional Param Example
+### Bug Fix
+- Devops Deploy Deployment Execution Progress
+- Fix position issues with security/decryption rule during update
+- Network firewall policy fix for empty items in list network firewall policies
+- add logic to ensure object_name_filter is automatically set to null if target is multipart-uploads while creating object storage lifecycle policy
+
 ## 5.36.0 (April 03, 2024)
 
 ### Added
@@ -6,22 +20,30 @@
 - Support for Support for TLS 1.3
 - Support for Telesis IPv6 Single Stack/ Private IP Support
 - Support for Cloudguard-Logging Integration for JWCC - Customer Enablement
-
+- Support for ADB-S: Refreshable Clones (Phase 2 with Automatic Refresh)
+support for Devops Deploy Helm Uninstall/Open Cli
+- Support for Database Management MySQL Heatwave
+- Support for UMA metrics, filter plugin and read_logs_from_head enablement
+- Support for NLB Transparent Mode(Non-SNAT Use Case)
+- Support for Alarms enhancements
+- Support for create_task API for Rest task
 ### Bug Fix
-- Remove computed: true from the SecretContent.Name field. Manually add the logic to set both the name and content to null if nothing is provided.
+Remove computed: true from the SecretContent.Name field. Manually add the logic to set both the name and content to null if nothing is provided.
 - Handle empty members in DR Protection Group
 
+
 ## 5.35.0 (March 27, 2024)
 
 ### Added
 - Support for ADB-S: Refreshable Clones (Phase 2 with Automatic Refresh)
-- Support for Devops Deploy Helm Uninstall/Open Cli
+support for Devops Deploy Helm Uninstall/Open Cli
 - Support for Database Management MySQL Heatwave
 - Support for UMA metrics, filter plugin and read_logs_from_head enablement
 - Support for NLB Transparent Mode(Non-SNAT Use Case)
 - Support for Alarms enhancements
 - Support for create_task API for Rest task
 
+
 ## 5.34.0 (March 19, 2024)
 
 ### Added

examples/dataflow/main.tf

@@ -140,6 +140,7 @@ resource "oci_dataflow_invoke_run" "tf_invoke_run" {
   #freeform_tags   = var.invoke_run_freeform_tags}"
   #logs_bucket_uri = var.invoke_run_logs_bucket_uri}"
   #num_executors   = var.invoke_run_num_executors}"
+  #opc_parent_rpt_url   = var.invoke_run_opc_parent_rpt_url}"
 
   #parameters {
   #Required

examples/devops/deployment_service/helm_diff/cluster.tf

@@ -1,7 +1,7 @@
 resource "oci_containerengine_cluster" "test_cluster" {
   #Required
   compartment_id     = var.compartment_ocid
-  kubernetes_version = "v1.21.5"
+  kubernetes_version = "v1.27.2"
   name               = "cluster"
   vcn_id             = oci_core_vcn.test_vcn.id
 }

examples/devops/deployment_service/helm_diff/oke_helm_diff_deployment.tf

@@ -4,15 +4,6 @@
 variable "tenancy_ocid" {
 }
 
-variable "user_ocid" {
-}
-
-variable "fingerprint" {
-}
-
-variable "private_key_path" {
-}
-
 variable "compartment_ocid" {
 }
 
@@ -22,9 +13,6 @@ variable "region" {
 provider "oci" {
   region           = var.region
   tenancy_ocid     = var.tenancy_ocid
-  user_ocid        = var.user_ocid
-  fingerprint      = var.fingerprint
-  private_key_path = var.private_key_path
 }
 
 resource "random_string" "topicname" {
@@ -68,8 +56,8 @@ resource "oci_devops_deploy_artifact" "test_deploy_helm_artifact" {
   argument_substitution_mode = "NONE"
   deploy_artifact_source {
     deploy_artifact_source_type = "HELM_CHART"
-    chart_url = "iad.ocir.io/ax022wvgmjpq/fake"
-    deploy_artifact_version = "0.1"
+    chart_url = "oci://us-ashburn-1.ocir.io/idkxrdu9epyt/helm-test-chart"
+    deploy_artifact_version = "0.0.1"
   }
 }
 
@@ -88,13 +76,14 @@ resource "oci_devops_deploy_stage" "test_helm_deploy_stage" {
     #Required
     items {
       #Required
-      id = oci_devops_deploy_stage.test_oke_canary_traffic_shift_deploy_stage.id
+      id = oci_devops_deploy_pipeline.test_deploy_pipeline.id
     }
   }
   deploy_stage_type = "OKE_HELM_CHART_DEPLOYMENT"
   release_name = "release-name"
   purpose = "EXECUTE_HELM_UPGRADE"
   helm_chart_deploy_artifact_id = oci_devops_deploy_artifact.test_deploy_helm_artifact.id
+  oke_cluster_deploy_environment_id = oci_devops_deploy_environment.test_deploy_oke_environment.id
 }
 
 resource "oci_devops_deployment" "test_deployment" {

examples/network_firewall/network_firewall_policy/network_firewall_policy_decryption_rule.tf

@@ -42,9 +42,6 @@ variable "network_firewall_policy_decryption_rule_secret" {
 }
 
 resource "oci_network_firewall_network_firewall_policy_decryption_rule" "test_network_firewall_policy_decryption_rule_no_decryption" {
-  lifecycle {
-    ignore_changes = [position]
-  }
   #Required
   name                       = var.network_firewall_policy_decryption_rule_name_no_decrypt
   network_firewall_policy_id = oci_network_firewall_network_firewall_policy.test_network_firewall_policy.id
@@ -66,12 +63,6 @@ resource "oci_network_firewall_network_firewall_policy_decryption_rule" "test_ne
 }
 
 resource "oci_network_firewall_network_firewall_policy_decryption_rule" "test_network_firewall_policy_decryption_rule_with_decryption" {
-  lifecycle {
-    # ignore changes to position
-    ignore_changes = [
-      position
-    ]
-  }
   #Required
   name                       = var.network_firewall_policy_decryption_rule_name_decrypt
   network_firewall_policy_id = oci_network_firewall_network_firewall_policy.test_network_firewall_policy.id

examples/network_firewall/network_firewall_policy/network_firewall_policy_security_rule.tf

@@ -45,12 +45,6 @@ variable "network_firewall_policy_security_rule_security_rule_priority_order" {
 }
 
 resource "oci_network_firewall_network_firewall_policy_security_rule" "test_network_firewall_policy_security_rule_allow" {
-  lifecycle {
-    # ignore changes to position
-    ignore_changes = [
-      position
-    ]
-  }
   #Required
   name                       = var.network_firewall_policy_security_rule_allow_name
   network_firewall_policy_id = oci_network_firewall_network_firewall_policy.test_network_firewall_policy.id
@@ -73,12 +67,6 @@ resource "oci_network_firewall_network_firewall_policy_security_rule" "test_netw
 }
 
 resource "oci_network_firewall_network_firewall_policy_security_rule" "test_network_firewall_policy_security_rule_inspect" {
-  lifecycle {
-    # ignore changes to position
-    ignore_changes = [
-      position
-    ]
-  }
   #Required
   name                       = var.network_firewall_policy_security_rule_inspect_name
   network_firewall_policy_id = oci_network_firewall_network_firewall_policy.test_network_firewall_policy.id
@@ -101,12 +89,6 @@ resource "oci_network_firewall_network_firewall_policy_security_rule" "test_netw
 }
 
 resource "oci_network_firewall_network_firewall_policy_security_rule" "test_network_firewall_policy_security_rule_empty_condition" {
-  lifecycle {
-    # ignore changes to position
-    ignore_changes = [
-      position
-    ]
-  }
   #Required
   name                       = var.network_firewall_policy_security_rule_empty_condition_name
   network_firewall_policy_id = oci_network_firewall_network_firewall_policy.test_network_firewall_policy.id

examples/network_load_balancer/backend_set_unified/backend_set_unified.tf

@@ -19,17 +19,14 @@ variable "compartment_ocid" {
 variable "region" {
 }
 
-variable "instance_image_ocid" {
-  type = map(string)
-
-  default = {
-    # See https://docs.us-phoenix-1.oraclecloud.com/images/
-    # Oracle-provided image "Oracle-Linux-7.5-2018.10.16-0"
-    us-phoenix-1   = ""
-    us-ashburn-1   = ""
-    eu-frankfurt-1 = ""
-    uk-london-1    = ""
-  }
+# See https://docs.oracle.com/iaas/images/
+data "oci_core_images" "test_images" {
+  compartment_id           = var.compartment_ocid
+  operating_system         = "Oracle Linux"
+  operating_system_version = "8"
+  shape                    = var.instance_shape
+  sort_by                  = "TIMECREATED"
+  sort_order               = "DESC"
 }
 
 variable "instance_shape" {
@@ -154,7 +151,7 @@ resource "oci_core_instance" "instance1" {
 
   source_details {
     source_type = "image"
-    source_id   = var.instance_image_ocid[var.region]
+    source_id   = lookup(data.oci_core_images.test_images.images[0], "id")
   }
 }
 
@@ -212,22 +209,22 @@ resource "oci_network_load_balancer_network_load_balancers_backend_sets_unified"
   }
 
   backends {
-      ip_address               = "10.0.0.3"
-      port                     = 80
-      is_backup                = false
-      is_drain                 = false
-      is_offline               = false
-      weight                   = 1
+    ip_address               = "10.0.0.3"
+    port                     = 80
+    is_backup                = false
+    is_drain                 = false
+    is_offline               = false
+    weight                   = 1
   }
 
-   backends {
-      target_id                = oci_core_instance.instance1.id
-      port                     = 20
-      is_backup                = false
-      is_drain                 = false
-      is_offline               = false
-      weight                   = 1
-   }
+  backends {
+    ip_address                = oci_core_instance.instance1.private_ip
+    port                     = 20
+    is_backup                = false
+    is_drain                 = false
+    is_offline               = false
+    weight                   = 1
+  }
   depends_on = [oci_network_load_balancer_network_load_balancer.nlb1]
 }
 

examples/network_load_balancer/network_load_balancer_full/nlb_full.tf

@@ -199,6 +199,27 @@ resource "oci_core_security_list" "securitylist1" {
       max = 443
     }
   }
+
+  ingress_security_rules {
+    protocol = "6"
+    source   = "10.1.0.0/16"
+
+    tcp_options {
+      min = 53
+      max = 53
+    }
+  }
+
+  ingress_security_rules {
+    protocol = "17"
+    source   = "10.1.0.0/16"
+
+    udp_options {
+      min = 53
+      max = 53
+    }
+  }
+
 }
 
 /* Instances */
@@ -242,7 +263,16 @@ hostname >> /var/www/html/index.html
 echo '' >> /var/www/html/index.html
 cat /etc/os-release >> /var/www/html/index.html
 echo '</code></pre></body></html>' >> /var/www/html/index.html
+
+yum -y install bind bind-utils
+sed -i 's/127.0.0.1/any/' /etc/named.conf
+sed -i 's/::1/any/' /etc/named.conf
+sed -i 's/localhost;/any;/' /etc/named.conf
+systemctl enable named
+systemctl start named
+
 firewall-offline-cmd --add-service=http
+firewall-offline-cmd --add-service=dns
 systemctl enable  firewalld
 systemctl restart  firewalld
 
@@ -336,6 +366,7 @@ resource "oci_network_load_balancer_backend_set" "nlb-bes2" {
   name                     = "nlb-bes2"
   network_load_balancer_id = oci_network_load_balancer_network_load_balancer.nlb1.id
   policy                   = "THREE_TUPLE"
+  is_fail_open             = true
 
   health_checker {
     port                = "443"
@@ -354,16 +385,21 @@ resource "oci_network_load_balancer_backend_set" "nlb-bes3" {
   name                     = "nlb-bes3"
   network_load_balancer_id = oci_network_load_balancer_network_load_balancer.nlb1.id
   policy                   = "THREE_TUPLE"
+  is_fail_open = false
 
   health_checker {
-    port                = "443"
-    protocol            = "HTTPS"
-    url_path            = "/testPath"
-    return_code         = 200
-    response_body_regex = "^(?i)(true)$"
+    port                = "53"
+    protocol            = "DNS"
     timeout_in_millis   = 10000
     interval_in_millis  = 10000
     retries             = 3
+    dns {
+      domain_name = "oracle.com"
+      query_class = "IN"
+      query_type = "A"
+      rcodes = ["NOERROR", "SERVFAIL"]
+      transport_protocol = "UDP"
+    }
   }
   depends_on = [oci_network_load_balancer_backend_set.nlb-bes2]
 }
@@ -390,7 +426,7 @@ resource "oci_network_load_balancer_listener" "nlb-listener3" {
   network_load_balancer_id    = oci_network_load_balancer_network_load_balancer.nlb1.id
   name                        = "tcp_and_udp_listener"
   default_backend_set_name    = oci_network_load_balancer_backend_set.nlb-bes3.name
-  port                        = 100
+  port                        = 8080
   protocol                    = "TCP_AND_UDP"
   depends_on = [oci_network_load_balancer_listener.nlb-listener2]
 }
@@ -492,4 +528,4 @@ resource "oci_network_load_balancer_backend" "nlb-be-ipv6" {
   is_offline               = false
   weight                   = 1
   depends_on = [oci_network_load_balancer_listener.nlb-listener-ipv6]
-} 
+}

examples/object_storage/bucket_with_lifeCyclePolicyRule/lifeCyclePolicyRules.tf

@@ -3,6 +3,7 @@
 
 /*
  * This example shows how to add lifeCyclePolicyRules to a bucket
+ * object_name_filter attribute is ignored for target of type multipart uploads
  */
 
 variable "tenancy_ocid" {
@@ -62,12 +63,18 @@ resource "oci_objectstorage_object_lifecycle_policy" "lifecyclePolicy" {
     #Required
     action      = "ABORT"
     is_enabled  = "true"
-    name        = "test-rule-1"
+    name        = "test-rule-2"
     time_amount = "10"
     time_unit   = "DAYS"
 
     #Optional
     target = "multipart-uploads"
+
+    #Will be ignored as target is multipart-uploads
+    object_name_filter {
+      #Optional
+      inclusion_prefixes = ["this-prefix-will-be-ignored"]
+    }
   }
 }