mgmt/security/vault/oracle-cloud-config.md

72 lines
1.7 KiB
Markdown

# Oracle Cloud Configuration
## 🔑 配置信息
### 存储在Consul KV中
```bash
# 查看所有Oracle Cloud配置
consul kv get -recurse config/oracle-cloud/
# 获取具体配置
consul kv get config/oracle-cloud/user
consul kv get config/oracle-cloud/fingerprint
consul kv get config/oracle-cloud/tenancy
consul kv get config/oracle-cloud/region
consul kv get config/oracle-cloud/key_file
```
### 存储在Vault中 (更安全)
```bash
# 查看Oracle Cloud配置
vault kv get secret/oracle-cloud
# 查看私钥
vault kv get secret/oracle-cloud/private-key
```
## 📝 配置内容
### 基本信息
- **User OCID**: `ocid1.user.oc1..aaaaaaaappc7zxue4dlrsjljg4fwl6wcc5smetreuvpqn72heiyvjeeqanqq`
- **Fingerprint**: `73:80:50:35:b6:1d:e3:fc:68:f8:e3:e8:0b:df:79:e3`
- **Tenancy OCID**: `ocid1.tenancy.oc1..aaaaaaaayyhuf6swf2ho4s5acdpee6zssst6j7nkiri4kyfdusxzn3e7p32q`
- **Region**: `us-ashburn-1`
### 私钥
- **存储位置**: Vault `secret/oracle-cloud/private-key`
- **格式**: PEM格式私钥
- **用途**: Oracle Cloud API认证
## 🚀 使用方式
### 从Consul读取配置
```bash
# 在Nomad job中使用模板
template {
data = <<EOF
[DEFAULT]
user={{ key "config/oracle-cloud/user" }}
fingerprint={{ key "config/oracle-cloud/fingerprint" }}
tenancy={{ key "config/oracle-cloud/tenancy" }}
region={{ key "config/oracle-cloud/region" }}
key_file=/local/oci_api_key.pem
EOF
destination = "local/oci_config"
}
```
### 从Vault读取配置
```bash
# 在应用中使用Vault API
curl -H "X-Vault-Token: $VAULT_TOKEN" \
https://vault.git-4ta.live/v1/secret/data/oracle-cloud
```
## 📅 创建时间
2025-10-12 09:25 UTC
## 🏷️ 标签
- 云提供商: Oracle Cloud Infrastructure
- 区域: us-ashburn-1
- 存储方式: Consul KV + Vault