mgmt/security/vault/oracle-cloud-config.md

Oracle Cloud Configuration

🔑 配置信息

存储在Consul KV中

# 查看所有Oracle Cloud配置
consul kv get -recurse config/oracle-cloud/
consul kv get -recurse config/oracle-cloud-kr-chuncheon/

# 获取美国节点配置
consul kv get config/oracle-cloud/user
consul kv get config/oracle-cloud/fingerprint
consul kv get config/oracle-cloud/tenancy
consul kv get config/oracle-cloud/region
consul kv get config/oracle-cloud/key_file

# 获取韩国节点配置
consul kv get config/oracle-cloud-kr-chuncheon/user
consul kv get config/oracle-cloud-kr-chuncheon/fingerprint
consul kv get config/oracle-cloud-kr-chuncheon/tenancy
consul kv get config/oracle-cloud-kr-chuncheon/region
consul kv get config/oracle-cloud-kr-chuncheon/key_file

存储在Vault中 (更安全)

# 查看美国节点配置
vault kv get secret/oracle-cloud
vault kv get secret/oracle-cloud/private-key

# 查看韩国节点配置
vault kv get secret/oracle-cloud-kr-chuncheon
vault kv get secret/oracle-cloud-kr-chuncheon/private-key

📝 配置内容

美国节点 (us-ashburn-1)

• User OCID: ocid1.user.oc1..aaaaaaaappc7zxue4dlrsjljg4fwl6wcc5smetreuvpqn72heiyvjeeqanqq
• Fingerprint: 73:80:50:35:b6:1d:e3:fc:68:f8:e3:e8:0b:df:79:e3
• Tenancy OCID: ocid1.tenancy.oc1..aaaaaaaayyhuf6swf2ho4s5acdpee6zssst6j7nkiri4kyfdusxzn3e7p32q
• Region: us-ashburn-1

韩国节点 (ap-chuncheon-1)

• User OCID: ocid1.user.oc1..aaaaaaaaqoa2my3fwh3jbayachyylqyneiveydrjliu2qz65ijlc57ehplha
• Fingerprint: b1:6e:4e:5a:b6:1c:34:bf:b1:73:76:f6:9f:27:6d:99
• Tenancy OCID: ocid1.tenancy.oc1..aaaaaaaawfv2wd54ly75ppfjgdgap7rtd3vhtziz25dwx23xo4rbkxnxlapq
• Region: ap-chuncheon-1

私钥

• 美国节点: Vault secret/oracle-cloud/private-key
• 韩国节点: Vault secret/oracle-cloud-kr-chuncheon/private-key
• 格式: PEM格式私钥
• 用途: Oracle Cloud API认证

🚀 使用方式

从Consul读取配置

# 在Nomad job中使用模板
template {
  data = <<EOF
[DEFAULT]
user={{ key "config/oracle-cloud/user" }}
fingerprint={{ key "config/oracle-cloud/fingerprint" }}
tenancy={{ key "config/oracle-cloud/tenancy" }}
region={{ key "config/oracle-cloud/region" }}
key_file=/local/oci_api_key.pem
EOF
  destination = "local/oci_config"
}

从Vault读取配置

# 在应用中使用Vault API
curl -H "X-Vault-Token: $VAULT_TOKEN" \
  https://vault.git-4ta.live/v1/secret/data/oracle-cloud

📅 创建时间

2025-10-12 09:25 UTC

🏷️ 标签

• 云提供商: Oracle Cloud Infrastructure
• 区域: us-ashburn-1, ap-chuncheon-1
• 存储方式: Consul KV + Vault
• 节点数量: 2个区域