mgmt/security/vault/oracle-cloud-config.md

90 lines
2.6 KiB
Markdown

# Oracle Cloud Configuration
## 🔑 配置信息
### 存储在Consul KV中
```bash
# 查看所有Oracle Cloud配置
consul kv get -recurse config/oracle-cloud/
consul kv get -recurse config/oracle-cloud-kr-chuncheon/
# 获取美国节点配置
consul kv get config/oracle-cloud/user
consul kv get config/oracle-cloud/fingerprint
consul kv get config/oracle-cloud/tenancy
consul kv get config/oracle-cloud/region
consul kv get config/oracle-cloud/key_file
# 获取韩国节点配置
consul kv get config/oracle-cloud-kr-chuncheon/user
consul kv get config/oracle-cloud-kr-chuncheon/fingerprint
consul kv get config/oracle-cloud-kr-chuncheon/tenancy
consul kv get config/oracle-cloud-kr-chuncheon/region
consul kv get config/oracle-cloud-kr-chuncheon/key_file
```
### 存储在Vault中 (更安全)
```bash
# 查看美国节点配置
vault kv get secret/oracle-cloud
vault kv get secret/oracle-cloud/private-key
# 查看韩国节点配置
vault kv get secret/oracle-cloud-kr-chuncheon
vault kv get secret/oracle-cloud-kr-chuncheon/private-key
```
## 📝 配置内容
### 美国节点 (us-ashburn-1)
- **User OCID**: `ocid1.user.oc1..aaaaaaaappc7zxue4dlrsjljg4fwl6wcc5smetreuvpqn72heiyvjeeqanqq`
- **Fingerprint**: `73:80:50:35:b6:1d:e3:fc:68:f8:e3:e8:0b:df:79:e3`
- **Tenancy OCID**: `ocid1.tenancy.oc1..aaaaaaaayyhuf6swf2ho4s5acdpee6zssst6j7nkiri4kyfdusxzn3e7p32q`
- **Region**: `us-ashburn-1`
### 韩国节点 (ap-chuncheon-1)
- **User OCID**: `ocid1.user.oc1..aaaaaaaaqoa2my3fwh3jbayachyylqyneiveydrjliu2qz65ijlc57ehplha`
- **Fingerprint**: `b1:6e:4e:5a:b6:1c:34:bf:b1:73:76:f6:9f:27:6d:99`
- **Tenancy OCID**: `ocid1.tenancy.oc1..aaaaaaaawfv2wd54ly75ppfjgdgap7rtd3vhtziz25dwx23xo4rbkxnxlapq`
- **Region**: `ap-chuncheon-1`
### 私钥
- **美国节点**: Vault `secret/oracle-cloud/private-key`
- **韩国节点**: Vault `secret/oracle-cloud-kr-chuncheon/private-key`
- **格式**: PEM格式私钥
- **用途**: Oracle Cloud API认证
## 🚀 使用方式
### 从Consul读取配置
```bash
# 在Nomad job中使用模板
template {
data = <<EOF
[DEFAULT]
user={{ key "config/oracle-cloud/user" }}
fingerprint={{ key "config/oracle-cloud/fingerprint" }}
tenancy={{ key "config/oracle-cloud/tenancy" }}
region={{ key "config/oracle-cloud/region" }}
key_file=/local/oci_api_key.pem
EOF
destination = "local/oci_config"
}
```
### 从Vault读取配置
```bash
# 在应用中使用Vault API
curl -H "X-Vault-Token: $VAULT_TOKEN" \
https://vault.git-4ta.live/v1/secret/data/oracle-cloud
```
## 📅 创建时间
2025-10-12 09:25 UTC
## 🏷️ 标签
- 云提供商: Oracle Cloud Infrastructure
- 区域: us-ashburn-1, ap-chuncheon-1
- 存储方式: Consul KV + Vault
- 节点数量: 2个区域