bootstrat a terraform project for oracle

[smerle33]

Service(s)

Oracle / Terraform bootstrap state

Summary

Boostrap a terraform project for oracle with a terraform-state hosted in an azure bucket.

The aim is to create the kernel with authentication user / api-token / principal object (bdd ?)
then to output the authentifications infos to pass within SOPS that will be consumed by the pipeline within the final oracle project based on this bootstrap.

the final project would then be used for : #2682 and #2649

work in progress :
as per https://github.com/jenkins-infra/terraform-states/commit/eeb514512f7ece88067e6f6d68cc492d62895d51 for the skeleton

and https://github.com/jenkins-infra/terraform-states/commit/0679ee48048ab2a11441fa4590035016ebdf6de8

need to login the oracle cloud infra from the source computer that will terraform apply and then add the outputs.

[smerle33]

use this page to setup key pair for oci-cli : https://docs.oracle.com/en-us/iaas/Content/API/Concepts/apisigningkey.htm#Required_Keys_and_OCIDs

[smerle33]

lock at the upload public key as the user we use is a federated user linked with the azureAD SSO, we need to synchronize users :
https://docs.oracle.com/en-us/iaas/Content/Identity/Tasks/usingscim.htm

https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/oracle-cloud-infrastructure-console-provisioning-tutorial

[smerle33]

we decided to create a local user with 2FA to access the CLI

TODO : try to add a local user smerle synchronized with the federate process azureAD with mark account

[smerle33]

complete the oracle project by setting those files, based on the AWS ones :
version.tf
providers.tf
Jenkinsfile_k8s

[dduportal]

Job + credentials created in infra.ci by the following PRs:

• feat(oracle): add credentials secrets in jenkins for oracle terraform kubernetes-management#2477
• fix(infra.ci): convert Oracle credentials to basicSSHkey kubernetes-management#2482

[dduportal]

Opened a bug in jenkins-infra/helm-charts#148 about the multiline string failing the job-dsl

[smerle33]

as per jenkins-infra/oracle#2
the terraform skeleton is done,
lets set-up the updatecli update process

[smerle33]

the first updatecli run fail over a

ERROR: 	Could not resolve to a PullRequest with the number of 4.

Pipeline "Bump Jenkinsfile_k8s for updatecli `hashicorp-tools` docker image version to lastest image release" failed

Skipping due to:

	pull Request stage:	"Could not resolve to a PullRequest with the number of 4."

adding the group https://github.com/orgs/jenkins-infra/teams/ci-bot in read/write seems to solve it

[smerle33]

merged all the updatecli PR done.