oci

# Oracle Cloud Infrastructure Skills Use this domain for practical Oracle Cloud Infrastructure guidance. Current content covers OCI Kubernetes Engine (OKE): cluster design, operational troubleshooting, Generic VNIC Attachment (GVA), and Multus multi-interface pod validation. It covers OCI Internet of Things Platform resource discovery, digital twin lifecycle workflows, device publish flows, and optional MCP-assisted operation. It covers OCI Functions local deployment and diagnosis-first troubleshooting. It includes a constrained Terraform Configuration generator for OCI Security Zone recipes and Security Zones. It also includes a constrained Terraform Configuration generator for OCI Exadata Database Service on Dedicated Infrastructure. It also includes a constrained Terraform Configuration generator for OCI IAM compartments, groups, dynamic groups, policies, and Identity Domains resources. It also includes a constrained Terraform configuration generator for OCI networking resources. It also covers Enterprise AI because that work is built around OCI Generative AI, OCI networking, IAM, cost estimation, hosted applications, and OCI platform integrations. ## How to Use This Domain 1. Start with the routing table below. 2. Read only the smallest service file or nested skill that matches the user's task. 3. Prefer official Oracle documentation and live read-only discovery commands before making design or remediation recommendations. 4. Ask before running commands that create, update, delete, restart, scale, drain, or otherwise mutate OCI or Kubernetes resources. 5. Keep OCI-owned design decisions here, and route database-owned SQL, vector, and Select AI implementation details to `db/features/`. ## Directory Structure ```text oci/ ├── SKILL.md ├── enterprise-ai/ │ ├── SKILL.md │ ├── models/ │ ├── agent-workflows/ │ ├── governance/ │ ├── data/ │ ├── cost/ │ └── integrations/ ├── functions/ │ ├── oci-functions-deploy/ │ │ ├── SKILL.md │ │ ├── agents/ │ │ ├── references/ │ │ ├── scripts/ │ │ └── tests/ │ └── oci-functions-troubleshoot/ │ ├── SKILL.md │ ├── agents/ │ └── references/ ├── iot-platform/ │ ├── SKILL.md │ ├── agents/ │ ├── references/ │ ├── scripts/ │ ├── templates/ │ └── tests/ ├── oci-landing-zone-terraform-module/ │ ├── terraform-oci-module-security-zone-skill/ │ │ ├── SKILL.md │ │ ├── agents/ │ │ └── references/ │ ├── terraform-oci-modules-exadata-database-skill/ │ │ ├── SKILL.md │ │ ├── agents/ │ │ └── references/ │ ├── terraform-oci-modules-iam-skill/ │ │ ├── SKILL.md │ │ ├── agents/ │ │ └── references/ │ └── terraform-oci-modules-networking-skill/ │ ├── SKILL.md │ ├── agents/ │ └── references/ └── oke/ ├── cluster-design.md ├── troubleshooting.md ├── gva-node-pools.md ├── multus-multihome.md ├── skills/ ├── scripts/ ├── agents/ ├── shared/ ├── examples/ └── tests/ ``` ## Category Routing | Topic | Start With | |------------------------------------------------------------------------------------------------------------------------------------------------|------------| | Design or scaffold an OKE cluster, Terraform stack, or OCI Resource Manager stack | Start with `oci/oke/cluster-design.md`, then load `oci/oke/skills/oke-cluster-generator/SKILL.md` | | Troubleshoot OKE workloads, pods, services, DNS, add-ons, ingress, load balancers, image pulls, storage, Workload Identity, or cluster access | Start with `oci/oke/troubleshooting.md`, then load `oci/oke/skills/oke-troubleshooter/SKILL.md` | | Configure OKE managed node pools with Generic VNIC Attachment secondary VNIC profiles and Application Resources | Start with `oci/oke/gva-node-pools.md`, then load `oci/oke/skills/oke-gva-deployer/SKILL.md` | | Deploy or validate Multus NetworkAttachmentDefinitions and multi-interface pods on OKE | Start with `oci/oke/multus-multihome.md`, then load `oci/oke/skills/oke-multihome-deployer/SKILL.md` | | Deploy an OCI Function from a local macOS or Linux workstation | `oci/functions/oci-functions-deploy/SKILL.md` | | Troubleshoot OCI Functions setup, deployment, invocation, or observability | `oci/functions/oci-functions-troubleshoot/SKILL.md` | | Generate or update Terraform Configuration for OCI Security Zone recipes or Security Zones | `oci/oci-landing-zone-terraform-module/terraform-oci-module-security-zone-skill/SKILL.md` | | Generate or update Terraform Configuration for OCI Exadata Database Service on Dedicated Infrastructure | `oci/oci-landing-zone-terraform-module/terraform-oci-modules-exadata-database-skill/SKILL.md` | | Generate or update Terraform Configuration for OCI IAM compartments, groups, dynamic groups, policies, or Identity Domains | `oci/oci-landing-zone-terraform-module/terraform-oci-modules-iam-skill/SKILL.md` | | Generate or update Terraform configuration for OCI VCNs, subnets, routes, gateways, security lists, NSGs, or ZPR security-attribute assignments | `oci/oci-landing-zone-terraform-module/terraform-oci-modules-networking-skill/SKILL.md` | | OCI IoT domains, domain groups, digital twin models, adapters, instances, relationships, raw commands, Data API access, or HTTPS publish flows | `oci/iot-platform/SKILL.md` | | OCI Generative AI models, custom/imported models, endpoints, or private endpoints | `oci/enterprise-ai/SKILL.md` | | OCI Responses API agents, tools, memory, File Search, Code Interpreter, MCP, or SQL Search | `oci/enterprise-ai/SKILL.md` | | OCI Generative AI and OCI Generative AI Agents cost estimation | `oci/enterprise-ai/cost/cost-estimation.md` | | OCI Enterprise AI governance, IAM, API keys, OAuth, guardrails, or ZPR | `oci/enterprise-ai/governance/private-endpoints-and-governance.md` | ## Key Starting Points - `oci/oke/cluster-design.md` - `oci/oke/troubleshooting.md` - `oci/oke/gva-node-pools.md` - `oci/oke/multus-multihome.md` - `oci/functions/oci-functions-deploy/SKILL.md` - `oci/functions/oci-functions-troubleshoot/SKILL.md` - `oci/functions/oci-functions-deploy/references/oci-functions-quickstart.md` - `oci/functions/oci-functions-troubleshoot/references/error-patterns.md` - `oci/oci-landing-zone-terraform-module/terraform-oci-module-security-zone-skill/SKILL.md` - `oci/oci-landing-zone-terraform-module/terraform-oci-modules-exadata-database-skill/SKILL.md` - `oci/oci-landing-zone-terraform-module/terraform-oci-modules-iam-skill/SKILL.md` - `oci/oci-landing-zone-terraform-module/terraform-oci-modules-networking-skill/SKILL.md` - `oci/iot-platform/SKILL.md` - `oci/iot-platform/references/cli-workflows.md` - `oci/iot-platform/references/mcp-optional-use.md` - `oci/enterprise-ai/SKILL.md` - `oci/enterprise-ai/models/enterprise-ai-models.md` - `oci/enterprise-ai/agent-workflows/responses-api-agents.md` - `oci/enterprise-ai/cost/cost-estimation.md` - `oci/enterprise-ai/governance/private-endpoints-and-governance.md` ## Operational Tools The OKE operational skills include deterministic helper tools under `oci/oke/scripts/` and skill-specific helper scripts under `oci/oke/skills/*/scripts/`. - Read-only discovery and evidence tools may be used to collect context. - Generate-only tools may produce manifests, commands, Terraform snippets, or reports. - Any tool or command that creates, updates, deletes, patches, restarts, scales, drains, debugs, assigns IPs, applies manifests, or otherwise mutates OCI or Kubernetes resources requires explicit user approval first. - `oci/oke/scripts/gva-menu.sh` is allowed to create an OKE node pool for the GVA workflow only after the user approves execution and completes its final `CREATE` confirmation. - `oci/oke/scripts/node-doctor-run.sh` requires approval before execution because it creates a temporary debug pod and may delete that pod during cleanup. ## Common Multi-Step Flows | Task | Recommended Sequence | |------------------------------------------------------------------|----------------------| | Plan a production OKE cluster | `oke/cluster-design.md` | | Diagnose an OKE service with no load balancer IP | `oke/troubleshooting.md` | | Build a node pool with workload-specific secondary VNIC profiles | `oke/gva-node-pools.md` -> `oke/multus-multihome.md` if pods need multiple interfaces | | Validate Multus pod networking on GVA-enabled nodes | `oke/multus-multihome.md` -> `oke/troubleshooting.md` if symptoms remain | | Investigate OKE workload access to OCI APIs | `oke/troubleshooting.md` | | Deploy a local function | `functions/oci-functions-deploy/SKILL.md` -> preflight -> Fn context validation -> OCIR auth check -> app selection -> scaffold -> deploy | | Troubleshoot a failed function deploy | `functions/oci-functions-troubleshoot/SKILL.md` -> `functions/oci-functions-troubleshoot/references/error-patterns.md` -> `functions/oci-functions-troubleshoot/references/deploy.md` | | Troubleshoot function invocation failures | `functions/oci-functions-troubleshoot/SKILL.md` -> `functions/oci-functions-troubleshoot/references/invoke.md` -> logs, traces, metrics, and limits | | Generate OCI Security Zone Terraform Configuration | `oci-landing-zone-terraform-module/terraform-oci-module-security-zone-skill/SKILL.md` -> validate inputs and authorization read-only -> generate `main.tf`, `variables.tf`, and `terraform.tfvars` without running Terraform | | Generate OCI Exadata Database Service Terraform Configuration | `oci-landing-zone-terraform-module/terraform-oci-modules-exadata-database-skill/SKILL.md` -> validate only requested-object inputs read-only -> generate `main.tf`, `variables.tf`, and `terraform.tfvars` without running Terraform | | Generate OCI IAM Terraform Configuration | `oci-landing-zone-terraform-module/terraform-oci-modules-iam-skill/SKILL.md` -> determine supported module -> collect and validate inputs -> generate `main.tf`, `variables.tf`, and `terraform.tfvars` without running Terraform | | Generate OCI networking Terraform configuration | `oci-landing-zone-terraform-module/terraform-oci-modules-networking-skill/SKILL.md` -> determine support -> collect and validate inputs -> generate a compatible configuration change without running Terraform | | Explore or update OCI IoT digital twin resources | `iot-platform/SKILL.md` -> `iot-platform/references/cli-workflows.md` -> `iot-platform/references/resilience-guidance.md` | | Publish test telemetry to an OCI IoT twin | `iot-platform/SKILL.md` -> `iot-platform/references/cli-workflows.md` -> `iot-platform/templates/publish-curl.template.sh` | | Build a governed enterprise assistant | `enterprise-ai/SKILL.md` -> `enterprise-ai/agent-workflows/agent-tools.md` -> `enterprise-ai/data/rag-and-search.md` -> `enterprise-ai/governance/private-endpoints-and-governance.md` | ## Scope Boundaries - Keep OCI service, networking, IAM, agent hosting, and cost-estimation guidance in this domain. - Route OCI Security Zone recipes and Security Zone Terraform configuration to `oci/oci-landing-zone-terraform-module/terraform-oci-module-security-zone-skill/`; it is generate-only and does not deploy or manage other Cloud Guard, IAM, or network resources. - Route Exadata Database Service Terraform configuration to `oci/oci-landing-zone-terraform-module/terraform-oci-modules-exadata-database-skill/`; it supports only Cloud Exadata Infrastructure, Cloud VM Clusters, DB Homes, Container Databases, and Pluggable Databases, and does not create IAM or network prerequisites. - Route OCI IAM Terraform configuration to `oci/oci-landing-zone-terraform-module/terraform-oci-modules-iam-skill/`; it supports only the upstream compartments, groups, dynamic groups, policies, and Identity Domains modules, and does not create standalone classic users or memberships. - Route OCI networking Terraform configuration to `oci/oci-landing-zone-terraform-module/terraform-oci-modules-networking-skill/`; it supports only `oci-landing-zones/terraform-oci-modules-networking` and does not manage ZPR policies. - Route OCI IoT domain, digital twin, adapter, device publish, raw command, and Data API workflows to `oci/iot-platform/`. - Route Oracle Database-owned implementation details to `db/features/`. - Route APEX artifact generation to `apex/apexlang/`. - Prefer official Oracle documentation for OCI service limits, IAM verbs, endpoint formats, regions, and pricing inputs because these change frequently. ## Sources - https://docs.oracle.com/en-us/iaas/Content/ContEng/home.htm - https://docs.oracle.com/en-us/iaas/Content/ContEng/Tasks/contengAttaching_Multiple_VNICs.htm - https://docs.oracle.com/en-us/iaas/Content/ContEng/Tasks/contenggrantingworkloadaccesstoresources.htm - https://github.com/oracle-terraform-modules/terraform-oci-oke - https://github.com/oci-landing-zones/terraform-oci-modules-oracle-database/tree/main/exadata-database - https://github.com/oci-landing-zones/terraform-oci-modules-iam - https://github.com/oci-landing-zones/terraform-oci-modules-networking - https://docs.oracle.com/en-us/iaas/Content/internet-of-things/home.htm - https://github.com/oracle-samples/oci-iot-samples - https://docs.oracle.com/en-us/iaas/Content/generative-ai/overview.htm - https://docs.oracle.com/en-us/iaas/Content/generative-ai/home.htm - https://docs.oracle.com/en-us/iaas/Content/Functions/home.htm - https://docs.oracle.com/en-us/iaas/Content/Functions/Tasks/functionsquickstartlocalhost.htm - https://docs.oracle.com/en-us/iaas/Content/Functions/Tasks/functionscreatingapps.htm - https://docs.oracle.com/en-us/iaas/Content/Functions/Tasks/functionstroubleshooting.htm