OCI Developer Associate - DevOps and Monitoring¶

resource "oci_devops_project" "main" {
  compartment_id = var.compartment_id
  name           = "my-application"
  description    = "DevOps project for My Application"

  notification_config {
    topic_id = oci_ons_notification_topic.devops.id
  }
}

resource "oci_devops_build_pipeline" "main" {
  project_id     = oci_devops_project.main.id
  display_name   = "build-pipeline"
  description    = "Build and test application"

  build_pipeline_parameters {
    items {
      name          = "ENVIRONMENT"
      default_value = "production"
      description   = "Deployment environment"
    }
  }
}

# Build stage
resource "oci_devops_build_pipeline_stage" "build" {
  build_pipeline_id = oci_devops_build_pipeline.main.id
  display_name      = "Build and Test"
  build_pipeline_stage_type = "BUILD"

  build_pipeline_stage_predecessor_collection {
    items {
      id = oci_devops_build_pipeline.main.id
    }
  }

  build_spec_file = "build_spec.yaml"
  image           = "OL7_X86_64_STANDARD_10"  # Build runner image

  build_source_collection {
    items {
      connection_type = "DEVOPS_CODE_REPOSITORY"
      repository_id   = oci_devops_repository.main.id
      branch          = "main"
    }
  }
}

# Deliver artifact stage
resource "oci_devops_build_pipeline_stage" "deliver" {
  build_pipeline_id = oci_devops_build_pipeline.main.id
  display_name      = "Deliver Artifacts"
  build_pipeline_stage_type = "DELIVER_ARTIFACT"

  build_pipeline_stage_predecessor_collection {
    items {
      id = oci_devops_build_pipeline_stage.build.id
    }
  }

  deliver_artifact_collection {
    items {
      artifact_name = "app_image"
      artifact_id   = oci_devops_deploy_artifact.image.id
    }
  }
}

resource "oci_devops_deploy_artifact" "image" {
  project_id              = oci_devops_project.main.id
  display_name            = "app-image"
  deploy_artifact_type    = "DOCKER_IMAGE"

  deploy_artifact_source {
    deploy_artifact_source_type = "OCIR"

    image_uri      = "${var.region}.ocir.io/${var.namespace}/my-app"
    image_digest   = "${var.image_digest}"  # From build pipeline
  }
}

resource "oci_devops_deploy_artifact" "k8s_manifest" {
  project_id           = oci_devops_project.main.id
  display_name         = "k8s-deployment"
  deploy_artifact_type = "KUBERNETES_MANIFEST"

  deploy_artifact_source {
    deploy_artifact_source_type = "INLINE"

    base64encoded_content = base64encode(templatefile(
      "k8s/deployment.yaml",
      {
        image = "${var.region}.ocir.io/${var.namespace}/my-app:$${IMAGE_TAG}"
      }
    ))
  }
}

resource "oci_devops_deploy_pipeline" "main" {
  project_id   = oci_devops_project.main.id
  display_name = "deploy-pipeline"
  description  = "Deploy to OKE"

  deploy_pipeline_parameters {
    items {
      name          = "NAMESPACE"
      default_value = "production"
    }
  }
}

# Deploy to OKE stage
resource "oci_devops_deploy_stage" "oke_deploy" {
  deploy_pipeline_id = oci_devops_deploy_pipeline.main.id
  display_name       = "Deploy to OKE"
  deploy_stage_type  = "OKE_DEPLOYMENT"

  deploy_stage_predecessor_collection {
    items {
      id = oci_devops_deploy_pipeline.main.id
    }
  }

  oke_cluster_deploy_environment_id = oci_devops_deploy_environment.oke.id

  kubernetes_manifest_deploy_artifact_ids = [
    oci_devops_deploy_artifact.k8s_manifest.id
  ]

  namespace = "${var.namespace}"

  rollback_policy {
    policy_type = "AUTOMATED_STAGE_ROLLBACK_POLICY"
  }
}

# Approval stage (optional)
resource "oci_devops_deploy_stage" "approval" {
  deploy_pipeline_id = oci_devops_deploy_pipeline.main.id
  display_name       = "Production Approval"
  deploy_stage_type  = "MANUAL_APPROVAL"

  deploy_stage_predecessor_collection {
    items {
      id = oci_devops_deploy_stage.oke_deploy.id
    }
  }

  approval_policy {
    approval_policy_type         = "COUNT_BASED_APPROVAL"
    number_of_approvals_required = 1
  }
}

resource "oci_devops_trigger" "main_push" {
  project_id     = oci_devops_project.main.id
  display_name   = "trigger-on-main-push"
  trigger_source = "DEVOPS_CODE_REPOSITORY"

  repository_id = oci_devops_repository.main.id

  actions {
    type                = "TRIGGER_BUILD_PIPELINE"
    build_pipeline_id   = oci_devops_build_pipeline.main.id

    filter {
      trigger_source = "DEVOPS_CODE_REPOSITORY"

      events = ["PUSH"]

      include {
        head_ref = "refs/heads/main"
      }
    }
  }
}

resource "oci_apm_apm_domain" "main" {
  compartment_id = var.compartment_id
  display_name   = "app-apm"
  description    = "APM for application monitoring"
  is_free_tier   = false
}

# Data keys for different services
resource "oci_apm_data_key" "frontend" {
  apm_domain_id = oci_apm_apm_domain.main.id
  name          = "frontend-key"
  type          = "PRIVATE"
}

resource "oci_apm_data_key" "backend" {
  apm_domain_id = oci_apm_apm_domain.main.id
  name          = "backend-key"
  type          = "PRIVATE"
}

resource "oci_apm_synthetics_monitor" "api_health" {
  apm_domain_id  = oci_apm_apm_domain.main.id
  display_name   = "API Health Check"
  monitor_type   = "REST"
  repeat_interval_in_seconds = 300  # 5 minutes

  configuration {
    config_type = "REST_CONFIG"
    is_redirection_enabled = true
    is_certificate_validation_enabled = true

    req_authentication_details {
      auth_type = "NONE"
    }

    request_method = "GET"
    request_headers = [
      {
        header_name  = "Content-Type"
        header_value = "application/json"
      }
    ]
  }

  vantage_points {
    name = "us-phoenix-1"
  }

  # Alert on failures
  is_run_once = false
  status      = "ENABLED"

  script_parameters {
    param_name  = "endpoint"
    param_value = "https://api.example.com/health"
  }
}

resource "oci_logging_log_group" "app_logs" {
  compartment_id = var.compartment_id
  display_name   = "application-logs"
}

# Custom log
resource "oci_logging_log" "application" {
  display_name = "app-logs"
  log_group_id = oci_logging_log_group.app_logs.id
  log_type     = "CUSTOM"

  configuration {
    source {
      category    = "custom"
      resource    = oci_functions_application.main.id
      service     = "functions"
      source_type = "OCISERVICE"
    }

    compartment_id = var.compartment_id
  }

  is_enabled         = true
  retention_duration = 30
}

resource "oci_management_dashboard" "app_dashboard" {
  compartment_id = var.compartment_id
  display_name   = "Application Dashboard"

  config = jsonencode({
    "widgets": [
      {
        "id": "widget-1",
        "type": "line-chart",
        "title": "Request Rate",
        "query": "CpuUtilization[1m].mean()",
        "namespace": "oci_computeagent"
      },
      {
        "id": "widget-2",
        "type": "bar-chart",
        "title": "Error Count",
        "query": "'Log Source' = 'app' | where level = 'ERROR' | stats count() by type"
      }
    ]
  })
}