mirror of
https://gitea.com/mcereda/oam.git
synced 2026-02-09 13:44:24 +00:00
60 lines
2.4 KiB
Markdown
60 lines
2.4 KiB
Markdown
# Oracle Cloud Infrastructure
|
|
|
|
1. [Concepts](#concepts)
|
|
1. [Compartments](#compartments)
|
|
1. [Networking](#networking)
|
|
1. [Access to the Internet](#access-to-the-internet)
|
|
1. [Further readings](#further-readings)
|
|
1. [Sources](#sources)
|
|
|
|
## Concepts
|
|
|
|
### Compartments
|
|
|
|
Compartments are tenancy-wide and extend across regions.<br/>
|
|
They can be nested to create hierarchies up to 6 levels deep.
|
|
|
|
After creating a compartment, one needs to write at least one (access) policy for it; until then, no one can access it
|
|
but administrators or users with permissions at the _tenancy_ level.<br/>
|
|
When creating sub-compartments, users inherit access permissions from compartments higher up their hierarchy.
|
|
|
|
Before deleting a compartment, all resources in it **must** have been moved, deleted or terminated.<br/>
|
|
This includes **any policies** attached to the compartment itself.
|
|
|
|
### Networking
|
|
|
|
#### Access to the Internet
|
|
|
|
| Resource | Used for | Free-tier limit |
|
|
| ---------------- | -------------------------------------------------------------------------------------------------- | ----------------- |
|
|
| Internet Gateway | **public** resources that need to **be** reach**ed** from the internet | ? |
|
|
| NAT Gateway | resources that **need to reach** the internet but **are not reachable from** the internet | 0 (not available) |
|
|
| Bastion | resources that require Secure Shell (SSH) access but otherwise are not reachable from the internet | 5 |
|
|
|
|
## Further readings
|
|
|
|
- [`oci-cli`][oci-cli]
|
|
- [Compute images]
|
|
- [Connect to private compute instances using OCI Bastion Service]
|
|
- [Running Commands on an Instance]
|
|
|
|
### Sources
|
|
|
|
- [Required keys and OCIDs]
|
|
|
|
<!--
|
|
Reference
|
|
═╬═Time══
|
|
-->
|
|
|
|
<!-- In-article sections -->
|
|
[oci-cli]: oci-cli.md
|
|
|
|
<!-- Upstream -->
|
|
[compute images]: https://docs.oracle.com/en-us/iaas/images/
|
|
[required keys and ocids]: https://docs.oracle.com/en-us/iaas/Content/API/Concepts/apisigningkey.htm
|
|
|
|
<!-- Others -->
|
|
[connect to private compute instances using oci bastion service]: https://medium.com/@harjulthakkar/connect-to-private-compute-instance-using-oci-bastion-service-ca96a3ceea49
|
|
[running commands on an instance]: https://docs.public.oneportal.content.oci.oraclecloud.com/en-us/iaas/Content/Compute/Tasks/runningcommands.htm
|