Skip to main content

Oracle Cloud Setup

This guide explains how to connect Oracle Cloud Infrastructure (OCI) to Cloudaware by generating key pairs in Cloudaware, configuring an OCI user with an API key and read‑only policies, and adding the tenancy in Cloudaware.

Before You Begin​

Make sure that:

  • You have access to Admin Console in Cloudaware.
  • You have permission in OCI to create or manage the IAM user, groups, policies, and API keys used for Cloudaware access.
  • You have the required OCI identifiers ready:
    • Tenancy OCID
    • User OCID for the user that will hold the Cloudaware API key
    • Default region for API calls from Cloudaware
  • You know whether Cloudaware should discover: the whole tenancy, or selected compartments only.
  • You are ready to use a dedicated OCI IAM user and group for Cloudaware with read-only policies.
note

If you are new to Cloudaware and don’t have the account yet, use the Get Started guide to register a trial.

High-level Setup Flow​

To integrate Oracle Cloud with Cloudaware:

  1. Generate a key pair in Cloudaware.
  2. Configure access for Cloudaware in Oracle:
    • Upload the public key as API Key for the user
    • Create a read-only policy for the user
  3. Add Oracle Cloud tenancy to Cloudaware.

Generate a Key Pair in Cloudaware​

In Cloudaware, open the Oracle Cloud setup form:

  1. Go to Admin.
  2. Select Oracle Cloud.
  3. Click + ADD to add the tenancy.
    • If Oracle Cloud is already configured, click CONFIGURED → select the Tenancies tab and click + ADD TENANCY.
  4. Use the link to create a private and public key pair (for initial setup) or proceed to the integration form.
  5. Fill out the form:
    • Name: Enter a meaningful tenancy name.
    • Tenancy OCID: Enter the tenancy OCID from OCI.
  6. Click GENERATE.
  7. Copy or download the public key when prompted; Cloudaware stores the key pair and lists it under the Key Pairs tab.

Upload the Public Key to the OCI User​

In the Oracle Cloud console:

  1. Navigate to the user that will represent Cloudaware.
  2. Upload the public key as an API key for that user.
  3. After the key is uploaded, note:
    • User OCID for that user.
    • Fingerprint of the uploaded key.
    • Default region you will use for API calls from Cloudaware.

Allow some time for OCI to propagate the new key configuration.

Create a Read‑Only Policy for the Cloudaware User​

In OCI IAM:

  1. Add the user to a dedicated group for Cloudaware (for example, CloudawareReadOnly).

  2. Create or update a policy at the tenancy level using the following statement:

    Allow group id <groupId> to read dedicated-vm-hosts in tenancy
    Allow group id <groupId> to read all-resources in tenancy
    Allow group id <groupId> to read compartments in tenancy

    Where:

    Replace <groupId> with the ID of the group the Cloudaware user belongs to.

  3. If you prefer compartment‑scoped access, adjust in tenancy to in compartment <compartmentName> as needed.

Add the OCI Tenancy in Cloudaware​

Return to Cloudaware → Admin:

  1. Select Oracle Cloud.
  2. Open the Tenancies tab and click + ADD TENANCY.
  3. Fill out the form:
    • Name: Enter a meaningful tenancy name.
    • Default Region: Select the OCI region.
    • Tenancy OCID: Select the tenancy OCID you configured when generating the key pair.
    • Key Pair: Select the key pair generated earlier.
    • User OCID: Paste the OCID of the OCI user where you uploaded the public key.
    • Fingerprint: Paste the fingerprint of the uploaded key.
  4. Click SAVE.

After saving, the tenancy status indicator should turn green once Cloudaware successfully authenticates and begins discovery.

Verify the Connection​

After setup:

  • Confirm that the Oracle Cloud tenancy shows a healthy status in Cloudaware.
  • Confirm that compartments and resources begin to appear in CMDB after discovery starts.
  • If the connection validates successfully but no resources appear yet, wait for the next discovery cycle and check again.

For detailed steps, see Verification.

Next Steps​