A look at the capability of the Oracle OCI APIs and SDK including CLI

1. November 2021
OCI API & SDK –
POWERING THE AUTOMATION OF REGULAR TASKS
Phil Wilkins
Tech Evangelist & Ace Director
Phil.Wilkins@capgemini.com
uk.linkedin.com/in/philWilkins
@MP3Monster
blog.mp3monster.org / phil-wilkins.uk
Oracle-integration.cloud /

2. Security Classification: SEC0: Public
OCI SDK & APIs | Phil Wilkins | November 21 2
© Capgemini / Phil Wilkins. 2021. All rights reserved |
THE ABOUT ME …
https://blog.mp3monster.org/
publication-contributions/
Me in 5:
• Husband, Father, Blogger & Author
• Technical Architect, Tech Evangelist
• Work for Capgemini UK as part of a multi
award winning team
• Work with primarily open source + Oracle
middleware
• Know more – mp3monster.org
https://bit.ly/FluentdBook
https://bit.ly/ImplementingAPI
https://oracle-integration.cloud

3. Security Classification: SEC0: Public
OCI SDK & APIs | Phil Wilkins | November 21 3
© Capgemini / Phil Wilkins. 2021. All rights reserved |
CAPGEMINI IS ONE OF THE WORLD'S LARGEST CONSULTING, TECHNOLOGY, AND
OUTSOURCING FIRMS & A GLOBAL “FULL SERVICE” BUSINESS TRANSFORMATION PROVIDER
Group Workforce: 200,000+ Globally
Asia Pacific
Latin America
Canada
United States
Mexico
Brazil
Argentina
Europe
Morocco
Australia
People’s Republic of China
India
Chile
Guatemala
Russia
Singapore
Hong Kong
North
America
UK & Ireland
Nordics
Benelux
“It is the quality of our people, and their
capacity to deliver fitting solutions, with you
and for you, that drive real business results.”
Across 40+ countries, 100 nationalities
5Businesses
Revenue
12,8
Billion EUR (2017)
Central Europe
Morocco
Net Profit
€1,18B
 Targeting Value
 Mitigating Risk
 Optimising
Capabilities
 Aligning the
Organisation
Elements to
successful
collaboration
Application Services
Infrastructure
Services
Business Process
Outsourcing
Consulting
(Capgemini Consulting)
Local Professional
4

4. ORACLE OCI
APIS & SDK

5. Security Classification: SEC0: Public
OCI SDK & APIs | Phil Wilkins | November 21 5
© Capgemini / Phil Wilkins. 2021. All rights reserved |
OCI
APIS

6. Security Classification: SEC0: Public
OCI SDK & APIs | Phil Wilkins | November 21 6
© Capgemini / Phil Wilkins. 2021. All rights reserved |
API & SDK OPTIONS

7. Security Classification: SEC0: Public
OCI SDK & APIs | Phil Wilkins | November 21 7
© Capgemini / Phil Wilkins. 2021. All rights reserved |
RESOURCES PROVIDED
API SDKs CLI
• Oracle documentation on
payloads and endpoints -
https://docs.oracle.com/en-
us/iaas/api/#/
• Overview and example
https://docs.oracle.com/en-
us/iaas/Content/API/SDKDocs/p
ythonsdk.htm
• GitHub repository (SDKs are
open source) e.g.
https://github.com/oracle/oci-
python-sdk
• SDK Object documentation
e.g. Python https://oracle-
cloud-infrastructure-python-
sdk.readthedocs.io/en/latest/
• CLI Concepts doc
https://docs.oracle.com/en-
us/iaas/Content/API/Concepts/c
liconcepts.htm
• Predeployed in
• Cloud Shell
• Oracle Linux Cloud Developer
VM image
Can use a powerful SQL like Search (Query) Syntax
 query <resourceType> resources where <conditions> sorted by <fieldName> <order>
 query <resourceType> resources matching <keywords>
The Syntax provides all the common logical operators (e.g., > < = && ), date time templating ( y M d H etc.) and data
types (String, Integer, Boolean , Date-time)

8. WHY USE API/SDK…

9. Security Classification: SEC0: Public
OCI SDK & APIs | Phil Wilkins | November 21 9
© Capgemini / Phil Wilkins. 2021. All rights reserved |
Scenarios where using the API/SDK is a better option …
• When Terraform teardown is not an option or ideal option …
• Cleaning up / tearing down scratch / proof of concept environments – dealing with non
Terraformed content (if it’s not visible in the TF State then Terraform wont teardown)
• Configuration drift is acceptable, so using Terraform could create accidental reset (e.g.,
budgets & thresholds, user settings)
• Avoid a plan, apply cycle to ensure you’re not picking up changes
• Setting & resetting test environments (e.g., volume/performance test environments –
full DB creation over truncate and bulk insert)
• Logic needs to be functional not declarative
• Some features can’t be Terraformed
USE CASES FOR API/SDKS

10. Security Classification: SEC0: Public
OCI SDK & APIs | Phil Wilkins | November 21 10
© Capgemini / Phil Wilkins. 2021. All rights reserved |
Scenarios where using the API/SDK is a better option …
• Automated start and stopping of non-production environments during out of
hours
• Self service automation e.g. new API customers need API tokens that are linked
to an identity and stored in a repository & link identity to correct group
permissions based on services selected
• Replication of user adjusted thresholds (e.g., alerts) between regions (region
level DR) rather than forcing minor acceptable config changes through Terraform
USE CASES FOR API/SDKS

11. Security Classification: SEC0: Public
OCI SDK & APIs | Phil Wilkins | November 21 11
© Capgemini / Phil Wilkins. 2021. All rights reserved |
Our use case:
• We have a tenancy and want to give our Graduates and those we recruit without cloud experience the
chance to experiment safely, without accidentally running up a large bill
• Non production environments such as ones for Learning don’t need to be available out of hours
• This is mechanism helps us upskill client staff if needed – part of AIP
Our solution:
• We establish the more expensive solutions as a shared resource in a group compartment with limited
privileges
• Each new user gets their own compartment with admin privileges, a budget and policies controlling what
they can and cant do.
• User setup achieved with simple Python app taking user email address
• We have a scheduled job which will shutdown services that have a time element to their costing over night
• Any services not observed to have been running for a period of time are deleted – scheduled tidy up (in
development)
EXAMPLE – AGILE INNOVATION PLATFORM (AIP) NEW DEV SET UP
AIP = https://www.capgemini.com/gb-en/service/capgemini-agile-innovation-platform/

12. Security Classification: SEC0: Public
OCI SDK & APIs | Phil Wilkins | November 21 12
© Capgemini / Phil Wilkins. 2021. All rights reserved |
request = oci.identity.models.CreateCompartmentDetails()
request.description = app_description
request.name = compartmentname
request.compartment_id = parent_compartment_id
identity = oci.identity.IdentityClient(config_props)
compartment = identity.create_compartment(request)
oci.wait_until(identity, identity.get_compartment(compartment_id),
'lifecycle_state', 'ACTIVE', )
compartment_id = compartment.data.id
Create a new compartment Query to find polices and bulk delete them
query_dictionary = {
QRY_CONST.POLICY: {QRY_CONST.ALL :
"query policy resources where inactiveStatus = 0”},
… }
if (policyname != None):
ocid = (find(policyname, QRY_CONST.POLICY))
if (ocid != None):
delete_list.append(ocid)
…
client = oci.core.IdentityClient(config_props)
client.bulk_delete_resources(compartmentid, delete_list)
INTERESTING CODE FRAGMENTS
1
2
3
4
5
6
7
8
9
10
1
2
3
4
5
6
7
8
9
10
11
12
Nearly all APIs all for this pattern:
- Use a properties file with details to connect
- Populate an object
- Call operation
Query syntax …
query <resourceType> resources where <conditions>
sorted by <fieldName> <order>
OR
query <resourceType> resources matching <keywords>
My Oracle blog:
https://blogs.oracle.com/cloud-infrastructure/post/automating-developer-setup-in-oci

13. DEMO TIME

14. Security Classification: SEC0: Public
OCI SDK & APIs | Phil Wilkins | November 21 14
© Capgemini / Phil Wilkins. 2021. All rights reserved |
• Using the cloud shell, we’re going to list the compute
node in a tenancy.
• List the compute nodes using the same query Syntax
used in the API
CLI Python SDK
Create Policies for an existing user –using our utility
developed with the Python SDK
Python because …
• Capgemini Oracle DU standard
• Linux adopting deployment of Python as standard
• Very portable – platform agnostic
• Can apply the rigorous processes of a bytecode or
compiled language
• Minimal setup for PoC tasks
DEMOS

15. Security Classification: SEC0: Public
OCI SDK & APIs | Phil Wilkins | November 21 15
© Capgemini / Phil Wilkins. 2021. All rights reserved |
• The CLI’s default is to use JSON, can switch to tabulation
using –output table
• The results of the OCI call can be filtered in different
ways using using JMESPath syntax.
CLI Python SDK
Can develop very effective labour saving tools – for example
controlling all the Grants or driving in a set of new Policies
can be done from a predefined file.
DEMOS - OBSERVATIONS

16. QUESTIONS?

17. This presentation contains information that may be privileged or confidential and
is the property of the Capgemini Group.
Copyright © 2021 Capgemini. All rights reserved.
Capgemini is a global leader in partnering with companies to transform and manage their
business by harnessing the power of technology. The Group is guided everyday by its
purpose of unleashing human energy through technology for an inclusive and sustainable
future. It is a responsible and diverse organization of 270,000 team members in nearly 50
countries. With its strong 50 year heritage and deep industry expertise, Capgemini is
trusted by its clients to address the entire breadth of their business needs, from strategy
and design to operations, fuelled by the fast evolving and innovative world of cloud, data,
AI, connectivity, software, digital engineering and platforms. The Group reported in 2020
global revenues of €16 billion.
About Capgemini
Get the Future You Want | www.capgemini.com