Updating OCI Configuration in the OCI Configuration File
The OCI configuration file (~/.oci/config
) includes user credentials
information such as user, fingerprint, key_file
and so on that's used to
authenticate users when they access OCI resources. You must update the OCI configuration
information in the configuration file regularly to ensure only authorized users can access
the OCI resources.
To update the OCI configuration in the configuration file, perform the following tasks:
- Update the OCI configuration in the SCM container:
- Update the private key file path, fingerprint and so on, in the OCI
configuration file (
~/.oci/config
). - Update the new private key in the
~/.oci/user.pem
file.
- Update the private key file path, fingerprint and so on, in the OCI
configuration file (
- If you've enabled observability (that's, if you've set the value of the parameters
siebel_monitoring
andenable_oci_monitoring
totrue
), update the OCI configuration in Helm chart repository:Update the Prometheus Helm chart:
- Go to the
prometheus
Helm chart directory:cd /home/opc/siebel/<namespace>-helmcharts/prometheus
- Update the fingerprint and so on, in the
oci_config/config
file. - Update the new private key in the
oci_api_key.pem
file. - Increment the chart version in the
Chart.yaml
file. - Commit the changes in the Git
repository:
git add . git commit -m "Updated OCI Configuration" git push
- Go to the
- If you've enabled logging (that's, if you've set the value of the parameters
siebel_logging
andenable_oci_log_analytics
totrue
), update the OCI configuration in Helm chart repository:Update the Siebel logging Helm chart:
- Go to the
siebel-logging
directory:cd /home/opc/siebel/<namespace>-helmcharts/siebel-logging
- Update the fingerprint and so on, in the
oci_config/config
file. - Update the new private key in the
oci_api_key.pem
file. - Increment chart version in the
Chart.yaml
file. - Commit the changes in the Git
repository:
git add . git commit -m "Updated OCI Configuration" git push
- Go to the
- Perform the flux reconcile manually:
source /home/opc/siebel/<env_id>/k8sprofile flux reconcile source git siebel-repo -n <namespace> flux reconcile kustomization apps -n <namespace>
- Restart the
pods:
kubectl rollout restart deploy prometheus-adapter-deployment -n <namespace> kubectl rollout restart deploy log-aggregator -n <namespace>
- Verify the Prometheus adapter deployment pod logs and log aggregator pod logs to ensure that you aren't receiving the "401 Not Authenticated" error.