Updating OCI Configuration in the OCI Configuration File

The OCI configuration file (~/.oci/config) includes user credentials information such as user, fingerprint, key_file and so on that's used to authenticate users when they access OCI resources. You must update the OCI configuration information in the configuration file regularly to ensure only authorized users can access the OCI resources.

To update the OCI configuration in the configuration file, perform the following tasks:

  1. Update the OCI configuration in the SCM container:
    1. Update the private key file path, fingerprint and so on, in the OCI configuration file (~/.oci/config).
    2. Update the new private key in the ~/.oci/user.pem file.
  2. If you've enabled observability (that's, if you've set the value of the parameters siebel_monitoring and enable_oci_monitoring to true), update the OCI configuration in Helm chart repository:

    Update the Prometheus Helm chart:

    1. Go to the prometheus Helm chart directory:
      cd /home/opc/siebel/<namespace>-helmcharts/prometheus
    2. Update the fingerprint and so on, in the oci_config/config file.
    3. Update the new private key in the oci_api_key.pem file.
    4. Increment the chart version in the Chart.yaml file.
    5. Commit the changes in the Git repository:
      git add .
      git commit -m "Updated OCI Configuration"
      git push
  3. If you've enabled logging (that's, if you've set the value of the parameters siebel_logging and enable_oci_log_analytics to true), update the OCI configuration in Helm chart repository:

    Update the Siebel logging Helm chart:

    1. Go to the siebel-logging directory:
      cd /home/opc/siebel/<namespace>-helmcharts/siebel-logging
    2. Update the fingerprint and so on, in the oci_config/config file.
    3. Update the new private key in the oci_api_key.pem file.
    4. Increment chart version in the Chart.yaml file.
    5. Commit the changes in the Git repository:
      git add .
      git commit -m "Updated OCI Configuration"
      git push
  4. Perform the flux reconcile manually:
    source /home/opc/siebel/<env_id>/k8sprofile
    flux reconcile source git siebel-repo -n <namespace>
    flux reconcile kustomization apps -n <namespace>
  5. Restart the pods:
    kubectl rollout restart deploy prometheus-adapter-deployment -n <namespace>
    kubectl rollout restart deploy log-aggregator -n <namespace>
  6. Verify the Prometheus adapter deployment pod logs and log aggregator pod logs to ensure that you aren't receiving the "401 Not Authenticated" error.