準備環境

您必須先確保 OCI 環境設定正確,才能使用 Java Management Service。這是為了允許所有必要元件和雲端服務之間進行通訊。

到職 Java Management Service

若要將服務上線,請使用 Oracle Cloud Infrastructure (OCI) 主控台中的「上線精靈」或手動完成步驟。對於 OCI 新進使用者,建議使用 Onboarding 精靈選項。

  1. 以管理員身分登入 OCI 主控台
  2. 開啟導覽功能表,按一下可觀測性與管理,然後按一下 Java 管理底下的機組
  3. 選取「上線精靈」在其底下建立新 JMS 機組區間的根區間。
  4. 按一下「設定 JMS 」,以檢視「入職精靈」將建立之資源的詳細資訊。

    附註:

    如果未顯示設定 JMS 按鈕,請按一下檢查先決條件按鈕。
  5. 就會顯示 JMS 先決條件詳細資訊。預設會建立下列資源:
    1. Fleet_Compartment
      此區間將存放您要建立的機組。
    2. Fleet_Managers
      使用者群組將從您開始成為唯一使用者。您可以新增將管理 JMS 的其他使用者。
    3. JMS_DYNAMIC_GROUP
      此動態群組包含 JMS 將監督的所有受管理執行處理。
    4. JMS_Policy_Fleet_Compartment
      這是 OCI Identity and Access Management 原則名稱。JMS 所需的所有原則都會新增至此原則文件。
  6. 監控 OCI 執行處理底下,選取包含您要監控之 OCI 執行處理的區間。若要新增其他區間,請按一下新增資料列
  7. 按一下複查,即可查看將建立的所有資源。
    1. 確認已使用下列規則設定 JMS_DYNAMIC_GROUP
      ALL {resource.type='managementagent', resource.compartment.id=<Fleet_Compartment_OCID>}
      ANY {instance.compartment.id = <Fleet_Compartment_OCID>}
      ALL {resource.type='managementagent', resource.compartment.id=<OCI_Instance_Compartment_OCID>}
      ANY {instance.compartment.id = <OCI_Instance_Compartment_OCID>}
    2. 確認已使用下列規則設定 JMS_Policy_Fleet_Compartment
      ALLOW GROUP FLEET_MANAGERS TO MANAGE fleet IN COMPARTMENT Fleet_Compartment
      ALLOW GROUP FLEET_MANAGERS TO MANAGE management-agents IN COMPARTMENT Fleet_Compartment
      ALLOW GROUP FLEET_MANAGERS TO MANAGE management-agent-install-keys IN COMPARTMENT Fleet_Compartment
      ALLOW GROUP FLEET_MANAGERS TO READ METRICS IN COMPARTMENT Fleet_Compartment
      ALLOW GROUP FLEET_MANAGERS TO MANAGE instance-family IN COMPARTMENT Fleet_Compartment
      ALLOW GROUP FLEET_MANAGERS TO READ instance-agent-plugins IN COMPARTMENT Fleet_Compartment
      ALLOW GROUP FLEET_MANAGERS TO MANAGE log-groups IN COMPARTMENT Fleet_Compartment
      ALLOW GROUP FLEET_MANAGERS TO MANAGE log-content IN COMPARTMENT Fleet_Compartment
      ALLOW GROUP FLEET_MANAGERS TO MANAGE jms-plugins IN COMPARTMENT Fleet_Compartment
      ALLOW GROUP FLEET_MANAGERS TO MANAGE instance-family IN COMPARTMENT <OCI_Instance_Compartment>
      ALLOW GROUP FLEET_MANAGERS TO READ instance-agent-plugins IN COMPARTMENT <OCI_Instance_Compartment>
       
      ALLOW DYNAMIC-GROUP JMS_DYNAMIC_GROUP TO USE METRICS IN COMPARTMENT Fleet_Compartment
      ALLOW DYNAMIC-GROUP JMS_DYNAMIC_GROUP TO MANAGE management-agents IN COMPARTMENT Fleet_Compartment
      ALLOW DYNAMIC-GROUP JMS_DYNAMIC_GROUP TO MANAGE log-content IN COMPARTMENT Fleet_Compartment
      ALLOW DYNAMIC-GROUP JMS_DYNAMIC_GROUP TO MANAGE jms-plugins IN COMPARTMENT Fleet_Compartment
      ALLOW DYNAMIC-GROUP JMS_DYNAMIC_GROUP TO MANAGE metrics IN COMPARTMENT Fleet_Compartment WHERE target.metrics.namespace='java_management_service'
      ALLOW DYNAMIC-GROUP JMS_Dynamic_Group TO MANAGE management-agents IN COMPARTMENT <OCI_Instance_Compartment>
      ALLOW DYNAMIC-GROUP JMS_DYNAMIC_GROUP TO USE METRICS IN COMPARTMENT <OCI_Instance_Compartment>
      ALLOW DYNAMIC-GROUP JMS_DYNAMIC_GROUP TO MANAGE jms-plugins IN COMPARTMENT <OCI_Instance_Compartment>
       
      ALLOW resource jms SERVER-COMPONENTS TO MANAGE metrics IN COMPARTMENT Fleet_Compartment WHERE target.metrics.namespace='java_management_service'
      ALLOW resource jms SERVER-COMPONENTS TO USE management-agent-install-keys IN COMPARTMENT Fleet_Compartment
      ALLOW resource jms SERVER-COMPONENTS TO MANAGE log-groups IN COMPARTMENT Fleet_Compartment
      ALLOW resource jms SERVER-COMPONENTS TO MANAGE log-content IN COMPARTMENT Fleet_Compartment
      ALLOW resource jms SERVER-COMPONENTS TO READ instances IN tenancy
      ALLOW resource jms SERVER-COMPONENTS TO INSPECT instance-agent-plugins IN tenancy
  8. 按一下頁面底部的確認以啟動「入職精靈」。
  9. 會顯示一個畫面,通知您已順利設定先決條件。按一下完成以關閉視窗。

    附註:

    如果建立程序發生錯誤,就會顯示錯誤訊息。解決錯誤並重新啟動「入職精靈」以繼續。

JMS setup is successful 通知訊息會顯示在頂端。