Ebs On Oci m03 Ebs On Oci Cloud Manager Ed17

M03: EBS Cloud Manager
EBS Cloud Manager
http://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

2
Agenda
➢ EBS Cloud Manager Overview

➢ Functionality and Behind the scene
➢ EBS Cloud Manager Deployment – Pre-Req
➢ Setup and Configurations
➢ EBS Cloud Manager Deployment Flow
➢ EBS Cloud Manager Console Walkthrough
➢ Future Roadmap
➢ Lab
➢ Activity Guide – Setup EBS Cloud Manager

3
Atul Kumar
⮚ Oracle ACE, Author & Cloud Architect

⮚ 21+ Years working on Oracle EBS/DBA & Cloud
⮚ UK’s biggest EBS (R12) Migration to Cloud
⮚ Helped 6500+ individuals to learn Cloud & Cloud Native
https://linkedin.com/in/oracleappsdba © Copyright 2021| K21 Academy | All Rights Reserved

Amit P
➢ 19+ Years Experience on Oracle (DBA, AppsDBA, Cloud )
➢ Expert in Cloud (OCI, EBS, IDCS, Azure)
➢ Oracle Certified Cloud Architect (OCI, Cloud DBA)
➢ Multiple EBS Migration to Cloud
➢ Speaker AIOUG, UKOUG
➢ Help Customers in their Cloud Journey
➢ Trained 1000+ Trainees and 50+ Corporate Clients
5
Getting Help
support@k21academy.com

6
Recap
OCI Marketplace

8
IAM Service

9
IAM

10
IAM
Tenancy/ Root Compartment
1 Network Admin Group 1 Storage Admin Group
Users Policies Users Policies

2 2
Compartment Network Compartment Storage
Virtual Cloud Load Block Storage File Object Storage

Network Balancer Storage

11
Compartment
A compartment is a
collection of related
resources. It helps you
isolate and control
access to your
resources

12
Compartment

13
IAM
API Signing Key Auth Token
➢ Public/Private Key Pair
➢ Oracle generated token strings
➢ When using OCI API conjunction with
➢ Old name Swift passwords
CLI/SDK
➢ Authenticates with 3rd Party API which dosent
➢ RSA Key pair in PEM format
support OCI signature based authentication.
➢ Do not expires

14
OCI Network
VCN
➢ Subnets
➢ Gateways
➢ Routing tables
➢ Security lists/groups
➢ Security rules
http://k21academy.com/youtube © Copyright 2021| K21 Academy | All Rights Reserved

15
Network Config by Network Admin
http://k21academy.com/youtube © Copyright 2021| K21 Academy | All Rights Reserved

16
EBS Cloud Automation Tools

17
Overview
EBS Cloud Manager
EBS Cloud Manager Overview
EBS Cloud Manager one of the

dedicated automation tool for Oracle
Applications available only on Oracle
OCI. It mainly provides automation of
various day-to-day activities we do it
on Oracle Applications as an Apps
DBA.

19
EBS Cloud Manager Overview
➢ Centralized tool for managing multiple EBS instances

➢ Web Based tool available on OCI
➢ Supersedes EBS Cloud Admin Tool
➢ Capable of handling day-to-day Apps DBA tasks
➢ Migration of On-prem environment.
➢ Web based UI gives foundation for further
automation

20
EBS Cloud Manager Features
➢ Provisioning of Oracle applications – Simple &
Complex Deployments
➢ Multiple Database deployment Options – Compute,
VM-DB, Exadata
➢ Easy Backups to Cloud storage
➢ Separation of duties
➢ Patching - Database Bundle Patches Selection
Options
➢ Fast Cloning
➢ Lift & Shift – Multiple Options
➢ De-commission of Instances
➢ Scalability & High availability Setup
➢ TDE – For Database
➢ Latest Database version Support (19c – Till now)
21
EBS Cloud Manager
EBS Cloud Manager

Provisioning Lift & Shift Lifecycle Features
➢One-Click ➢Traditional Management ➢Network Profiles
➢Advance ➢Reduced downtime ➢Cloning ➢Extensibility Framework
✓Compute ➢Backups ➢Scheduling Policies
✓VM-DB ➢De-commision
✓Exadata
✓Shared File System

22
EBS Cloud Manager Benefits
➢ Secure, with a load balancer that works as a TLS termination point.

➢ Deployed on a subnet that is not directly exposed to the end user's
network
➢ Deploying Instances in Public/Private Deployments.
➢ Multiuser, allowing multiple DBAs to manage the same set of Oracle E-
Business Suite environments.
➢ Fully integrated with Identity Cloud Service (IDCS) for authentication
services.
➢ Lift and Shift with Reduced Down time.

23
Tenancy Administrator
➢ Creates compartments, policies, groups, and users
➢ Creates the identity provider (IDCS) group mapping to manage authentication

24
Roles & Tasks

25
Network Administrator
➢ Design Network
➢ Secure Network Management
➢ Monitors Network

26
EBS Cloud Manager Administrator
➢ Deploy & configure CM
➢ Defines Network Profile to remap OCI Network with EBS Network
➢ Map OCI tenancy groups with Network Profiles

27
EBS Administrator
➢ Provisioning & Cloning Environments
➢ Maintain Technology stack, Application & Databases

28
EBSCM: Separation Of Duties
➢ Design Network ➢ Deploy & configure Cloud ➢ Provisioning & Cloning
➢ Secure Network Manager Environments
Management ➢ Defines Network Profile to ➢ Clone
➢ Monitors Network remap OCI Network with ➢ Maintain Technology
EBS Network stack, Application &
➢ Map OCI tenancy groups Databases
with Network Profiles

29
Network Reference Architecture
➢ Define Own VCN

➢ Network Isolation at each tier
➢ Load Balancer
➢ Application
➢ Database
➢ Supports Regional/AD-Specific
Subnets
➢ GWY support – Internet
Gateway or Dynamic Routing
Gateway
➢ Load Balancer Optional

30
EBSCM Deployment
Tenancy Administrator
➢ Define Compartments
➢ Network
➢ EBS Cloud Manager
➢ EBS Compartment

31
EBSCM Deployment
Network Administrator
➢ Implements network &

security design
➢ Regional Subnets
(preferred)

32
EBSCM Deployment
Cloud Manager Administrator
➢ Deployment of Cloud Manager

➢ Leverage existing Network
➢ Network Profile Configuration

33
EBSCM Deployment
Application Administrator
➢ Provisioning EBS instances

➢ Maintaining it
➢ Leveraging Network
Profiles

34
Setup Flow
EBS Cloud Manager
Pre-Req for Cloud Manager
➢ Oracle Cloud Account

➢ Multiple Compartments – Recommended for Enterprise Deployment
➢ Single Compartment for all – Demo
➢ Access to Compute , Storage, VCN
➢ Minimum VM 2.1 Shape or of your choice
➢ Either an IDCS-enabled OCI tenancy, or an IDCS account that can be
used to federate an existing OCI tenancy that is not IDCS-enabled
➢ Tenancy administrator must be distinct from the Oracle E-Business
Suite Cloud Manager administrator and the Oracle E-Business Suite
administrators

36
EBS Cloud Manager: Setup Flow
EBS Cloud Manager Setup to make it easy to understand and execute

we broke it into 4 Phases.
Phase – 1 – Compartment Design

Phase – 2 – Network design
Phase – 3 – Cloud Manager Deployment
Phase – 4 – Setup and Federation

37
EBS Cloud Manager : Flow Diagram
Phase-I – Compartment Design
Assign appropriate
Create Compartment Create Groups Create User
policies
Phase-II – Network Design
Create VCN or Use Existing one Create IGW or NAT Gateway Routing Rules and Security List Create Subnets
Phase-III- Cloud Manager Deployment

Launch Oracle Partner Launch Cloud Manager
Access OCI Marketplace Select Shape Networking resource
Instance Instance
Phase-IV- Setup and Federation

Configuration
API Signing Key Note Credentials IDCS Integration Final Configuration
Step
EBS Cloud Manager : Flow Diagram
Phase-I – Compartment Design
Assign appropriate
Create Compartment Create Groups Create User
policies
Phase-II – Network Design
Phase-III- Cloud Manager Deployment

Launch Oracle Partner Launch Cloud Manager
Access OCI Marketplace Select Shape Networking resource
Instance Instance
Phase-IV- Setup and Federation

Configuration
Step
EBS Cloud Manager : Phase I
Compartment Design
Create & Map Groups Assign appropriate

Create Compartment Create User
IDCS & OCI policies

40
Create Compartment & Policies
ROOT COMPARTMENT
SINGLE SHARED COMPARTMENT
EBS CLOUD MANAGER

EBS ENVIRONMENTS
NETWORK RESOURCES

41
ROOT COMPARTMENT
SHARED COMPARTMENT
EBS CLOUD MANAGER

EBS ENVIRONMENTS
SHARED COMPARTMENT
NETWORK RESOURCES

42
ROOT COMPARTMENT
NON - SHARED COMPARTMENT
EBS CLOUD MANAGER

EBS ENVIRONMENTS
NETWORK RESOURCES

43
ROOT COMPARTMENT
SUB-COMPARTMENT
EBS CLOUD MANAGER

EBS ENVIRONMENTS
NETWORK RESOURCES

44
Create Compartment

45
Create Federated groups

46
Mapping Groups

47
Compartment/Group Federated Group Policies
Network Compartment/ idcs-netadmin- Allow group netadmin-grp to manage virtual-network-family in compartment network-
compartment
netadmin-grp grp Allow group ebscmadmin-grp to use virtual-network-family in compartment network-compartment
Allow group ebsdemodba-grp to use virtual-network-family in compartment network-compartment
Cloud Manager idcs-ebsadmin- Allow group ebscmadmin-grp to manage instance-family in compartment ebscm-compartment
Allow group ebscmadmin-grp to manage load-balancers in compartment ebscm-compartment
Compartment/ grp Allow group ebscmadmin-grp to manage tag-namespaces in compartment ebscm-compartment
ebscmadmin-grp Allow group ebsdemodba-grp to manage instance-family in compartment ebscm-compartment
Allow group ebsdemodba-grp to manage load-balancers in compartment ebscm-compartment
Allow group ebsdemodba-grp to manage database-family in compartment ebscm-compartment
Allow group ebsdemodba-grp to manage volume-family in compartment ebscm-compartment
Allow group ebsdemodba-grp to use tag-namespaces in compartment ebscm-compartment
EBS Compartment/ idcs- Allow group ebsdemodba-grp to manage instance-family in compartment ebsdemo-compartment
Allow group ebsdemodba-grp to manage database-family in compartment ebsdemo-compartment
ebsdemodba-grp ebsdemodba- Allow group ebsdemodba-grp to manage load-balancers in compartment ebsdemo-compartment
grp Allow group ebsdemodba-grp to manage volume-family in compartment ebsdemo-compartment
Allow group ebsdemodba-grp to use tag-namespaces in compartment ebsdemo-compartment
Allow group ebscmadmin-grp to manage tag-namespaces in compartment ebsdemo-compartment

48
Compartment/Group Federated Group Policies

Root Compartment Allow group netadmin-grp to inspect compartments in tenancy
Allow group ebscmadmin-grp to inspect compartments in tenancy
Allow group ebscmadmin-grp to inspect users in tenancy
Allow group ebscmadmin-grp to inspect groups in tenancy

49
Create Federated Users

50
Username

51
Create Non-Federated Users

52
EBS Cloud Manager : Phase II
Network Design Phase

53
Network Layout for EBSCM
➢ Cloud Manager can be deployed in Private Subnet (19.3.1.1 onwards)

➢ Subnet can be Regional or AD-Specific
➢ Separated by Compartment and Separate subnets for Application and
Databases.
➢ Public or Private Load Balancer

54
Supported Subnet Types

55
Network Layout for EBSCM

56
VCN & Gateways
➢ Existing VCN can be
used
➢ IGW when public subnet

selected.
➢ If EBSCM deployed in
Private Subnet then
NAT Gateway is needed.
➢ Update Routing Table

Accordingly.

57
VCN & IGW in Network Compartment

58
Security Lists
➢ EBS Cloud Manager Security List

➢ Ports Open: 22,8081 (Public Network & Load Balancer Subnets)
➢ Load Balancer Security List

➢ Port Open : 443 to Public Network

59
Security Lists & Route Table

60
When Regional Subnet

61
When AD-Specific Subnet
➢ VCN CIDR : 10.0.0.0/16

➢ Subnet to be created 3
➢ EBS Cloud Manager – For Cloud Manager Deployment
➢ Public Load Balancer (Inbuilt Failover Provided), needs 2 subnet.

62
When Private Subnets
Components Abbreviation Details
Dynamic Routing Gateway DRG For On-prem to VCN Communication

Network Address translation (NAT ) gateway NATGW Accessing internet from private subnet
Service Gateway SGW For securely accessing servies (By
passing internet)

63
When Private Subnets
REGIONAL
AD-SPECIFIC

64
EBS Cloud Manager : Phase III
Cloud Manager Deployment
Access OCI Launch Oracle Networking Launch Cloud

Select Shape
Marketplace Partner Instance resource Manager Instance

65
Cloud Manager Instance Creation
➢ Sign-in to Console with Cloud Manager

User you created.
➢ Navigate to Marketplace

66
➢ Select Oracle E-Business Suite Cloud Manager
image
➢ Launch Instance.

67

68
➢ Create Compute Instance

➢ Select Availability domain
➢ Choose Image Source
➢ You will see the name of the OCI Console Marketplace image:
Oracle E-Business Suite Cloud Manager
➢ Choose VM as instance type.
➢ Choose Shape (Min 2.1 or anything of your choice)
➢ Boot Volume.
➢ Add SSH keys
➢ Select VCN Network, Subnet – EBS Cloud Manager Subnet.

69
Cloud Manager Instance

70
EBS Cloud Manager: Phase IV
Setup and Federation Phase
Configuration
Step

71
API Signing Key
➢ Generate an API signing key and associated fingerprint with the EBS
cloud Manager User
➢ Generating API Signing Key : openssl

72
Note User Information
➢ OCID of Tenancy

73
➢ OCID of Compartment

74
OCID of VCN

75
Create Load Balancer

76
Run the Configuration Script

77

78
Oracle E-Business Suite Cloud Manager Administrator Group

79
Load Balancer
➢ Select the Load Balancer and its Shape

80
Subnet selection

81
Final Message

82
IDCS Integration with EBSCM
➢ IDCS used for authenticating Oracle E-Business Suite administrator
➢ Create Cloud Manager Administrator group and use in IDCS
➢ Register Oracle E-Business Suite Cloud Manager application with

IDCS.

83

84

85
Register Oracle E-Business Suite Cloud Manager as a Confidential Application

86
Finalize the Configuration
Once again run the Configuration Script

87

88

89
Login

90
Walkthrough
EBS Cloud Manager
Walk through

92
Walk through

93
Walk through

94
Walk through

95
Automated DR on Cloud
Automated DR Setup on Cloud

96
Advanced Lift and Shift
Oracle
Cloud
Infrastruct
ure Load
EBS Prod
App Tier DB Tier
Balancer
010111010001010101110101100101000111010
010001110101001011001011011001010111010
Chef
Server
EBS Cloud
Secondary
01011101000101101100101000111010
01000111011001011011001010111010
Manager VM Site
Oracle Data
File Guard
Sync Logs Primary
Transfer
➢ DR way to migrated to Cloud Site
EBS Prod
Primary
Discontinued Site
New OAM
App Tier
On-premises Feature DB Tier

97
Features for Future
➢ Provisioning and cloning for additional EBS and database combinations

➢ Streamlined database patching
➢ Discovery of manually deployed EBS environments
➢ Disaster recovery and failover
➢ Lift & Shift using stage server
➢ EBS environment elasticity (managed server, JVM memory, delete node)

98
Step By Step Activity
Guide
Lab Exercises

100
Summary
➢ EBS Cloud Manager Overview
➢ Functionality and Behind the scene
➢ EBS Cloud Manager Deployment – Pre-Req
➢ Setup and Configurations
➢ EBS Cloud Manager Deployment Flow
➢ EBS Cloud Manager Console Walkthrough
➢ Future Roadmap
➢ Lab
➢ Activity Guide – Setup EBS Cloud Manager

101
Find Us
https://www.facebook.com/K21Academy
http://twitter.com/k21Academy
https://www.linkedin.com/company/k21academy
https://www.youtube.com/k21academy

102

Ebs On Oci m03 Ebs On Oci Cloud Manager Ed17

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Ebs On Oci m03 Ebs On Oci Cloud Manager Ed17

Uploaded by

Copyright:

Available Formats

M03: EBS Cloud Manager

EBS Cloud Manager

http://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

➢ EBS Cloud Manager Overview

http://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

⮚ Oracle ACE, Author & Cloud Architect

https://linkedin.com/in/oracleappsdba © Copyright 2021| K21 Academy | All Rights Reserved

http://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

http://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

http://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

http://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

http://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

1 Network Admin Group 1 Storage Admin Group

Users Policies Users Policies

Compartment Network Compartment Storage

Virtual Cloud Load Block Storage File Object Storage

http://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

http://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

http://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

http://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

http://k21academy.com/youtube © Copyright 2021| K21 Academy | All Rights Reserved

http://k21academy.com/youtube © Copyright 2021| K21 Academy | All Rights Reserved

http://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

EBS Cloud Manager one of the

http://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

➢ Centralized tool for managing multiple EBS instances

http://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

EBS Cloud Manager

http://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

➢ Secure, with a load balancer that works as a TLS termination point.

http://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

http://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

http://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

http://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

http://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

http://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

http://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

➢ Define Own VCN

http://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

http://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

➢ Implements network &

http://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

Cloud Manager Administrator

➢ Deployment of Cloud Manager

http://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

➢ Provisioning EBS instances

http://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

➢ Oracle Cloud Account

http://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

EBS Cloud Manager Setup to make it easy to understand and execute

Phase – 1 – Compartment Design

http://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

Phase-II – Network Design

Phase-III- Cloud Manager Deployment

Phase-IV- Setup and Federation

Phase-II – Network Design

Phase-III- Cloud Manager Deployment

Phase-IV- Setup and Federation

Create & Map Groups Assign appropriate

http://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

SINGLE SHARED COMPARTMENT

EBS CLOUD MANAGER

http://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved