\n\n\n\n
Terraform is a powerful Infrastructure as Code (IaC) tool that allows you to define and provision cloud resources in a declarative way. This guide will walk you through setting up Terraform with Oracle Cloud Infrastructure (OCI), covering the OCI CLI configuration on both Mac and Windows, creating OCI compartments, and demonstrating some practical use cases.<\/p>\n\n\n\n
Prerequisites<\/strong><\/p>\n\n\n\n Before you begin, ensure you have the following:<\/p>\n\n\n\n Step 1: Install and Configure the OCI Command Line Interface (CLI)<\/strong><\/p>\n\n\n\n The OCI CLI is essential for interacting with OCI resources from your local machine, and Terraform will use its configuration to authenticate.<\/p>\n\n\n\n 1.1 Install OCI CLI on Mac<\/strong><\/p>\n\n\n\n Bash<\/p>\n\n\n\n Bash<\/p>\n\n\n\n This should display the installed OCI CLI version.<\/p>\n\n\n\n 1.2 Install OCI CLI on Windows<\/strong><\/p>\n\n\n\n Bash<\/p>\n\n\n\n You should see the installed OCI CLI version.<\/p>\n\n\n\n 1.3 Configure OCI CLI<\/strong><\/p>\n\n\n\n After installation, you need to configure the CLI with your OCI user credentials.<\/p>\n\n\n\n Bash<\/p>\n\n\n\n Step 2: Install Terraform<\/strong><\/p>\n\n\n\n Now that your OCI CLI is configured, let’s install Terraform.<\/p>\n\n\n\n Bash<\/p>\n\n\n\n This should display the installed Terraform version<\/p>\n\n\n\n Reference: Quickstart and CLI config pages docs.oracle.com<\/a> docs.oracle.com<\/a>.<\/p>\n\n\n\n OCI Console user API Keys page showing uploaded public key and fingerprint]<\/p>\n\n\n\n Guidance: The API key links your CLI\/Terraform sessions to your OCI user and is required for provider authentication docs.oracle.com<\/a>.<\/p>\n\n\n\n Reference: HashiCorp Terraform OCI tutorials and Oracle provider docs HashiCorp Developer<\/a> Terraform Registry<\/a>.<\/p>\n\n\n\n Option A \u2014 Use environment variables (suitable for CI\/CD and temporary sessions):<\/p>\n\n\n\n Option B \u2014 Use a provider block referencing the CLI config profile (recommended when ~\/.oci\/config exists):<\/p>\n\n\n\n Define variables in variables.tf and sensitive values in terraform.tfvars or environment variables for security. Confirm provider setup by running:<\/p>\n\n\n\n terraform plan output showing provider configuration OK<\/p>\n\n\n\n Create compartment.tf:<\/p>\n\n\n\n Create outputs.tf:<\/p>\n\n\n\n Workflow:<\/p>\n\n\n\n Notes:<\/p>\n\n\n\n Reference: Create a Compartment tutorial and provider resource docs docs.oracle.com<\/a> Terraform Registry<\/a>.<\/p>\n\n\n\n Instantiate module:<\/p>\n\n\n\n Recommendation: Keep compartments small and lifecycle simple; use modules for repeatability and guardrails.<\/p>\n\n\n\n References: Simple infrastructure tutorial and Terraform Registry examples docs.oracle.com<\/a> Terraform Registry<\/a>.<\/p>\n\n\n\n Reference: Provider and tutorial guidance on behavior and best practices Terraform Registry<\/a> docs.oracle.com<\/a>.<\/p>\n\n\n\n This article is based followed official OCI and Terraform guidance: OCI CLI quickstart and configuration, Set Up OCI Terraform, and Create a Compartment tutorials, and provider documentation for the oci_identity_compartment resource docs.oracle.com<\/a> docs.oracle.com<\/a> docs.oracle.com<\/a> Terraform Registry<\/a> HashiCorp Developer<\/a>. Use modules and remote state early, and keep IAM and key management secure when automating OCI with Terraform.<\/p>\n\n\n\n If you like my work, please provide feedback, support and reach out if you need further support<\/p>\n\n\n\n Author: Zak Khan <\/p>\n\n\n\n Email: zak@cosmicro.com.au<\/p>\n","protected":false},"excerpt":{"rendered":" Overview This tutorial shows how to set up Terraform to manage Oracle Cloud Infrastructure (OCI), configure the OCI CLI on macOS and Windows, and create an OCI compartment with Terraform. It includes sample commands, Terraform code snippets, configuration tips, and suggested places where you would add graphical snapshots in your documentation or blog. References to […]<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7,93],"tags":[92,90,27,91],"class_list":["post-2473","post","type-post","status-publish","format-standard","hentry","category-quick-tips","category-infrastructure-oracle-technology-terraformcyber-security","tag-infrastructure","tag-oracle","tag-technology","tag-terraform"],"yoast_head":"\n\n
\n
bash -c \"$(curl -L https:\/\/raw.githubusercontent.com\/oracle\/oci-cli\/master\/scripts\/install\/install.sh)\"<\/code><\/pre>\n\n\n\n\n
<\/figure>\n\n\n\n
\n
oci --version<\/code><\/code><\/pre>\n\n\n\n3.62.0<\/code><\/code><\/pre>\n\n\n\n\n
<\/figure>\n\n\n\n
\n
<\/figure>\n\n\n\n
\n
\n
oci --version<\/code><\/code><\/pre>\n\n\n\n\n
oci setup config<\/code><\/code><\/pre>\n\n\n\n\n
<\/figure>\n\n\n\n
\n
<\/figure>\n\n\n\n
<\/figure>\n\n\n\n
\n
terraform --version<\/code><\/code><\/pre>\n\n\n\n
\n\n\n\n3. Prepare API keys and SSH keys for Terraform authentication<\/h3>\n\n\n\n
Generate an RSA key pair for API signing (example on macOS\/Linux): \nmkdir -p ~\/.oci openssl genrsa -out ~\/.oci\/oci_api_key.pem 2048 openssl rsa -pubout -in ~\/.oci\/oci_api_key.pem -out ~\/.oci\/oci_api_key_public.pem<\/code><\/code><\/pre>\n\n\n\n\n
<\/figure>\n\n\n\n
chmod 600 ~\/.oci\/oci_api_key.pem<\/code><\/code><\/pre>\n\n\n\n
\n\n\n\n4. Install Terraform and OCI Provider<\/h3>\n\n\n\n
\n
terraform {\n required_version = \">= 1.5.0\"\n required_providers {\n oci = {\n source = \"oracle\/oci\"\n version = \">= 7.0.0\"\n }\n }\n} <\/code><\/code><\/pre>\n\n\n\n\n
terraform init <\/code><\/code><\/pre>\n\n\n\n\n
\n\n\n\n5. Configure Terraform to use OCI credentials<\/h3>\n\n\n\n
export OCI_TENANCY=<tenancy_ocid>\nexport OCI_USER=<user_ocid>\nexport OCI_FINGERPRINT=<api_key_fingerprint>\nexport OCI_KEY_FILE=~\/.oci\/oci_api_key.pem\nexport OCI_REGION=us-ashburn-1 <\/code><\/code><\/pre>\n\n\n\nprovider \"oci\" {\n tenancy_ocid = var.tenancy_ocid\n user_ocid = var.user_ocid\n fingerprint = var.fingerprint\n private_key_path = var.private_key_path\n region = var.region\n} <\/code><\/code><\/pre>\n\n\n\nterraform plan <\/code><\/pre>\n\n\n\n
\n\n\n\n6. Terraform example: Create an OCI Compartment<\/h3>\n\n\n\n
resource \"oci_identity_compartment\" \"example_compartment\" {\n name = \"demo-compartment\"\n description = \"Terraform-managed compartment for demos\"\n compartment_id = var.tenancy_ocid\n enable_delete = true\n freeform_tags = {\n created_by = \"terraform\"\n project = \"demo\"\n }\n} <\/code><\/pre>\n\n\n\noutput \"compartment_ocid\" {\n value = oci_identity_compartment.example_compartment.id\n} <\/code><\/pre>\n\n\n\n\n
\n
\n
\n\n\n\n7. Use cases and examples<\/h3>\n\n\n\n
\n
# modules\/compartment\/main.tf\nresource \"oci_identity_compartment\" \"this\" {\n name = var.name\n description = var.description\n compartment_id = var.parent_compartment_id\n enable_delete = var.enable_delete\n freeform_tags = var.tags\n}\n\n# modules\/compartment\/variables.tf\nvariable \"name\" {}\nvariable \"description\" { default = \"\" }\nvariable \"parent_compartment_id\" {}\nvariable \"enable_delete\" { default = false }\nvariable \"tags\" { default = {} } <\/code><\/pre>\n\n\n\nmodule \"project_compartment\" {\n source = \".\/modules\/compartment\"\n name = \"project-x\"\n parent_compartment_id = var.tenancy_ocid\n enable_delete = true\n tags = { owner = \"team-x\" }\n} <\/code><\/pre>\n\n\n\n
\n\n\n\n8. Troubleshooting and best practices<\/h3>\n\n\n\n
\n
\n\n\n\n9. Suggested graphical snapshots to include in your article<\/h3>\n\n\n\n
\n
\n\n\n\nQuick reference commands<\/h3>\n\n\n\n
\n
\n\n\n\nFinal notes<\/h3>\n\n\n\n