1z0-1084-22 Practice Exam Questions with Answers Oracle Cloud Infrastructure 2022 Developer Professional Certification

Adding OCI Service Broker for Kubernetes to Clusters:

Service brokers offer a catalog of backing services to workloads running on cloud native platforms. The Open Service Broker API is a commonly-used standard for interactions between service brokers and platforms. The Open Service Broker API specification describes a simple set of API endpoints that platforms use to provision, gain access to, and manage service offerings. Formore information about the Open Service Broker API, see resources available online including those at openservicebrokerapi.org.

OCI Service Broker for Kubernetes is an implementation of the OpenService Broker API. OCI Service Broker for Kubernetes is specifically for interacting with Oracle Cloud Infrastructure services from Kubernetes clusters. It includes three service broker adapters to bind to the following Oracle Cloud Infrastructure services:

-Object Storage

-Autonomous Transaction Processing

-Autonomous Data Warehouse

References:

https://docs.cloud.oracle.com/en-us/iaas/Content/Co ntEng/Tasks/contengaddingservicebrokers.htm

Oracle SQL Developer WebOracle SQLDeveloper Web in Autonomous Data Warehouse provides a development environment and a data modeler interface for Autonomous Databases. SQL Developer Web is available for databases with both dedicated Exadata infrastructure and shared Exadata infrastructure.

https://docs.cloud.oracle.com/en-us/ iaas/Content/Database/Tasks/adbtools.htm

What is a Pod Security Policy?

A Pod Security Policy is a cluster-level resource that controlssecurity sensitive aspects of the pod specification. The PodSecurityPolicy objects define a set of conditions that a pod must run with inorder to be accepted into the system, as well as defaults for the related fields. They allow an administrator to control the following:

Privilege Escalation

These options control the allowPrivilegeEscalation container option. This bool directly controls whether the no_new_privs flag gets set on the container process. This flag will prevent setuid binaries from changing the effective user ID, and prevent files from enabling extra capabilities (e.g. it will prevent the use of the ping tool). This behavior is required to effectively enforce MustRunAsNonRoot.

example:

# Require the container to run without root privileges.

rule: 'MustRunAsNonRoot'

If you use the Fn Project CLI or the Oracle Cloud Infrastructure CLI to invoke a function, authentication is handled for you. See Using the Fn Project CLI to Invoke Functions and Using the Oracle Cloud Infrastructure CLI to Invoke Functions.

If you use an Oracle Cloud Infrastructure SDK to invoke a function, you can use the SDK to handle authentication. See Using SDKs to Invoke Functions.

If you make a signed HTTP request to a function's invoke endpoint, you'll have to handleauthentication yourself by including a signature and the OCID of the compartment to which the function belongs in the request header

Fn Project CLI you can create an Fn Project CLI Context to Connect to Oracle Cloud Infrastructure and specify --provider oracle This option enables Oracle Functions to perform authentication and authorization using Oracle Cloud Infrastructure request signing, private keys, user groups, and policies that grant permissions to those user groups.

References:

https://blogs.oracle.com/developers/oracle-functions-invoking-functions-automatically-with-cloud-events

https://docs.cloud.oracle.com/en-us/iaas/Content/Functions/Tasks/functionsinvokingfunctions.htm

Troubleshooting Oracle Functions:

There are common issues related to Oracle Functions and how you can address them.

Invoking a function returns a FunctionInvokeSubnetNotAvailable message and a 502 error (due to a DHCP Options issue)

When you invoke a function that you've deployed to OracleFunctions, you might see the following error message:

{"code":"FunctionInvokeSubnetNotAvailable","message":"dhcp options ocid1.dhcpoptions........ does not exist or Oracle Functions is not authorized to use it"}

Fn: Error invoking function. status: 502 message: dhcp options ocid1.dhcpoptions........ does not exist or Oracle Functions is not authorized to use it

If you see this error:

Double-check that a policy has been created to give Oracle Functions access to network resources.

Create Policies to ControlAccess to Network and Function-Related Resources:

Service Access to Network Resources

When Oracle Functions users create a function or application, they have to specify a VCN and a subnet in which to create them. To enable the Oracle Functions service tocreate the function or application in the specified VCN and subnet, you must create an identity policy to grant the Oracle Functions service access to the compartment to which the network resources belong.

To create a policy to give the Oracle Functions service access to network resources:

Log in to the Console as a tenancy administrator.

Create a new policy in the root compartment:

Open the navigation menu. Under Governance and Administration, go to Identity and click Policies.

Follow the instructions in To create a policy, and give the policy a name (for example, functions-service-network-access).

Specify a policy statement to give the Oracle Functions service access to the network resources in the compartment:

Allow service FaaS to use virtual-network-family in compartment

For example:

Allow service FaaS to use virtual-network-family in compartment acme-network

Click Create.

Double-check that the set of DHCP Options in the VCN specified for the application still exists.

References:

https://docs.cloud.oracle.c om/en-us/iaas/Content/Functions/Tasks/functionstroubleshooting.htm

https://docs.cloud.oracle.com/en-us/iaas/Content/Functions/Tasks/functionscre atingpolicies.htm