interface.yaml

# Copyright (c) 2023 Oracle and/or its affiliates.
# Licensed under the Universal Permissive License v 1.0 as shown at https://oss.oracle.com/licenses/upl.

###HEADER###

variableGroups:
  - title: Hide constants and internal variables
    visible: false
    variables:
      - tenancy_ocid
      - compartment_ocid
      - current_user_ocid
      - region
      - marketplace_source_images
      - env_variables
      - devops_pipeline_image
      - devops_deploy_shape
      - devops_memory
      - devops_ocpu
      - lb_health_check_timeout_in_millis
      - lb_health_check_interval_ms
      - lb_health_check_retries
      - lb_listener_cypher_suite
      - db_version
      - db_license_model
  - title: "General Configuration"
    variables:
      - compartment_id
      - availability_domain

  ###APPLICATION_GROUP###
  - title: "Stack authentication"
    variables:
      - use_existing_token
      - current_user_token
      - use_existing_vault
      - new_vault_display_name
      - vault_compartment_id
      - vault_id
      - key_id
  - title: "Application Performance Monitoring"
    variables:
      - is_free_tier
  - title: "Database"
    variables:
      - use_existing_database
      - autonomous_database_display_name
      - autonomous_database_admin_password
      - data_storage_size_in_tbs
      - cpu_core_count
      - ocpu_count
      - db_compartment
      - autonomous_database
      - autonomous_database_user
      - autonomous_database_password
  ###APP_CONFIG_GROUP###
  - title: "Application URL"
    variables:
      - create_fqdn
      - dns_compartment
      - zone
      - subdomain
  - title: "Network"
    variables:
      - create_new_vcn
      - vcn_compartment_id
      - existing_vcn_id
      - vcn_cidr
      - use_existing_app_subnet
      - existing_app_subnet_id
      - app_subnet_cidr
      - use_existing_db_subnet
      - existing_db_subnet_id
      - db_subnet_cidr
      - use_existing_lb_subnet
      - existing_lb_subnet_id
      - lb_subnet_cidr
      - open_https_port
      - use_reserved_ip_address
      - reserved_ip_address
      - certificate_ocid
      - use_default_lb_configuration
      - maximum_bandwidth_in_mbps
      - minimum_bandwidth_in_mbps
      - health_checker_url_path
      - health_checker_return_code
      - enable_session_affinity
      - session_affinity
      - session_affinity_cookie_name
  - title: "Container instance configuration"
    variables:
      - shape
      - memory_in_gbs
      - ocpus

variables:
  # General Configuration
  compartment_id:
    type: oci:identity:compartment:id
    required: true
    title: Compute Compartment
    description: The compartment in which to create all Compute resources.
    default: compartment_ocid
  availability_domain:
    type: oci:identity:availabilitydomain:name
    required: true
    title: Availability domain
    description: The availability domain in which to create all Compute resources.
    dependsOn:
      compartmentId: ${compartment_id}
  # Application
  ###APPLICATION###
  # APM
  is_free_tier:
    type: boolean
    required: true
    title: Create as Always Free Domain
    description: Up to 1000 spans per hour, 31 day storage for trace data and 10 monitor runs per hour.
    default: false
  # Database
  use_existing_database:
    type: boolean
    default: true
    required: true
    title: Use existing database (Autonomous Database Serverless)
  autonomous_database_display_name:
    type: string
    required: true
    title: Autonomous Database display name
    description: A user-friendly name to help you easily identify the resource.
    visible:
      not:
        - use_existing_database
  autonomous_database_admin_password:
    type: password
    title: Database ADMIN password
    # validate
    description: Password must be 12 to 30 characters and contain at least one uppercase letter, one lowercase letter, and one number. The password cannot contain the double quote (") character or the username "admin".
    required: true

    visible:
      not:
        - use_existing_database
  data_storage_size_in_tbs:
    type: number
    required: true
    title: Storage (TB)
    description: The amount of storage to allocate.
    default: 1
    visible:
      not:
        - use_existing_database
  # cpu_core_count:
  #   type: number
  #   required: true
  #   title: CPU core count
  #   description: The number of OCPU cores to be made available to the database
  #   default: 2
  #   visible:
  #     not:
  #       - use_existing_database
  ocpu_count:
    type: number
    required: true
    title: OCPU count
    description: The number of OCPU cores to enable. Available cores are subject to your tenancy's service limits.
    default: 1
    visible:
      not:
        - use_existing_database
  db_compartment:
    type: oci:identity:compartment:id
    required: true
    title: Autonomous Database compartment
    description: The compartment conataining the Autonomous Database.
    default: ${compartment_id}
    visible:
      and:
        - use_existing_database
  autonomous_database:
    type: oci:database:autonomousdatabase:id
    required: true
    title: Autonomous Database
    description: The Autonomous Database used by the application.
    dependsOn:
      compartmentId: ${db_compartment}
    visible:
      and:
        - use_existing_database
  autonomous_database_user:
    type: string
    required: true
    title: DB username
    default: ""
    description: The username used to connect to the database.
    visible:
      and:
        - use_existing_database
  autonomous_database_password:
    type: password
    title: DB user password
    required: true
    description: The password of the user used to access the database.
    visible:
      and:
        - use_existing_database
  # Vault
  use_existing_vault:
    type: boolean
    title: Use an existing key vault
    required: true
    default: true
    description: This vault will be used to store the authentication token needed by the build and deploy pipelines to publish the container image to the container registry.
  new_vault_display_name:
    type: string
    title: Key vault display name
    description: A user-friendly name to help you easily identify the resource.
    required: true
    visible:
      not:
        - use_existing_vault
  vault_compartment_id:
    type: oci:identity:compartment:id
    required: true
    title: Compartment
    description: The compartment containing the existing vault.
    default: compartment_ocid
    visible:
      and:
        - use_existing_vault
  vault_id:
    type: oci:kms:vault:id
    required: true
    title: Vault
    description: Choose an existing vault used to store the authentication token.
    dependsOn:
      compartmentId: ${vault_compartment_id}
    visible:
      and:
        - use_existing_vault
  key_id:
    type: oci:kms:key:id
    required: true
    title: Encryption key
    description: This key will be used to encrypt the sensitive information stored as vault secrets.
    dependsOn:
      compartmentId: ${vault_compartment_id}
      vaultId: ${vault_id}
    visible:
      and:
        - use_existing_vault
  use_existing_token:
    type: boolean
    required: true
    title: Use existing authentication token
    description: This token will be used by the stack to authenticate the user when connecting to the code repository or container registry.
    default: true
  current_user_token:
    type: password
    required: true
    title: User's authentication token
    visible: use_existing_token
  ###APP_CONFIG###
  # FQDN
  create_fqdn:
    type: boolean
    required: true
    default: true
    title: Create DNS record
    description: If you check this checkbox the stack will create a DNS record that will resolve to the load balancer's IP address.
  dns_compartment:
    type: oci:identity:compartment:id
    required: true
    default: compartment_ocid
    title: DNS and Certificate compartement
    description: Compartment containing the DNS Zone and the Certificate
    visible: create_fqdn
  zone:
    type: string
    required: true
    title: DNS Zone
    description: Domain name in which the host name will be created.
    visible: create_fqdn
  subdomain:
    type: string
    required: true
    title: Host name
    description: The host name will be created on the selected Zone and will resolve to the the load balancer's IP address.
    visible: create_fqdn
  # Network
  create_new_vcn:
    type: boolean
    required: true
    title: Create new VCN
    default: true
  vcn_compartment_id:
    type: oci:identity:compartment:id
    required: true
    title: The compartment of the existing VCN.
    default: compartment_ocid
    visible:
      not:
        - create_new_vcn
  existing_vcn_id:
    type: oci:core:vcn:id
    required: true
    title: Select to VCN
    visible:
      not:
        - create_new_vcn
    dependsOn:
      compartmentId: ${vcn_compartment_id}
  vcn_cidr:
    type: string
    required: true
    title: VCN IPv4 CIDR Blocks
    description: This VCN will be used for all resources created by the stack.
    default: "10.0.0.0/24"
    pattern: "^(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9]).(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9]).(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9]).(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9])\\/(3[0-2]|[1-2]?[0-9])$"
    visible: create_new_vcn
  use_existing_app_subnet:
    type: boolean
    required: true
    title: Use existing Application Subnet
    default: false
    visible:
      not:
        - create_new_vcn
  existing_app_subnet_id:
    type: oci:core:subnet:id
    required: true
    title: Select the application subnet
    dependsOn:
      compartmentId: ${vcn_compartment_id}
      vcnId: ${existing_vcn_id}
      hidePublicSubnet: true
    visible: use_existing_app_subnet
  app_subnet_cidr:
    type: string
    required: true
    title: Application Subnet IPv4 CIDR Blocks
    description: The container instances running the application will be created in this subnet.
    default: "10.0.0.0/25"
    pattern: "^(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9]).(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9]).(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9]).(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9])\\/(3[0-2]|[1-2]?[0-9])$"
    visible:
      not:
        - use_existing_app_subnet
  use_existing_db_subnet:
    type: boolean
    required: true
    title: Use existing Database Subnet
    default: false
    visible:
      and:
        - not:
            - create_new_vcn
        - not:
            - use_existing_database
  existing_db_subnet_id:
    type: oci:core:subnet:id
    required: true
    title: Select the database subnet
    dependsOn:
      compartmentId: ${vcn_compartment_id}
      vcnId: ${existing_vcn_id}
      hidePublicSubnet: true
    visible: use_existing_db_subnet
  db_subnet_cidr:
    type: string
    required: true
    title: "Database Subnet Creation: IPv4 CIDR Blocks"
    description: "The Autonomous Database will be created in this subnet. For example: 10.0.0.128/26"
    default: "10.0.0.128/26"
    pattern: "^(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9]).(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9]).(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9]).(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9])\\/(3[0-2]|[1-2]?[0-9])$"
    visible:
      and:
        - not:
            - use_existing_db_subnet
        - not:
            - use_existing_database
  use_existing_lb_subnet:
    type: boolean
    required: true
    title: Use existing Load Balancer Subnet
    default: false
    visible:
      not:
        - create_new_vcn
  existing_lb_subnet_id:
    type: oci:core:subnet:id
    required: true
    title: Select the load balancer subnet
    dependsOn:
      compartmentId: ${vcn_compartment_id}
      vcnId: ${existing_vcn_id}
      hidePublicSubnet: false
    visible: use_existing_lb_subnet
  lb_subnet_cidr:
    type: string
    required: true
    title: Load balancer Subnet IPv4 CIDR Blocks
    description: The load balancer will be created in this subnet.
    pattern: "^(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9]).(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9]).(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9]).(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9])\\/(3[0-2]|[1-2]?[0-9])$"
    default: "10.0.0.192/26"
    visible:
      not:
        - use_existing_lb_subnet
  open_https_port:
    type: boolean
    required: true
    title: Open load balancer's HTTPS port
    description: By checking this checkbox you agree to make the load balancer
      subnet public and to open the HTTPS port of the load balancer to the
      Internet.
    default: false
  use_reserved_ip_address:
    type: boolean
    required: true
    title: Use a reserved IP address
    visible: open_https_port
  reserved_ip_address:
    type: string
    required: true
    title: Reserved IP address
    description: Pre-created public IP that will be used as the IP of this load balancer. This reserved IP will not be deleted when load balancer is deleted. This ip should not be already mapped to any other resource.
    visible:
      and:
        - open_https_port
        - use_reserved_ip_address
  certificate_ocid:
    type: string
    required: false
    title: Certificate OCID
    description: You must have a SSL certificate available in OCI Certificates service. Provide the certificate OCID for the host name.
    visible: open_https_port

  # Container instances configuration
  shape:
    type: enum
    required: true
    title: Container instance shape
    description: A shape is a template that determines the number of OCPUs, amount of memory, and other resources that are allocated to a container instance.
    default: "CI.Standard.E3.Flex"
    enum:
      - CI.Standard.E3.Flex
      - CI.Standard.E4.Flex
  memory_in_gbs:
    type: number
    required: true
    title: Memory (GB)
    default: 8
    minimum: 1
    maximum: 1024
    description: Min - 1 GB or a value matching the number of OCPUs, whichever is greater. Max - 64 GB per OCPU, up to 1024 GB total
  ocpus:
    type: number
    required: true
    title: OCPU
    description: Min - 1 OCPU. Max - 64 OCPU
    default: 2
    minimum: 1
    maximum: 64
  # Load balancer
  use_default_lb_configuration:
    type: boolean
    required: true
    title: Use default load balancer configuration
    default: true
  maximum_bandwidth_in_mbps:
    type: number
    required: true
    title: Maximum bandwidth (Mbps)
    description: 10Mbps for always free load balancer
    default: 10
    visible:
      not:
        - use_default_lb_configuration
  minimum_bandwidth_in_mbps:
    type: number
    required: true
    title: Minimum bandwidth (Mbps)
    description: 10Mbps for always free load balancer
    default: 10
    visible:
      not:
        - use_default_lb_configuration
  health_checker_url_path:
    type: string
    required: true
    title: URL path (URI)
    description: This url will be used by the health checker to verify that the application is running
    default: "/"
    visible:
      not:
        - use_default_lb_configuration
  health_checker_return_code:
    type: number
    required: true
    title: Status code
    description: Status code returned by the health checker url when the application is running
    default: 200
    visible:
      not:
        - use_default_lb_configuration
  enable_session_affinity:
    type: boolean
    required: true
    default: false
    title: Enable cookie-based session persistence
    visible:
      not: use_default_lb_configuration
  session_affinity:
    type: enum
    required: true
    title: Session persistence
    description: Specify whether the cookie is generated by your application server or by the load balancer.
    enum:
      - Enable application cookie persistence
      - Enable load balancer cookie persistence
    visible: enable_session_affinity
  session_affinity_cookie_name:
    type: string
    required: true
    title: Cookie name
    discription: Specify '*' to match any cookie name.
    default: X-Oracle-BMC-LBS-Route
    visible: enable_session_affinity

outputGroups:
  - title: Application
    outputs:
      - app_url

outputs:
  app_url:
    type: link
    title: Application URL
    visible: true