oci_golden_gate_connection

This resource provides the Connection resource in Oracle Cloud Infrastructure Golden Gate service. Api doc link for the resource: https://docs.oracle.com/iaas/api/#/en/goldengate/latest/Connection

Example terraform configs related to the resource : https://github.com/oracle/terraform-provider-oci/tree/master/examples/goldengate

Creates a new Connection.

Example Usage

resource "oci_golden_gate_connection" "test_connection" {
	#Required
	compartment_id = var.compartment_id
	connection_type = var.connection_connection_type
	display_name = var.connection_display_name
	technology_type = var.connection_technology_type

	#Optional
	access_key_id = oci_kms_key.test_key.id
	account_key = var.connection_account_key
	account_key_secret_id = oci_vault_secret.test_secret.id
	account_name = var.connection_account_name
	additional_attributes {

		#Optional
		name = var.connection_additional_attributes_name
		value = var.connection_additional_attributes_value
	}
	artifact_location {
		#Required
		configuration {
			#Required
			authentication_type = var.connection_artifact_location_configuration_authentication_type

			#Optional
			access_key_id = oci_kms_key.test_key.id
			bucket = var.connection_artifact_location_configuration_bucket
			namespace = var.connection_artifact_location_configuration_namespace
			par_url = var.connection_artifact_location_configuration_par_url
			par_url_secret_id = oci_vault_secret.test_secret.id
			path = var.connection_artifact_location_configuration_path
			private_key_file = var.connection_artifact_location_configuration_private_key_file
			private_key_file_secret_id = oci_vault_secret.test_secret.id
			private_key_passphrase = var.connection_artifact_location_configuration_private_key_passphrase
			private_key_passphrase_secret_id = oci_vault_secret.test_secret.id
			public_key_fingerprint = var.connection_artifact_location_configuration_public_key_fingerprint
			region = var.connection_artifact_location_configuration_region
			secret_access_key = var.connection_artifact_location_configuration_secret_access_key
			secret_access_key_secret_id = oci_vault_secret.test_secret.id
			tenancy_id = oci_identity_tenancy.test_tenancy.id
			user_id = oci_identity_user.test_user.id
		}
		location_type = var.connection_artifact_location_location_type

		#Optional
		account_key = var.connection_artifact_location_account_key
		account_key_secret_id = oci_vault_secret.test_secret.id
		endpoint_suffix = var.connection_artifact_location_endpoint_suffix
		filesystem = var.connection_artifact_location_filesystem
		path = var.connection_artifact_location_path
		should_overwrite_existing = var.connection_artifact_location_should_overwrite_existing
		storage_account = var.connection_artifact_location_storage_account
	}
	auth_details {
		#Required
		auth_type = var.connection_auth_details_auth_type

		#Optional
		api_key = var.connection_auth_details_api_key
		api_key_secret_id = oci_vault_secret.test_secret.id
		base_url = var.connection_auth_details_base_url
		key_fingerprint = var.connection_auth_details_key_fingerprint
		region = var.connection_auth_details_region
		tenancy_id = oci_identity_tenancy.test_tenancy.id
		user_id = oci_identity_user.test_user.id
	}
	auth_secret = var.connection_auth_secret
	auth_secret_secret_id = oci_vault_secret.test_secret.id
	auth_token = var.connection_auth_token
	auth_token_secret_id = oci_vault_secret.test_secret.id
	authentication_mode = var.connection_authentication_mode
	authentication_type = var.connection_authentication_type
	azure_authority_host = var.connection_azure_authority_host
	azure_tenant_id = oci_golden_gate_azure_tenant.test_azure_tenant.id
	bootstrap_servers {

		#Optional
		host = var.connection_bootstrap_servers_host
		port = var.connection_bootstrap_servers_port
	}
	catalog {
		#Required
		catalog_type = var.connection_catalog_catalog_type

		#Optional
		branch = var.connection_catalog_branch
		client_id = oci_golden_gate_client.test_client.id
		client_secret = var.connection_catalog_client_secret
		client_secret_secret_id = oci_vault_secret.test_secret.id
		glue_id = oci_golden_gate_glue.test_glue.id
		name = var.connection_catalog_name
		principal_role = var.connection_catalog_principal_role
		properties = var.connection_catalog_properties
		properties_secret_id = oci_vault_secret.test_secret.id
		uri = var.connection_catalog_uri
	}
	client_id = oci_golden_gate_client.test_client.id
	client_secret = var.connection_client_secret
	client_secret_secret_id = oci_vault_secret.test_secret.id
	cluster_endpoint = var.connection_cluster_endpoint
	cluster_id = oci_containerengine_cluster.test_cluster.id
	cluster_placement_group_id = oci_cluster_placement_groups_cluster_placement_group.test_cluster_placement_group.id
	connection_factory = var.connection_connection_factory
	connection_string = var.connection_connection_string
	connection_url = var.connection_connection_url
	consumer_properties = var.connection_consumer_properties
	core_site_xml = var.connection_core_site_xml
	database_id = oci_database_database.test_database.id
	database_name = oci_database_database.test_database.name
	db_system_id = oci_database_db_system.test_db_system.id
	defined_tags = {"foo-namespace.bar-key"= "value"}
	deployment_id = oci_golden_gate_deployment.test_deployment.id
	description = var.connection_description
	does_use_secret_ids = var.connection_does_use_secret_ids
	endpoint = var.connection_endpoint
	fingerprint = var.connection_fingerprint
	freeform_tags = {"bar-key"= "value"}
	host = var.connection_host
	jndi_connection_factory = var.connection_jndi_connection_factory
	jndi_initial_context_factory = var.connection_jndi_initial_context_factory
	jndi_provider_url = var.connection_jndi_provider_url
	jndi_security_credentials = var.connection_jndi_security_credentials
	jndi_security_credentials_secret_id = oci_vault_secret.test_secret.id
	jndi_security_principal = var.connection_jndi_security_principal
	key_id = oci_kms_key.test_key.id
	key_store = var.connection_key_store
	key_store_password = var.connection_key_store_password
	key_store_password_secret_id = oci_vault_secret.test_secret.id
	key_store_secret_id = oci_vault_secret.test_secret.id
	key_store_type = var.connection_key_store_type
	locks {
		#Required
		type = var.connection_locks_type

		#Optional
		message = var.connection_locks_message
	}
	max_input_chars = var.connection_max_input_chars
	model_key = var.connection_model_key
	nsg_ids = var.connection_nsg_ids
	password = var.connection_password
	password_secret_id = oci_vault_secret.test_secret.id
	port = var.connection_port
	private_key_file = var.connection_private_key_file
	private_key_file_secret_id = oci_vault_secret.test_secret.id
	private_key_passphrase = var.connection_private_key_passphrase
	private_key_passphrase_secret_id = oci_vault_secret.test_secret.id
	producer_properties = var.connection_producer_properties
	provider_id = oci_golden_gate_provider.test_provider.id
	provider_type = var.connection_provider_type
	public_key_fingerprint = var.connection_public_key_fingerprint
	redis_cluster_id = oci_redis_redis_cluster.test_redis_cluster.id
	region = var.connection_region
	rest_auth_secret_key = var.connection_rest_auth_secret_key
	rest_auth_secret_key_secret_id = oci_vault_secret.test_secret.id
	rest_endpoint = var.connection_rest_endpoint
	routing_method = var.connection_routing_method
	rpc_cipher = var.connection_rpc_cipher
	sas_token = var.connection_sas_token
	sas_token_secret_id = oci_vault_secret.test_secret.id
	secret_access_key = var.connection_secret_access_key
	secret_access_key_secret_id = oci_vault_secret.test_secret.id
	security_attributes = var.connection_security_attributes
	security_protocol = var.connection_security_protocol
	servers = var.connection_servers
	service_account_key_file = var.connection_service_account_key_file
	service_account_key_file_secret_id = oci_vault_secret.test_secret.id
	session_mode = var.connection_session_mode
	should_use_jndi = var.connection_should_use_jndi
	should_use_resource_principal = var.connection_should_use_resource_principal
	should_validate_server_certificate = var.connection_should_validate_server_certificate
	ssl_ca = var.connection_ssl_ca
	ssl_cert = var.connection_ssl_cert
	ssl_client_keystash = var.connection_ssl_client_keystash
	ssl_client_keystash_secret_id = oci_vault_secret.test_secret.id
	ssl_client_keystoredb = var.connection_ssl_client_keystoredb
	ssl_client_keystoredb_secret_id = oci_vault_secret.test_secret.id
	ssl_crl = var.connection_ssl_crl
	ssl_key = var.connection_ssl_key
	ssl_key_password = var.connection_ssl_key_password
	ssl_key_password_secret_id = oci_vault_secret.test_secret.id
	ssl_key_secret_id = oci_vault_secret.test_secret.id
	ssl_mode = var.connection_ssl_mode
	ssl_server_certificate = var.connection_ssl_server_certificate
	storage {
		#Required
		storage_type = var.connection_storage_storage_type

		#Optional
		access_key_id = oci_kms_key.test_key.id
		account_key = var.connection_storage_account_key
		account_key_secret_id = oci_vault_secret.test_secret.id
		account_name = var.connection_storage_account_name
		bucket = var.connection_storage_bucket
		container = var.connection_storage_container
		endpoint = var.connection_storage_endpoint
		project_id = oci_ai_document_project.test_project.id
		region = var.connection_storage_region
		scheme_type = var.connection_storage_scheme_type
		secret_access_key = var.connection_storage_secret_access_key
		secret_access_key_secret_id = oci_vault_secret.test_secret.id
		service_account_key_file = var.connection_storage_service_account_key_file
		service_account_key_file_secret_id = oci_vault_secret.test_secret.id
	}
	storage_credential_name = var.connection_storage_credential_name
	stream_pool_id = oci_streaming_stream_pool.test_stream_pool.id
	submit_mode = var.connection_submit_mode
	subnet_id = oci_core_subnet.test_subnet.id
	subscription_id = oci_onesubscription_subscription.test_subscription.id
	tenancy_id = oci_identity_tenancy.test_tenancy.id
	tenant_id = oci_golden_gate_tenant.test_tenant.id
	tls_ca_file = var.connection_tls_ca_file
	tls_certificate_key_file = var.connection_tls_certificate_key_file
	tls_certificate_key_file_password = var.connection_tls_certificate_key_file_password
	tls_certificate_key_file_password_secret_id = oci_vault_secret.test_secret.id
	tls_certificate_key_file_secret_id = oci_vault_secret.test_secret.id
	tls_protocol = var.connection_tls_protocol
	trust_store = var.connection_trust_store
	trust_store_password = var.connection_trust_store_password
	trust_store_password_secret_id = oci_vault_secret.test_secret.id
	trust_store_secret_id = oci_vault_secret.test_secret.id
	trust_store_type = var.connection_trust_store_type
	url = var.connection_url
	user_id = oci_identity_user.test_user.id
	username = var.connection_username
	vault_id = oci_kms_vault.test_vault.id
	wallet = var.connection_wallet
	wallet_secret_id = oci_vault_secret.test_secret.id
	workspace_url = var.connection_workspace_url
}

Argument Reference

The following arguments are supported:

Deprecated: This field is deprecated. Sensitive attributes should be provided using the corresponding Secret OCID attributes of the connection (for example, passwordSecretId) instead of plain-text attributes. This change follows the GoldenGate “Plain Text Fields in Connections” deprecation: https://docs.oracle.com/en-us/iaas/Content/servicechanges.htm#servicechanges_topic-GoldenGate

When set to true, all sensitive information must be provided as Oracle Cloud Infrastructure Vault secrets using the corresponding *SecretId attributes of the connection (for example, passwordSecretId). Plain-text sensitive attributes (for example, password) must not be used. This ensures that sensitive information remains stored and managed in the customer’s Oracle Cloud Infrastructure Vault rather than by the GoldenGate service.

When set to false, sensitive information must be provided in the corresponding plain-text attributes (for example, password) rather than in secret OCID attributes. In this mode, the sensitive information is stored by the GoldenGate service. If vaultId and keyId are not specified, the GoldenGate service uses Oracle-managed encryption keys to encrypt the stored data.

If vaultId and keyId are provided, the specified customer-managed key is used. * endpoint - (Applicable when connection_type=AMAZON_KINESIS | AMAZON_S3 | AZURE_DATA_LAKE_STORAGE | GOOGLE_BIGQUERY | GOOGLE_CLOUD_STORAGE | MICROSOFT_FABRIC) (Updatable) * AMAZON_KINESIS: The endpoint URL of the Amazon Kinesis service. e.g.: ‘https://kinesis.us-east-1.amazonaws.com’ If not provided, GoldenGate will default to ‘https://kinesis..amazonaws.com’. * AMAZON_S3: The Amazon Endpoint for S3. e.g.: ‘https://my-bucket.s3.us-east-1.amazonaws.com’ If not provided, GoldenGate will default to ‘https://s3..amazonaws.com’. * AZURE_DATA_LAKE_STORAGE: Azure Storage service endpoint. e.g: https://test.blob.core.windows.net * GOOGLE_BIGQUERY: A legal URL to connect to BigQuery including scheme, server name and port, if not the default port. Default: https://bigquery.googleapis.com * GOOGLE_CLOUD_STORAGE: A legal URL to connect to Google Cloud Storage including scheme, server name and port, if not the default port. Default: https://storage.googleapis.com * MICROSOFT_FABRIC: Optional Microsoft Fabric service endpoint. Default value: https://onelake.dfs.fabric.microsoft.com * fingerprint - (Applicable when connection_type=ELASTICSEARCH) (Updatable) Fingerprint required by TLS security protocol. Eg.: ‘6152b2dfbff200f973c5074a5b91d06ab3b472c07c09a1ea57bb7fd406cdce9c’ * freeform_tags - (Optional) (Updatable) A simple key-value pair that is applied without any predefined name, type, or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"} * host - (Required when connection_type=DB2 | GENERIC | GOLDENGATE | MICROSOFT_SQLSERVER | MYSQL | POSTGRESQL) (Updatable) Host and port separated by colon. Example: "server.example.com:1234"

For multiple hosts, provide a comma separated list. Example: "server1.example.com:1000,server1.example.com:2000" * jndi_connection_factory - (Applicable when connection_type=JAVA_MESSAGE_SERVICE) (Updatable) The Connection Factory can be looked up using this name. e.g.: ‘ConnectionFactory’ * jndi_initial_context_factory - (Applicable when connection_type=JAVA_MESSAGE_SERVICE) (Updatable) The implementation of javax.naming.spi.InitialContextFactory interface that the client uses to obtain initial naming context. e.g.: ‘org.apache.activemq.jndi.ActiveMQInitialContextFactory’ * jndi_provider_url - (Applicable when connection_type=JAVA_MESSAGE_SERVICE) (Updatable) The URL that Java Message Service will use to contact the JNDI provider. e.g.: ‘tcp://myjms.host.domain:61616?jms.prefetchPolicy.all=1000’ * jndi_security_credentials - (Applicable when connection_type=JAVA_MESSAGE_SERVICE) (Updatable) The password associated to the principal. Deprecated: This field is deprecated and replaced by “jndiSecurityCredentialsSecretId”. This change follows the GoldenGate “Plain Text Fields in Connections” deprecation: https://docs.oracle.com/en-us/iaas/Content/servicechanges.htm#servicechanges_topic-GoldenGate * jndi_security_credentials_secret_id - (Applicable when connection_type=JAVA_MESSAGE_SERVICE) (Updatable) The OCID of the Secret where the security credentials are stored associated to the principal. Note: When provided, ‘jndiSecurityCredentials’ field must not be provided. * jndi_security_principal - (Applicable when connection_type=JAVA_MESSAGE_SERVICE) (Updatable) Specifies the identity of the principal (user) to be authenticated. e.g.: ‘admin2’ * key_id - (Optional) (Updatable) References the Oracle Cloud Infrastructure Vault key in the Oracle Cloud Infrastructure Vault identified by vaultId.

Deprecated: This field is deprecated for GoldenGate connections. Sensitive attributes should be provided using the corresponding Secret OCID attributes of the connection (for example, `passwordSecretId`) instead of plain-text attributes encrypted with `vaultId` and `keyId`. This change follows the GoldenGate "Plain Text Fields in Connections" deprecation: https://docs.oracle.com/en-us/iaas/Content/servicechanges.htm#servicechanges_topic-GoldenGate

The GoldenGate service uses this key to encrypt sensitive information (for example, `password`) that is provided in plain-text connection attributes through the API. This field is applicable only when `doesUseSecretIds` is set to `false`. If both `vaultId` and `keyId` are provided, the GoldenGate service uses the specified customer-managed key to encrypt the sensitive data. If neither `vaultId` nor `keyId` is provided, the GoldenGate service uses Oracle-managed encryption keys.

The default is DIRECT, except when databaseId is provided and the discovered database relies on the SCAN listener. In this case, the default is REDIRECT.

Deprecated: Defaulting to the REDIRECT session mode will be removed after April 21, 2027. * should_use_jndi - (Required when connection_type=JAVA_MESSAGE_SERVICE) (Updatable) If set to true, Java Naming and Directory Interface (JNDI) properties should be provided. * should_use_resource_principal - (Applicable when connection_type=KAFKA | OCI_OBJECT_STORAGE | ORACLE_AI_DATA_PLATFORM | ORACLE_NOSQL) (Updatable) * KAFKA: Specifies that the user intends to authenticate to the instance using a resource principal. Applicable only for Oracle Cloud Infrastructure Streaming connections. Only available from 23.9.0.0.0 GoldenGate versions. Note: When specified, ‘username’/‘password’/‘passwordSecretId’ fields must not be provided. Default: false * OCI_OBJECT_STORAGE, ORACLE_AI_DATA_PLATFORM, ORACLE_NOSQL: Specifies that the user intends to authenticate to the instance using a resource principal. Default: false * should_validate_server_certificate - (Applicable when connection_type=MICROSOFT_SQLSERVER) (Updatable) If set to true, the driver validates the certificate that is sent by the database server. * ssl_ca - (Applicable when connection_type=MICROSOFT_SQLSERVER | MYSQL | POSTGRESQL) (Updatable) * MICROSOFT_SQLSERVER: Database Certificate - The base64 encoded content of a .pem or .crt file containing the server public key (for 1-way SSL). * MYSQL: Database Certificate - The base64 encoded content of a .pem or .crt file containing the server public key (for 1 and 2-way SSL). It is not included in GET responses if the view=COMPACT query parameter is specified. * POSTGRESQL: The base64 encoded certificate of the trusted certificate authorities (Trusted CA) for PostgreSQL. The supported file formats are .pem and .crt. It is not included in GET responses if the view=COMPACT query parameter is specified. * ssl_cert - (Applicable when connection_type=MYSQL | POSTGRESQL) (Updatable) * MYSQL: Client Certificate - The base64 encoded content of a .pem or .crt file containing the client public key (for 2-way SSL). It is not included in GET responses if the view=COMPACT query parameter is specified. * POSTGRESQL: The base64 encoded certificate of the PostgreSQL server. The supported file formats are .pem and .crt. It is not included in GET responses if the view=COMPACT query parameter is specified. * ssl_client_keystash - (Applicable when connection_type=DB2) (Updatable) The base64 encoded keystash file which contains the encrypted password to the key database file. This property is not supported for IBM Db2 for i, as client TLS mode is not available.

Deprecated: This field is deprecated and replaced by “sslClientKeystashSecretId”. This change follows the GoldenGate “Plain Text Fields in Connections” deprecation: https://docs.oracle.com/en-us/iaas/Content/servicechanges.htm#servicechanges_topic-GoldenGate * ssl_client_keystash_secret_id - (Applicable when connection_type=DB2) (Updatable) The OCID of the Secret where the keystash file is stored, which contains the encrypted password to the key database file. This property is not supported for IBM Db2 for i, as client TLS mode is not available.

Note: When provided, ‘sslClientKeystash’ field must not be provided. * ssl_client_keystoredb - (Applicable when connection_type=DB2) (Updatable) The base64 encoded keystore file created at the client containing the server certificate / CA root certificate. This property is not supported for IBM Db2 for i, as client TLS mode is not available.

Deprecated: This field is deprecated and replaced by “sslClientKeystoredbSecretId”. This change follows the GoldenGate “Plain Text Fields in Connections” deprecation: https://docs.oracle.com/en-us/iaas/Content/servicechanges.htm#servicechanges_topic-GoldenGate * ssl_client_keystoredb_secret_id - (Applicable when connection_type=DB2) (Updatable) The OCID of the Secret where the keystore file stored, which created at the client containing the server certificate / CA root certificate. This property is not supported for IBM Db2 for i, as client TLS mode is not available.

Note: When provided, 'sslClientKeystoredb' field must not be provided.

Deprecated: This field is deprecated for GoldenGate connections. Sensitive attributes should be provided using the corresponding Secret OCID attributes of the connection (for example, passwordSecretId) instead of plain-text attributes encrypted with vaultId and keyId. This change follows the GoldenGate “Plain Text Fields in Connections” deprecation: https://docs.oracle.com/en-us/iaas/Content/servicechanges.htm#servicechanges_topic-GoldenGate

This field is applicable only when `doesUseSecretIds` is set to `false`. If `vaultId` is provided, `keyId` must also be provided.

** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

Attributes Reference

The following attributes are exported:

Deprecated: This field is deprecated. Sensitive attributes should be provided using the corresponding Secret OCID attributes of the connection (for example, passwordSecretId) instead of plain-text attributes. This change follows the GoldenGate “Plain Text Fields in Connections” deprecation: https://docs.oracle.com/en-us/iaas/Content/servicechanges.htm#servicechanges_topic-GoldenGate

When set to true, all sensitive information must be provided as Oracle Cloud Infrastructure Vault secrets using the corresponding *SecretId attributes of the connection (for example, passwordSecretId). Plain-text sensitive attributes (for example, password) must not be used. This ensures that sensitive information remains stored and managed in the customer’s Oracle Cloud Infrastructure Vault rather than by the GoldenGate service.

When set to false, sensitive information must be provided in the corresponding plain-text attributes (for example, password) rather than in secret OCID attributes. In this mode, the sensitive information is stored by the GoldenGate service. If vaultId and keyId are not specified, the GoldenGate service uses Oracle-managed encryption keys to encrypt the stored data.

If vaultId and keyId are provided, the specified customer-managed key is used. * endpoint * AMAZON_KINESIS: The endpoint URL of the Amazon Kinesis service. e.g.: ‘https://kinesis.us-east-1.amazonaws.com’ If not provided, GoldenGate will default to ‘https://kinesis..amazonaws.com’. * AMAZON_S3: The Amazon Endpoint for S3. e.g.: ‘https://my-bucket.s3.us-east-1.amazonaws.com’ If not provided, GoldenGate will default to ‘https://s3..amazonaws.com’. * AZURE_DATA_LAKE_STORAGE: Azure Storage service endpoint. e.g: https://test.blob.core.windows.net * GOOGLE_BIGQUERY: A legal URL to connect to BigQuery including scheme, server name and port, if not the default port. Default: https://bigquery.googleapis.com * GOOGLE_CLOUD_STORAGE: A legal URL to connect to Google Cloud Storage including scheme, server name and port, if not the default port. Default: https://storage.googleapis.com * MICROSOFT_FABRIC: Optional Microsoft Fabric service endpoint. Default value: https://onelake.dfs.fabric.microsoft.com * fingerprint - Fingerprint required by TLS security protocol. Eg.: ‘6152b2dfbff200f973c5074a5b91d06ab3b472c07c09a1ea57bb7fd406cdce9c’ * freeform_tags - A simple key-value pair that is applied without any predefined name, type, or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"} * host - Host and port separated by colon. Example: "server.example.com:1234"

For multiple hosts, provide a comma separated list. Example: "server1.example.com:1000,server1.example.com:2000" * id - The OCID of the connection being referenced. * ingress_ips - List of ingress IP addresses from where the GoldenGate deployment connects to this connection’s privateIp. Customers may optionally set up ingress security rules to restrict traffic from these IP addresses. * ingress_ip - A Private Endpoint IPv4 or IPv6 Address created in the customer’s subnet. * jndi_connection_factory - The Connection Factory can be looked up using this name. e.g.: ‘ConnectionFactory’ * jndi_initial_context_factory - The implementation of javax.naming.spi.InitialContextFactory interface that the client uses to obtain initial naming context. e.g.: ‘org.apache.activemq.jndi.ActiveMQInitialContextFactory’ * jndi_provider_url - The URL that Java Message Service will use to contact the JNDI provider. e.g.: ‘tcp://myjms.host.domain:61616?jms.prefetchPolicy.all=1000’ * jndi_security_credentials_secret_id - The OCID of the Secret where the security credentials are stored associated to the principal. Note: When provided, ‘jndiSecurityCredentials’ field must not be provided. * jndi_security_principal - Specifies the identity of the principal (user) to be authenticated. e.g.: ‘admin2’ * key_id - References the Oracle Cloud Infrastructure Vault key in the Oracle Cloud Infrastructure Vault identified by vaultId.

Deprecated: This field is deprecated for GoldenGate connections. Sensitive attributes should be provided using the corresponding Secret OCID attributes of the connection (for example, `passwordSecretId`) instead of plain-text attributes encrypted with `vaultId` and `keyId`. This change follows the GoldenGate "Plain Text Fields in Connections" deprecation: https://docs.oracle.com/en-us/iaas/Content/servicechanges.htm#servicechanges_topic-GoldenGate

The GoldenGate service uses this key to encrypt sensitive information (for example, `password`) that is provided in plain-text connection attributes through the API. This field is applicable only when `doesUseSecretIds` is set to `false`. If both `vaultId` and `keyId` are provided, the GoldenGate service uses the specified customer-managed key to encrypt the sensitive data. If neither `vaultId` nor `keyId` is provided, the GoldenGate service uses Oracle-managed encryption keys.

The default is DIRECT, except when databaseId is provided and the discovered database relies on the SCAN listener. In this case, the default is REDIRECT.

Deprecated: Defaulting to the REDIRECT session mode will be removed after April 21, 2027. * should_use_jndi - If set to true, Java Naming and Directory Interface (JNDI) properties should be provided. * should_use_resource_principal * KAFKA: Specifies that the user intends to authenticate to the instance using a resource principal. Applicable only for Oracle Cloud Infrastructure Streaming connections. Only available from 23.9.0.0.0 GoldenGate versions. Note: When specified, ‘username’/‘password’/‘passwordSecretId’ fields must not be provided. Default: false * OCI_OBJECT_STORAGE, ORACLE_AI_DATA_PLATFORM, ORACLE_NOSQL: Specifies that the user intends to authenticate to the instance using a resource principal. Default: false * should_validate_server_certificate - If set to true, the driver validates the certificate that is sent by the database server. * ssl_ca * MICROSOFT_SQLSERVER: Database Certificate - The base64 encoded content of a .pem or .crt file containing the server public key (for 1-way SSL). * MYSQL: Database Certificate - The base64 encoded content of a .pem or .crt file containing the server public key (for 1 and 2-way SSL). It is not included in GET responses if the view=COMPACT query parameter is specified. * POSTGRESQL: The base64 encoded certificate of the trusted certificate authorities (Trusted CA) for PostgreSQL. The supported file formats are .pem and .crt. It is not included in GET responses if the view=COMPACT query parameter is specified. * ssl_cert * MYSQL: Client Certificate - The base64 encoded content of a .pem or .crt file containing the client public key (for 2-way SSL). It is not included in GET responses if the view=COMPACT query parameter is specified. * POSTGRESQL: The base64 encoded certificate of the PostgreSQL server. The supported file formats are .pem and .crt. It is not included in GET responses if the view=COMPACT query parameter is specified. * ssl_client_keystash_secret_id - The OCID of the Secret where the keystash file is stored, which contains the encrypted password to the key database file. This property is not supported for IBM Db2 for i, as client TLS mode is not available.

Note: When provided, ‘sslClientKeystash’ field must not be provided. * ssl_client_keystoredb_secret_id - The OCID of the Secret where the keystore file stored, which created at the client containing the server certificate / CA root certificate. This property is not supported for IBM Db2 for i, as client TLS mode is not available.

Note: When provided, 'sslClientKeystoredb' field must not be provided.

Deprecated: This field is deprecated for GoldenGate connections. Sensitive attributes should be provided using the corresponding Secret OCID attributes of the connection (for example, passwordSecretId) instead of plain-text attributes encrypted with vaultId and keyId. This change follows the GoldenGate “Plain Text Fields in Connections” deprecation: https://docs.oracle.com/en-us/iaas/Content/servicechanges.htm#servicechanges_topic-GoldenGate

This field is applicable only when `doesUseSecretIds` is set to `false`. If `vaultId` is provided, `keyId` must also be provided.

Timeouts

The timeouts block allows you to specify timeouts for certain operations: * create - (Defaults to 20 minutes), when creating the Connection * update - (Defaults to 20 minutes), when updating the Connection * delete - (Defaults to 20 minutes), when destroying the Connection

Import

Connections can be imported using the id, e.g.

$ terraform import oci_golden_gate_connection.test_connection "id"