Prerequisites for using ADW Reader/Post Processor¶
Overview¶
The ML Monitoring Application provides a set of readers and post processors to read or write from or to an OCI Autonomous Data Warehouse (ADW) instance. ADWApplicationDataReader reads the data from OCI ADW and SaveMetricToOracleADWPostProcessor
writes the monitoring results (monitor details, metrics, and test results) to a set of tables in an OCI ADW database. This section describes the prerequisites needed to use the reader and post processor.
Setting up OCI Autonomous Data Warehouse instance¶
To use OCI ADW with ML Monitoring Application, you must have an existing ADW instance or create a new ADW instance in your tenancy. The reader and post processor connect to the ADW instance using mTLS authentication only. Thus, mTLS authentication is required to enable your ADW instance.
Setting up OCI Vault to store database credentials¶
The ML Monitoring Application ADW Reader and Post Processor connect to an OCI ADW instance using mTLS authentication. This requires the use of username, password, and wallet files. These files need to be uploaded to OCI Vault as secrets. For details on how to setup OCI Vault in your tenancy, see here.
The following files must be added to OCI Vault as secrets in Base64 encoded format:
db_username- the name of the database user with read/write access.
db_password- the password of the database user with read/write access.
wallet_files- the Wallet files downloaded from OCI ADW instance.
Note
Wallet files downloaded from the ADW instance are present in zipped format. Unzip these files into a folder and upload all the files in the base64 format as separate secrets in OCI vault.
To upload the files in Base64 encoded format, use the following code snippet:
import base64
with open(wallet_credential_file_path, "rb") as file_data:
data = base64_encode(file_data.read())
Add the following IAM Policy to let the ML Monitoring Application Job Run read secrets from OCI Vault:
Allow dynamic-group <ml-monitoring-application-dynamic-group> to read secret-bundles in compartment <COMPARTMENT NAME>