feat(region): support oracle cloud (#18676)

2026-06-15 14:33:49 +08:00 · 2023-11-14 19:43:23 +08:00
parent f38441c251
commit 7cf461e8b7
36 changed files with 4636 additions and 14 deletions
--- a/cmd/climc/shell/compute/cloudaccounts.go
+++ b/cmd/climc/shell/compute/cloudaccounts.go
@@ -60,6 +60,7 @@ func init() {
 	cmd.CreateWithKeyword("create-baidu", &options.SBaiduCloudAccountCreateOptions{})
 	cmd.CreateWithKeyword("create-cucloud", &options.SCucloudCloudAccountCreateOptions{})
 	cmd.CreateWithKeyword("create-qingcloud", &options.SQingCloudCloudAccountCreateOptions{})
+	cmd.CreateWithKeyword("create-oracle", &options.SOracleCloudAccountCreateOptions{})

 	cmd.UpdateWithKeyword("update-vmware", &options.SVMwareCloudAccountUpdateOptions{})
 	cmd.UpdateWithKeyword("update-aliyun", &options.SAliyunCloudAccountUpdateOptions{})
--- a/cmd/climc/shell/misc/feature.go
+++ b/cmd/climc/shell/misc/feature.go
@@ -67,6 +67,7 @@ func init() {
 		"cucloud",
 		"qingcloud",
 		"volcengine",
+		"oracle",
 	}

 	const (
--- a/go.mod
+++ b/go.mod
@@ -86,7 +86,7 @@ require (
 	k8s.io/client-go v0.19.3
 	k8s.io/cluster-bootstrap v0.19.3
 	moul.io/http2curl/v2 v2.3.0
-	yunion.io/x/cloudmux v0.3.10-0-alpha.1.0.20231113094030-fe18a9d8d683
+	yunion.io/x/cloudmux v0.3.10-0-alpha.1.0.20231114104913-5c1363fc971d
 	yunion.io/x/executor v0.0.0-20230705125604-c5ac3141db32
 	yunion.io/x/jsonutils v1.0.1-0.20230613121553-0f3b41e2ef19
 	yunion.io/x/log v1.0.1-0.20230411060016-feb3f46ab361
@@ -210,6 +210,7 @@ require (
 	github.com/opentracing-contrib/go-observer v0.0.0-20170622124052-a52f23424492 // indirect
 	github.com/opentracing/opentracing-go v1.0.2 // indirect
 	github.com/openzipkin/zipkin-go-opentracing v0.3.4 // indirect
+	github.com/oracle/oci-go-sdk v24.3.0+incompatible // indirect
 	github.com/philhofer/fwd v1.0.0 // indirect
 	github.com/pierrec/lz4 v2.6.1+incompatible // indirect
 	github.com/pkg/term v1.0.0 // indirect
--- a/go.sum
+++ b/go.sum
@@ -574,6 +574,8 @@ github.com/opentracing/opentracing-go v1.0.2 h1:3jA2P6O1F9UOrWVpwrIo17pu01KWvNWg
 github.com/opentracing/opentracing-go v1.0.2/go.mod h1:UkNAQd3GIcIGf0SeVgPpRdFStlNbqXla1AfSYxPUl2o=
 github.com/openzipkin/zipkin-go-opentracing v0.3.4 h1:x/pBv/5VJNWkcHF1G9xqhug8Iw7X1y1zOMzDmyuvP2g=
 github.com/openzipkin/zipkin-go-opentracing v0.3.4/go.mod h1:js2AbwmHW0YD9DwIw2JhQWmbfFi/UnWyYwdVhqbCDOE=
+github.com/oracle/oci-go-sdk v24.3.0+incompatible h1:x4mcfb4agelf1O4/1/auGlZ1lr97jXRSSN5MxTgG/zU=
+github.com/oracle/oci-go-sdk v24.3.0+incompatible/go.mod h1:VQb79nF8Z2cwLkLS35ukwStZIg5F66tcBccjip/j888=
 github.com/peterbourgon/diskv v2.0.1+incompatible/go.mod h1:uqqh8zWWbv1HBMNONnaR/tNboyR3/BZd58JJSHlUSCU=
 github.com/philhofer/fwd v1.0.0 h1:UbZqGr5Y38ApvM/V/jEljVxwocdweyH+vmYvRPBnbqQ=
 github.com/philhofer/fwd v1.0.0/go.mod h1:gk3iGcWd9+svBvR0sR+KPcfE+RNWozjowpeBVG3ZVNU=
@@ -1190,8 +1192,8 @@ sigs.k8s.io/structured-merge-diff/v4 v4.0.1/go.mod h1:bJZC9H9iH24zzfZ/41RGcq60oK
 sigs.k8s.io/yaml v1.1.0/go.mod h1:UJmg0vDUVViEyp3mgSv9WPwZCDxu4rQW1olrI1uml+o=
 sigs.k8s.io/yaml v1.2.0 h1:kr/MCeFWJWTwyaHoR9c8EjH9OumOmoF9YGiZd7lFm/Q=
 sigs.k8s.io/yaml v1.2.0/go.mod h1:yfXDCHCao9+ENCvLSE62v9VSji2MKu5jeNfTrofGhJc=
-yunion.io/x/cloudmux v0.3.10-0-alpha.1.0.20231113094030-fe18a9d8d683 h1:JVOIZlPZnxkRd4RmwqIrZJvwS7MyrOrNBPakXHKGHHI=
-yunion.io/x/cloudmux v0.3.10-0-alpha.1.0.20231113094030-fe18a9d8d683/go.mod h1:McRjoG2gaOUisB+Qa41kLCNZhr0lsCu4apEjTiphXVY=
+yunion.io/x/cloudmux v0.3.10-0-alpha.1.0.20231114104913-5c1363fc971d h1:WNe7ZQEQLO7eXNjvKCSWMqWdJ7F9m8+H21nSKx551+c=
+yunion.io/x/cloudmux v0.3.10-0-alpha.1.0.20231114104913-5c1363fc971d/go.mod h1:aj1gR9PPb6eqqKOwvANe26CoZFY8ydmXy0fuvgKYXH0=
 yunion.io/x/executor v0.0.0-20230705125604-c5ac3141db32 h1:v7POYkQwo1XzOxBoIoRVr/k0V9Y5JyjpshlIFa9raug=
 yunion.io/x/executor v0.0.0-20230705125604-c5ac3141db32/go.mod h1:Uxuou9WQIeJXNpy7t2fPLL0BYLvLiMvGQwY7Qc6aSws=
 yunion.io/x/jsonutils v0.0.0-20190625054549-a964e1e8a051/go.mod h1:4N0/RVzsYL3kH3WE/H1BjUQdFiWu50JGCFQuuy+Z634=
--- a/pkg/apis/compute/cloudaccount_const.go
+++ b/pkg/apis/compute/cloudaccount_const.go
@@ -70,6 +70,7 @@ const (
 	CLOUD_PROVIDER_BAIDU          = compute.CLOUD_PROVIDER_BAIDU
 	CLOUD_PROVIDER_CUCLOUD        = compute.CLOUD_PROVIDER_CUCLOUD
 	CLOUD_PROVIDER_QINGCLOUD      = compute.CLOUD_PROVIDER_QINGCLOUD
+	CLOUD_PROVIDER_ORACLE         = compute.CLOUD_PROVIDER_ORACLE

 	CLOUD_PROVIDER_GENERICS3 = compute.CLOUD_PROVIDER_GENERICS3
 	CLOUD_PROVIDER_CEPH      = compute.CLOUD_PROVIDER_CEPH
@@ -152,6 +153,7 @@ var (
 		CLOUD_PROVIDER_BAIDU,
 		CLOUD_PROVIDER_CUCLOUD,
 		CLOUD_PROVIDER_QINGCLOUD,
+		CLOUD_PROVIDER_ORACLE,
 	}

 	CLOUD_PROVIDER_HOST_TYPE_MAP = map[string][]string{
@@ -247,6 +249,9 @@ var (
 		CLOUD_PROVIDER_QINGCLOUD: {
 			HOST_TYPE_QINGCLOUD,
 		},
+		CLOUD_PROVIDER_ORACLE: {
+			HOST_TYPE_ORACLE,
+		},
 	}
 )

--- a/pkg/apis/compute/guest_const.go
+++ b/pkg/apis/compute/guest_const.go
@@ -215,6 +215,7 @@ const (
 	HYPERVISOR_BAIDU          = compute.HYPERVISOR_BAIDU
 	HYPERVISOR_CUCLOUD        = compute.HYPERVISOR_CUCLOUD
 	HYPERVISOR_QINGCLOUD      = compute.HYPERVISOR_QINGCLOUD
+	HYPERVISOR_ORACLE         = compute.HYPERVISOR_ORACLE

 	//	HYPERVISOR_DEFAULT = HYPERVISOR_KVM
 	HYPERVISOR_DEFAULT = HYPERVISOR_KVM
@@ -293,6 +294,7 @@ var HYPERVISORS = []string{
 	HYPERVISOR_BAIDU,
 	HYPERVISOR_CUCLOUD,
 	HYPERVISOR_QINGCLOUD,
+	HYPERVISOR_ORACLE,
 }

 var ONECLOUD_HYPERVISORS = []string{
@@ -317,6 +319,7 @@ var PUBLIC_CLOUD_HYPERVISORS = []string{
 	HYPERVISOR_BAIDU,
 	HYPERVISOR_CUCLOUD,
 	HYPERVISOR_QINGCLOUD,
+	HYPERVISOR_ORACLE,
 }

 var PRIVATE_CLOUD_HYPERVISORS = []string{
@@ -370,6 +373,7 @@ var HYPERVISOR_HOSTTYPE = map[string]string{
 	HYPERVISOR_BAIDU:          HOST_TYPE_BAIDU,
 	HYPERVISOR_CUCLOUD:        HOST_TYPE_CUCLOUD,
 	HYPERVISOR_QINGCLOUD:      HOST_TYPE_QINGCLOUD,
+	HYPERVISOR_ORACLE:         HOST_TYPE_ORACLE,
 }

 var HOSTTYPE_HYPERVISOR = map[string]string{
@@ -405,6 +409,7 @@ var HOSTTYPE_HYPERVISOR = map[string]string{
 	HOST_TYPE_BAIDU:          HYPERVISOR_BAIDU,
 	HOST_TYPE_CUCLOUD:        HYPERVISOR_CUCLOUD,
 	HOST_TYPE_QINGCLOUD:      HYPERVISOR_QINGCLOUD,
+	HOST_TYPE_ORACLE:         HYPERVISOR_ORACLE,
 }

 const (
--- a/pkg/apis/compute/host_const.go
+++ b/pkg/apis/compute/host_const.go
@@ -55,6 +55,7 @@ const (
 	HOST_TYPE_BAIDU          = compute.HOST_TYPE_BAIDU
 	HOST_TYPE_CUCLOUD        = compute.HOST_TYPE_CUCLOUD
 	HOST_TYPE_QINGCLOUD      = compute.HOST_TYPE_QINGCLOUD
+	HOST_TYPE_ORACLE         = compute.HOST_TYPE_ORACLE

 	HOST_TYPE_DEFAULT = HOST_TYPE_HYPERVISOR

@@ -150,6 +151,7 @@ var HOST_TYPES = []string{
 	HOST_TYPE_BAIDU,
 	HOST_TYPE_CUCLOUD,
 	HOST_TYPE_QINGCLOUD,
+	HOST_TYPE_ORACLE,
 }

 var ALL_NIC_TYPES = []compute.TNicType{NIC_TYPE_IPMI, NIC_TYPE_ADMIN, NIC_TYPE_NORMAL}
--- a/pkg/compute/guestdrivers/oracle.go
+++ b/pkg/compute/guestdrivers/oracle.go
@@ -0,0 +1,104 @@
+// Copyright 2019 Yunion
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package guestdrivers
+
+import (
+	"yunion.io/x/cloudmux/pkg/cloudprovider"
+	"yunion.io/x/pkg/util/billing"
+	"yunion.io/x/pkg/util/rbacscope"
+
+	api "yunion.io/x/onecloud/pkg/apis/compute"
+	"yunion.io/x/onecloud/pkg/cloudcommon/db/quotas"
+	"yunion.io/x/onecloud/pkg/compute/models"
+	"yunion.io/x/onecloud/pkg/mcclient"
+)
+
+type SOracleGuestDriver struct {
+	SManagedVirtualizedGuestDriver
+}
+
+func init() {
+	driver := SOracleGuestDriver{}
+	models.RegisterGuestDriver(&driver)
+}
+
+func (self *SOracleGuestDriver) DoScheduleSKUFilter() bool { return false }
+
+func (self *SOracleGuestDriver) GetHypervisor() string {
+	return api.HYPERVISOR_ORACLE
+}
+
+func (self *SOracleGuestDriver) GetProvider() string {
+	return api.CLOUD_PROVIDER_ORACLE
+}
+
+func (self *SOracleGuestDriver) GetDefaultSysDiskBackend() string {
+	return ""
+}
+
+func (self *SOracleGuestDriver) GetMinimalSysDiskSizeGb() int {
+	return 20
+}
+
+func (self *SOracleGuestDriver) GetComputeQuotaKeys(scope rbacscope.TRbacScope, ownerId mcclient.IIdentityProvider, brand string) models.SComputeResourceKeys {
+	keys := models.SComputeResourceKeys{}
+	keys.SBaseProjectQuotaKeys = quotas.OwnerIdProjectQuotaKeys(scope, ownerId)
+	keys.CloudEnv = api.CLOUD_ENV_PUBLIC_CLOUD
+	keys.Provider = api.CLOUD_PROVIDER_ORACLE
+	keys.Brand = api.CLOUD_PROVIDER_ORACLE
+	keys.Hypervisor = api.HYPERVISOR_ORACLE
+	return keys
+}
+
+func (self *SOracleGuestDriver) GetInstanceCapability() cloudprovider.SInstanceCapability {
+	return cloudprovider.SInstanceCapability{
+		Hypervisor: self.GetHypervisor(),
+		Provider:   self.GetProvider(),
+		DefaultAccount: cloudprovider.SDefaultAccount{
+			Linux: cloudprovider.SOsDefaultAccount{
+				DefaultAccount: api.VM_DEFAULT_LINUX_LOGIN_USER,
+				Changeable:     false,
+			},
+			Windows: cloudprovider.SOsDefaultAccount{
+				DefaultAccount: api.VM_DEFAULT_WINDOWS_LOGIN_USER,
+				Changeable:     false,
+			},
+		},
+	}
+}
+
+func (self *SOracleGuestDriver) GetGuestInitialStateAfterCreate() string {
+	return api.VM_READY
+}
+
+func (self *SOracleGuestDriver) GetGuestInitialStateAfterRebuild() string {
+	return api.VM_READY
+}
+
+func (self *SOracleGuestDriver) AllowReconfigGuest() bool {
+	return true
+}
+
+func (self *SOracleGuestDriver) IsSupportedBillingCycle(bc billing.SBillingCycle) bool {
+	return false
+}
+
+func (self *SOracleGuestDriver) IsSupportPublicipToEip() bool {
+	return false
+}
+
+func (self *SOracleGuestDriver) IsSupportSetAutoRenew() bool {
+	return false
+}
--- a/pkg/compute/hostdrivers/oracle.go
+++ b/pkg/compute/hostdrivers/oracle.go
@@ -0,0 +1,37 @@
+// Copyright 2019 Yunion
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package hostdrivers
+
+import (
+	api "yunion.io/x/onecloud/pkg/apis/compute"
+	"yunion.io/x/onecloud/pkg/compute/models"
+)
+
+type SOracleHostDriver struct {
+	SManagedVirtualizationHostDriver
+}
+
+func init() {
+	driver := SOracleHostDriver{}
+	models.RegisterHostDriver(&driver)
+}
+
+func (self *SOracleHostDriver) GetHostType() string {
+	return api.HOST_TYPE_ORACLE
+}
+
+func (self *SOracleHostDriver) GetHypervisor() string {
+	return api.HYPERVISOR_ORACLE
+}
--- a/pkg/compute/models/cloudaccounts.go
+++ b/pkg/compute/models/cloudaccounts.go
@@ -88,10 +88,10 @@ type SCloudaccount struct {
 	ProjectId string `name:"tenant_id" width:"128" charset:"ascii" list:"user" create:"domain_optional"`

 	// 云环境连接地址
-	AccessUrl string `width:"64" charset:"ascii" nullable:"true" list:"domain" update:"domain" create:"domain_optional"`
+	AccessUrl string `width:"128" charset:"ascii" nullable:"true" list:"domain" update:"domain" create:"domain_optional"`

 	// 云账号
-	Account string `width:"128" charset:"ascii" nullable:"false" list:"domain" create:"domain_required"`
+	Account string `width:"256" charset:"ascii" nullable:"false" list:"domain" create:"domain_required"`

 	// 云账号密码
 	Secret string `length:"0" charset:"ascii" nullable:"false" list:"domain" create:"domain_required"`
--- a/pkg/compute/models/cloudproviders.go
+++ b/pkg/compute/models/cloudproviders.go
@@ -98,9 +98,9 @@ type SCloudprovider struct {
 	// Version string `width:"32" charset:"ascii" nullable:"true" list:"domain"` // Column(VARCHAR(32, charset='ascii'), nullable=True)
 	// Sysinfo jsonutils.JSONObject `get:"domain"` // Column(JSONEncodedDict, nullable=True)

-	AccessUrl string `width:"64" charset:"ascii" nullable:"true" list:"domain" update:"domain" create:"domain_optional"`
+	AccessUrl string `width:"128" charset:"ascii" nullable:"true" list:"domain" update:"domain" create:"domain_optional"`
 	// 云账号的用户信息，例如用户名，access key等
-	Account string `width:"128" charset:"ascii" nullable:"false" list:"domain" create:"domain_required"`
+	Account string `width:"256" charset:"ascii" nullable:"false" list:"domain" create:"domain_required"`
 	// 云账号的密码信息，例如密码，access key secret等。该字段在数据库加密存储。Google需要存储秘钥证书,需要此字段比较长
 	Secret string `length:"0" charset:"ascii" nullable:"false" list:"domain" create:"domain_required"`

--- a/pkg/compute/regiondrivers/oracle.go
+++ b/pkg/compute/regiondrivers/oracle.go
@@ -0,0 +1,40 @@
+// Copyright 2019 Yunion
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package regiondrivers
+
+import (
+	"context"
+
+	api "yunion.io/x/onecloud/pkg/apis/compute"
+	"yunion.io/x/onecloud/pkg/compute/models"
+	"yunion.io/x/onecloud/pkg/mcclient"
+)
+
+type SOracleRegionDriver struct {
+	SManagedVirtualizationRegionDriver
+}
+
+func init() {
+	driver := SOracleRegionDriver{}
+	models.RegisterRegionDriver(&driver)
+}
+
+func (self *SOracleRegionDriver) GetProvider() string {
+	return api.CLOUD_PROVIDER_ORACLE
+}
+
+func (self *SOracleRegionDriver) ValidateCreateSnapshotData(ctx context.Context, userCred mcclient.TokenCredential, disk *models.SDisk, storage *models.SStorage, input *api.SnapshotCreateInput) error {
+	return nil
+}
--- a/pkg/mcclient/options/cloudaccounts.go
+++ b/pkg/mcclient/options/cloudaccounts.go
@@ -1419,3 +1419,21 @@ type SQingCloudCloudAccountUpdateCredentialOptions struct {
 func (opts *SQingCloudCloudAccountUpdateCredentialOptions) Params() (jsonutils.JSONObject, error) {
 	return jsonutils.Marshal(opts), nil
 }
+
+type SOracleCloudAccountCreateOptions struct {
+	SCloudAccountCreateBaseOptions
+	OraclePrivateKeyFile string `help:"Oracle private key" positional:"true"`
+	OracleTenancyOCID    string
+	OracleUserOCID       string
+}
+
+func (opts *SOracleCloudAccountCreateOptions) Params() (jsonutils.JSONObject, error) {
+	params := jsonutils.Marshal(opts).(*jsonutils.JSONDict)
+	params.Add(jsonutils.NewString("OracleCloud"), "provider")
+	data, err := ioutil.ReadFile(opts.OraclePrivateKeyFile)
+	if err != nil {
+		return nil, err
+	}
+	params.Set("oracle_private_key", jsonutils.NewString(string(data)))
+	return params, nil
+}
--- a/vendor/github.com/oracle/oci-go-sdk/LICENSE.txt
+++ b/vendor/github.com/oracle/oci-go-sdk/LICENSE.txt
@@ -0,0 +1,82 @@
+Copyright (c) 2016, 2018, 2020, Oracle and/or its affiliates.  All rights reserved.
+This software is dual-licensed to you under the Universal Permissive License (UPL) 1.0 as shown at https://oss.oracle.com/licenses/upl
+or Apache License 2.0 as shown at http://www.apache.org/licenses/LICENSE-2.0. You may choose either license.
+ ____________________________
+The Universal Permissive License (UPL), Version 1.0
+Copyright (c) 2016, 2018, Oracle and/or its affiliates. All rights reserved.
+
+Subject to the condition set forth below, permission is hereby granted to any person obtaining a copy of this software, associated documentation and/or data (collectively the "Software"), free of charge and under any and all copyright rights in the Software, and any and all patent rights owned or freely licensable by each licensor hereunder covering either (i) the unmodified Software as contributed to or provided by such licensor, or (ii) the Larger Works (as defined below), to deal in both
+
+(a) the Software, and
+(b) any piece of software and/or hardware listed in the lrgrwrks.txt file if one is included with the Software (each a "Larger Work" to which the Software is contributed by such licensors),
+
+without restriction, including without limitation the rights to copy, create derivative works of, display, perform, and distribute the Software and make, use, sell, offer for sale, import, export, have made, and have sold the Software and the Larger Work(s), and to sublicense the foregoing rights on either these or other terms.
+
+This license is subject to the following condition:
+
+The above copyright notice and either this complete permission notice or at a minimum a reference to the UPL must be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+The Apache Software License, Version 2.0
+Copyright (c) 2016, 2018, Oracle and/or its affiliates. All rights reserved.
+
+Licensed under the Apache License, Version 2.0 (the "License"); You may not use this product except in compliance with the License.  You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.  A copy of the license is also reproduced below.  Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.  See the License for the specific language governing permissions and  limitations under the License.
+
+Apache License
+
+Version 2.0, January 2004
+
+http://www.apache.org/licenses/
+TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+1. Definitions.
+"License" shall mean the terms and conditions for use, reproduction, and distribution as defined by Sections 1 through 9 of this document.
+"Licensor" shall mean the copyright owner or entity authorized by the copyright owner that is granting the License.
+"Legal Entity" shall mean the union of the acting entity and all other entities that control, are controlled by, or are under common control with that entity. For the purposes of this definition, "control" means (i) the power, direct or indirect, to cause the direction or management of such entity, whether by contract or otherwise, or (ii) ownership of fifty percent (50%) or more of the outstanding shares, or (iii) beneficial ownership of such entity.
+"You" (or "Your") shall mean an individual or Legal Entity exercising permissions granted by this License.
+"Source" form shall mean the preferred form for making modifications, including but not limited to software source code, documentation source, and configuration files.
+"Object" form shall mean any form resulting from mechanical transformation or translation of a Source form, including but not limited to compiled object code, generated documentation, and conversions to other media types.
+"Work" shall mean the work of authorship, whether in Source or Object form, made available under the License, as indicated by a copyright notice that is included in or attached to the work (an example is provided in the Appendix below).
+"Derivative Works" shall mean any work, whether in Source or Object form, that is based on (or derived from) the Work and for which the editorial revisions, annotations, elaborations, or other modifications represent, as a whole, an original work of authorship. For the purposes of this License, Derivative Works shall not include works that remain separable from, or merely link (or bind by name) to the interfaces of, the Work and Derivative Works thereof.
+"Contribution" shall mean any work of authorship, including the original version of the Work and any modifications or additions to that Work or Derivative Works thereof, that is intentionally submitted to Licensor for inclusion in the Work by the copyright owner or by an individual or Legal Entity authorized to submit on behalf of the copyright owner. For the purposes of this definition, "submitted" means any form of electronic, verbal, or written communication sent to the Licensor or its representatives, including but not limited to communication on electronic mailing lists, source code control systems, and issue tracking systems that are managed by, or on behalf of, the Licensor for the purpose of discussing and improving the Work, but excluding communication that is conspicuously marked or otherwise designated in writing by the copyright owner as "Not a Contribution."
+"Contributor" shall mean Licensor and any individual or Legal Entity on behalf of whom a Contribution has been received by Licensor and subsequently incorporated within the Work.
+2. Grant of Copyright License. Subject to the terms and conditions of this License, each Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare Derivative Works of, publicly display, publicly perform, sublicense, and distribute the Work and such Derivative Works in Source or Object form.
+3. Grant of Patent License. Subject to the terms and conditions of this License, each Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable (except as stated in this section) patent license to make, have made, use, offer to sell, sell, import, and otherwise transfer the Work, where such license applies only to those patent claims licensable by such Contributor that are necessarily infringed by their Contribution(s) alone or by combination of their Contribution(s) with the Work to which such Contribution(s) was submitted. If You institute patent litigation against any entity (including a cross-claim or counterclaim in a lawsuit) alleging that the Work or a Contribution incorporated within the Work constitutes direct or contributory patent infringement, then any patent licenses granted to You under this License for that Work shall terminate as of the date such litigation is filed.
+4. Redistribution. You may reproduce and distribute copies of the Work or Derivative Works thereof in any medium, with or without modifications, and in Source or Object form, provided that You meet the following conditions:
+You must give any other recipients of the Work or Derivative Works a copy of this License; and
+You must cause any modified files to carry prominent notices stating that You changed the files; and
+You must retain, in the Source form of any Derivative Works that You distribute, all copyright, patent, trademark, and attribution notices from the Source form of the Work, excluding those notices that do not pertain to any part of the Derivative Works; and
+If the Work includes a "NOTICE" text file as part of its distribution, then any Derivative Works that You distribute must include a readable copy of the attribution notices contained within such NOTICE file, excluding those notices that do not pertain to any part of the Derivative Works, in at least one of the following places: within a NOTICE text file distributed as part of the Derivative Works; within the Source form or documentation, if provided along with the Derivative Works; or, within a display generated by the Derivative Works, if and wherever such third-party notices normally appear. The contents of the NOTICE file are for informational purposes only and do not modify the License. You may add Your own attribution notices within Derivative Works that You distribute, alongside or as an addendum to the NOTICE text from the Work, provided that such additional attribution notices cannot be construed as modifying the License.
+
+You may add Your own copyright statement to Your modifications and may provide additional or different license terms and conditions for use, reproduction, or distribution of Your modifications, or for any such Derivative Works as a whole, provided Your use, reproduction, and distribution of the Work otherwise complies with the conditions stated in this License.
+5. Submission of Contributions. Unless You explicitly state otherwise, any Contribution intentionally submitted for inclusion in the Work by You to the Licensor shall be under the terms and conditions of this License, without any additional terms or conditions. Notwithstanding the above, nothing herein shall supersede or modify the terms of any separate license agreement you may have executed with Licensor regarding such Contributions.
+6. Trademarks. This License does not grant permission to use the trade names, trademarks, service marks, or product names of the Licensor, except as required for reasonable and customary use in describing the origin of the Work and reproducing the content of the NOTICE file.
+7. Disclaimer of Warranty. Unless required by applicable law or agreed to in writing, Licensor provides the Work (and each Contributor provides its Contributions) on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. You are solely responsible for determining the appropriateness of using or redistributing the Work and assume any risks associated with Your exercise of permissions under this License.
+8. Limitation of Liability. In no event and under no legal theory, whether in tort (including negligence), contract, or otherwise, unless required by applicable law (such as deliberate and grossly negligent acts) or agreed to in writing, shall any Contributor be liable to You for damages, including any direct, indirect, special, incidental, or consequential damages of any character arising as a result of this License or out of the use or inability to use the Work (including but not limited to damages for loss of goodwill, work stoppage, computer failure or malfunction, or any and all other commercial damages or losses), even if such Contributor has been advised of the possibility of such damages.
+9. Accepting Warranty or Additional Liability. While redistributing the Work or Derivative Works thereof, You may choose to offer, and charge a fee for, acceptance of support, warranty, indemnity, or other liability obligations and/or rights consistent with this License. However, in accepting such obligations, You may act only on Your own behalf and on Your sole responsibility, not on behalf of any other Contributor, and only if You agree to indemnify, defend, and hold each Contributor harmless for any liability incurred by, or claims asserted against, such Contributor by reason of your accepting any such warranty or additional liability.
+END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
--- a/vendor/github.com/oracle/oci-go-sdk/NOTICE.txt
+++ b/vendor/github.com/oracle/oci-go-sdk/NOTICE.txt
@@ -0,0 +1 @@
+Copyright (c) 2016, 2018, 2020, Oracle and/or its affiliates.
--- a/vendor/github.com/oracle/oci-go-sdk/common/client.go
+++ b/vendor/github.com/oracle/oci-go-sdk/common/client.go
@@ -0,0 +1,402 @@
+// Copyright (c) 2016, 2018, 2020, Oracle and/or its affiliates.  All rights reserved.
+// This software is dual-licensed to you under the Universal Permissive License (UPL) 1.0 as shown at https://oss.oracle.com/licenses/upl or Apache License 2.0 as shown at http://www.apache.org/licenses/LICENSE-2.0. You may choose either license.
+
+// Package common provides supporting functions and structs used by service packages
+package common
+
+import (
+	"context"
+	"fmt"
+	"math/rand"
+	"net/http"
+	"net/http/httputil"
+	"net/url"
+	"os"
+	"os/user"
+	"path"
+	"runtime"
+	"strings"
+	"sync/atomic"
+	"time"
+)
+
+const (
+	// DefaultHostURLTemplate The default url template for service hosts
+	DefaultHostURLTemplate = "%s.%s.oraclecloud.com"
+
+	// requestHeaderAccept The key for passing a header to indicate Accept
+	requestHeaderAccept = "Accept"
+
+	// requestHeaderAuthorization The key for passing a header to indicate Authorization
+	requestHeaderAuthorization = "Authorization"
+
+	// requestHeaderContentLength The key for passing a header to indicate Content Length
+	requestHeaderContentLength = "Content-Length"
+
+	// requestHeaderContentType The key for passing a header to indicate Content Type
+	requestHeaderContentType = "Content-Type"
+
+	// requestHeaderDate The key for passing a header to indicate Date
+	requestHeaderDate = "Date"
+
+	// requestHeaderIfMatch The key for passing a header to indicate If Match
+	requestHeaderIfMatch = "if-match"
+
+	// requestHeaderOpcClientInfo The key for passing a header to indicate OPC Client Info
+	requestHeaderOpcClientInfo = "opc-client-info"
+
+	// requestHeaderOpcRetryToken The key for passing a header to indicate OPC Retry Token
+	requestHeaderOpcRetryToken = "opc-retry-token"
+
+	// requestHeaderOpcRequestID The key for unique Oracle-assigned identifier for the request.
+	requestHeaderOpcRequestID = "opc-request-id"
+
+	// requestHeaderOpcClientRequestID The key for unique Oracle-assigned identifier for the request.
+	requestHeaderOpcClientRequestID = "opc-client-request-id"
+
+	// requestHeaderUserAgent The key for passing a header to indicate User Agent
+	requestHeaderUserAgent = "User-Agent"
+
+	// requestHeaderXContentSHA256 The key for passing a header to indicate SHA256 hash
+	requestHeaderXContentSHA256 = "X-Content-SHA256"
+
+	// requestHeaderOpcOboToken The key for passing a header to use obo token
+	requestHeaderOpcOboToken = "opc-obo-token"
+
+	// private constants
+	defaultScheme            = "https"
+	defaultSDKMarker         = "Oracle-GoSDK"
+	defaultUserAgentTemplate = "%s/%s (%s/%s; go/%s)" //SDK/SDKVersion (OS/OSVersion; Lang/LangVersion)
+	defaultTimeout           = 60 * time.Second
+	defaultConfigFileName    = "config"
+	defaultConfigDirName     = ".oci"
+	configFilePathEnvVarName = "OCI_CONFIG_FILE"
+	secondaryConfigDirName   = ".oraclebmc"
+	maxBodyLenForDebug       = 1024 * 1000
+)
+
+// RequestInterceptor function used to customize the request before calling the underlying service
+type RequestInterceptor func(*http.Request) error
+
+// HTTPRequestDispatcher wraps the execution of a http request, it is generally implemented by
+// http.Client.Do, but can be customized for testing
+type HTTPRequestDispatcher interface {
+	Do(req *http.Request) (*http.Response, error)
+}
+
+// BaseClient struct implements all basic operations to call oci web services.
+type BaseClient struct {
+	//HTTPClient performs the http network operations
+	HTTPClient HTTPRequestDispatcher
+
+	//Signer performs auth operation
+	Signer HTTPRequestSigner
+
+	//A request interceptor can be used to customize the request before signing and dispatching
+	Interceptor RequestInterceptor
+
+	//The host of the service
+	Host string
+
+	//The user agent
+	UserAgent string
+
+	//Base path for all operations of this client
+	BasePath string
+}
+
+func defaultUserAgent() string {
+	userAgent := fmt.Sprintf(defaultUserAgentTemplate, defaultSDKMarker, Version(), runtime.GOOS, runtime.GOARCH, runtime.Version())
+	return userAgent
+}
+
+var clientCounter int64
+
+func getNextSeed() int64 {
+	newCounterValue := atomic.AddInt64(&clientCounter, 1)
+	return newCounterValue + time.Now().UnixNano()
+}
+
+func newBaseClient(signer HTTPRequestSigner, dispatcher HTTPRequestDispatcher) BaseClient {
+	rand.Seed(getNextSeed())
+	return BaseClient{
+		UserAgent:   defaultUserAgent(),
+		Interceptor: nil,
+		Signer:      signer,
+		HTTPClient:  dispatcher,
+	}
+}
+
+func defaultHTTPDispatcher() http.Client {
+	httpClient := http.Client{
+		Timeout: defaultTimeout,
+	}
+	return httpClient
+}
+
+func defaultBaseClient(provider KeyProvider) BaseClient {
+	dispatcher := defaultHTTPDispatcher()
+	signer := DefaultRequestSigner(provider)
+	return newBaseClient(signer, &dispatcher)
+}
+
+//DefaultBaseClientWithSigner creates a default base client with a given signer
+func DefaultBaseClientWithSigner(signer HTTPRequestSigner) BaseClient {
+	dispatcher := defaultHTTPDispatcher()
+	return newBaseClient(signer, &dispatcher)
+}
+
+// NewClientWithConfig Create a new client with a configuration provider, the configuration provider
+// will be used for the default signer as well as reading the region
+// This function does not check for valid regions to implement forward compatibility
+func NewClientWithConfig(configProvider ConfigurationProvider) (client BaseClient, err error) {
+	var ok bool
+	if ok, err = IsConfigurationProviderValid(configProvider); !ok {
+		err = fmt.Errorf("can not create client, bad configuration: %s", err.Error())
+		return
+	}
+
+	client = defaultBaseClient(configProvider)
+
+	return
+}
+
+// NewClientWithOboToken Create a new client that will use oboToken for auth
+func NewClientWithOboToken(configProvider ConfigurationProvider, oboToken string) (client BaseClient, err error) {
+	client, err = NewClientWithConfig(configProvider)
+	if err != nil {
+		return
+	}
+
+	// Interceptor to add obo token header
+	client.Interceptor = func(request *http.Request) error {
+		request.Header.Add(requestHeaderOpcOboToken, oboToken)
+		return nil
+	}
+	// Obo token will also be signed
+	defaultHeaders := append(DefaultGenericHeaders(), requestHeaderOpcOboToken)
+	client.Signer = RequestSigner(configProvider, defaultHeaders, DefaultBodyHeaders())
+
+	return
+}
+
+func getHomeFolder() string {
+	current, e := user.Current()
+	if e != nil {
+		//Give up and try to return something sensible
+		home := os.Getenv("HOME")
+		if home == "" {
+			home = os.Getenv("USERPROFILE")
+		}
+		return home
+	}
+	return current.HomeDir
+}
+
+// DefaultConfigProvider returns the default config provider. The default config provider
+// will look for configurations in 3 places: file in $HOME/.oci/config, HOME/.obmcs/config and
+// variables names starting with the string TF_VAR. If the same configuration is found in multiple
+// places the provider will prefer the first one.
+// If the config file is not placed in the default location, the environment variable
+// OCI_CONFIG_FILE can provide the config file location.
+func DefaultConfigProvider() ConfigurationProvider {
+	defaultConfigFile := getDefaultConfigFilePath()
+	homeFolder := getHomeFolder()
+	secondaryConfigFile := path.Join(homeFolder, secondaryConfigDirName, defaultConfigFileName)
+
+	defaultFileProvider, _ := ConfigurationProviderFromFile(defaultConfigFile, "")
+	secondaryFileProvider, _ := ConfigurationProviderFromFile(secondaryConfigFile, "")
+	environmentProvider := environmentConfigurationProvider{EnvironmentVariablePrefix: "TF_VAR"}
+
+	provider, _ := ComposingConfigurationProvider([]ConfigurationProvider{defaultFileProvider, secondaryFileProvider, environmentProvider})
+	Debugf("Configuration provided by: %s", provider)
+	return provider
+}
+
+func getDefaultConfigFilePath() string {
+	homeFolder := getHomeFolder()
+	defaultConfigFile := path.Join(homeFolder, defaultConfigDirName, defaultConfigFileName)
+	if _, err := os.Stat(defaultConfigFile); err == nil {
+		return defaultConfigFile
+	}
+	Debugf("The %s does not exist, will check env var %s for file path.", defaultConfigFile, configFilePathEnvVarName)
+	// Read configuration file path from OCI_CONFIG_FILE env var
+	fallbackConfigFile, existed := os.LookupEnv(configFilePathEnvVarName)
+	if !existed {
+		Debugf("The env var %s does not exist...", configFilePathEnvVarName)
+		return defaultConfigFile
+	}
+	if _, err := os.Stat(fallbackConfigFile); os.IsNotExist(err) {
+		Debugf("The specified cfg file path in the env var %s does not exist: %s", configFilePathEnvVarName, fallbackConfigFile)
+		return defaultConfigFile
+	}
+	return fallbackConfigFile
+}
+
+// CustomProfileConfigProvider returns the config provider of given profile. The custom profile config provider
+// will look for configurations in 2 places: file in $HOME/.oci/config,  and variables names starting with the
+// string TF_VAR. If the same configuration is found in multiple places the provider will prefer the first one.
+func CustomProfileConfigProvider(customConfigPath string, profile string) ConfigurationProvider {
+	homeFolder := getHomeFolder()
+	if customConfigPath == "" {
+		customConfigPath = path.Join(homeFolder, defaultConfigDirName, defaultConfigFileName)
+	}
+	customFileProvider, _ := ConfigurationProviderFromFileWithProfile(customConfigPath, profile, "")
+	defaultFileProvider, _ := ConfigurationProviderFromFileWithProfile(customConfigPath, "DEFAULT", "")
+	environmentProvider := environmentConfigurationProvider{EnvironmentVariablePrefix: "TF_VAR"}
+	provider, _ := ComposingConfigurationProvider([]ConfigurationProvider{customFileProvider, defaultFileProvider, environmentProvider})
+	Debugf("Configuration provided by: %s", provider)
+	return provider
+}
+
+func (client *BaseClient) prepareRequest(request *http.Request) (err error) {
+	if client.UserAgent == "" {
+		return fmt.Errorf("user agent can not be blank")
+	}
+
+	if request.Header == nil {
+		request.Header = http.Header{}
+	}
+	request.Header.Set(requestHeaderUserAgent, client.UserAgent)
+	request.Header.Set(requestHeaderDate, time.Now().UTC().Format(http.TimeFormat))
+
+	if !strings.Contains(client.Host, "http") &&
+		!strings.Contains(client.Host, "https") {
+		client.Host = fmt.Sprintf("%s://%s", defaultScheme, client.Host)
+	}
+
+	clientURL, err := url.Parse(client.Host)
+	if err != nil {
+		return fmt.Errorf("host is invalid. %s", err.Error())
+	}
+	request.URL.Host = clientURL.Host
+	request.URL.Scheme = clientURL.Scheme
+	currentPath := request.URL.Path
+	if !strings.Contains(currentPath, fmt.Sprintf("/%s", client.BasePath)) {
+		request.URL.Path = path.Clean(fmt.Sprintf("/%s/%s", client.BasePath, currentPath))
+	}
+	return
+}
+
+func (client BaseClient) intercept(request *http.Request) (err error) {
+	if client.Interceptor != nil {
+		err = client.Interceptor(request)
+	}
+	return
+}
+
+func checkForSuccessfulResponse(res *http.Response) error {
+	familyStatusCode := res.StatusCode / 100
+	if familyStatusCode == 4 || familyStatusCode == 5 {
+		return newServiceFailureFromResponse(res)
+	}
+	return nil
+}
+
+// OCIRequest is any request made to an OCI service.
+type OCIRequest interface {
+	// HTTPRequest assembles an HTTP request.
+	HTTPRequest(method, path string) (http.Request, error)
+}
+
+// RequestMetadata is metadata about an OCIRequest. This structure represents the behavior exhibited by the SDK when
+// issuing (or reissuing) a request.
+type RequestMetadata struct {
+	// RetryPolicy is the policy for reissuing the request. If no retry policy is set on the request,
+	// then the request will be issued exactly once.
+	RetryPolicy *RetryPolicy
+}
+
+// OCIResponse is the response from issuing a request to an OCI service.
+type OCIResponse interface {
+	// HTTPResponse returns the raw HTTP response.
+	HTTPResponse() *http.Response
+}
+
+// OCIOperation is the generalization of a request-response cycle undergone by an OCI service.
+type OCIOperation func(context.Context, OCIRequest) (OCIResponse, error)
+
+//ClientCallDetails a set of settings used by the a single Call operation of the http Client
+type ClientCallDetails struct {
+	Signer HTTPRequestSigner
+}
+
+// Call executes the http request with the given context
+func (client BaseClient) Call(ctx context.Context, request *http.Request) (response *http.Response, err error) {
+	return client.CallWithDetails(ctx, request, ClientCallDetails{Signer: client.Signer})
+}
+
+// CallWithDetails executes the http request, the given context using details specified in the paremeters, this function
+// provides a way to override some settings present in the client
+func (client BaseClient) CallWithDetails(ctx context.Context, request *http.Request, details ClientCallDetails) (response *http.Response, err error) {
+	Debugln("Atempting to call downstream service")
+	request = request.WithContext(ctx)
+
+	err = client.prepareRequest(request)
+	if err != nil {
+		return
+	}
+
+	//Intercept
+	err = client.intercept(request)
+	if err != nil {
+		return
+	}
+
+	//Sign the request
+	err = details.Signer.Sign(request)
+	if err != nil {
+		return
+	}
+
+	IfDebug(func() {
+		dumpBody := true
+		if request.ContentLength > maxBodyLenForDebug {
+			Debugf("not dumping body too big\n")
+			dumpBody = false
+		}
+		dumpBody = dumpBody && defaultLogger.LogLevel() == verboseLogging
+		if dump, e := httputil.DumpRequestOut(request, dumpBody); e == nil {
+			Debugf("Dump Request %s", string(dump))
+		} else {
+			Debugf("%v\n", e)
+		}
+	})
+
+	//Execute the http request
+	response, err = client.HTTPClient.Do(request)
+
+	IfDebug(func() {
+		if err != nil {
+			Debugf("%v\n", err)
+			return
+		}
+
+		dumpBody := true
+		if response.ContentLength > maxBodyLenForDebug {
+			Debugf("not dumping body too big\n")
+			dumpBody = false
+		}
+
+		dumpBody = dumpBody && defaultLogger.LogLevel() == verboseLogging
+		if dump, e := httputil.DumpResponse(response, dumpBody); e == nil {
+			Debugf("Dump Response %s", string(dump))
+		} else {
+			Debugf("%v\n", e)
+		}
+	})
+
+	if err != nil {
+		return
+	}
+
+	err = checkForSuccessfulResponse(response)
+	return
+}
+
+//CloseBodyIfValid closes the body of an http response if the response and the body are valid
+func CloseBodyIfValid(httpResponse *http.Response) {
+	if httpResponse != nil && httpResponse.Body != nil {
+		httpResponse.Body.Close()
+	}
+}
--- a/vendor/github.com/oracle/oci-go-sdk/common/common.go
+++ b/vendor/github.com/oracle/oci-go-sdk/common/common.go
@@ -0,0 +1,450 @@
+// Copyright (c) 2016, 2018, 2020, Oracle and/or its affiliates.  All rights reserved.
+// This software is dual-licensed to you under the Universal Permissive License (UPL) 1.0 as shown at https://oss.oracle.com/licenses/upl or Apache License 2.0 as shown at http://www.apache.org/licenses/LICENSE-2.0. You may choose either license.
+
+package common
+
+import (
+	"encoding/json"
+	"fmt"
+	"io/ioutil"
+	"net/http"
+	"os"
+	"path"
+	"regexp"
+	"strings"
+	"time"
+)
+
+//Region type for regions
+type Region string
+
+const (
+	instanceMetadataRegionInfoURLV2 = "http://169.254.169.254/opc/v2/instance/regionInfo"
+
+	//RegionSEA region SEA
+	RegionSEA Region = "sea"
+	//RegionCAToronto1 region for Toronto
+	RegionCAToronto1 Region = "ca-toronto-1"
+	//RegionCAMontreal1 region for Montreal
+	RegionCAMontreal1 Region = "ca-montreal-1"
+	//RegionPHX region PHX
+	RegionPHX Region = "us-phoenix-1"
+	//RegionIAD region IAD
+	RegionIAD Region = "us-ashburn-1"
+	//RegionSJC1 region SJC
+	RegionSJC1 Region = "us-sanjose-1"
+	//RegionFRA region FRA
+	RegionFRA Region = "eu-frankfurt-1"
+	//RegionLHR region LHR
+	RegionLHR Region = "uk-london-1"
+	//RegionAPTokyo1 region for Tokyo
+	RegionAPTokyo1 Region = "ap-tokyo-1"
+	//RegionAPOsaka1 region for Osaka
+	RegionAPOsaka1 Region = "ap-osaka-1"
+	//RegionAPChiyoda1 region for Chiyoda
+	RegionAPChiyoda1 Region = "ap-chiyoda-1"
+	//RegionAPSeoul1 region for Seoul
+	RegionAPSeoul1 Region = "ap-seoul-1"
+	//RegionAPChuncheon1 region for Chuncheon
+	RegionAPChuncheon1 Region = "ap-chuncheon-1"
+	//RegionAPMumbai1 region for Mumbai
+	RegionAPMumbai1 Region = "ap-mumbai-1"
+	//RegionAPHyderabad1 region for Hyderabad
+	RegionAPHyderabad1 Region = "ap-hyderabad-1"
+	//RegionAPMelbourne1 region for Melbourne
+	RegionAPMelbourne1 Region = "ap-melbourne-1"
+	//RegionAPSydney1 region for Sydney
+	RegionAPSydney1 Region = "ap-sydney-1"
+	//RegionMEJeddah1 region for Jeddah
+	RegionMEJeddah1 Region = "me-jeddah-1"
+	//RegionEUZurich1 region for Zurich
+	RegionEUZurich1 Region = "eu-zurich-1"
+	//RegionEUAmsterdam1 region for Amsterdam
+	RegionEUAmsterdam1 Region = "eu-amsterdam-1"
+	//RegionSASaopaulo1 region for Sao Paulo
+	RegionSASaopaulo1 Region = "sa-saopaulo-1"
+
+	//RegionUSLangley1 region for Langley
+	RegionUSLangley1 Region = "us-langley-1"
+	//RegionUSLuke1 region for Luke
+	RegionUSLuke1 Region = "us-luke-1"
+
+	//RegionUSGovAshburn1 gov region Ashburn
+	RegionUSGovAshburn1 Region = "us-gov-ashburn-1"
+	//RegionUSGovChicago1 gov region Chicago
+	RegionUSGovChicago1 Region = "us-gov-chicago-1"
+	//RegionUSGovPhoenix1 region for Phoenix
+	RegionUSGovPhoenix1 Region = "us-gov-phoenix-1"
+	//RegionUKGovLondon1 gov region London
+	RegionUKGovLondon1 Region = "uk-gov-london-1"
+	//RegionUKGovCardiff1 gov region Cardiff
+	RegionUKGovCardiff1 Region = "uk-gov-cardiff-1"
+
+	// Region Metadata Configuration File
+	regionMetadataCfgDirName  = ".oci"
+	regionMetadataCfgFileName = "regions-config.json"
+
+	// Region Metadata Environment Variable
+	regionMetadataEnvVarName = "OCI_REGION_METADATA"
+
+	// Region Metadata
+	regionIdentifierPropertyName     = "regionIdentifier"     // e.g. "ap-sydney-1"
+	realmKeyPropertyName             = "realmKey"             // e.g. "oc1"
+	realmDomainComponentPropertyName = "realmDomainComponent" // e.g. "oraclecloud.com"
+	regionKeyPropertyName            = "regionKey"            // e.g. "SYD"
+)
+
+var shortNameRegion = map[string]Region{
+	"sea": RegionSEA,
+	"phx": RegionPHX,
+	"iad": RegionIAD,
+	"fra": RegionFRA,
+	"lhr": RegionLHR,
+	"ams": RegionEUAmsterdam1,
+	"zrh": RegionEUZurich1,
+	"mel": RegionAPMelbourne1,
+	"bom": RegionAPMumbai1,
+	"hyd": RegionAPHyderabad1,
+	"icn": RegionAPSeoul1,
+	"yny": RegionAPChuncheon1,
+	"nrt": RegionAPTokyo1,
+	"kix": RegionAPOsaka1,
+	"nja": RegionAPChiyoda1,
+	"syd": RegionAPSydney1,
+	"yul": RegionCAMontreal1,
+	"yyz": RegionCAToronto1,
+	"sjc": RegionSJC1,
+	"gru": RegionSASaopaulo1,
+	"jed": RegionMEJeddah1,
+	"ltn": RegionUKGovLondon1,
+	"brs": RegionUKGovCardiff1,
+}
+
+var realm = map[string]string{
+	"oc1": "oraclecloud.com",
+	"oc2": "oraclegovcloud.com",
+	"oc3": "oraclegovcloud.com",
+	"oc4": "oraclegovcloud.uk",
+	"oc8": "oraclecloud8.com",
+}
+
+var regionRealm = map[Region]string{
+	RegionPHX:          "oc1",
+	RegionIAD:          "oc1",
+	RegionFRA:          "oc1",
+	RegionLHR:          "oc1",
+	RegionCAToronto1:   "oc1",
+	RegionCAMontreal1:  "oc1",
+	RegionSJC1:         "oc1",
+	RegionAPTokyo1:     "oc1",
+	RegionAPOsaka1:     "oc1",
+	RegionAPSeoul1:     "oc1",
+	RegionAPChuncheon1: "oc1",
+	RegionAPSydney1:    "oc1",
+	RegionAPMumbai1:    "oc1",
+	RegionAPHyderabad1: "oc1",
+	RegionAPMelbourne1: "oc1",
+	RegionMEJeddah1:    "oc1",
+	RegionEUZurich1:    "oc1",
+	RegionEUAmsterdam1: "oc1",
+	RegionSASaopaulo1:  "oc1",
+
+	RegionUSLangley1:    "oc2",
+	RegionUSLuke1:       "oc2",
+	RegionUSGovAshburn1: "oc3",
+	RegionUSGovChicago1: "oc3",
+	RegionUSGovPhoenix1: "oc3",
+	RegionUKGovCardiff1: "oc4",
+	RegionUKGovLondon1:  "oc4",
+
+	RegionAPChiyoda1: "oc8",
+}
+
+// External region metadata info flag, used to control adding these metadata region info only once.
+var readCfgFile, readEnvVar, visitIMDS bool = true, true, false
+
+// getRegionInfoFromInstanceMetadataService gets the region information
+var getRegionInfoFromInstanceMetadataService = getRegionInfoFromInstanceMetadataServiceProd
+
+// Endpoint returns a endpoint for a service
+func (region Region) Endpoint(service string) string {
+	return fmt.Sprintf("%s.%s.%s", service, region, region.secondLevelDomain())
+}
+
+// EndpointForTemplate returns a endpoint for a service based on template, only unknown region name can fall back to "oc1", but not short code region name.
+func (region Region) EndpointForTemplate(service string, serviceEndpointTemplate string) string {
+	if serviceEndpointTemplate == "" {
+		return region.Endpoint(service)
+	}
+
+	// replace service prefix
+	endpoint := strings.Replace(serviceEndpointTemplate, "{serviceEndpointPrefix}", service, 1)
+
+	// replace region
+	endpoint = strings.Replace(endpoint, "{region}", string(region), 1)
+
+	// replace second level domain
+	endpoint = strings.Replace(endpoint, "{secondLevelDomain}", region.secondLevelDomain(), 1)
+
+	return endpoint
+}
+
+func (region Region) secondLevelDomain() string {
+	if realmID, ok := regionRealm[region]; ok {
+		if secondLevelDomain, ok := realm[realmID]; ok {
+			return secondLevelDomain
+		}
+	}
+
+	Debugf("cannot find realm for region : %s, return default realm value.", region)
+	return realm["oc1"]
+}
+
+//StringToRegion convert a string to Region type
+func StringToRegion(stringRegion string) (r Region) {
+	regionStr := strings.ToLower(stringRegion)
+	// check if short region name provided
+	if region, ok := shortNameRegion[regionStr]; ok {
+		r = region
+		return
+	}
+	// check if normal region name provided
+	potentialRegion := Region(regionStr)
+	if _, ok := regionRealm[potentialRegion]; ok {
+		r = potentialRegion
+		return
+	}
+
+	Debugf("region named: %s, is not recognized from hard-coded region list, will check Region metadata info", stringRegion)
+	r = checkAndAddRegionMetadata(stringRegion)
+
+	return
+}
+
+// canStringBeRegion test if the string can be a region, if it can, returns the string as is, otherwise it
+// returns an error
+var blankRegex = regexp.MustCompile("\\s")
+
+func canStringBeRegion(stringRegion string) (region string, err error) {
+	if blankRegex.MatchString(stringRegion) || stringRegion == "" {
+		return "", fmt.Errorf("region can not be empty or have spaces")
+	}
+	return stringRegion, nil
+}
+
+// check region info from original map
+func checkAndAddRegionMetadata(region string) Region {
+	switch {
+	case setRegionMetadataFromCfgFile(&region):
+	case setRegionMetadataFromEnvVar(&region):
+	case setRegionFromInstanceMetadataService(&region):
+	default:
+		//err := fmt.Errorf("failed to get region metadata information.")
+		return Region(region)
+	}
+	return Region(region)
+}
+
+// EnableInstanceMetadataServiceLookup provides the interface to lookup IMDS region info
+func EnableInstanceMetadataServiceLookup() {
+	Debugf("Set visitIMDS 'true' to enable IMDS Lookup.")
+	visitIMDS = true
+}
+
+// setRegionMetadataFromEnvVar checks if region metadata env variable is provided, once it's there, parse and added it
+// to region map, and it can make sure the env var can only be visited once.
+// Once successfully find the expected region(region name or short code), return true, region name will be stored in
+// the input pointer.
+func setRegionMetadataFromEnvVar(region *string) bool {
+	if readEnvVar == false {
+		Debugf("metadata region env variable had already been checked, no need to check again.")
+		return false //no need to check it again.
+	}
+	// Mark readEnvVar Flag as false since it has already been visited.
+	readEnvVar = false
+	// check from env variable
+	if jsonStr, existed := os.LookupEnv(regionMetadataEnvVarName); existed {
+		Debugf("Raw content of region metadata env var:", jsonStr)
+		var regionSchema map[string]string
+		if err := json.Unmarshal([]byte(jsonStr), &regionSchema); err != nil {
+			Debugf("Can't unmarshal env var, the error info is", err)
+			return false
+		}
+		// check if the specified region is in the env var.
+		if checkSchemaItems(regionSchema) {
+			// set mapping table
+			addRegionSchema(regionSchema)
+			if regionSchema[regionKeyPropertyName] == *region ||
+				regionSchema[regionIdentifierPropertyName] == *region {
+				*region = regionSchema[regionIdentifierPropertyName]
+				return true
+			}
+		}
+		return false
+	}
+	Debugf("The Region Metadata Schema wasn't set in env variable - OCI_REGION_METADATA.")
+	return false
+}
+
+// setRegionMetadataFromCfgFile checks if region metadata config file is provided, once it's there, parse and add all
+// the valid regions to region map, the configuration file can only be visited once.
+// Once successfully find the expected region(region name or short code), return true, region name will be stored in
+// the input pointer.
+func setRegionMetadataFromCfgFile(region *string) bool {
+	if readCfgFile == false {
+		Debugf("metadata region config file had already been checked, no need to check again.")
+		return false //no need to check it again.
+	}
+	// Mark readCfgFile Flag as false since it has already been visited.
+	readCfgFile = false
+	homeFolder := getHomeFolder()
+	configFile := path.Join(homeFolder, regionMetadataCfgDirName, regionMetadataCfgFileName)
+	if jsonArr, ok := readAndParseConfigFile(&configFile); ok {
+		added := false
+		for _, jsonItem := range jsonArr {
+			if checkSchemaItems(jsonItem) {
+				addRegionSchema(jsonItem)
+				if jsonItem[regionKeyPropertyName] == *region ||
+					jsonItem[regionIdentifierPropertyName] == *region {
+					*region = jsonItem[regionIdentifierPropertyName]
+					added = true
+				}
+			}
+		}
+		return added
+	}
+	return false
+}
+
+func readAndParseConfigFile(configFileName *string) (fileContent []map[string]string, ok bool) {
+
+	if content, err := ioutil.ReadFile(*configFileName); err == nil {
+		Debugf("Raw content of region metadata config file content:", string(content[:]))
+		if err := json.Unmarshal(content, &fileContent); err != nil {
+			Debugf("Can't unmarshal config file, the error info is", err)
+			return
+		}
+		ok = true
+		return
+	}
+	Debugf("No Region Metadata Config File provided.")
+	return
+
+}
+
+// check map regionRealm's region name, if it's already there, no need to add it.
+func addRegionSchema(regionSchema map[string]string) {
+	r := Region(strings.ToLower(regionSchema[regionIdentifierPropertyName]))
+	if _, ok := regionRealm[r]; !ok {
+		// set mapping table
+		shortNameRegion[regionSchema[regionKeyPropertyName]] = r
+		realm[regionSchema[realmKeyPropertyName]] = regionSchema[realmDomainComponentPropertyName]
+		regionRealm[r] = regionSchema[realmKeyPropertyName]
+		return
+	}
+	Debugf("Region {} has already been added, no need to add again.", regionSchema[regionIdentifierPropertyName])
+}
+
+// check region schema content if all the required contents are provided
+func checkSchemaItems(regionSchema map[string]string) bool {
+	if checkSchemaItem(regionSchema, regionIdentifierPropertyName) &&
+		checkSchemaItem(regionSchema, realmKeyPropertyName) &&
+		checkSchemaItem(regionSchema, realmDomainComponentPropertyName) &&
+		checkSchemaItem(regionSchema, regionKeyPropertyName) {
+		return true
+	}
+	return false
+}
+
+// check region schema item is valid, if so, convert it to lower case.
+func checkSchemaItem(regionSchema map[string]string, key string) bool {
+	if val, ok := regionSchema[key]; ok {
+		if val != "" {
+			regionSchema[key] = strings.ToLower(val)
+			return true
+		}
+		Debugf("Region metadata schema {} is provided,but content is empty.", key)
+		return false
+	}
+	Debugf("Region metadata schema {} is not provided, please update the content", key)
+	return false
+}
+
+// setRegionFromInstanceMetadataService checks if region metadata can be provided from InstanceMetadataService.
+// Once successfully find the expected region(region name or short code), return true, region name will be stored in
+// the input pointer.
+// setRegionFromInstanceMetadataService will only be checked on the instance, by default it will not be enabled unless
+// user explicitly enable it.
+func setRegionFromInstanceMetadataService(region *string) bool {
+	// example of content:
+	// {
+	// 	"realmKey" : "oc1",
+	// 	"realmDomainComponent" : "oraclecloud.com",
+	// 	"regionKey" : "YUL",
+	// 	"regionIdentifier" : "ca-montreal-1"
+	// }
+	// Mark visitIMDS Flag as false since it has already been visited.
+	if visitIMDS == false {
+		Debugf("check from IMDS is disabled or IMDS had already been successfully visited, no need to check again.")
+		return false
+	}
+	content, err := getRegionInfoFromInstanceMetadataService()
+	if err != nil {
+		Debugf("Failed to get instance metadata. Error: %v", err)
+		return false
+	}
+
+	// Mark visitIMDS Flag as false since we have already successfully get the region info from IMDS.
+	visitIMDS = false
+
+	var regionInfo map[string]string
+	err = json.Unmarshal(content, &regionInfo)
+	if err != nil {
+		Debugf("Failed to unmarshal the response content: %v \nError: %v", string(content), err)
+		return false
+	}
+
+	if checkSchemaItems(regionInfo) {
+		addRegionSchema(regionInfo)
+		if regionInfo[regionKeyPropertyName] == *region ||
+			regionInfo[regionIdentifierPropertyName] == *region {
+			*region = regionInfo[regionIdentifierPropertyName]
+		}
+	} else {
+		Debugf("Region information is not valid.")
+		return false
+	}
+
+	return true
+}
+
+// getRegionInfoFromInstanceMetadataServiceProd calls instance metadata service and get the region information
+func getRegionInfoFromInstanceMetadataServiceProd() ([]byte, error) {
+	request, err := http.NewRequest(http.MethodGet, instanceMetadataRegionInfoURLV2, nil)
+	request.Header.Add("Authorization", "Bearer Oracle")
+
+	client := &http.Client{
+		Timeout: time.Second * 10,
+	}
+	resp, err := client.Do(request)
+	if err != nil {
+		return nil, fmt.Errorf("Failed to call instance metadata service. Error: %v", err)
+	}
+
+	statusCode := resp.StatusCode
+
+	defer resp.Body.Close()
+
+	content, err := ioutil.ReadAll(resp.Body)
+	if err != nil {
+		return nil, fmt.Errorf("Failed to get region information from response body. Error: %v", err)
+	}
+
+	if statusCode != http.StatusOK {
+		err = fmt.Errorf("HTTP Get failed: URL: %s, Status: %s, Message: %s",
+			instanceMetadataRegionInfoURLV2, resp.Status, string(content))
+		return nil, err
+	}
+
+	return content, nil
+}
--- a/vendor/github.com/oracle/oci-go-sdk/common/configuration.go
+++ b/vendor/github.com/oracle/oci-go-sdk/common/configuration.go
@@ -0,0 +1,578 @@
+// Copyright (c) 2016, 2018, 2020, Oracle and/or its affiliates.  All rights reserved.
+// This software is dual-licensed to you under the Universal Permissive License (UPL) 1.0 as shown at https://oss.oracle.com/licenses/upl or Apache License 2.0 as shown at http://www.apache.org/licenses/LICENSE-2.0. You may choose either license.
+
+package common
+
+import (
+	"crypto/rsa"
+	"errors"
+	"fmt"
+	"io/ioutil"
+	"os"
+	"path"
+	"regexp"
+	"strings"
+)
+
+// ConfigurationProvider wraps information about the account owner
+type ConfigurationProvider interface {
+	KeyProvider
+	TenancyOCID() (string, error)
+	UserOCID() (string, error)
+	KeyFingerprint() (string, error)
+	Region() (string, error)
+}
+
+// IsConfigurationProviderValid Tests all parts of the configuration provider do not return an error
+func IsConfigurationProviderValid(conf ConfigurationProvider) (ok bool, err error) {
+	baseFn := []func() (string, error){conf.TenancyOCID, conf.UserOCID, conf.KeyFingerprint, conf.Region, conf.KeyID}
+	for _, fn := range baseFn {
+		_, err = fn()
+		ok = err == nil
+		if err != nil {
+			return
+		}
+	}
+
+	_, err = conf.PrivateRSAKey()
+	ok = err == nil
+	if err != nil {
+		return
+	}
+	return true, nil
+}
+
+// rawConfigurationProvider allows a user to simply construct a configuration provider from raw values.
+type rawConfigurationProvider struct {
+	tenancy              string
+	user                 string
+	region               string
+	fingerprint          string
+	privateKey           string
+	privateKeyPassphrase *string
+}
+
+// NewRawConfigurationProvider will create a ConfigurationProvider with the arguments of the function
+func NewRawConfigurationProvider(tenancy, user, region, fingerprint, privateKey string, privateKeyPassphrase *string) ConfigurationProvider {
+	return rawConfigurationProvider{tenancy, user, region, fingerprint, privateKey, privateKeyPassphrase}
+}
+
+func (p rawConfigurationProvider) PrivateRSAKey() (key *rsa.PrivateKey, err error) {
+	return PrivateKeyFromBytes([]byte(p.privateKey), p.privateKeyPassphrase)
+}
+
+func (p rawConfigurationProvider) KeyID() (keyID string, err error) {
+	tenancy, err := p.TenancyOCID()
+	if err != nil {
+		return
+	}
+
+	user, err := p.UserOCID()
+	if err != nil {
+		return
+	}
+
+	fingerprint, err := p.KeyFingerprint()
+	if err != nil {
+		return
+	}
+
+	return fmt.Sprintf("%s/%s/%s", tenancy, user, fingerprint), nil
+}
+
+func (p rawConfigurationProvider) TenancyOCID() (string, error) {
+	if p.tenancy == "" {
+		return "", fmt.Errorf("tenancy OCID can not be empty")
+	}
+	return p.tenancy, nil
+}
+
+func (p rawConfigurationProvider) UserOCID() (string, error) {
+	if p.user == "" {
+		return "", fmt.Errorf("user OCID can not be empty")
+	}
+	return p.user, nil
+}
+
+func (p rawConfigurationProvider) KeyFingerprint() (string, error) {
+	if p.fingerprint == "" {
+		return "", fmt.Errorf("fingerprint can not be empty")
+	}
+	return p.fingerprint, nil
+}
+
+func (p rawConfigurationProvider) Region() (string, error) {
+	return canStringBeRegion(p.region)
+}
+
+// environmentConfigurationProvider reads configuration from environment variables
+type environmentConfigurationProvider struct {
+	PrivateKeyPassword        string
+	EnvironmentVariablePrefix string
+}
+
+// ConfigurationProviderEnvironmentVariables creates a ConfigurationProvider from a uniform set of environment variables starting with a prefix
+// The env variables should look like: [prefix]_private_key_path, [prefix]_tenancy_ocid, [prefix]_user_ocid, [prefix]_fingerprint
+// [prefix]_region
+func ConfigurationProviderEnvironmentVariables(environmentVariablePrefix, privateKeyPassword string) ConfigurationProvider {
+	return environmentConfigurationProvider{EnvironmentVariablePrefix: environmentVariablePrefix,
+		PrivateKeyPassword: privateKeyPassword}
+}
+
+func (p environmentConfigurationProvider) String() string {
+	return fmt.Sprintf("Configuration provided by environment variables prefixed with: %s", p.EnvironmentVariablePrefix)
+}
+
+func (p environmentConfigurationProvider) PrivateRSAKey() (key *rsa.PrivateKey, err error) {
+	environmentVariable := fmt.Sprintf("%s_%s", p.EnvironmentVariablePrefix, "private_key_path")
+	var ok bool
+	var value string
+	if value, ok = os.LookupEnv(environmentVariable); !ok {
+		return nil, fmt.Errorf("can not read PrivateKey from env variable: %s", environmentVariable)
+	}
+
+	expandedPath := expandPath(value)
+	pemFileContent, err := ioutil.ReadFile(expandedPath)
+	if err != nil {
+		Debugln("Can not read PrivateKey location from environment variable: " + environmentVariable)
+		return
+	}
+
+	key, err = PrivateKeyFromBytes(pemFileContent, &p.PrivateKeyPassword)
+	return
+}
+
+func (p environmentConfigurationProvider) KeyID() (keyID string, err error) {
+	ocid, err := p.TenancyOCID()
+	if err != nil {
+		return
+	}
+
+	userocid, err := p.UserOCID()
+	if err != nil {
+		return
+	}
+
+	fingerprint, err := p.KeyFingerprint()
+	if err != nil {
+		return
+	}
+
+	return fmt.Sprintf("%s/%s/%s", ocid, userocid, fingerprint), nil
+}
+
+func (p environmentConfigurationProvider) TenancyOCID() (value string, err error) {
+	environmentVariable := fmt.Sprintf("%s_%s", p.EnvironmentVariablePrefix, "tenancy_ocid")
+	var ok bool
+	if value, ok = os.LookupEnv(environmentVariable); !ok {
+		err = fmt.Errorf("can not read Tenancy from environment variable %s", environmentVariable)
+	}
+	return
+}
+
+func (p environmentConfigurationProvider) UserOCID() (value string, err error) {
+	environmentVariable := fmt.Sprintf("%s_%s", p.EnvironmentVariablePrefix, "user_ocid")
+	var ok bool
+	if value, ok = os.LookupEnv(environmentVariable); !ok {
+		err = fmt.Errorf("can not read user id from environment variable %s", environmentVariable)
+	}
+	return
+}
+
+func (p environmentConfigurationProvider) KeyFingerprint() (value string, err error) {
+	environmentVariable := fmt.Sprintf("%s_%s", p.EnvironmentVariablePrefix, "fingerprint")
+	var ok bool
+	if value, ok = os.LookupEnv(environmentVariable); !ok {
+		err = fmt.Errorf("can not read fingerprint from environment variable %s", environmentVariable)
+	}
+	return
+}
+
+func (p environmentConfigurationProvider) Region() (value string, err error) {
+	environmentVariable := fmt.Sprintf("%s_%s", p.EnvironmentVariablePrefix, "region")
+	var ok bool
+	if value, ok = os.LookupEnv(environmentVariable); !ok {
+		err = fmt.Errorf("can not read region from environment variable %s", environmentVariable)
+		return value, err
+	}
+
+	return canStringBeRegion(value)
+}
+
+// fileConfigurationProvider. reads configuration information from a file
+type fileConfigurationProvider struct {
+	//The path to the configuration file
+	ConfigPath string
+
+	//The password for the private key
+	PrivateKeyPassword string
+
+	//The profile for the configuration
+	Profile string
+
+	//ConfigFileInfo
+	FileInfo *configFileInfo
+}
+
+// ConfigurationProviderFromFile creates a configuration provider from a configuration file
+// by reading the "DEFAULT" profile
+func ConfigurationProviderFromFile(configFilePath, privateKeyPassword string) (ConfigurationProvider, error) {
+	if configFilePath == "" {
+		return nil, fmt.Errorf("config file path can not be empty")
+	}
+
+	return fileConfigurationProvider{
+		ConfigPath:         configFilePath,
+		PrivateKeyPassword: privateKeyPassword,
+		Profile:            "DEFAULT"}, nil
+}
+
+// ConfigurationProviderFromFileWithProfile creates a configuration provider from a configuration file
+// and the given profile
+func ConfigurationProviderFromFileWithProfile(configFilePath, profile, privateKeyPassword string) (ConfigurationProvider, error) {
+	if configFilePath == "" {
+		return nil, fmt.Errorf("config file path can not be empty")
+	}
+
+	return fileConfigurationProvider{
+		ConfigPath:         configFilePath,
+		PrivateKeyPassword: privateKeyPassword,
+		Profile:            profile}, nil
+}
+
+type configFileInfo struct {
+	UserOcid, Fingerprint, KeyFilePath, TenancyOcid, Region, Passphrase, SecurityTokenFilePath string
+	PresentConfiguration                                                                       byte
+}
+
+const (
+	hasTenancy = 1 << iota
+	hasUser
+	hasFingerprint
+	hasRegion
+	hasKeyFile
+	hasPassphrase
+	hasSecurityTokenFile
+	none
+)
+
+var profileRegex = regexp.MustCompile(`^\[(.*)\]`)
+
+func parseConfigFile(data []byte, profile string) (info *configFileInfo, err error) {
+
+	if len(data) == 0 {
+		return nil, fmt.Errorf("configuration file content is empty")
+	}
+
+	content := string(data)
+	splitContent := strings.Split(content, "\n")
+
+	//Look for profile
+	for i, line := range splitContent {
+		if match := profileRegex.FindStringSubmatch(line); match != nil && len(match) > 1 && match[1] == profile {
+			start := i + 1
+			return parseConfigAtLine(start, splitContent)
+		}
+	}
+
+	return nil, fmt.Errorf("configuration file did not contain profile: %s", profile)
+}
+
+func parseConfigAtLine(start int, content []string) (info *configFileInfo, err error) {
+	var configurationPresent byte
+	info = &configFileInfo{}
+	for i := start; i < len(content); i++ {
+		line := content[i]
+		if profileRegex.MatchString(line) {
+			break
+		}
+
+		if !strings.Contains(line, "=") {
+			continue
+		}
+
+		splits := strings.Split(line, "=")
+		switch key, value := strings.TrimSpace(splits[0]), strings.TrimSpace(splits[1]); strings.ToLower(key) {
+		case "passphrase", "pass_phrase":
+			configurationPresent = configurationPresent | hasPassphrase
+			info.Passphrase = value
+		case "user":
+			configurationPresent = configurationPresent | hasUser
+			info.UserOcid = value
+		case "fingerprint":
+			configurationPresent = configurationPresent | hasFingerprint
+			info.Fingerprint = value
+		case "key_file":
+			configurationPresent = configurationPresent | hasKeyFile
+			info.KeyFilePath = value
+		case "tenancy":
+			configurationPresent = configurationPresent | hasTenancy
+			info.TenancyOcid = value
+		case "region":
+			configurationPresent = configurationPresent | hasRegion
+			info.Region = value
+		case "security_token_file":
+			configurationPresent = configurationPresent | hasSecurityTokenFile
+			info.SecurityTokenFilePath = value
+		}
+	}
+	info.PresentConfiguration = configurationPresent
+	return
+
+}
+
+// cleans and expands the path if it contains a tilde , returns the expanded path or the input path as is if not expansion
+// was performed
+func expandPath(filepath string) (expandedPath string) {
+	cleanedPath := path.Clean(filepath)
+	expandedPath = cleanedPath
+	if strings.HasPrefix(cleanedPath, "~") {
+		rest := cleanedPath[2:]
+		expandedPath = path.Join(getHomeFolder(), rest)
+	}
+	return
+}
+
+func openConfigFile(configFilePath string) (data []byte, err error) {
+	expandedPath := expandPath(configFilePath)
+	data, err = ioutil.ReadFile(expandedPath)
+	if err != nil {
+		err = fmt.Errorf("can not read config file: %s due to: %s", configFilePath, err.Error())
+	}
+
+	return
+}
+
+func (p fileConfigurationProvider) String() string {
+	return fmt.Sprintf("Configuration provided by file: %s", p.ConfigPath)
+}
+
+func (p fileConfigurationProvider) readAndParseConfigFile() (info *configFileInfo, err error) {
+	if p.FileInfo != nil {
+		return p.FileInfo, nil
+	}
+
+	if p.ConfigPath == "" {
+		return nil, fmt.Errorf("configuration path can not be empty")
+	}
+
+	data, err := openConfigFile(p.ConfigPath)
+	if err != nil {
+		err = fmt.Errorf("error while parsing config file: %s. Due to: %s", p.ConfigPath, err.Error())
+		return
+	}
+
+	p.FileInfo, err = parseConfigFile(data, p.Profile)
+	return p.FileInfo, err
+}
+
+func presentOrError(value string, expectedConf, presentConf byte, confMissing string) (string, error) {
+	if presentConf&expectedConf == expectedConf {
+		return value, nil
+	}
+	return "", errors.New(confMissing + " configuration is missing from file")
+}
+
+func (p fileConfigurationProvider) TenancyOCID() (value string, err error) {
+	info, err := p.readAndParseConfigFile()
+	if err != nil {
+		err = fmt.Errorf("can not read tenancy configuration due to: %s", err.Error())
+		return
+	}
+
+	value, err = presentOrError(info.TenancyOcid, hasTenancy, info.PresentConfiguration, "tenancy")
+	return
+}
+
+func (p fileConfigurationProvider) UserOCID() (value string, err error) {
+	info, err := p.readAndParseConfigFile()
+	if err != nil {
+		err = fmt.Errorf("can not read tenancy configuration due to: %s", err.Error())
+		return
+	}
+
+	if value, err = presentOrError(info.UserOcid, hasUser, info.PresentConfiguration, "user"); err != nil {
+		// need to check if securityTokenPath is provided, if security token is provided, userOCID can be "".
+		if _, stErr := presentOrError(info.SecurityTokenFilePath, hasSecurityTokenFile, info.PresentConfiguration,
+			"securityTokenPath"); stErr == nil {
+			err = nil
+		}
+	}
+	return
+}
+
+func (p fileConfigurationProvider) KeyFingerprint() (value string, err error) {
+	info, err := p.readAndParseConfigFile()
+	if err != nil {
+		err = fmt.Errorf("can not read tenancy configuration due to: %s", err.Error())
+		return
+	}
+	value, err = presentOrError(info.Fingerprint, hasFingerprint, info.PresentConfiguration, "fingerprint")
+	return
+}
+
+func (p fileConfigurationProvider) KeyID() (keyID string, err error) {
+	info, err := p.readAndParseConfigFile()
+	if err != nil {
+		err = fmt.Errorf("can not read tenancy configuration due to: %s", err.Error())
+		return
+	}
+	if info.PresentConfiguration&hasUser == hasUser {
+		return fmt.Sprintf("%s/%s/%s", info.TenancyOcid, info.UserOcid, info.Fingerprint), nil
+	}
+	if filePath, err := presentOrError(info.SecurityTokenFilePath, hasSecurityTokenFile, info.PresentConfiguration, "securityTokenFilePath"); err == nil {
+		return getSecurityToken(filePath)
+	}
+	err = fmt.Errorf("can not read SecurityTokenFilePath from configuration file due to: %s", err.Error())
+	return
+}
+
+func (p fileConfigurationProvider) PrivateRSAKey() (key *rsa.PrivateKey, err error) {
+	info, err := p.readAndParseConfigFile()
+	if err != nil {
+		err = fmt.Errorf("can not read tenancy configuration due to: %s", err.Error())
+		return
+	}
+
+	filePath, err := presentOrError(info.KeyFilePath, hasKeyFile, info.PresentConfiguration, "key file path")
+	if err != nil {
+		return
+	}
+
+	expandedPath := expandPath(filePath)
+	pemFileContent, err := ioutil.ReadFile(expandedPath)
+	if err != nil {
+		err = fmt.Errorf("can not read PrivateKey  from configuration file due to: %s", err.Error())
+		return
+	}
+
+	password := p.PrivateKeyPassword
+
+	if password == "" && ((info.PresentConfiguration & hasPassphrase) == hasPassphrase) {
+		password = info.Passphrase
+	}
+
+	key, err = PrivateKeyFromBytes(pemFileContent, &password)
+	return
+}
+
+func (p fileConfigurationProvider) Region() (value string, err error) {
+	info, err := p.readAndParseConfigFile()
+	if err != nil {
+		err = fmt.Errorf("can not read region configuration due to: %s", err.Error())
+		return
+	}
+
+	value, err = presentOrError(info.Region, hasRegion, info.PresentConfiguration, "region")
+	if err != nil {
+		val, error := getRegionFromEnvVar()
+		if error != nil {
+			err = fmt.Errorf("region configuration is missing from file, nor for OCI_REGION env var")
+			return
+		}
+		value = val
+	}
+
+	return canStringBeRegion(value)
+}
+
+func getSecurityToken(filePath string) (string, error) {
+	expandedPath := expandPath(filePath)
+	tokenFileContent, err := ioutil.ReadFile(expandedPath)
+	if err != nil {
+		err = fmt.Errorf("can not read PrivateKey  from configuration file due to: %s", err.Error())
+		return "", err
+	}
+	return fmt.Sprintf("ST$%s", tokenFileContent), nil
+}
+
+// A configuration provider that look for information in  multiple configuration providers
+type composingConfigurationProvider struct {
+	Providers []ConfigurationProvider
+}
+
+// ComposingConfigurationProvider creates a composing configuration provider with the given slice of configuration providers
+// A composing provider will return the configuration of the first provider that has the required property
+// if no provider has the property it will return an error.
+func ComposingConfigurationProvider(providers []ConfigurationProvider) (ConfigurationProvider, error) {
+	if len(providers) == 0 {
+		return nil, fmt.Errorf("providers can not be an empty slice")
+	}
+
+	for i, p := range providers {
+		if p == nil {
+			return nil, fmt.Errorf("provider in position: %d is nil. ComposingConfiurationProvider does not support nil values", i)
+		}
+	}
+	return composingConfigurationProvider{Providers: providers}, nil
+}
+
+func (c composingConfigurationProvider) TenancyOCID() (string, error) {
+	for _, p := range c.Providers {
+		val, err := p.TenancyOCID()
+		if err == nil {
+			return val, nil
+		}
+	}
+	return "", fmt.Errorf("did not find a proper configuration for tenancy")
+}
+
+func (c composingConfigurationProvider) UserOCID() (string, error) {
+	for _, p := range c.Providers {
+		val, err := p.UserOCID()
+		if err == nil {
+			return val, nil
+		}
+	}
+	return "", fmt.Errorf("did not find a proper configuration for user")
+}
+
+func (c composingConfigurationProvider) KeyFingerprint() (string, error) {
+	for _, p := range c.Providers {
+		val, err := p.KeyFingerprint()
+		if err == nil {
+			return val, nil
+		}
+	}
+	return "", fmt.Errorf("did not find a proper configuration for keyFingerprint")
+}
+func (c composingConfigurationProvider) Region() (string, error) {
+	for _, p := range c.Providers {
+		val, err := p.Region()
+		if err == nil {
+			return val, nil
+		}
+	}
+	if val, err := getRegionFromEnvVar(); err == nil {
+		return val, nil
+	}
+	return "", fmt.Errorf("did not find a proper configuration for region, nor for OCI_REGION env var")
+}
+
+func (c composingConfigurationProvider) KeyID() (string, error) {
+	for _, p := range c.Providers {
+		val, err := p.KeyID()
+		if err == nil {
+			return val, nil
+		}
+	}
+	return "", fmt.Errorf("did not find a proper configuration for key id")
+}
+
+func (c composingConfigurationProvider) PrivateRSAKey() (*rsa.PrivateKey, error) {
+	for _, p := range c.Providers {
+		val, err := p.PrivateRSAKey()
+		if err == nil {
+			return val, nil
+		}
+	}
+	return nil, fmt.Errorf("did not find a proper configuration for private key")
+}
+
+func getRegionFromEnvVar() (string, error) {
+	regionEnvVar := "OCI_REGION"
+	if region, existed := os.LookupEnv(regionEnvVar); existed {
+		return region, nil
+	}
+	return "", fmt.Errorf("did not find OCI_REGION env var")
+}
--- a/vendor/github.com/oracle/oci-go-sdk/common/errors.go
+++ b/vendor/github.com/oracle/oci-go-sdk/common/errors.go
@@ -0,0 +1,99 @@
+// Copyright (c) 2016, 2018, 2020, Oracle and/or its affiliates.  All rights reserved.
+// This software is dual-licensed to you under the Universal Permissive License (UPL) 1.0 as shown at https://oss.oracle.com/licenses/upl or Apache License 2.0 as shown at http://www.apache.org/licenses/LICENSE-2.0. You may choose either license.
+
+package common
+
+import (
+	"encoding/json"
+	"fmt"
+	"io/ioutil"
+	"net/http"
+)
+
+// ServiceError models all potential errors generated the service call
+type ServiceError interface {
+	// The http status code of the error
+	GetHTTPStatusCode() int
+
+	// The human-readable error string as sent by the service
+	GetMessage() string
+
+	// A short error code that defines the error, meant for programmatic parsing.
+	// See https://docs.cloud.oracle.com/Content/API/References/apierrors.htm
+	GetCode() string
+
+	// Unique Oracle-assigned identifier for the request.
+	// If you need to contact Oracle about a particular request, please provide the request ID.
+	GetOpcRequestID() string
+}
+
+type servicefailure struct {
+	StatusCode   int
+	Code         string `json:"code,omitempty"`
+	Message      string `json:"message,omitempty"`
+	OpcRequestID string `json:"opc-request-id"`
+}
+
+func newServiceFailureFromResponse(response *http.Response) error {
+	var err error
+
+	se := servicefailure{
+		StatusCode:   response.StatusCode,
+		Code:         "BadErrorResponse",
+		OpcRequestID: response.Header.Get("opc-request-id")}
+
+	//If there is an error consume the body, entirely
+	body, err := ioutil.ReadAll(response.Body)
+	if err != nil {
+		se.Message = fmt.Sprintf("The body of the response was not readable, due to :%s", err.Error())
+		return se
+	}
+
+	err = json.Unmarshal(body, &se)
+	if err != nil {
+		Debugf("Error response could not be parsed due to: %s", err.Error())
+		se.Message = fmt.Sprintf("Failed to parse json from response body due to: %s. With response body %s.", err.Error(), string(body[:]))
+		return se
+	}
+	return se
+}
+
+func (se servicefailure) Error() string {
+	return fmt.Sprintf("Service error:%s. %s. http status code: %d. Opc request id: %s",
+		se.Code, se.Message, se.StatusCode, se.OpcRequestID)
+}
+
+func (se servicefailure) GetHTTPStatusCode() int {
+	return se.StatusCode
+
+}
+
+func (se servicefailure) GetMessage() string {
+	return se.Message
+}
+
+func (se servicefailure) GetCode() string {
+	return se.Code
+}
+
+func (se servicefailure) GetOpcRequestID() string {
+	return se.OpcRequestID
+}
+
+// IsServiceError returns false if the error is not service side, otherwise true
+// additionally it returns an interface representing the ServiceError
+func IsServiceError(err error) (failure ServiceError, ok bool) {
+	failure, ok = err.(servicefailure)
+	return
+}
+
+type deadlineExceededByBackoffError struct{}
+
+func (deadlineExceededByBackoffError) Error() string {
+	return "now() + computed backoff duration exceeds request deadline"
+}
+
+// DeadlineExceededByBackoff is the error returned by Call() when GetNextDuration() returns a time.Duration that would
+// force the user to wait past the request deadline before re-issuing a request. This enables us to exit early, since
+// we cannot succeed based on the configured retry policy.
+var DeadlineExceededByBackoff error = deadlineExceededByBackoffError{}
--- a/vendor/github.com/oracle/oci-go-sdk/common/helpers.go
+++ b/vendor/github.com/oracle/oci-go-sdk/common/helpers.go
@@ -0,0 +1,273 @@
+// Copyright (c) 2016, 2018, 2020, Oracle and/or its affiliates.  All rights reserved.
+// This software is dual-licensed to you under the Universal Permissive License (UPL) 1.0 as shown at https://oss.oracle.com/licenses/upl or Apache License 2.0 as shown at http://www.apache.org/licenses/LICENSE-2.0. You may choose either license.
+
+package common
+
+import (
+	"crypto/rand"
+	"crypto/rsa"
+	"crypto/x509"
+	"encoding/pem"
+	"fmt"
+	"reflect"
+	"strconv"
+	"strings"
+	"time"
+)
+
+// String returns a pointer to the provided string
+func String(value string) *string {
+	return &value
+}
+
+// Int returns a pointer to the provided int
+func Int(value int) *int {
+	return &value
+}
+
+// Int64 returns a pointer to the provided int64
+func Int64(value int64) *int64 {
+	return &value
+}
+
+// Uint returns a pointer to the provided uint
+func Uint(value uint) *uint {
+	return &value
+}
+
+//Float32 returns a pointer to the provided float32
+func Float32(value float32) *float32 {
+	return &value
+}
+
+//Float64 returns a pointer to the provided float64
+func Float64(value float64) *float64 {
+	return &value
+}
+
+//Bool returns a pointer to the provided bool
+func Bool(value bool) *bool {
+	return &value
+}
+
+//PointerString prints the values of pointers in a struct
+//Producing a human friendly string for an struct with pointers.
+//useful when debugging the values of a struct
+func PointerString(datastruct interface{}) (representation string) {
+	val := reflect.ValueOf(datastruct)
+	typ := reflect.TypeOf(datastruct)
+	all := make([]string, 2)
+	all = append(all, "{")
+	for i := 0; i < typ.NumField(); i++ {
+		sf := typ.Field(i)
+
+		//unexported
+		if sf.PkgPath != "" && !sf.Anonymous {
+			continue
+		}
+
+		sv := val.Field(i)
+		stringValue := ""
+		if isNil(sv) {
+			stringValue = fmt.Sprintf("%s=<nil>", sf.Name)
+		} else {
+			if sv.Type().Kind() == reflect.Ptr {
+				sv = sv.Elem()
+			}
+			stringValue = fmt.Sprintf("%s=%v", sf.Name, sv)
+		}
+		all = append(all, stringValue)
+	}
+	all = append(all, "}")
+	representation = strings.TrimSpace(strings.Join(all, " "))
+	return
+}
+
+// SDKTime a struct that parses/renders to/from json using RFC339 date-time information
+type SDKTime struct {
+	time.Time
+}
+
+// SDKDate a struct that parses/renders to/from json using only date information
+type SDKDate struct {
+	//Date date information
+	Date time.Time
+}
+
+func sdkTimeFromTime(t time.Time) SDKTime {
+	return SDKTime{t}
+}
+
+func sdkDateFromTime(t time.Time) SDKDate {
+	return SDKDate{Date: t}
+}
+
+func formatTime(t SDKTime) string {
+	return t.Format(sdkTimeFormat)
+}
+
+func formatDate(t SDKDate) string {
+	return t.Date.Format(sdkDateFormat)
+}
+
+func now() *SDKTime {
+	t := SDKTime{time.Now()}
+	return &t
+}
+
+var timeType = reflect.TypeOf(SDKTime{})
+var timeTypePtr = reflect.TypeOf(&SDKTime{})
+
+var sdkDateType = reflect.TypeOf(SDKDate{})
+var sdkDateTypePtr = reflect.TypeOf(&SDKDate{})
+
+//Formats for sdk supported time representations
+const sdkTimeFormat = time.RFC3339Nano
+const rfc1123OptionalLeadingDigitsInDay = "Mon, _2 Jan 2006 15:04:05 MST"
+const sdkDateFormat = "2006-01-02"
+
+func tryParsingTimeWithValidFormatsForHeaders(data []byte, headerName string) (t time.Time, err error) {
+	header := strings.ToLower(headerName)
+	switch header {
+	case "lastmodified", "date":
+		t, err = tryParsing(data, time.RFC3339Nano, time.RFC3339, time.RFC1123, rfc1123OptionalLeadingDigitsInDay, time.RFC850, time.ANSIC)
+		return
+	default: //By default we parse with RFC3339
+		t, err = time.Parse(sdkTimeFormat, string(data))
+		return
+	}
+}
+
+func tryParsing(data []byte, layouts ...string) (tm time.Time, err error) {
+	datestring := string(data)
+	for _, l := range layouts {
+		tm, err = time.Parse(l, datestring)
+		if err == nil {
+			return
+		}
+	}
+	err = fmt.Errorf("Could not parse time: %s with formats: %s", datestring, layouts[:])
+	return
+}
+
+// String returns string representation of SDKDate
+func (t *SDKDate) String() string {
+	return t.Date.Format(sdkDateFormat)
+}
+
+// NewSDKDateFromString parses the dateString into SDKDate
+func NewSDKDateFromString(dateString string) (*SDKDate, error) {
+	parsedTime, err := time.Parse(sdkDateFormat, dateString)
+	if err != nil {
+		return nil, err
+	}
+
+	return &SDKDate{Date: parsedTime}, nil
+}
+
+// UnmarshalJSON unmarshals from json
+func (t *SDKTime) UnmarshalJSON(data []byte) (e error) {
+	s := string(data)
+	if s == "null" {
+		t.Time = time.Time{}
+	} else {
+		//Try parsing with RFC3339
+		t.Time, e = time.Parse(`"`+sdkTimeFormat+`"`, string(data))
+	}
+	return
+}
+
+// MarshalJSON marshals to JSON
+func (t *SDKTime) MarshalJSON() (buff []byte, e error) {
+	s := t.Format(sdkTimeFormat)
+	buff = []byte(`"` + s + `"`)
+	return
+}
+
+// UnmarshalJSON unmarshals from json
+func (t *SDKDate) UnmarshalJSON(data []byte) (e error) {
+	if string(data) == `"null"` {
+		t.Date = time.Time{}
+		return
+	}
+
+	t.Date, e = tryParsing(data,
+		strconv.Quote(sdkDateFormat),
+	)
+	return
+}
+
+// MarshalJSON marshals to JSON
+func (t *SDKDate) MarshalJSON() (buff []byte, e error) {
+	s := t.Date.Format(sdkDateFormat)
+	buff = []byte(strconv.Quote(s))
+	return
+}
+
+// PrivateKeyFromBytes is a helper function that will produce a RSA private
+// key from bytes. This function is deprecated in favour of PrivateKeyFromBytesWithPassword
+// Deprecated
+func PrivateKeyFromBytes(pemData []byte, password *string) (key *rsa.PrivateKey, e error) {
+	if password == nil {
+		return PrivateKeyFromBytesWithPassword(pemData, nil)
+	}
+
+	return PrivateKeyFromBytesWithPassword(pemData, []byte(*password))
+}
+
+// PrivateKeyFromBytesWithPassword is a helper function that will produce a RSA private
+// key from bytes and a password.
+func PrivateKeyFromBytesWithPassword(pemData, password []byte) (key *rsa.PrivateKey, e error) {
+	if pemBlock, _ := pem.Decode(pemData); pemBlock != nil {
+		decrypted := pemBlock.Bytes
+		if x509.IsEncryptedPEMBlock(pemBlock) {
+			if password == nil {
+				e = fmt.Errorf("private key password is required for encrypted private keys")
+				return
+			}
+			if decrypted, e = x509.DecryptPEMBlock(pemBlock, password); e != nil {
+				return
+			}
+		}
+
+		key, e = parsePKCSPrivateKey(decrypted)
+
+	} else {
+		e = fmt.Errorf("PEM data was not found in buffer")
+		return
+	}
+	return
+}
+
+// ParsePrivateKey using PKCS1 or PKCS8
+func parsePKCSPrivateKey(decryptedKey []byte) (*rsa.PrivateKey, error) {
+	if key, err := x509.ParsePKCS1PrivateKey(decryptedKey); err == nil {
+		return key, nil
+	}
+	if key, err := x509.ParsePKCS8PrivateKey(decryptedKey); err == nil {
+		switch key := key.(type) {
+		case *rsa.PrivateKey:
+			return key, nil
+		default:
+			return nil, fmt.Errorf("unsupportesd private key type in PKCS8 wrapping")
+		}
+	}
+	return nil, fmt.Errorf("failed to parse private key")
+}
+
+func generateRandUUID() (string, error) {
+	b := make([]byte, 16)
+	_, err := rand.Read(b)
+	if err != nil {
+		return "", err
+	}
+	uuid := fmt.Sprintf("%x%x%x%x%x", b[0:4], b[4:6], b[6:8], b[8:10], b[10:])
+
+	return uuid, nil
+}
+
+func makeACopy(original []string) []string {
+	tmp := make([]string, len(original))
+	copy(tmp, original)
+	return tmp
+}
--- a/vendor/github.com/oracle/oci-go-sdk/common/http.go
+++ b/vendor/github.com/oracle/oci-go-sdk/common/http.go
@@ -0,0 +1,981 @@
+// Copyright (c) 2016, 2018, 2020, Oracle and/or its affiliates.  All rights reserved.
+// This software is dual-licensed to you under the Universal Permissive License (UPL) 1.0 as shown at https://oss.oracle.com/licenses/upl or Apache License 2.0 as shown at http://www.apache.org/licenses/LICENSE-2.0. You may choose either license.
+
+package common
+
+import (
+	"bytes"
+	"encoding/json"
+	"fmt"
+	"io"
+	"io/ioutil"
+	"net/http"
+	"net/url"
+	"reflect"
+	"regexp"
+	"strconv"
+	"strings"
+	"time"
+)
+
+///////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
+///////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
+//Request Marshaling
+////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
+////////////////////////////////////////////////////////////////////////////////////////////////////////////////
+
+func isNil(v reflect.Value) bool {
+	return v.Kind() == reflect.Ptr && v.IsNil()
+}
+
+// Returns the string representation of a reflect.Value
+// Only transforms primitive values
+func toStringValue(v reflect.Value, field reflect.StructField) (string, error) {
+	if v.Kind() == reflect.Ptr {
+		if v.IsNil() {
+			return "", fmt.Errorf("can not marshal a nil pointer")
+		}
+		v = v.Elem()
+	}
+
+	if v.Type() == timeType {
+		t := v.Interface().(SDKTime)
+		return formatTime(t), nil
+	}
+
+	if v.Type() == sdkDateType {
+		t := v.Interface().(SDKDate)
+		return formatDate(t), nil
+	}
+
+	switch v.Kind() {
+	case reflect.Bool:
+		return strconv.FormatBool(v.Bool()), nil
+	case reflect.Int, reflect.Int8, reflect.Int16, reflect.Int32, reflect.Int64:
+		return strconv.FormatInt(v.Int(), 10), nil
+	case reflect.Uint, reflect.Uint8, reflect.Uint16, reflect.Uint32, reflect.Uint64, reflect.Uintptr:
+		return strconv.FormatUint(v.Uint(), 10), nil
+	case reflect.String:
+		return v.String(), nil
+	case reflect.Float32:
+		return strconv.FormatFloat(v.Float(), 'f', -1, 32), nil
+	case reflect.Float64:
+		return strconv.FormatFloat(v.Float(), 'f', -1, 64), nil
+	default:
+		return "", fmt.Errorf("marshaling structure to a http.Request does not support field named: %s of type: %v",
+			field.Name, v.Type().String())
+	}
+}
+
+func addBinaryBody(request *http.Request, value reflect.Value, field reflect.StructField) (e error) {
+	readCloser, ok := value.Interface().(io.ReadCloser)
+	isMandatory, err := strconv.ParseBool(field.Tag.Get("mandatory"))
+	if err != nil {
+		return fmt.Errorf("mandatory tag is not valid for field %s", field.Name)
+	}
+
+	if isMandatory && !ok {
+		e = fmt.Errorf("body of the request is mandatory and needs  to be an io.ReadCloser interface. Can not marshal body of binary request")
+		return
+	}
+
+	request.Body = readCloser
+
+	//Set the default content type to application/octet-stream if not set
+	if request.Header.Get(requestHeaderContentType) == "" {
+		request.Header.Set(requestHeaderContentType, "application/octet-stream")
+	}
+	return nil
+}
+
+// getTaggedNilFieldNameOrError, evaluates if a field with json and  non mandatory tags is nil
+// returns the json tag name, or an error if the tags are incorrectly present
+func getTaggedNilFieldNameOrError(field reflect.StructField, fieldValue reflect.Value) (bool, string, error) {
+	currentTag := field.Tag
+	jsonTag := currentTag.Get("json")
+
+	if jsonTag == "" {
+		return false, "", fmt.Errorf("json tag is not valid for field %s", field.Name)
+	}
+
+	partsJSONTag := strings.Split(jsonTag, ",")
+	nameJSONField := partsJSONTag[0]
+
+	if _, ok := currentTag.Lookup("mandatory"); !ok {
+		//No mandatory field set, no-op
+		return false, nameJSONField, nil
+	}
+	isMandatory, err := strconv.ParseBool(currentTag.Get("mandatory"))
+	if err != nil {
+		return false, "", fmt.Errorf("mandatory tag is not valid for field %s", field.Name)
+	}
+
+	// If the field is marked as mandatory, no-op
+	if isMandatory {
+		return false, nameJSONField, nil
+	}
+
+	Debugf("Adjusting tag: mandatory is false and json tag is valid on field: %s", field.Name)
+
+	// If the field can not be nil, then no-op
+	if !isNillableType(&fieldValue) {
+		Debugf("WARNING json field is tagged with mandatory flags, but the type can not be nil, field name: %s", field.Name)
+		return false, nameJSONField, nil
+	}
+
+	// If field value is nil, tag it as omitEmpty
+	return fieldValue.IsNil(), nameJSONField, nil
+
+}
+
+// isNillableType returns true if the filed can be nil
+func isNillableType(value *reflect.Value) bool {
+	k := value.Kind()
+	switch k {
+	case reflect.Chan, reflect.Func, reflect.Map, reflect.Ptr, reflect.Interface, reflect.Slice:
+		return true
+	}
+	return false
+}
+
+// omitNilFieldsInJSON, removes json keys whose struct value is nil, and the field is tagged with the json and
+// mandatory:false tags
+func omitNilFieldsInJSON(data interface{}, value reflect.Value) (interface{}, error) {
+	switch value.Kind() {
+	case reflect.Struct:
+		jsonMap := data.(map[string]interface{})
+		fieldType := value.Type()
+		for i := 0; i < fieldType.NumField(); i++ {
+			currentField := fieldType.Field(i)
+			//unexported skip
+			if currentField.PkgPath != "" {
+				continue
+			}
+
+			//Does not have json tag, no-op
+			if _, ok := currentField.Tag.Lookup("json"); !ok {
+				continue
+			}
+
+			currentFieldValue := value.Field(i)
+			ok, jsonFieldName, err := getTaggedNilFieldNameOrError(currentField, currentFieldValue)
+			if err != nil {
+				return nil, fmt.Errorf("can not omit nil fields for field: %s, due to: %s",
+					currentField.Name, err.Error())
+			}
+
+			//Delete the struct field from the json representation
+			if ok {
+				delete(jsonMap, jsonFieldName)
+				continue
+			}
+
+			// Check to make sure the field is part of the json representation of the value
+			if _, contains := jsonMap[jsonFieldName]; !contains {
+				Debugf("Field %s is not present in json, omitting", jsonFieldName)
+				continue
+			}
+
+			if currentFieldValue.Type() == timeType || currentFieldValue.Type() == timeTypePtr ||
+				currentField.Type == sdkDateType || currentField.Type == sdkDateTypePtr {
+				continue
+			}
+			// does it need to be adjusted?
+			var adjustedValue interface{}
+			adjustedValue, err = omitNilFieldsInJSON(jsonMap[jsonFieldName], currentFieldValue)
+			if err != nil {
+				return nil, fmt.Errorf("can not omit nil fields for field: %s, due to: %s",
+					currentField.Name, err.Error())
+			}
+			jsonMap[jsonFieldName] = adjustedValue
+		}
+		return jsonMap, nil
+	case reflect.Slice, reflect.Array:
+		// Special case: a []byte may have been marshalled as a string
+		if data != nil && reflect.TypeOf(data).Kind() == reflect.String && value.Type().Elem().Kind() == reflect.Uint8 {
+			return data, nil
+		}
+		jsonList, ok := data.([]interface{})
+		if !ok {
+			return nil, fmt.Errorf("can not omit nil fields, data was expected to be a not-nil list")
+		}
+		newList := make([]interface{}, len(jsonList))
+		var err error
+		for i, val := range jsonList {
+			newList[i], err = omitNilFieldsInJSON(val, value.Index(i))
+			if err != nil {
+				return nil, err
+			}
+		}
+		return newList, nil
+	case reflect.Map:
+		jsonMap, ok := data.(map[string]interface{})
+		if !ok {
+			return nil, fmt.Errorf("can not omit nil fields, data was expected to be a not-nil map")
+		}
+		newMap := make(map[string]interface{}, len(jsonMap))
+		var err error
+		for key, val := range jsonMap {
+			newMap[key], err = omitNilFieldsInJSON(val, value.MapIndex(reflect.ValueOf(key)))
+			if err != nil {
+				return nil, err
+			}
+		}
+		return newMap, nil
+	case reflect.Ptr, reflect.Interface:
+		valPtr := value.Elem()
+		return omitNilFieldsInJSON(data, valPtr)
+	default:
+		//Otherwise no-op
+		return data, nil
+	}
+}
+
+// removeNilFieldsInJSONWithTaggedStruct remove struct fields tagged with json and mandatory false
+// that are nil
+func removeNilFieldsInJSONWithTaggedStruct(rawJSON []byte, value reflect.Value) ([]byte, error) {
+	var rawInterface interface{}
+	decoder := json.NewDecoder(bytes.NewBuffer(rawJSON))
+	decoder.UseNumber()
+	var err error
+	if err = decoder.Decode(&rawInterface); err != nil {
+		return nil, err
+	}
+
+	fixedMap, err := omitNilFieldsInJSON(rawInterface, value)
+	if err != nil {
+		return nil, err
+	}
+	return json.Marshal(fixedMap)
+}
+
+func addToBody(request *http.Request, value reflect.Value, field reflect.StructField) (e error) {
+	Debugln("Marshaling to body from field:", field.Name)
+	if request.Body != nil {
+		Logf("The body of the request is already set. Structure: %s will overwrite it\n", field.Name)
+	}
+	tag := field.Tag
+	encoding := tag.Get("encoding")
+
+	if encoding == "binary" {
+		return addBinaryBody(request, value, field)
+	}
+
+	rawJSON, e := json.Marshal(value.Interface())
+	if e != nil {
+		return
+	}
+	marshaled, e := removeNilFieldsInJSONWithTaggedStruct(rawJSON, value)
+	if e != nil {
+		return
+	}
+
+	if defaultLogger.LogLevel() == verboseLogging {
+		Debugf("Marshaled body is: %s\n", string(marshaled))
+	}
+
+	bodyBytes := bytes.NewReader(marshaled)
+	request.ContentLength = int64(bodyBytes.Len())
+	request.Header.Set(requestHeaderContentLength, strconv.FormatInt(request.ContentLength, 10))
+	request.Header.Set(requestHeaderContentType, "application/json")
+	request.Body = ioutil.NopCloser(bodyBytes)
+	request.GetBody = func() (io.ReadCloser, error) {
+		return ioutil.NopCloser(bodyBytes), nil
+	}
+	return
+}
+
+func addToQuery(request *http.Request, value reflect.Value, field reflect.StructField) (e error) {
+	Debugln("Marshaling to query from field: ", field.Name)
+	if request.URL == nil {
+		request.URL = &url.URL{}
+	}
+	query := request.URL.Query()
+	var queryParameterValue, queryParameterName string
+
+	if queryParameterName = field.Tag.Get("name"); queryParameterName == "" {
+		return fmt.Errorf("marshaling request to a query requires the 'name' tag for field: %s ", field.Name)
+	}
+
+	mandatory, _ := strconv.ParseBool(strings.ToLower(field.Tag.Get("mandatory")))
+
+	//If mandatory and nil. Error out
+	if mandatory && isNil(value) {
+		return fmt.Errorf("marshaling request to a header requires not nil pointer for field: %s", field.Name)
+	}
+
+	//if not mandatory and nil. Omit
+	if !mandatory && isNil(value) {
+		Debugf("Query parameter value is not mandatory and is nil pointer in field: %s. Skipping query", field.Name)
+		return
+	}
+
+	encoding := strings.ToLower(field.Tag.Get("collectionFormat"))
+	var collectionFormatStringValues []string
+	switch encoding {
+	case "csv", "multi":
+		if value.Kind() != reflect.Slice && value.Kind() != reflect.Array {
+			e = fmt.Errorf("query parameter is tagged as csv or multi yet its type is neither an Array nor a Slice: %s", field.Name)
+			break
+		}
+
+		numOfElements := value.Len()
+		collectionFormatStringValues = make([]string, numOfElements)
+		for i := 0; i < numOfElements; i++ {
+			collectionFormatStringValues[i], e = toStringValue(value.Index(i), field)
+			if e != nil {
+				break
+			}
+		}
+		queryParameterValue = strings.Join(collectionFormatStringValues, ",")
+	case "":
+		queryParameterValue, e = toStringValue(value, field)
+	default:
+		e = fmt.Errorf("encoding of type %s is not supported for query param: %s", encoding, field.Name)
+	}
+
+	if e != nil {
+		return
+	}
+
+	//check for tag "omitEmpty", this is done to accomodate unset fields that do not
+	//support an empty string: enums in query params
+	if omitEmpty, present := field.Tag.Lookup("omitEmpty"); present {
+		omitEmptyBool, _ := strconv.ParseBool(strings.ToLower(omitEmpty))
+		if queryParameterValue != "" || !omitEmptyBool {
+			addToQueryForEncoding(&query, encoding, queryParameterName, queryParameterValue, collectionFormatStringValues)
+		} else {
+			Debugf("Omitting %s, is empty and omitEmpty tag is set", field.Name)
+		}
+	} else {
+		addToQueryForEncoding(&query, encoding, queryParameterName, queryParameterValue, collectionFormatStringValues)
+	}
+
+	request.URL.RawQuery = query.Encode()
+	return
+}
+
+func addToQueryForEncoding(query *url.Values, encoding string, queryParameterName string, queryParameterValue string, collectionFormatStringValues []string) {
+	if encoding == "multi" {
+		for _, stringValue := range collectionFormatStringValues {
+			query.Add(queryParameterName, stringValue)
+		}
+	} else {
+		query.Set(queryParameterName, queryParameterValue)
+	}
+}
+
+// Adds to the path of the url in the order they appear in the structure
+func addToPath(request *http.Request, value reflect.Value, field reflect.StructField) (e error) {
+	var additionalURLPathPart string
+	if additionalURLPathPart, e = toStringValue(value, field); e != nil {
+		return fmt.Errorf("can not marshal to path in request for field %s. Due to %s", field.Name, e.Error())
+	}
+
+	// path should not be empty for any operations
+	if len(additionalURLPathPart) == 0 {
+		return fmt.Errorf("value cannot be empty for field %s in path", field.Name)
+	}
+
+	if request.URL == nil {
+		request.URL = &url.URL{}
+		request.URL.Path = ""
+	}
+	var currentURLPath = request.URL.Path
+
+	var templatedPathRegex, _ = regexp.Compile(".*{.+}.*")
+	if !templatedPathRegex.MatchString(currentURLPath) {
+		Debugln("Marshaling request to path by appending field:", field.Name)
+		allPath := []string{currentURLPath, additionalURLPathPart}
+		request.URL.Path = strings.Join(allPath, "/")
+	} else {
+		var fieldName string
+		if fieldName = field.Tag.Get("name"); fieldName == "" {
+			e = fmt.Errorf("marshaling request to path name and template requires a 'name' tag for field: %s", field.Name)
+			return
+		}
+		urlTemplate := currentURLPath
+		Debugln("Marshaling to path from field: ", field.Name, " in template: ", urlTemplate)
+		request.URL.Path = strings.Replace(urlTemplate, "{"+fieldName+"}", additionalURLPathPart, -1)
+	}
+	return
+}
+
+func setWellKnownHeaders(request *http.Request, headerName, headerValue string) (e error) {
+	switch strings.ToLower(headerName) {
+	case "content-length":
+		var len int
+		len, e = strconv.Atoi(headerValue)
+		if e != nil {
+			return
+		}
+		request.ContentLength = int64(len)
+	}
+	return nil
+}
+
+func addToHeader(request *http.Request, value reflect.Value, field reflect.StructField) (e error) {
+	Debugln("Marshaling to header from field: ", field.Name)
+	if request.Header == nil {
+		request.Header = http.Header{}
+	}
+
+	var headerName, headerValue string
+	if headerName = field.Tag.Get("name"); headerName == "" {
+		return fmt.Errorf("marshaling request to a header requires the 'name' tag for field: %s", field.Name)
+	}
+
+	mandatory, _ := strconv.ParseBool(strings.ToLower(field.Tag.Get("mandatory")))
+	//If mandatory and nil. Error out
+	if mandatory && isNil(value) {
+		return fmt.Errorf("marshaling request to a header requires not nil pointer for field: %s", field.Name)
+	}
+
+	// generate opc-request-id if header value is nil and header name matches
+	value = generateOpcRequestID(headerName, value)
+
+	//if not mandatory and nil. Omit
+	if !mandatory && isNil(value) {
+		Debugf("Header value is not mandatory and is nil pointer in field: %s. Skipping header", field.Name)
+		return
+	}
+
+	//Otherwise get value and set header
+	if headerValue, e = toStringValue(value, field); e != nil {
+		return
+	}
+
+	if e = setWellKnownHeaders(request, headerName, headerValue); e != nil {
+		return
+	}
+
+	if isUniqueHeaderRequired(headerName) {
+		request.Header.Set(headerName, headerValue)
+	} else {
+		request.Header.Add(headerName, headerValue)
+	}
+	return
+}
+
+// Check if the header is required to be unique
+func isUniqueHeaderRequired(headerName string) bool {
+	return strings.EqualFold(headerName, requestHeaderContentType)
+}
+
+// Header collection is a map of string to string that gets rendered as individual headers with a given prefix
+func addToHeaderCollection(request *http.Request, value reflect.Value, field reflect.StructField) (e error) {
+	Debugln("Marshaling to header-collection from field:", field.Name)
+	if request.Header == nil {
+		request.Header = http.Header{}
+	}
+
+	var headerPrefix string
+	if headerPrefix = field.Tag.Get("prefix"); headerPrefix == "" {
+		return fmt.Errorf("marshaling request to a header requires the 'prefix' tag for field: %s", field.Name)
+	}
+
+	mandatory, _ := strconv.ParseBool(strings.ToLower(field.Tag.Get("mandatory")))
+	//If mandatory and nil. Error out
+	if mandatory && isNil(value) {
+		return fmt.Errorf("marshaling request to a header requires not nil pointer for field: %s", field.Name)
+	}
+
+	//if not mandatory and nil. Omit
+	if !mandatory && isNil(value) {
+		Debugf("Header value is not mandatory and is nil pointer in field: %s. Skipping header", field.Name)
+		return
+	}
+
+	//cast to map
+	headerValues, ok := value.Interface().(map[string]string)
+	if !ok {
+		e = fmt.Errorf("header fields need to be of type map[string]string")
+		return
+	}
+
+	for k, v := range headerValues {
+		headerName := fmt.Sprintf("%s%s", headerPrefix, k)
+		request.Header.Set(headerName, v)
+	}
+	return
+}
+
+// Makes sure the incoming structure is able to be marshalled
+// to a request
+func checkForValidRequestStruct(s interface{}) (*reflect.Value, error) {
+	val := reflect.ValueOf(s)
+	for val.Kind() == reflect.Ptr {
+		if val.IsNil() {
+			return nil, fmt.Errorf("can not marshal to request a pointer to structure")
+		}
+		val = val.Elem()
+	}
+
+	if s == nil {
+		return nil, fmt.Errorf("can not marshal to request a nil structure")
+	}
+
+	if val.Kind() != reflect.Struct {
+		return nil, fmt.Errorf("can not marshal to request, expects struct input. Got %v", val.Kind())
+	}
+
+	return &val, nil
+}
+
+// Populates the parts of a request by reading tags in the passed structure
+// nested structs are followed recursively depth-first.
+func structToRequestPart(request *http.Request, val reflect.Value) (err error) {
+	typ := val.Type()
+	for i := 0; i < typ.NumField(); i++ {
+		if err != nil {
+			return
+		}
+
+		sf := typ.Field(i)
+		//unexported
+		if sf.PkgPath != "" && !sf.Anonymous {
+			continue
+		}
+
+		sv := val.Field(i)
+		tag := sf.Tag.Get("contributesTo")
+		switch tag {
+		case "header":
+			err = addToHeader(request, sv, sf)
+		case "header-collection":
+			err = addToHeaderCollection(request, sv, sf)
+		case "path":
+			err = addToPath(request, sv, sf)
+		case "query":
+			err = addToQuery(request, sv, sf)
+		case "body":
+			err = addToBody(request, sv, sf)
+		case "":
+			Debugln(sf.Name, " does not contain contributes tag. Skipping.")
+		default:
+			err = fmt.Errorf("can not marshal field: %s. It needs to contain valid contributesTo tag", sf.Name)
+		}
+	}
+
+	//If headers are and the content type was not set, we default to application/json
+	if request.Header != nil && request.Header.Get(requestHeaderContentType) == "" {
+		request.Header.Set(requestHeaderContentType, "application/json")
+	}
+
+	return
+}
+
+// HTTPRequestMarshaller marshals a structure to an http request using tag values in the struct
+// The marshaller tag should like the following
+// type A struct {
+// 		 ANumber string `contributesTo="query" name="number"`
+//		 TheBody `contributesTo="body"`
+// }
+// where the contributesTo tag can be: header, path, query, body
+// and the 'name' tag is the name of the value used in the http request(not applicable for path)
+// If path is specified as part of the tag, the values are appened to the url path
+// in the order they appear in the structure
+// The current implementation only supports primitive types, except for the body tag, which needs a struct type.
+// The body of a request will be marshaled using the tags of the structure
+func HTTPRequestMarshaller(requestStruct interface{}, httpRequest *http.Request) (err error) {
+	var val *reflect.Value
+	if val, err = checkForValidRequestStruct(requestStruct); err != nil {
+		return
+	}
+
+	Debugln("Marshaling to Request: ", val.Type().Name())
+	err = structToRequestPart(httpRequest, *val)
+	return
+}
+
+// MakeDefaultHTTPRequest creates the basic http request with the necessary headers set
+func MakeDefaultHTTPRequest(method, path string) (httpRequest http.Request) {
+	httpRequest = http.Request{
+		Proto:      "HTTP/1.1",
+		ProtoMajor: 1,
+		ProtoMinor: 1,
+		Header:     make(http.Header),
+		URL:        &url.URL{},
+	}
+
+	httpRequest.Header.Set(requestHeaderContentLength, "0")
+	httpRequest.Header.Set(requestHeaderDate, time.Now().UTC().Format(http.TimeFormat))
+	httpRequest.Header.Set(requestHeaderOpcClientInfo, strings.Join([]string{defaultSDKMarker, Version()}, "/"))
+	httpRequest.Header.Set(requestHeaderAccept, "*/*")
+	httpRequest.Method = method
+	httpRequest.URL.Path = path
+	return
+}
+
+// MakeDefaultHTTPRequestWithTaggedStruct creates an http request from an struct with tagged fields, see HTTPRequestMarshaller
+// for more information
+func MakeDefaultHTTPRequestWithTaggedStruct(method, path string, requestStruct interface{}) (httpRequest http.Request, err error) {
+	httpRequest = MakeDefaultHTTPRequest(method, path)
+	err = HTTPRequestMarshaller(requestStruct, &httpRequest)
+	return
+}
+
+///////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
+///////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
+//Request UnMarshaling
+////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
+////////////////////////////////////////////////////////////////////////////////////////////////////////////////
+
+// Makes sure the incoming structure is able to be unmarshaled
+// to a request
+func checkForValidResponseStruct(s interface{}) (*reflect.Value, error) {
+	val := reflect.ValueOf(s)
+	for val.Kind() == reflect.Ptr {
+		if val.IsNil() {
+			return nil, fmt.Errorf("can not unmarshal to response a pointer to nil structure")
+		}
+		val = val.Elem()
+	}
+
+	if s == nil {
+		return nil, fmt.Errorf("can not unmarshal to response a nil structure")
+	}
+
+	if val.Kind() != reflect.Struct {
+		return nil, fmt.Errorf("can not unmarshal to response, expects struct input. Got %v", val.Kind())
+	}
+
+	return &val, nil
+}
+
+func intSizeFromKind(kind reflect.Kind) int {
+	switch kind {
+	case reflect.Int8, reflect.Uint8:
+		return 8
+	case reflect.Int16, reflect.Uint16:
+		return 16
+	case reflect.Int32, reflect.Uint32:
+		return 32
+	case reflect.Int64, reflect.Uint64:
+		return 64
+	case reflect.Int, reflect.Uint:
+		return strconv.IntSize
+	default:
+		Debugf("The type is not valid: %v. Returing int size for arch\n", kind.String())
+		return strconv.IntSize
+	}
+
+}
+
+func analyzeValue(stringValue string, kind reflect.Kind, field reflect.StructField) (val reflect.Value, valPointer reflect.Value, err error) {
+	switch kind {
+	case timeType.Kind():
+		var t time.Time
+		t, err = tryParsingTimeWithValidFormatsForHeaders([]byte(stringValue), field.Name)
+		if err != nil {
+			return
+		}
+		sdkTime := sdkTimeFromTime(t)
+		val = reflect.ValueOf(sdkTime)
+		valPointer = reflect.ValueOf(&sdkTime)
+		return
+	case sdkDateType.Kind():
+		var t time.Time
+		t, err = tryParsingTimeWithValidFormatsForHeaders([]byte(stringValue), field.Name)
+		if err != nil {
+			return
+		}
+		sdkDate := sdkDateFromTime(t)
+		val = reflect.ValueOf(sdkDate)
+		valPointer = reflect.ValueOf(&sdkDate)
+		return
+	case reflect.Bool:
+		var bVal bool
+		if bVal, err = strconv.ParseBool(stringValue); err != nil {
+			return
+		}
+		val = reflect.ValueOf(bVal)
+		valPointer = reflect.ValueOf(&bVal)
+		return
+	case reflect.Int:
+		size := intSizeFromKind(kind)
+		var iVal int64
+		if iVal, err = strconv.ParseInt(stringValue, 10, size); err != nil {
+			return
+		}
+		var iiVal int
+		iiVal = int(iVal)
+		val = reflect.ValueOf(iiVal)
+		valPointer = reflect.ValueOf(&iiVal)
+		return
+	case reflect.Int64:
+		size := intSizeFromKind(kind)
+		var iVal int64
+		if iVal, err = strconv.ParseInt(stringValue, 10, size); err != nil {
+			return
+		}
+		val = reflect.ValueOf(iVal)
+		valPointer = reflect.ValueOf(&iVal)
+		return
+	case reflect.Uint:
+		size := intSizeFromKind(kind)
+		var iVal uint64
+		if iVal, err = strconv.ParseUint(stringValue, 10, size); err != nil {
+			return
+		}
+		var uiVal uint
+		uiVal = uint(iVal)
+		val = reflect.ValueOf(uiVal)
+		valPointer = reflect.ValueOf(&uiVal)
+		return
+	case reflect.String:
+		val = reflect.ValueOf(stringValue)
+		valPointer = reflect.ValueOf(&stringValue)
+	case reflect.Float32:
+		var fVal float64
+		if fVal, err = strconv.ParseFloat(stringValue, 32); err != nil {
+			return
+		}
+		var ffVal float32
+		ffVal = float32(fVal)
+		val = reflect.ValueOf(ffVal)
+		valPointer = reflect.ValueOf(&ffVal)
+		return
+	case reflect.Float64:
+		var fVal float64
+		if fVal, err = strconv.ParseFloat(stringValue, 64); err != nil {
+			return
+		}
+		val = reflect.ValueOf(fVal)
+		valPointer = reflect.ValueOf(&fVal)
+		return
+	default:
+		err = fmt.Errorf("value for kind: %s not supported", kind)
+	}
+	return
+}
+
+// Sets the field of a struct, with the appropiate value of the string
+// Only sets basic types
+func fromStringValue(newValue string, val *reflect.Value, field reflect.StructField) (err error) {
+
+	if !val.CanSet() {
+		err = fmt.Errorf("can not set field name: %s of type: %v", field.Name, val.Type().String())
+		return
+	}
+
+	kind := val.Kind()
+	isPointer := false
+	if val.Kind() == reflect.Ptr {
+		isPointer = true
+		kind = field.Type.Elem().Kind()
+	}
+
+	value, valPtr, err := analyzeValue(newValue, kind, field)
+	if err != nil {
+		return
+	}
+	if !isPointer {
+		val.Set(value)
+	} else {
+		val.Set(valPtr)
+	}
+	return
+}
+
+// PolymorphicJSONUnmarshaler is the interface to unmarshal polymorphic json payloads
+type PolymorphicJSONUnmarshaler interface {
+	UnmarshalPolymorphicJSON(data []byte) (interface{}, error)
+}
+
+func valueFromPolymorphicJSON(content []byte, unmarshaler PolymorphicJSONUnmarshaler) (val interface{}, err error) {
+	err = json.Unmarshal(content, unmarshaler)
+	if err != nil {
+		return
+	}
+	val, err = unmarshaler.UnmarshalPolymorphicJSON(content)
+	return
+}
+
+func valueFromJSONBody(response *http.Response, value *reflect.Value, unmarshaler PolymorphicJSONUnmarshaler) (val interface{}, err error) {
+	//Consumes the body, consider implementing it
+	//without body consumption
+	var content []byte
+	content, err = ioutil.ReadAll(response.Body)
+	if err != nil {
+		return
+	}
+
+	if unmarshaler != nil {
+		val, err = valueFromPolymorphicJSON(content, unmarshaler)
+		return
+	}
+
+	val = reflect.New(value.Type()).Interface()
+	err = json.Unmarshal(content, &val)
+	return
+}
+
+func addFromBody(response *http.Response, value *reflect.Value, field reflect.StructField, unmarshaler PolymorphicJSONUnmarshaler) (err error) {
+	Debugln("Unmarshaling from body to field: ", field.Name)
+	if response.Body == nil {
+		Debugln("Unmarshaling body skipped due to nil body content for field: ", field.Name)
+		return nil
+	}
+
+	tag := field.Tag
+	encoding := tag.Get("encoding")
+	var iVal interface{}
+	switch encoding {
+	case "binary":
+		value.Set(reflect.ValueOf(response.Body))
+		return
+	case "plain-text":
+		//Expects UTF-8
+		byteArr, e := ioutil.ReadAll(response.Body)
+		if e != nil {
+			return e
+		}
+		str := string(byteArr)
+		value.Set(reflect.ValueOf(&str))
+		return
+	default: //If the encoding is not set. we'll decode with json
+		iVal, err = valueFromJSONBody(response, value, unmarshaler)
+		if err != nil {
+			return
+		}
+
+		newVal := reflect.ValueOf(iVal)
+		if newVal.Kind() == reflect.Ptr {
+			newVal = newVal.Elem()
+		}
+		value.Set(newVal)
+		return
+	}
+}
+
+func addFromHeader(response *http.Response, value *reflect.Value, field reflect.StructField) (err error) {
+	Debugln("Unmarshaling from header to field: ", field.Name)
+	var headerName string
+	if headerName = field.Tag.Get("name"); headerName == "" {
+		return fmt.Errorf("unmarshaling response to a header requires the 'name' tag for field: %s", field.Name)
+	}
+
+	headerValue := response.Header.Get(headerName)
+	if headerValue == "" {
+		Debugf("Unmarshalling did not find header with name:%s", headerName)
+		return nil
+	}
+
+	if err = fromStringValue(headerValue, value, field); err != nil {
+		return fmt.Errorf("unmarshaling response to a header failed for field %s, due to %s", field.Name,
+			err.Error())
+	}
+	return
+}
+
+func addFromHeaderCollection(response *http.Response, value *reflect.Value, field reflect.StructField) error {
+	Debugln("Unmarshaling from header-collection to field:", field.Name)
+	var headerPrefix string
+	if headerPrefix = field.Tag.Get("prefix"); headerPrefix == "" {
+		return fmt.Errorf("Unmarshaling response to a header-collection requires the 'prefix' tag for field: %s", field.Name)
+	}
+
+	mapCollection := make(map[string]string)
+	for name, value := range response.Header {
+		nameLowerCase := strings.ToLower(name)
+		if strings.HasPrefix(nameLowerCase, headerPrefix) {
+			headerNoPrefix := strings.TrimPrefix(nameLowerCase, headerPrefix)
+			mapCollection[headerNoPrefix] = value[0]
+		}
+	}
+
+	Debugln("Marshalled header collection is:", mapCollection)
+	value.Set(reflect.ValueOf(mapCollection))
+	return nil
+}
+
+// Populates a struct from parts of a request by reading tags of the struct
+func responseToStruct(response *http.Response, val *reflect.Value, unmarshaler PolymorphicJSONUnmarshaler) (err error) {
+	typ := val.Type()
+	for i := 0; i < typ.NumField(); i++ {
+		if err != nil {
+			return
+		}
+
+		sf := typ.Field(i)
+
+		//unexported
+		if sf.PkgPath != "" {
+			continue
+		}
+
+		sv := val.Field(i)
+		tag := sf.Tag.Get("presentIn")
+		switch tag {
+		case "header":
+			err = addFromHeader(response, &sv, sf)
+		case "header-collection":
+			err = addFromHeaderCollection(response, &sv, sf)
+		case "body":
+			err = addFromBody(response, &sv, sf, unmarshaler)
+		case "":
+			Debugln(sf.Name, " does not contain presentIn tag. Skipping")
+		default:
+			err = fmt.Errorf("can not unmarshal field: %s. It needs to contain valid presentIn tag", sf.Name)
+		}
+	}
+	return
+}
+
+// UnmarshalResponse hydrates the fields of a struct with the values of a http response, guided
+// by the field tags. The directive tag is "presentIn" and it can be either
+//  - "header": Will look for the header tagged as "name" in the headers of the struct and set it value to that
+//  - "body": It will try to marshal the body from a json string to a struct tagged with 'presentIn: "body"'.
+// Further this method will consume the body it should be safe to close it after this function
+// Notice the current implementation only supports native types:int, strings, floats, bool as the field types
+func UnmarshalResponse(httpResponse *http.Response, responseStruct interface{}) (err error) {
+
+	var val *reflect.Value
+	if val, err = checkForValidResponseStruct(responseStruct); err != nil {
+		return
+	}
+
+	if err = responseToStruct(httpResponse, val, nil); err != nil {
+		return
+	}
+
+	return nil
+}
+
+// UnmarshalResponseWithPolymorphicBody similar to UnmarshalResponse but assumes the body of the response
+// contains polymorphic json. This function will use the unmarshaler argument to unmarshal json content
+func UnmarshalResponseWithPolymorphicBody(httpResponse *http.Response, responseStruct interface{}, unmarshaler PolymorphicJSONUnmarshaler) (err error) {
+
+	var val *reflect.Value
+	if val, err = checkForValidResponseStruct(responseStruct); err != nil {
+		return
+	}
+
+	if err = responseToStruct(httpResponse, val, unmarshaler); err != nil {
+		return
+	}
+
+	return nil
+}
+
+// generate request id if user not provided and for each retry operation re-gen a new request id
+func generateOpcRequestID(headerName string, value reflect.Value) (newValue reflect.Value) {
+	newValue = value
+	isNilValue := isNil(newValue)
+	isOpcRequestIDHeader := headerName == requestHeaderOpcRequestID || headerName == requestHeaderOpcClientRequestID
+
+	if isNilValue && isOpcRequestIDHeader {
+		requestID, err := generateRandUUID()
+
+		if err != nil {
+			// this will not fail the request, just skip add opc-request-id
+			Debugf("unable to generate opc-request-id. %s", err.Error())
+		} else {
+			newValue = reflect.ValueOf(String(requestID))
+			Debugf("add request id for header: %s, with value: %s", headerName, requestID)
+		}
+	}
+
+	return
+}
--- a/vendor/github.com/oracle/oci-go-sdk/common/http_signer.go
+++ b/vendor/github.com/oracle/oci-go-sdk/common/http_signer.go
@@ -0,0 +1,270 @@
+// Copyright (c) 2016, 2018, 2020, Oracle and/or its affiliates.  All rights reserved.
+// This software is dual-licensed to you under the Universal Permissive License (UPL) 1.0 as shown at https://oss.oracle.com/licenses/upl or Apache License 2.0 as shown at http://www.apache.org/licenses/LICENSE-2.0. You may choose either license.
+
+package common
+
+import (
+	"bytes"
+	"crypto"
+	"crypto/rand"
+	"crypto/rsa"
+	"crypto/sha256"
+	"encoding/base64"
+	"fmt"
+	"io"
+	"io/ioutil"
+	"net/http"
+	"strings"
+)
+
+// HTTPRequestSigner the interface to sign a request
+type HTTPRequestSigner interface {
+	Sign(r *http.Request) error
+}
+
+// KeyProvider interface that wraps information about the key's account owner
+type KeyProvider interface {
+	PrivateRSAKey() (*rsa.PrivateKey, error)
+	KeyID() (string, error)
+}
+
+const signerVersion = "1"
+
+// SignerBodyHashPredicate a function that allows to disable/enable body hashing
+// of requests and headers associated with body content
+type SignerBodyHashPredicate func(r *http.Request) bool
+
+// ociRequestSigner implements the http-signatures-draft spec
+// as described in https://tools.ietf.org/html/draft-cavage-http-signatures-08
+type ociRequestSigner struct {
+	KeyProvider    KeyProvider
+	GenericHeaders []string
+	BodyHeaders    []string
+	ShouldHashBody SignerBodyHashPredicate
+}
+
+var (
+	defaultGenericHeaders    = []string{"date", "(request-target)", "host"}
+	defaultBodyHeaders       = []string{"content-length", "content-type", "x-content-sha256"}
+	defaultBodyHashPredicate = func(r *http.Request) bool {
+		return r.Method == http.MethodPost || r.Method == http.MethodPut || r.Method == http.MethodPatch
+	}
+)
+
+// DefaultGenericHeaders list of default generic headers that is used in signing
+func DefaultGenericHeaders() []string {
+	return makeACopy(defaultGenericHeaders)
+}
+
+// DefaultBodyHeaders list of default body headers that is used in signing
+func DefaultBodyHeaders() []string {
+	return makeACopy(defaultBodyHeaders)
+}
+
+// DefaultRequestSigner creates a signer with default parameters.
+func DefaultRequestSigner(provider KeyProvider) HTTPRequestSigner {
+	return RequestSigner(provider, defaultGenericHeaders, defaultBodyHeaders)
+}
+
+// RequestSignerExcludeBody creates a signer without hash the body.
+func RequestSignerExcludeBody(provider KeyProvider) HTTPRequestSigner {
+	bodyHashPredicate := func(r *http.Request) bool {
+		// week request signer will not hash the body
+		return false
+	}
+	return RequestSignerWithBodyHashingPredicate(provider, defaultGenericHeaders, defaultBodyHeaders, bodyHashPredicate)
+}
+
+// NewSignerFromOCIRequestSigner creates a copy of the request signer and attaches the new SignerBodyHashPredicate
+// returns an error if the passed signer is not of type ociRequestSigner
+func NewSignerFromOCIRequestSigner(oldSigner HTTPRequestSigner, predicate SignerBodyHashPredicate) (HTTPRequestSigner, error) {
+	if oldS, ok := oldSigner.(ociRequestSigner); ok {
+		s := ociRequestSigner{
+			KeyProvider:    oldS.KeyProvider,
+			GenericHeaders: oldS.GenericHeaders,
+			BodyHeaders:    oldS.BodyHeaders,
+			ShouldHashBody: predicate,
+		}
+		return s, nil
+
+	}
+	return nil, fmt.Errorf("can not create a signer, input signer needs to be of type ociRequestSigner")
+}
+
+// RequestSigner creates a signer that utilizes the specified headers for signing
+// and the default predicate for using the body of the request as part of the signature
+func RequestSigner(provider KeyProvider, genericHeaders, bodyHeaders []string) HTTPRequestSigner {
+	return ociRequestSigner{
+		KeyProvider:    provider,
+		GenericHeaders: genericHeaders,
+		BodyHeaders:    bodyHeaders,
+		ShouldHashBody: defaultBodyHashPredicate}
+}
+
+// RequestSignerWithBodyHashingPredicate creates a signer that utilizes the specified headers for signing, as well as a predicate for using
+// the body of the request and bodyHeaders parameter as part of the signature
+func RequestSignerWithBodyHashingPredicate(provider KeyProvider, genericHeaders, bodyHeaders []string, shouldHashBody SignerBodyHashPredicate) HTTPRequestSigner {
+	return ociRequestSigner{
+		KeyProvider:    provider,
+		GenericHeaders: genericHeaders,
+		BodyHeaders:    bodyHeaders,
+		ShouldHashBody: shouldHashBody}
+}
+
+func (signer ociRequestSigner) getSigningHeaders(r *http.Request) []string {
+	var result []string
+	result = append(result, signer.GenericHeaders...)
+
+	if signer.ShouldHashBody(r) {
+		result = append(result, signer.BodyHeaders...)
+	}
+
+	return result
+}
+
+func (signer ociRequestSigner) getSigningString(request *http.Request) string {
+	signingHeaders := signer.getSigningHeaders(request)
+	signingParts := make([]string, len(signingHeaders))
+	for i, part := range signingHeaders {
+		var value string
+		part = strings.ToLower(part)
+		switch part {
+		case "(request-target)":
+			value = getRequestTarget(request)
+		case "host":
+			value = request.URL.Host
+			if len(value) == 0 {
+				value = request.Host
+			}
+		default:
+			value = request.Header.Get(part)
+		}
+		signingParts[i] = fmt.Sprintf("%s: %s", part, value)
+	}
+
+	signingString := strings.Join(signingParts, "\n")
+	return signingString
+
+}
+
+func getRequestTarget(request *http.Request) string {
+	lowercaseMethod := strings.ToLower(request.Method)
+	return fmt.Sprintf("%s %s", lowercaseMethod, request.URL.RequestURI())
+}
+
+func calculateHashOfBody(request *http.Request) (err error) {
+	var hash string
+	hash, err = GetBodyHash(request)
+	if err != nil {
+		return
+	}
+	request.Header.Set(requestHeaderXContentSHA256, hash)
+	return
+}
+
+// drainBody reads all of b to memory and then returns two equivalent
+// ReadClosers yielding the same bytes.
+//
+// It returns an error if the initial slurp of all bytes fails. It does not attempt
+// to make the returned ReadClosers have identical error-matching behavior.
+func drainBody(b io.ReadCloser) (r1, r2 io.ReadCloser, err error) {
+	if b == http.NoBody {
+		// No copying needed. Preserve the magic sentinel meaning of NoBody.
+		return http.NoBody, http.NoBody, nil
+	}
+	var buf bytes.Buffer
+	if _, err = buf.ReadFrom(b); err != nil {
+		return nil, b, err
+	}
+	if err = b.Close(); err != nil {
+		return nil, b, err
+	}
+	return ioutil.NopCloser(&buf), ioutil.NopCloser(bytes.NewReader(buf.Bytes())), nil
+}
+
+func hashAndEncode(data []byte) string {
+	hashedContent := sha256.Sum256(data)
+	hash := base64.StdEncoding.EncodeToString(hashedContent[:])
+	return hash
+}
+
+// GetBodyHash creates a base64 string from the hash of body the request
+func GetBodyHash(request *http.Request) (hashString string, err error) {
+	if request.Body == nil {
+		request.ContentLength = 0
+		request.Header.Set(requestHeaderContentLength, fmt.Sprintf("%v", request.ContentLength))
+		return hashAndEncode([]byte("")), nil
+	}
+
+	var data []byte
+	bReader := request.Body
+	bReader, request.Body, err = drainBody(request.Body)
+	if err != nil {
+		return "", fmt.Errorf("can not read body of request while calculating body hash: %s", err.Error())
+	}
+
+	data, err = ioutil.ReadAll(bReader)
+	if err != nil {
+		return "", fmt.Errorf("can not read body of request while calculating body hash: %s", err.Error())
+	}
+
+	// Since the request can be coming from a binary body. Make an attempt to set the body length
+	request.ContentLength = int64(len(data))
+	request.Header.Set(requestHeaderContentLength, fmt.Sprintf("%v", request.ContentLength))
+
+	hashString = hashAndEncode(data)
+	return
+}
+
+func (signer ociRequestSigner) computeSignature(request *http.Request) (signature string, err error) {
+	signingString := signer.getSigningString(request)
+	hasher := sha256.New()
+	hasher.Write([]byte(signingString))
+	hashed := hasher.Sum(nil)
+
+	privateKey, err := signer.KeyProvider.PrivateRSAKey()
+	if err != nil {
+		return
+	}
+
+	var unencodedSig []byte
+	unencodedSig, e := rsa.SignPKCS1v15(rand.Reader, privateKey, crypto.SHA256, hashed)
+	if e != nil {
+		err = fmt.Errorf("can not compute signature while signing the request %s: ", e.Error())
+		return
+	}
+
+	signature = base64.StdEncoding.EncodeToString(unencodedSig)
+	return
+}
+
+// Sign signs the http request, by inspecting the necessary headers. Once signed
+// the request will have the proper 'Authorization' header set, otherwise
+// and error is returned
+func (signer ociRequestSigner) Sign(request *http.Request) (err error) {
+	if signer.ShouldHashBody(request) {
+		err = calculateHashOfBody(request)
+		if err != nil {
+			return
+		}
+	}
+
+	var signature string
+	if signature, err = signer.computeSignature(request); err != nil {
+		return
+	}
+
+	signingHeaders := strings.Join(signer.getSigningHeaders(request), " ")
+
+	var keyID string
+	if keyID, err = signer.KeyProvider.KeyID(); err != nil {
+		return
+	}
+
+	authValue := fmt.Sprintf("Signature version=\"%s\",headers=\"%s\",keyId=\"%s\",algorithm=\"rsa-sha256\",signature=\"%s\"",
+		signerVersion, signingHeaders, keyID, signature)
+
+	request.Header.Set(requestHeaderAuthorization, authValue)
+
+	return
+}
--- a/vendor/github.com/oracle/oci-go-sdk/common/log.go
+++ b/vendor/github.com/oracle/oci-go-sdk/common/log.go
@@ -0,0 +1,223 @@
+// Copyright (c) 2016, 2018, 2020, Oracle and/or its affiliates.  All rights reserved.
+// This software is dual-licensed to you under the Universal Permissive License (UPL) 1.0 as shown at https://oss.oracle.com/licenses/upl or Apache License 2.0 as shown at http://www.apache.org/licenses/LICENSE-2.0. You may choose either license.
+
+package common
+
+import (
+	"fmt"
+	"io"
+	"io/ioutil"
+	"log"
+	"os"
+	"strings"
+	"sync"
+	"time"
+)
+
+//sdkLogger an interface for logging in the SDK
+type sdkLogger interface {
+	//LogLevel returns the log level of sdkLogger
+	LogLevel() int
+
+	//Log logs v with the provided format if the current log level is loglevel
+	Log(logLevel int, format string, v ...interface{}) error
+}
+
+//noLogging no logging messages
+const noLogging = 0
+
+//infoLogging minimal logging messages
+const infoLogging = 1
+
+//debugLogging some logging messages
+const debugLogging = 2
+
+//verboseLogging all logging messages
+const verboseLogging = 3
+
+//defaultSDKLogger the default implementation of the sdkLogger
+type defaultSDKLogger struct {
+	currentLoggingLevel int
+	verboseLogger       *log.Logger
+	debugLogger         *log.Logger
+	infoLogger          *log.Logger
+	nullLogger          *log.Logger
+}
+
+//defaultLogger is the defaultLogger in the SDK
+var defaultLogger sdkLogger
+var loggerLock sync.Mutex
+var file *os.File
+
+//initializes the SDK defaultLogger as a defaultLogger
+func init() {
+	l, _ := newSDKLogger()
+	setSDKLogger(l)
+}
+
+//setSDKLogger sets the logger used by the sdk
+func setSDKLogger(logger sdkLogger) {
+	loggerLock.Lock()
+	defaultLogger = logger
+	loggerLock.Unlock()
+}
+
+// newSDKLogger creates a defaultSDKLogger
+// Debug logging is turned on/off by the presence of the environment variable "OCI_GO_SDK_DEBUG"
+// The value of the "OCI_GO_SDK_DEBUG" environment variable controls the logging level.
+// "null" outputs no log messages
+// "i" or "info" outputs minimal log messages
+// "d" or "debug" outputs some logs messages
+// "v" or "verbose" outputs all logs messages, including body of requests
+func newSDKLogger() (defaultSDKLogger, error) {
+	logger := defaultSDKLogger{}
+
+	logger.currentLoggingLevel = noLogging
+	logger.verboseLogger = log.New(os.Stderr, "VERBOSE ", log.Ldate|log.Lmicroseconds|log.Lshortfile)
+	logger.debugLogger = log.New(os.Stderr, "DEBUG ", log.Ldate|log.Lmicroseconds|log.Lshortfile)
+	logger.infoLogger = log.New(os.Stderr, "INFO ", log.Ldate|log.Lmicroseconds|log.Lshortfile)
+	logger.nullLogger = log.New(ioutil.Discard, "", log.Ldate|log.Lmicroseconds|log.Lshortfile)
+
+	configured, isLogEnabled := os.LookupEnv("OCI_GO_SDK_DEBUG")
+
+	// If env variable not present turn logging of
+	if !isLogEnabled {
+		logger.currentLoggingLevel = noLogging
+	} else {
+		logOutputModeConfig(logger)
+
+		switch strings.ToLower(configured) {
+		case "null":
+			logger.currentLoggingLevel = noLogging
+			break
+		case "i", "info":
+			logger.currentLoggingLevel = infoLogging
+			break
+		case "d", "debug":
+			logger.currentLoggingLevel = debugLogging
+			break
+		//1 here for backwards compatibility
+		case "v", "verbose", "1":
+			logger.currentLoggingLevel = verboseLogging
+			break
+		default:
+			logger.currentLoggingLevel = infoLogging
+		}
+		logger.infoLogger.Println("logger level set to: ", logger.currentLoggingLevel)
+	}
+
+	return logger, nil
+}
+
+func (l defaultSDKLogger) getLoggerForLevel(logLevel int) *log.Logger {
+	if logLevel > l.currentLoggingLevel {
+		return l.nullLogger
+	}
+
+	switch logLevel {
+	case noLogging:
+		return l.nullLogger
+	case infoLogging:
+		return l.infoLogger
+	case debugLogging:
+		return l.debugLogger
+	case verboseLogging:
+		return l.verboseLogger
+	default:
+		return l.nullLogger
+	}
+}
+
+// Set SDK Log output mode
+// Output mode is switched based on environment variable "OCI_GO_SDK_LOG_OUPUT_MODE"
+// "file" outputs log to a specific file
+// "combine" outputs log to both stderr and specific file
+// other unsupported value ouputs log to stderr
+// output file can be set via environment variable "OCI_GO_SDK_LOG_FILE"
+// if this environment variable is not set, a default log file will be created under project root path
+func logOutputModeConfig(logger defaultSDKLogger) {
+	logMode, isLogOutputModeEnabled := os.LookupEnv("OCI_GO_SDK_LOG_OUTPUT_MODE")
+	if !isLogOutputModeEnabled {
+		return
+	}
+	fileName, isLogFileNameProvided := os.LookupEnv("OCI_GO_SDK_LOG_FILE")
+	if !isLogFileNameProvided {
+		fileName = fmt.Sprintf("logging_%v%s", time.Now().Unix(), ".log")
+	}
+
+	switch strings.ToLower(logMode) {
+	case "file", "f":
+		file = openLogOutputFile(logger, fileName)
+		logger.infoLogger.SetOutput(file)
+		logger.debugLogger.SetOutput(file)
+		logger.verboseLogger.SetOutput(file)
+		break
+	case "combine", "c":
+		file = openLogOutputFile(logger, fileName)
+		wrt := io.MultiWriter(os.Stderr, file)
+
+		logger.infoLogger.SetOutput(wrt)
+		logger.debugLogger.SetOutput(wrt)
+		logger.verboseLogger.SetOutput(wrt)
+		break
+	}
+}
+
+func openLogOutputFile(logger defaultSDKLogger, fileName string) *os.File {
+	file, err := os.OpenFile(fileName, os.O_WRONLY|os.O_CREATE|os.O_APPEND, 0644)
+	if err != nil {
+		logger.verboseLogger.Fatal(err)
+	}
+	return file
+}
+
+//CloseLogFile close the logging file and return error
+func CloseLogFile() error {
+	return file.Close()
+}
+
+//LogLevel returns the current debug level
+func (l defaultSDKLogger) LogLevel() int {
+	return l.currentLoggingLevel
+}
+
+func (l defaultSDKLogger) Log(logLevel int, format string, v ...interface{}) error {
+	logger := l.getLoggerForLevel(logLevel)
+	logger.Output(4, fmt.Sprintf(format, v...))
+	return nil
+}
+
+//Logln logs v appending a new line at the end
+//Deprecated
+func Logln(v ...interface{}) {
+	defaultLogger.Log(infoLogging, "%v\n", v...)
+}
+
+// Logf logs v with the provided format
+func Logf(format string, v ...interface{}) {
+	defaultLogger.Log(infoLogging, format, v...)
+}
+
+// Debugf logs v with the provided format if debug mode is set
+func Debugf(format string, v ...interface{}) {
+	defaultLogger.Log(debugLogging, format, v...)
+}
+
+// Debug  logs v if debug mode is set
+func Debug(v ...interface{}) {
+	m := fmt.Sprint(v...)
+	defaultLogger.Log(debugLogging, "%s", m)
+}
+
+// Debugln logs v appending a new line if debug mode is set
+func Debugln(v ...interface{}) {
+	m := fmt.Sprint(v...)
+	defaultLogger.Log(debugLogging, "%s\n", m)
+}
+
+// IfDebug executes closure if debug is enabled
+func IfDebug(fn func()) {
+	if defaultLogger.LogLevel() >= debugLogging {
+		fn()
+	}
+}
--- a/vendor/github.com/oracle/oci-go-sdk/common/retry.go
+++ b/vendor/github.com/oracle/oci-go-sdk/common/retry.go
@@ -0,0 +1,162 @@
+// Copyright (c) 2016, 2018, 2020, Oracle and/or its affiliates.  All rights reserved.
+// This software is dual-licensed to you under the Universal Permissive License (UPL) 1.0 as shown at https://oss.oracle.com/licenses/upl or Apache License 2.0 as shown at http://www.apache.org/licenses/LICENSE-2.0. You may choose either license.
+
+package common
+
+import (
+	"context"
+	"fmt"
+	"math/rand"
+	"runtime"
+	"time"
+)
+
+const (
+	// UnlimitedNumAttemptsValue is the value for indicating unlimited attempts for reaching success
+	UnlimitedNumAttemptsValue = uint(0)
+
+	// number of characters contained in the generated retry token
+	generatedRetryTokenLength = 32
+)
+
+// OCIRetryableRequest represents a request that can be reissued according to the specified policy.
+type OCIRetryableRequest interface {
+	// Any retryable request must implement the OCIRequest interface
+	OCIRequest
+
+	// Each operation specifies default retry behavior. By passing no arguments to this method, the default retry
+	// behavior, as determined on a per-operation-basis, will be honored. Variadic retry policy option arguments
+	// passed to this method will override the default behavior.
+	RetryPolicy() *RetryPolicy
+}
+
+// OCIOperationResponse represents the output of an OCIOperation, with additional context of error message
+// and operation attempt number.
+type OCIOperationResponse struct {
+	// Response from OCI Operation
+	Response OCIResponse
+
+	// Error from OCI Operation
+	Error error
+
+	// Operation Attempt Number (one-based)
+	AttemptNumber uint
+}
+
+// NewOCIOperationResponse assembles an OCI Operation Response object.
+func NewOCIOperationResponse(response OCIResponse, err error, attempt uint) OCIOperationResponse {
+	return OCIOperationResponse{
+		Response:      response,
+		Error:         err,
+		AttemptNumber: attempt,
+	}
+}
+
+// RetryPolicy is the class that holds all relevant information for retrying operations.
+type RetryPolicy struct {
+	// MaximumNumberAttempts is the maximum number of times to retry a request. Zero indicates an unlimited
+	// number of attempts.
+	MaximumNumberAttempts uint
+
+	// ShouldRetryOperation inspects the http response, error, and operation attempt number, and
+	// - returns true if we should retry the operation
+	// - returns false otherwise
+	ShouldRetryOperation func(OCIOperationResponse) bool
+
+	// GetNextDuration computes the duration to pause between operation retries.
+	NextDuration func(OCIOperationResponse) time.Duration
+}
+
+// NoRetryPolicy is a helper method that assembles and returns a return policy that indicates an operation should
+// never be retried (the operation is performed exactly once).
+func NoRetryPolicy() RetryPolicy {
+	dontRetryOperation := func(OCIOperationResponse) bool { return false }
+	zeroNextDuration := func(OCIOperationResponse) time.Duration { return 0 * time.Second }
+	return NewRetryPolicy(uint(1), dontRetryOperation, zeroNextDuration)
+}
+
+// NewRetryPolicy is a helper method for assembling a Retry Policy object.
+func NewRetryPolicy(attempts uint, retryOperation func(OCIOperationResponse) bool, nextDuration func(OCIOperationResponse) time.Duration) RetryPolicy {
+	return RetryPolicy{
+		MaximumNumberAttempts: attempts,
+		ShouldRetryOperation:  retryOperation,
+		NextDuration:          nextDuration,
+	}
+}
+
+// shouldContinueIssuingRequests returns true if we should continue retrying a request, based on the current attempt
+// number and the maximum number of attempts specified, or false otherwise.
+func shouldContinueIssuingRequests(current, maximum uint) bool {
+	return maximum == UnlimitedNumAttemptsValue || current <= maximum
+}
+
+// RetryToken generates a retry token that must be included on any request passed to the Retry method.
+func RetryToken() string {
+	alphanumericChars := []rune("abcdefghijklmnopqrstuvwxyz0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ")
+	retryToken := make([]rune, generatedRetryTokenLength)
+	for i := range retryToken {
+		retryToken[i] = alphanumericChars[rand.Intn(len(alphanumericChars))]
+	}
+	return string(retryToken)
+}
+
+// Retry is a package-level operation that executes the retryable request using the specified operation and retry policy.
+func Retry(ctx context.Context, request OCIRetryableRequest, operation OCIOperation, policy RetryPolicy) (OCIResponse, error) {
+
+	type retrierResult struct {
+		response OCIResponse
+		err      error
+	}
+
+	var response OCIResponse
+	var err error
+	retrierChannel := make(chan retrierResult)
+
+	go func() {
+
+		// Deal with panics more graciously
+		defer func() {
+			if r := recover(); r != nil {
+				stackBuffer := make([]byte, 1024)
+				bytesWritten := runtime.Stack(stackBuffer, false)
+				stack := string(stackBuffer[:bytesWritten])
+				retrierChannel <- retrierResult{nil, fmt.Errorf("panicked while retrying operation. Panic was: %s\nStack: %s", r, stack)}
+			}
+		}()
+
+		// use a one-based counter because it's easier to think about operation retry in terms of attempt numbering
+		for currentOperationAttempt := uint(1); shouldContinueIssuingRequests(currentOperationAttempt, policy.MaximumNumberAttempts); currentOperationAttempt++ {
+			Debugln(fmt.Sprintf("operation attempt #%v", currentOperationAttempt))
+			response, err = operation(ctx, request)
+			operationResponse := NewOCIOperationResponse(response, err, currentOperationAttempt)
+
+			if !policy.ShouldRetryOperation(operationResponse) {
+				// we should NOT retry operation based on response and/or error => return
+				retrierChannel <- retrierResult{response, err}
+				return
+			}
+
+			duration := policy.NextDuration(operationResponse)
+			//The following condition is kept for backwards compatibility reasons
+			if deadline, ok := ctx.Deadline(); ok && time.Now().Add(duration).After(deadline) {
+				// we want to retry the operation, but the policy is telling us to wait for a duration that exceeds
+				// the specified overall deadline for the operation => instead of waiting for however long that
+				// time period is and then aborting, abort now and save the cycles
+				retrierChannel <- retrierResult{response, DeadlineExceededByBackoff}
+				return
+			}
+			Debugln(fmt.Sprintf("waiting %v before retrying operation", duration))
+			// sleep before retrying the operation
+			<-time.After(duration)
+		}
+
+		retrierChannel <- retrierResult{response, err}
+	}()
+
+	select {
+	case <-ctx.Done():
+		return response, ctx.Err()
+	case result := <-retrierChannel:
+		return result.response, result.err
+	}
+}
--- a/vendor/github.com/oracle/oci-go-sdk/common/version.go
+++ b/vendor/github.com/oracle/oci-go-sdk/common/version.go
@@ -0,0 +1,37 @@
+// Copyright (c) 2016, 2018, 2020, Oracle and/or its affiliates.  All rights reserved.
+// This software is dual-licensed to you under the Universal Permissive License (UPL) 1.0 as shown at https://oss.oracle.com/licenses/upl or Apache License 2.0 as shown at http://www.apache.org/licenses/LICENSE-2.0. You may choose either license.
+// Code generated by go generate; DO NOT EDIT
+
+package common
+
+import (
+	"bytes"
+	"fmt"
+	"sync"
+)
+
+const (
+	major = "24"
+	minor = "3"
+	patch = "0"
+	tag   = ""
+)
+
+var once sync.Once
+var version string
+
+// Version returns semantic version of the sdk
+func Version() string {
+	once.Do(func() {
+		ver := fmt.Sprintf("%s.%s.%s", major, minor, patch)
+		verBuilder := bytes.NewBufferString(ver)
+		if tag != "" && tag != "-" {
+			_, err := verBuilder.WriteString(tag)
+			if err != nil {
+				verBuilder = bytes.NewBufferString(ver)
+			}
+		}
+		version = verBuilder.String()
+	})
+	return version
+}
--- a/vendor/modules.txt
+++ b/vendor/modules.txt
@@ -736,6 +736,9 @@ github.com/openzipkin/zipkin-go-opentracing/thrift/gen-go/scribe
 github.com/openzipkin/zipkin-go-opentracing/thrift/gen-go/zipkincore
 github.com/openzipkin/zipkin-go-opentracing/types
 github.com/openzipkin/zipkin-go-opentracing/wire
+# github.com/oracle/oci-go-sdk v24.3.0+incompatible
+## explicit
+github.com/oracle/oci-go-sdk/common
 # github.com/philhofer/fwd v1.0.0
 ## explicit
 github.com/philhofer/fwd
@@ -1455,7 +1458,7 @@ sigs.k8s.io/structured-merge-diff/v4/value
 # sigs.k8s.io/yaml v1.2.0
 ## explicit; go 1.12
 sigs.k8s.io/yaml
-# yunion.io/x/cloudmux v0.3.10-0-alpha.1.0.20231113094030-fe18a9d8d683
+# yunion.io/x/cloudmux v0.3.10-0-alpha.1.0.20231114104913-5c1363fc971d
 ## explicit; go 1.18
 yunion.io/x/cloudmux/pkg/apis
 yunion.io/x/cloudmux/pkg/apis/billing
@@ -1525,6 +1528,8 @@ yunion.io/x/cloudmux/pkg/multicloud/objectstore/xsky/provider
 yunion.io/x/cloudmux/pkg/multicloud/openstack
 yunion.io/x/cloudmux/pkg/multicloud/openstack/oscli
 yunion.io/x/cloudmux/pkg/multicloud/openstack/provider
+yunion.io/x/cloudmux/pkg/multicloud/oracle
+yunion.io/x/cloudmux/pkg/multicloud/oracle/provider
 yunion.io/x/cloudmux/pkg/multicloud/proxmox
 yunion.io/x/cloudmux/pkg/multicloud/proxmox/provider
 yunion.io/x/cloudmux/pkg/multicloud/qcloud
--- a/vendor/yunion.io/x/cloudmux/pkg/apis/compute/cloudaccount_const.go
+++ b/vendor/yunion.io/x/cloudmux/pkg/apis/compute/cloudaccount_const.go
@@ -45,6 +45,7 @@ const (
 	CLOUD_PROVIDER_CUCLOUD        = "ChinaUnion"
 	CLOUD_PROVIDER_QINGCLOUD      = "QingCloud"
 	CLOUD_PROVIDER_VOLCENGINE     = "VolcEngine"
+	CLOUD_PROVIDER_ORACLE         = "OracleCloud"

 	CLOUD_PROVIDER_GENERICS3 = "S3"
 	CLOUD_PROVIDER_CEPH      = "Ceph"
--- a/vendor/yunion.io/x/cloudmux/pkg/apis/compute/guest_const.go
+++ b/vendor/yunion.io/x/cloudmux/pkg/apis/compute/guest_const.go
@@ -78,6 +78,7 @@ const (
 	HYPERVISOR_CUCLOUD        = "cucloud"
 	HYPERVISOR_QINGCLOUD      = "qingcloud"
 	HYPERVISOR_VOLCENGINE     = "volcengine"
+	HYPERVISOR_ORACLE         = "oracle"
 )

 const (
--- a/vendor/yunion.io/x/cloudmux/pkg/apis/compute/host_const.go
+++ b/vendor/yunion.io/x/cloudmux/pkg/apis/compute/host_const.go
@@ -47,6 +47,7 @@ const (
 	HOST_TYPE_CUCLOUD        = "cucloud"
 	HOST_TYPE_QINGCLOUD      = "qingcloud"
 	HOST_TYPE_VOLCENGINE     = "volcengine"
+	HOST_TYPE_ORACLE         = "oracle"

 	// # possible status
 	HOST_ONLINE  = "online"
--- a/vendor/yunion.io/x/cloudmux/pkg/cloudprovider/cloudprovider.go
+++ b/vendor/yunion.io/x/cloudmux/pkg/cloudprovider/cloudprovider.go
@@ -90,6 +90,10 @@ type SCloudaccountCredential struct {
 	// Google服务账号秘钥 (gcp)
 	GCPPrivateKey string `json:"gcp_private_key"`

+	OracleTenancyOCID string `json:"oracle_tenancy_ocid"`
+	OracleUserOCID    string `json:"oracle_user_ocid"`
+	OraclePrivateKey  string `json:"oracle_private_key"`
+
 	// 默认区域Id, Apara及HCSO需要此参数
 	// example: cn-north-2
 	// required: true
--- a/vendor/yunion.io/x/cloudmux/pkg/multicloud/azure/region.go
+++ b/vendor/yunion.io/x/cloudmux/pkg/multicloud/azure/region.go
@@ -689,13 +689,23 @@ func (self *SRegion) list(resource string, params url.Values, retVal interface{}
 }

 func (region *SRegion) GetIVMs() ([]cloudprovider.ICloudVM, error) {
-	vms, err := region.GetInstances()
+	zones, err := region.GetIZones()
 	if err != nil {
 		return nil, err
 	}
-	ivms := make([]cloudprovider.ICloudVM, len(vms))
-	for i := 0; i < len(vms); i++ {
-		ivms[i] = &vms[i]
+	ret := make([]cloudprovider.ICloudVM, 0)
+	for i := range zones {
+		hosts, err := zones[i].GetIHosts()
+		if err != nil {
+			return nil, err
+		}
+		for j := range hosts {
+			ivms, err := hosts[j].GetIVMs()
+			if err != nil {
+				return nil, err
+			}
+			ret = append(ret, ivms...)
+		}
 	}
-	return ivms, nil
+	return ret, nil
 }
--- a/vendor/yunion.io/x/cloudmux/pkg/multicloud/loader/loader.go
+++ b/vendor/yunion.io/x/cloudmux/pkg/multicloud/loader/loader.go
@@ -37,13 +37,14 @@ import (
 	_ "yunion.io/x/cloudmux/pkg/multicloud/objectstore/provider"
 	_ "yunion.io/x/cloudmux/pkg/multicloud/objectstore/xsky/provider"
 	_ "yunion.io/x/cloudmux/pkg/multicloud/openstack/provider"
+	_ "yunion.io/x/cloudmux/pkg/multicloud/oracle/provider"
 	_ "yunion.io/x/cloudmux/pkg/multicloud/proxmox/provider" // private clouds
 	_ "yunion.io/x/cloudmux/pkg/multicloud/qcloud/provider"
 	_ "yunion.io/x/cloudmux/pkg/multicloud/qingcloud/provider"
 	_ "yunion.io/x/cloudmux/pkg/multicloud/remotefile/provider" // private clouds
 	_ "yunion.io/x/cloudmux/pkg/multicloud/ucloud/provider"     // object storages
-	_ "yunion.io/x/cloudmux/pkg/multicloud/zstack/provider"     // private clouds
 	_ "yunion.io/x/cloudmux/pkg/multicloud/volcengine/provider"
+	_ "yunion.io/x/cloudmux/pkg/multicloud/zstack/provider" // private clouds
 )

 func init() {
--- a/vendor/yunion.io/x/cloudmux/pkg/multicloud/oracle/instance.go
+++ b/vendor/yunion.io/x/cloudmux/pkg/multicloud/oracle/instance.go
@@ -0,0 +1,101 @@
+// Copyright 2019 Yunion
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package oracle
+
+import (
+	"time"
+
+	"yunion.io/x/pkg/errors"
+)
+
+type SInstance struct {
+	AvailabilityDomain string
+	CompartmentId      string
+	DefinedTags        struct {
+		OracleTags struct {
+			CreatedBy string
+			CreatedOn time.Time
+		}
+	}
+	DisplayName      string
+	ExtendedMetadata struct {
+	}
+	FaultDomain  string
+	FreeformTags struct {
+	}
+	Id            string
+	ImageId       string
+	LaunchMode    string
+	LaunchOptions struct {
+		BootVolumeType                  string
+		Firmware                        string
+		NetworkType                     string
+		RemoteDataVolumeType            string
+		IsPvEncryptionInTransitEnabled  bool
+		IsConsistentVolumeNamingEnabled bool
+	}
+	InstanceOptions struct {
+		AreLegacyImdsEndpointsDisabled bool
+	}
+	AvailabilityConfig struct {
+		IsLiveMigrationPreferred bool
+		RecoveryAction           string
+	}
+	LifecycleState string
+	Metadata       struct {
+	}
+	Region      string
+	Shape       string
+	ShapeConfig struct {
+		Ocpus                     float64
+		MemoryInGBs               float64
+		ProcessorDescription      string
+		NetworkingBandwidthInGbps float64
+		MaxVnicAttachments        int
+		Gpus                      int
+		LocalDisks                int
+		Vcpus                     int
+	}
+	IsCrossNumaNode bool
+	SourceDetails   struct {
+		SourceType string
+		ImageId    string
+	}
+	SystemTags struct {
+	}
+	TimeCreated time.Time
+	AgentConfig struct {
+		IsMonitoringDisabled  bool
+		IsManagementDisabled  bool
+		AreAllPluginsDisabled bool
+		PluginsConfig         []struct {
+			Name         string
+			DesiredState string
+		}
+	}
+}
+
+func (self *SRegion) GetInstances() ([]SInstance, error) {
+	resp, err := self.list(SERVICE_IAAS, "instances", nil)
+	if err != nil {
+		return nil, err
+	}
+	ret := []SInstance{}
+	err = resp.Unmarshal(&ret)
+	if err != nil {
+		return nil, errors.Wrapf(err, "Unmarshal")
+	}
+	return ret, nil
+}
--- a/vendor/yunion.io/x/cloudmux/pkg/multicloud/oracle/oracle.go
+++ b/vendor/yunion.io/x/cloudmux/pkg/multicloud/oracle/oracle.go
@@ -0,0 +1,381 @@
+// Copyright 2019 Yunion
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package oracle
+
+import (
+	"bytes"
+	"context"
+	"crypto/md5"
+	"crypto/rsa"
+	"crypto/tls"
+	"crypto/x509"
+	"encoding/pem"
+	"fmt"
+	"net/http"
+	"net/url"
+	"strings"
+	"sync"
+	"time"
+
+	"yunion.io/x/jsonutils"
+	"yunion.io/x/pkg/errors"
+	"yunion.io/x/pkg/gotypes"
+	"yunion.io/x/pkg/util/httputils"
+
+	api "yunion.io/x/cloudmux/pkg/apis/compute"
+	"yunion.io/x/cloudmux/pkg/cloudprovider"
+
+	"github.com/oracle/oci-go-sdk/common"
+)
+
+const (
+	CLOUD_PROVIDER_ORACLE_CN = "甲骨文"
+	ORACLE_DEFAULT_REGION    = "ap-singapore-1"
+	DEFAULT_API_VERSION      = "20160918"
+	ISO8601                  = "2006-01-02T15:04:05Z"
+
+	SERVICE_IAAS     = "iaas"
+	SERVICE_IDENTITY = "identity"
+)
+
+type OracleClientConfig struct {
+	cpcfg       cloudprovider.ProviderConfig
+	tenancyOCID string
+	userOCID    string
+	compartment string
+	key         *rsa.PrivateKey
+	fingerprint string
+
+	debug bool
+}
+
+type SOracleClient struct {
+	*OracleClientConfig
+
+	client *http.Client
+	lock   sync.Mutex
+	ctx    context.Context
+
+	regions []SRegion
+}
+
+func NewOracleClientConfig(tenancy, user, compartment, privateKey string) (*OracleClientConfig, error) {
+	cfg := &OracleClientConfig{
+		tenancyOCID: tenancy,
+		userOCID:    user,
+		compartment: compartment,
+	}
+	err := cfg.parsePrivateKey(privateKey)
+	if err != nil {
+		return nil, errors.Wrapf(err, "parsePrivateKey %s", privateKey)
+	}
+	err = cfg.keyFingerprint()
+	if err != nil {
+		return nil, errors.Wrapf(err, "keyFingerprint")
+	}
+	return cfg, nil
+}
+
+func (self *OracleClientConfig) Debug(debug bool) *OracleClientConfig {
+	self.debug = debug
+	return self
+}
+
+func (self *OracleClientConfig) keyFingerprint() error {
+	der, err := x509.MarshalPKIXPublicKey(&self.key.PublicKey)
+	if err != nil {
+		return errors.Wrapf(err, "MarshalPKIXPublicKey")
+	}
+	var ret bytes.Buffer
+	fp := md5.Sum(der)
+	for i, b := range fp {
+		ret.WriteString(fmt.Sprintf("%02x", b))
+		if i < len(fp)-1 {
+			ret.WriteString(":")
+		}
+	}
+	self.fingerprint = ret.String()
+	return nil
+}
+
+func (self *OracleClientConfig) parsePrivateKey(key string) error {
+	var err error
+	if pemBlock, _ := pem.Decode([]byte(key)); pemBlock != nil {
+		decrypted := pemBlock.Bytes
+		if x509.IsEncryptedPEMBlock(pemBlock) {
+			return fmt.Errorf("private key password is required for encrypted private keys")
+		}
+
+		self.key, err = x509.ParsePKCS1PrivateKey(decrypted)
+		if err == nil {
+			return nil
+		}
+		_key, err := x509.ParsePKCS8PrivateKey(decrypted)
+		if err == nil {
+			switch _key.(type) {
+			case *rsa.PrivateKey:
+				self.key = _key.(*rsa.PrivateKey)
+				return nil
+			default:
+				return fmt.Errorf("unsupportesd private key type in PKCS8 wrapping")
+			}
+		}
+		return err
+	}
+	return fmt.Errorf("failed to parse private key")
+}
+
+func (self *OracleClientConfig) CloudproviderConfig(cpcfg cloudprovider.ProviderConfig) *OracleClientConfig {
+	self.cpcfg = cpcfg
+	return self
+}
+
+func NewOracleClient(cfg *OracleClientConfig) (*SOracleClient, error) {
+	client := &SOracleClient{
+		OracleClientConfig: cfg,
+		ctx:                context.Background(),
+	}
+	client.ctx = context.WithValue(client.ctx, "time", time.Now())
+	_, err := client.GetRegions()
+	return client, err
+}
+
+func (self *SOracleClient) GetRegions() ([]SRegion, error) {
+	if len(self.regions) > 0 {
+		return self.regions, nil
+	}
+	resp, err := self.list(SERVICE_IDENTITY, ORACLE_DEFAULT_REGION, "regions", nil)
+	if err != nil {
+		return nil, err
+	}
+	self.regions = []SRegion{}
+	err = resp.Unmarshal(&self.regions)
+	if err != nil {
+		return nil, err
+	}
+	return self.regions, nil
+}
+
+func (self *SOracleClient) GetRegion(id string) (*SRegion, error) {
+	regions, err := self.GetRegions()
+	if err != nil {
+		return nil, err
+	}
+	for i := range regions {
+		if regions[i].Name == id {
+			regions[i].client = self
+			return &regions[i], nil
+		}
+	}
+	return nil, cloudprovider.ErrNotFound
+}
+
+func (self *SOracleClient) getUrl(service, regionId, resource string) (string, error) {
+	if len(regionId) == 0 {
+		regionId = ORACLE_DEFAULT_REGION
+	}
+	switch service {
+	case "iaas", "identity":
+		return fmt.Sprintf("https://%s.%s.oraclecloud.com/%s/%s", service, regionId, DEFAULT_API_VERSION, strings.TrimPrefix(resource, "/")), nil
+	default:
+		return "", errors.Wrapf(cloudprovider.ErrNotSupported, service)
+	}
+}
+
+func (cli *SOracleClient) getDefaultClient() *http.Client {
+	cli.lock.Lock()
+	defer cli.lock.Unlock()
+	if !gotypes.IsNil(cli.client) {
+		return cli.client
+	}
+	cli.client = httputils.GetAdaptiveTimeoutClient()
+	httputils.SetClientProxyFunc(cli.client, cli.cpcfg.ProxyFunc)
+	ts, _ := cli.client.Transport.(*http.Transport)
+	ts.TLSClientConfig = &tls.Config{InsecureSkipVerify: true}
+	cli.client.Transport = cloudprovider.GetCheckTransport(ts, func(req *http.Request) (func(resp *http.Response) error, error) {
+		if cli.cpcfg.ReadOnly {
+			if req.Method == "GET" {
+				return nil, nil
+			}
+			return nil, errors.Wrapf(cloudprovider.ErrAccountReadOnly, "%s %s", req.Method, req.URL.Path)
+		}
+		return nil, nil
+	})
+	return cli.client
+}
+
+type sOracleError struct {
+	StatusCode int    `json:"statusCode"`
+	RequestId  string `json:"requestId"`
+	Code       string
+	Message    string
+}
+
+func (self *sOracleError) Error() string {
+	return jsonutils.Marshal(self).String()
+}
+
+func (self *sOracleError) ParseErrorFromJsonResponse(statusCode int, status string, body jsonutils.JSONObject) error {
+	if body != nil {
+		body.Unmarshal(self)
+	}
+	self.StatusCode = statusCode
+	return self
+}
+
+func (self *SOracleClient) TenancyOCID() (string, error) {
+	return self.tenancyOCID, nil
+}
+
+func (self *SOracleClient) UserOCID() (string, error) {
+	return self.userOCID, nil
+}
+
+func (self *SOracleClient) KeyFingerprint() (string, error) {
+	return self.fingerprint, nil
+}
+
+func (self *SOracleClient) Region() (string, error) {
+	return ORACLE_DEFAULT_REGION, nil
+}
+
+func (self *SOracleClient) PrivateRSAKey() (*rsa.PrivateKey, error) {
+	return self.OracleClientConfig.key, nil
+}
+
+func (self *SOracleClient) KeyID() (string, error) {
+	return fmt.Sprintf("%s/%s/%s", self.tenancyOCID, self.userOCID, self.fingerprint), nil
+}
+
+func (self *SOracleClient) Do(req *http.Request) (*http.Response, error) {
+	client := self.getDefaultClient()
+
+	req.Header.Set("Date", time.Now().UTC().Format(http.TimeFormat))
+	signer := common.DefaultRequestSigner(self)
+
+	signer.Sign(req)
+
+	return client.Do(req)
+}
+
+func (self *SOracleClient) list(service, regionId, resource string, params map[string]interface{}) (jsonutils.JSONObject, error) {
+	if params == nil {
+		params = map[string]interface{}{}
+	}
+	if service == SERVICE_IAAS && len(self.compartment) > 0 {
+		params["compartmentId"] = self.compartment
+	}
+	return self.request(httputils.GET, service, regionId, resource, params)
+}
+
+func (self *SOracleClient) post(service, regionId, resource string, params map[string]interface{}) (jsonutils.JSONObject, error) {
+	return self.request(httputils.POST, service, regionId, resource, params)
+}
+
+func (self *SOracleClient) request(method httputils.THttpMethod, service, regionId, resource string, params map[string]interface{}) (jsonutils.JSONObject, error) {
+	uri, err := self.getUrl(service, regionId, resource)
+	if err != nil {
+		return nil, err
+	}
+	if params == nil {
+		params = map[string]interface{}{}
+	}
+	values := url.Values{}
+	if method == httputils.GET {
+		for k, v := range params {
+			values.Set(k, v.(string))
+		}
+		if len(values) > 0 {
+			uri = fmt.Sprintf("%s?%s", uri, values.Encode())
+		}
+		params = nil
+	}
+
+	req := httputils.NewJsonRequest(method, uri, params)
+	bErr := &sOracleError{}
+	client := httputils.NewJsonClient(self)
+	_, resp, err := client.Send(self.ctx, req, bErr, self.debug)
+	return resp, err
+}
+
+func (self *SOracleClient) GetSubAccounts() ([]cloudprovider.SSubAccount, error) {
+	compartments, err := self.GetCompartments()
+	if err != nil {
+		return nil, err
+	}
+	ret := []cloudprovider.SSubAccount{}
+	for _, compartment := range compartments {
+		if compartment.LifecycleState != "ACTIVE" {
+			continue
+		}
+		subAccount := cloudprovider.SSubAccount{}
+		subAccount.Id = compartment.Id
+		subAccount.Name = compartment.Name
+		subAccount.Account = fmt.Sprintf("%s/%s", self.userOCID, compartment.Id)
+		subAccount.HealthStatus = api.CLOUD_PROVIDER_HEALTH_NORMAL
+		ret = append(ret, subAccount)
+	}
+	return ret, nil
+}
+
+type Compartment struct {
+	CompartmentId  string
+	Id             string
+	Name           string
+	Description    string
+	TimeCreated    time.Time
+	LifecycleState string
+}
+
+func (self *SOracleClient) GetCompartments() ([]Compartment, error) {
+	resp, err := self.list(SERVICE_IDENTITY, ORACLE_DEFAULT_REGION, "compartments", map[string]interface{}{"compartmentId": self.tenancyOCID})
+	if err != nil {
+		return nil, err
+	}
+	ret := []Compartment{}
+	err = resp.Unmarshal(&ret)
+	if err != nil {
+		return nil, errors.Wrapf(err, "Unmarshal")
+	}
+	return ret, nil
+}
+
+func (self *SOracleClient) GetAccountId() string {
+	return self.tenancyOCID
+}
+
+type CashBalance struct {
+	CashBalance float64
+}
+
+func (self *SOracleClient) QueryBalance() (*CashBalance, error) {
+	resp, err := self.post("billing", "", "/v1/finance/cash/balance", nil)
+	if err != nil {
+		return nil, err
+	}
+	ret := &CashBalance{}
+	err = resp.Unmarshal(ret)
+	if err != nil {
+		return nil, errors.Wrapf(err, "resp.Unmarshal")
+	}
+	return ret, nil
+}
+
+func (self *SOracleClient) GetCapabilities() []string {
+	caps := []string{
+		cloudprovider.CLOUD_CAPABILITY_COMPUTE + cloudprovider.READ_ONLY_SUFFIX,
+	}
+	return caps
+}
--- a/vendor/yunion.io/x/cloudmux/pkg/multicloud/oracle/provider/provider.go
+++ b/vendor/yunion.io/x/cloudmux/pkg/multicloud/oracle/provider/provider.go
@@ -0,0 +1,219 @@
+// Copyright 2019 Yunion
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package provider
+
+import (
+	"context"
+	"strings"
+
+	"yunion.io/x/jsonutils"
+	"yunion.io/x/pkg/errors"
+
+	api "yunion.io/x/cloudmux/pkg/apis/compute"
+	"yunion.io/x/cloudmux/pkg/cloudprovider"
+	"yunion.io/x/cloudmux/pkg/multicloud/oracle"
+)
+
+type SOracleProviderFactory struct {
+	cloudprovider.SPublicCloudBaseProviderFactory
+}
+
+func (self *SOracleProviderFactory) GetId() string {
+	return api.CLOUD_PROVIDER_ORACLE
+}
+
+func (self *SOracleProviderFactory) GetName() string {
+	return oracle.CLOUD_PROVIDER_ORACLE_CN
+}
+
+func (self *SOracleProviderFactory) ValidateCreateCloudaccountData(ctx context.Context, input cloudprovider.SCloudaccountCredential) (cloudprovider.SCloudaccount, error) {
+	output := cloudprovider.SCloudaccount{}
+	if len(input.OracleTenancyOCID) == 0 {
+		return output, errors.Wrap(cloudprovider.ErrMissingParameter, "oracle_tenancy_ocid")
+	}
+	if len(input.OracleUserOCID) == 0 {
+		return output, errors.Wrap(cloudprovider.ErrMissingParameter, "oracle_user_ocid")
+	}
+	if len(input.OraclePrivateKey) == 0 {
+		return output, errors.Wrap(cloudprovider.ErrMissingParameter, "oracle_private_key")
+	}
+	output.AccessUrl = input.OracleTenancyOCID
+	output.Account = input.OracleUserOCID
+	output.Secret = input.OraclePrivateKey
+	return output, nil
+}
+
+func (self *SOracleProviderFactory) ValidateUpdateCloudaccountCredential(ctx context.Context, input cloudprovider.SCloudaccountCredential, cloudaccount string) (cloudprovider.SCloudaccount, error) {
+	output := cloudprovider.SCloudaccount{}
+	if len(input.OracleTenancyOCID) == 0 {
+		return output, errors.Wrap(cloudprovider.ErrMissingParameter, "oracle_tenancy_ocid")
+	}
+	if len(input.OracleUserOCID) == 0 {
+		return output, errors.Wrap(cloudprovider.ErrMissingParameter, "oracle_user_ocid")
+	}
+	if len(input.OraclePrivateKey) == 0 {
+		return output, errors.Wrap(cloudprovider.ErrMissingParameter, "oracle_private_key")
+	}
+	output = cloudprovider.SCloudaccount{
+		AccessUrl: input.OracleTenancyOCID,
+		Account:   input.OracleUserOCID,
+		Secret:    input.OraclePrivateKey,
+	}
+	return output, nil
+}
+
+func parseCompartment(key string) (string, string) {
+	userOCID, compartment := key, ""
+	if strings.Contains(key, "/") {
+		info := strings.Split(key, "/")
+		if len(info) == 2 {
+			userOCID, compartment = info[0], info[1]
+		}
+	}
+	return userOCID, compartment
+}
+
+func (self *SOracleProviderFactory) GetProvider(cfg cloudprovider.ProviderConfig) (cloudprovider.ICloudProvider, error) {
+	userOCID, compartment := parseCompartment(cfg.Account)
+	opts, err := oracle.NewOracleClientConfig(
+		cfg.URL,
+		userOCID,
+		compartment,
+		cfg.Secret,
+	)
+	if err != nil {
+		return nil, err
+	}
+	client, err := oracle.NewOracleClient(
+		opts.CloudproviderConfig(cfg),
+	)
+	if err != nil {
+		return nil, err
+	}
+
+	return &SOracleProvider{
+		SBaseProvider: cloudprovider.NewBaseProvider(self),
+		client:        client,
+	}, nil
+}
+
+func (self *SOracleProviderFactory) GetClientRC(info cloudprovider.SProviderInfo) (map[string]string, error) {
+	userOCID, compartment := parseCompartment(info.Account)
+	return map[string]string{
+		"ORACLE_TENANCY_OCID":   info.Url,
+		"ORACLE_USER_OCID":      userOCID,
+		"ORACLE_COMPARTMENT_ID": compartment,
+		"ORACLE_PRIVATE_KEY":    info.Secret,
+		"ORACLE_REGION_ID":      oracle.ORACLE_DEFAULT_REGION,
+	}, nil
+}
+
+func init() {
+	factory := SOracleProviderFactory{}
+	cloudprovider.RegisterFactory(&factory)
+}
+
+type SOracleProvider struct {
+	cloudprovider.SBaseProvider
+	client *oracle.SOracleClient
+}
+
+func (self *SOracleProvider) GetSysInfo() (jsonutils.JSONObject, error) {
+	regions, err := self.client.GetRegions()
+	if err != nil {
+		return nil, err
+	}
+	info := jsonutils.NewDict()
+	info.Add(jsonutils.NewInt(int64(len(regions))), "region_count")
+	return info, nil
+}
+
+func (self *SOracleProvider) GetVersion() string {
+	return ""
+}
+
+func (self *SOracleProvider) GetSubAccounts() ([]cloudprovider.SSubAccount, error) {
+	return self.client.GetSubAccounts()
+}
+
+func (self *SOracleProvider) GetAccountId() string {
+	return self.client.GetAccountId()
+}
+
+func (self *SOracleProvider) GetIRegions() []cloudprovider.ICloudRegion {
+	regions, _ := self.client.GetRegions()
+	ret := []cloudprovider.ICloudRegion{}
+	for i := range regions {
+		ret = append(ret, &regions[i])
+	}
+	return ret
+}
+
+func (self *SOracleProvider) GetIRegionById(extId string) (cloudprovider.ICloudRegion, error) {
+	region, err := self.client.GetRegion(extId)
+	if err != nil {
+		return nil, err
+	}
+	return region, nil
+}
+
+func (self *SOracleProvider) GetBalance() (*cloudprovider.SBalanceInfo, error) {
+	ret := &cloudprovider.SBalanceInfo{Currency: "CNY", Status: api.CLOUD_PROVIDER_HEALTH_UNKNOWN}
+	return ret, cloudprovider.ErrNotSupported
+}
+
+func (self *SOracleProvider) GetIProjects() ([]cloudprovider.ICloudProject, error) {
+	return []cloudprovider.ICloudProject{}, nil
+}
+
+func (self *SOracleProvider) CreateIProject(name string) (cloudprovider.ICloudProject, error) {
+	return nil, cloudprovider.ErrNotImplemented
+}
+
+func (self *SOracleProvider) GetStorageClasses(regionId string) []string {
+	return []string{}
+}
+
+func (self *SOracleProvider) GetBucketCannedAcls(regionId string) []string {
+	return []string{
+		string(cloudprovider.ACLPrivate),
+		string(cloudprovider.ACLPublicRead),
+		string(cloudprovider.ACLPublicReadWrite),
+	}
+}
+
+func (self *SOracleProvider) GetObjectCannedAcls(regionId string) []string {
+	return []string{
+		string(cloudprovider.ACLPrivate),
+		string(cloudprovider.ACLPublicRead),
+		string(cloudprovider.ACLPublicReadWrite),
+	}
+}
+
+func (self *SOracleProvider) GetCapabilities() []string {
+	return self.client.GetCapabilities()
+}
+
+func (self *SOracleProvider) GetIamLoginUrl() string {
+	return ""
+}
+
+func (self *SOracleProvider) GetCloudRegionExternalIdPrefix() string {
+	return api.CLOUD_PROVIDER_ORACLE + "/"
+}
+
+func (self *SOracleProvider) GetMetrics(opts *cloudprovider.MetricListOptions) ([]cloudprovider.MetricValues, error) {
+	return nil, cloudprovider.ErrNotImplemented
+}
--- a/vendor/yunion.io/x/cloudmux/pkg/multicloud/oracle/region.go
+++ b/vendor/yunion.io/x/cloudmux/pkg/multicloud/oracle/region.go
@@ -0,0 +1,124 @@
+// Copyright 2019 Yunion
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package oracle
+
+import (
+	"fmt"
+
+	api "yunion.io/x/cloudmux/pkg/apis/compute"
+	"yunion.io/x/cloudmux/pkg/cloudprovider"
+	"yunion.io/x/cloudmux/pkg/multicloud"
+	"yunion.io/x/jsonutils"
+)
+
+type SRegion struct {
+	multicloud.SRegion
+	multicloud.SNoObjectStorageRegion
+	multicloud.SNoLbRegion
+	client *SOracleClient
+
+	Key  string
+	Name string
+}
+
+func (self *SRegion) GetId() string {
+	return self.Name
+}
+
+func (self *SRegion) GetGlobalId() string {
+	return fmt.Sprintf("%s/%s", api.CLOUD_PROVIDER_ORACLE, self.Name)
+}
+
+func (self *SRegion) GetProvider() string {
+	return api.CLOUD_PROVIDER_ORACLE
+}
+
+func (self *SRegion) GetCloudEnv() string {
+	return api.CLOUD_PROVIDER_ORACLE
+}
+
+func (self *SRegion) GetGeographicInfo() cloudprovider.SGeographicInfo {
+	geo, ok := map[string]cloudprovider.SGeographicInfo{}[self.Name]
+	if ok {
+		return geo
+	}
+	return cloudprovider.SGeographicInfo{}
+}
+
+func (self *SRegion) GetName() string {
+	return self.Name
+}
+
+func (self *SRegion) GetI18n() cloudprovider.SModelI18nTable {
+	table := cloudprovider.SModelI18nTable{}
+	table["name"] = cloudprovider.NewSModelI18nEntry(self.GetName()).CN(self.GetName()).EN(self.Name)
+	return table
+}
+
+func (self *SRegion) GetStatus() string {
+	return api.CLOUD_REGION_STATUS_INSERVER
+}
+
+func (self *SRegion) GetClient() *SOracleClient {
+	return self.client
+}
+
+func (self *SRegion) CreateEIP(opts *cloudprovider.SEip) (cloudprovider.ICloudEIP, error) {
+	return nil, cloudprovider.ErrNotImplemented
+}
+
+func (region *SRegion) CreateISecurityGroup(conf *cloudprovider.SecurityGroupCreateInput) (cloudprovider.ICloudSecurityGroup, error) {
+	return nil, cloudprovider.ErrNotImplemented
+}
+
+func (region *SRegion) GetISecurityGroupById(secgroupId string) (cloudprovider.ICloudSecurityGroup, error) {
+	return nil, cloudprovider.ErrNotImplemented
+}
+
+func (self *SRegion) CreateIVpc(opts *cloudprovider.VpcCreateOptions) (cloudprovider.ICloudVpc, error) {
+	return nil, cloudprovider.ErrNotImplemented
+}
+
+func (self *SRegion) GetIVpcs() ([]cloudprovider.ICloudVpc, error) {
+	return nil, cloudprovider.ErrNotImplemented
+}
+
+func (self *SRegion) GetIVpcById(id string) (cloudprovider.ICloudVpc, error) {
+	return nil, cloudprovider.ErrNotImplemented
+}
+
+func (region *SRegion) GetCapabilities() []string {
+	return region.client.GetCapabilities()
+}
+
+func (self *SRegion) GetIEipById(eipId string) (cloudprovider.ICloudEIP, error) {
+	return nil, cloudprovider.ErrNotImplemented
+}
+
+func (self *SRegion) GetIEips() ([]cloudprovider.ICloudEIP, error) {
+	return nil, cloudprovider.ErrNotImplemented
+}
+
+func (self *SRegion) GetIZones() ([]cloudprovider.ICloudZone, error) {
+	return nil, cloudprovider.ErrNotImplemented
+}
+
+func (self *SRegion) GetIZoneById(id string) (cloudprovider.ICloudZone, error) {
+	return nil, cloudprovider.ErrNotImplemented
+}
+
+func (self *SRegion) list(service, resource string, params map[string]interface{}) (jsonutils.JSONObject, error) {
+	return self.client.list(service, self.Name, resource, params)
+}
				`@@ -0,0 +1 @@`
				`Copyright (c) 2016, 2018, 2020, Oracle and/or its affiliates.`