跳到主要内容
知知仓学习社ZHICANG

oci

Oracle Cloud Infrastructure guidance for designing, operating, and troubleshooting OCI services, including OCI Kubernetes Engine (OKE), OCI Internet…

读凭据执行命令联网读文件写文件严重 5 · 高危 61oracle/skills

它会碰到什么

扫了多少113 个文本文件，702 KB
它会碰到什么读凭据执行命令联网读文件写文件
命中总数89 处
命中统计严重 5 · 高 61 · 中 20 · 低 3
逐条看命中（30 条严重或高危）
  • 严重 oke/scripts/gva-discover.sh:261cred-paths
    kubeconfig_path="${kubeconfig_arg:-$HOME/.kube/config}"
  • 严重 oke/scripts/gva-menu.sh:142cred-paths
    kubeconfig_path="$HOME/.kube/config"
  • 严重 oke/scripts/oke-discover.sh:184cred-paths
    kubeconfig_path="${kubeconfig_arg:-$HOME/.kube/config}"
  • 严重 oke/skills/oke-gva-deployer/SKILL.md:34cred-paths
    2) Resolve **cluster OCID** from `~/.kube/config` when possible.
  • 严重 oke/skills/oke-troubleshooter/SKILL.md:58cred-paths
    - Resolve **cluster OCID** from `~/.kube/config` when possible.
  • 高 functions/oci-functions-deploy/scripts/common.sh:413exec-spawn
    proc = subprocess.run(
  • 高 functions/oci-functions-deploy/tests/test_skill_contract.sh:292exec-spawn
    proc = subprocess.Popen(
  • 高 oke/scripts/gva-discover.sh:183exec-spawn
    p = subprocess.run(cmd, stdout=subprocess.PIPE, stderr=subprocess.PIPE, timeout=timeout, text=True)
  • 高 oke/scripts/gva-discover.sh:396cred-envread
    target = os.environ.get("CLUSTER_REF", "")
  • 高 oke/scripts/gva-menu.sh:577cred-envread
    app_res = os.environ.get("APP_RES", "")
  • 高 oke/scripts/gva-menu.sh:578cred-envread
    subnet_id = os.environ.get("SUBNET_ID", "")
  • 高 oke/scripts/gva-menu.sh:579cred-envread
    display_name = os.environ.get("DISPLAY_NAME", "")
  • 高 oke/scripts/gva-menu.sh:580cred-envread
    nsg_ids_raw = os.environ.get("NSG_IDS", "")
  • 高 oke/scripts/gva-menu.sh:581cred-envread
    ip_count_raw = os.environ.get("IP_COUNT", "")
  • 高 oke/scripts/node-doctor-run.sh:141cred-envread
    raw = os.environ.get("RAW_OUT", "")
  • 高 oke/scripts/oke-addon-health.sh:68cred-envread
    "name": os.environ["NAME"],
  • 高 oke/scripts/oke-addon-health.sh:69cred-envread
    "cmd": os.environ["CMD"],
  • 高 oke/scripts/oke-addon-health.sh:70cred-envread
    "rc": int(os.environ["RC"]),
  • 高 oke/scripts/oke-addon-health.sh:71cred-envread
    "output": os.environ["OUT"][-4000:],
  • 高 oke/scripts/oke-autoscaler-check.sh:85cred-envread
    "name": os.environ["NAME"],
  • 高 oke/scripts/oke-autoscaler-check.sh:86cred-envread
    "cmd": os.environ["CMD"],
  • 高 oke/scripts/oke-autoscaler-check.sh:87cred-envread
    "rc": int(os.environ["RC"]),
  • 高 oke/scripts/oke-autoscaler-check.sh:88cred-envread
    "output": os.environ["OUT"][-4000:],
  • 高 oke/scripts/oke-discover.sh:123exec-spawn
    p = subprocess.run(cmd, stdout=subprocess.PIPE, stderr=subprocess.PIPE, timeout=timeout, text=True)
  • 高 oke/scripts/oke-dns-check.sh:81cred-envread
    "name": os.environ["NAME"],
  • 高 oke/scripts/oke-dns-check.sh:82cred-envread
    "cmd": os.environ["CMD"],
  • 高 oke/scripts/oke-dns-check.sh:83cred-envread
    "rc": int(os.environ["RC"]),
  • 高 oke/scripts/oke-dns-check.sh:84cred-envread
    "output": os.environ["OUT"][-4000:],
  • 高 oke/scripts/oke-incident-timeline.sh:53cred-envread
    f.write(json.dumps({"name": os.environ["NAME"], "cmd": os.environ["CMD"], "rc": int(os.environ["RC"]), "output": os.environ["OUT"][-6000:]}) + "\n")
  • 高 oke/scripts/oke-incident-timeline.sh:53cred-envread
    f.write(json.dumps({"name": os.environ["NAME"], "cmd": os.environ["CMD"], "rc": int(os.environ["RC"]), "output": os.environ["OUT"][-6000:]}) + "\n")

这一栏是扫描器报的事实，不是结论。命中多不等于有毒（安全工具、规则库、示例脚本本来就会包含危险写法），命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系，需要你自己看。

技能内容

Oracle Cloud Infrastructure Skills

Use this domain for practical Oracle Cloud Infrastructure guidance. Current content covers OCI Kubernetes Engine (OKE): cluster design, operational troubleshooting, Generic VNIC Attachment (GVA), and Multus multi-interface pod validation. It covers OCI Internet of Things Platform resource discovery, digital twin lifecycle workflows, device publish flows, and optional MCP-assisted operation. It covers OCI Functions local deployment and diagnosis-first troubleshooting. It also covers Enterprise AI because that work is built around OCI Generative AI, OCI networking, IAM, cost estimation, hosted applications, and OCI platform integrations.

How to Use This Domain

  1. Start with the routing table below.
  2. Read only the smallest service file or nested skill that matches the user's task.
  3. Prefer official Oracle documentation and live read-only discovery commands before making design or remediation recommendations.
  4. Ask before running commands that create, update, delete, restart, scale, drain, or otherwise mutate OCI or Kubernetes resources.
  5. Keep OCI-owned design decisions here, and route database-owned SQL, vector, and Select AI implementation details to db/features/.

Directory Structure

oci/
├── SKILL.md
├── enterprise-ai/
│   ├── SKILL.md
│   ├── models/
│   ├── agent-workflows/
│   ├── governance/
│   ├── data/
│   ├── cost/
│   └── integrations/
├── functions/
│   ├── oci-functions-deploy/
│   │   ├── SKILL.md
│   │   ├── agents/
│   │   ├── references/
│   │   ├── scripts/
│   │   └── tests/
│   └── oci-functions-troubleshoot/
│       ├── SKILL.md
│       ├── agents/
│       └── references/
├── iot-platform/
│   ├── SKILL.md
│   ├── agents/
│   ├── references/
│   ├── scripts/
│   ├── templates/
│   └── tests/
└── oke/
    ├── cluster-design.md
    ├── troubleshooting.md
    ├── gva-node-pools.md
    ├── multus-multihome.md
    ├── skills/
    ├── scripts/
    ├── agents/
    ├── shared/
    ├── examples/
    └── tests/

Category Routing

| Topic | Start With |

|-------|------------|

| Design or scaffold an OKE cluster, Terraform stack, or OCI Resource Manager stack | Start with oci/oke/cluster-design.md, then load oci/oke/skills/oke-cluster-generator/SKILL.md |

| Troubleshoot OKE workloads, pods, services, DNS, add-ons, ingress, load balancers, image pulls, storage, Workload Identity, or cluster access | Start with oci/oke/troubleshooting.md, then load oci/oke/skills/oke-troubleshooter/SKILL.md |

| Configure OKE managed node pools with Generic VNIC Attachment secondary VNIC profiles and Application Resources | Start with oci/oke/gva-node-pools.md, then load oci/oke/skills/oke-gva-deployer/SKILL.md |

| Deploy or validate Multus NetworkAttachmentDefinitions and multi-interface pods on OKE | Start with oci/oke/multus-multihome.md, then load oci/oke/skills/oke-multihome-deployer/SKILL.md |

| Deploy an OCI Function from a local macOS or Linux workstation | oci/functions/oci-functions-deploy/SKILL.md |

| Troubleshoot OCI Functions setup, deployment, invocation, or observability | oci/functions/oci-functions-troubleshoot/SKILL.md |

| OCI IoT domains, domain groups, digital twin models, adapters, instances, relationships, raw commands, Data API access, or HTTPS publish flows | oci/iot-platform/SKILL.md |

| OCI Generative AI models, custom/imported models, endpoints, or private endpoints | oci/enterprise-ai/SKILL.md |

| OCI Responses API agents, tools, memory, File Search, Code Interpreter, MCP, or SQL Search | oci/enterprise-ai/SKILL.md |

| OCI Generative AI and OCI Generative AI Agents cost estimation | oci/enterprise-ai/cost/cost-estimation.md |

| OCI Enterprise AI governance, IAM, API keys, OAuth, guardrails, or ZPR | oci/enterprise-ai/governance/private-endpoints-and-governance.md |

Key Starting Points

  • oci/oke/cluster-design.md
  • oci/oke/troubleshooting.md
  • oci/oke/gva-node-pools.md
  • oci/oke/multus-multihome.md
  • oci/functions/oci-functions-deploy/SKILL.md
  • oci/functions/oci-functions-troubleshoot/SKILL.md
  • oci/functions/oci-functions-deploy/references/oci-functions-quickstart.md
  • oci/functions/oci-functions-troubleshoot/references/error-patterns.md
  • oci/iot-platform/SKILL.md
  • oci/iot-platform/references/cli-workflows.md
  • oci/iot-platform/references/mcp-optional-use.md
  • oci/enterprise-ai/SKILL.md
  • oci/enterprise-ai/models/enterprise-ai-models.md
  • oci/enterprise-ai/agent-workflows/responses-api-agents.md
  • oci/enterprise-ai/cost/cost-estimation.md
  • oci/enterprise-ai/governance/private-endpoints-and-governance.md

Operational Tools

The OKE operational skills include deterministic helper tools under oci/oke/scripts/ and skill-specific helper scripts under oci/oke/skills/*/scripts/.

  • Read-only discovery and evidence tools may be used to collect context.
  • Generate-only tools may produce manifests, commands, Terraform snippets, or reports.
  • Any tool or command that creates, updates, deletes, patches, restarts, scales, drains, debugs, assigns IPs, applies manifests, or otherwise mutates OCI or Kubernetes resources requires explicit user approval first.
  • oci/oke/scripts/gva-menu.sh is allowed to create an OKE node pool for the GVA workflow only after the user approves execution and completes its final CREATE confirmation.
  • oci/oke/scripts/node-doctor-run.sh requires approval before execution because it creates a temporary debug pod and may delete that pod during cleanup.

Common Multi-Step Flows

| Task | Recommended Sequence |

|------|----------------------|

| Plan a production OKE cluster | oke/cluster-design.md |

| Diagnose an OKE service with no load balancer IP | oke/troubleshooting.md |

| Build a node pool with workload-specific secondary VNIC profiles | oke/gva-node-pools.md -> oke/multus-multihome.md if pods need multiple interfaces |

| Validate Multus pod networking on GVA-enabled nodes | oke/multus-multihome.md -> oke/troubleshooting.md if symptoms remain |

| Investigate OKE workload access to OCI APIs | oke/troubleshooting.md |

| Deploy a local function | functions/oci-functions-deploy/SKILL.md -> preflight -> Fn context validation -> OCIR auth check -> app selection -> scaffold -> deploy |

| Troubleshoot a failed function deploy | functions/oci-functions-troubleshoot/SKILL.md -> functions/oci-functions-troubleshoot/references/error-patterns.md -> functions/oci-functions-troubleshoot/references/deploy.md |

| Troubleshoot function invocation failures | functions/oci-functions-troubleshoot/SKILL.md -> functions/oci-functions-troubleshoot/references/invoke.md -> logs, traces, metrics, and limits |

| Explore or update OCI IoT digital twin resources | iot-platform/SKILL.md -> iot-platform/references/cli-workflows.md -> iot-platform/references/resilience-guidance.md |

| Publish test telemetry to an OCI IoT twin | iot-platform/SKILL.md -> iot-platform/references/cli-workflows.md -> iot-platform/templates/publish-curl.template.sh |

| Build a governed enterprise assistant | enterprise-ai/SKILL.md -> enterprise-ai/agent-workflows/agent-tools.md -> enterprise-ai/data/rag-and-search.md -> enterprise-ai/governance/private-endpoints-and-governance.md |

Scope Boundaries

  • Keep OCI service, networking, IAM, agent hosting, and cost-estimation guidance in this domain.
  • Route OCI IoT domain, digital twin, adapter, device publish, raw command, and Data API workflows to oci/iot-platform/.
  • Route Oracle Database-owned implementation details to db/features/.
  • Route APEX artifact generation to apex/apexlang/.
  • Prefer official Oracle documentation for OCI service limits, IAM verbs, endpoint formats, regions, and pricing inputs because these change frequently.

Sources

  • https://docs.oracle.com/en-us/iaas/Content/ContEng/home.htm
  • https://docs.oracle.com/en-us/iaas/Content/ContEng/Tasks/contengAttaching_Multiple_VNICs.htm
  • https://docs.oracle.com/en-us/iaas/Content/ContEng/Tasks/contenggrantingworkloadaccesstoresources.htm
  • https://github.com/oracle-terraform-modules/terraform-oci-oke
  • https://docs.oracle.com/en-us/iaas/Content/internet-of-things/home.htm
  • https://github.com/oracle-samples/oci-iot-samples
  • https://docs.oracle.com/en-us/iaas/Content/generative-ai/overview.htm
  • https://docs.oracle.com/en-us/iaas/Content/generative-ai/home.htm
  • https://docs.oracle.com/en-us/iaas/Content/Functions/home.htm
  • https://docs.oracle.com/en-us/iaas/Content/Functions/Tasks/functionsquickstartlocalhost.htm
  • https://docs.oracle.com/en-us/iaas/Content/Functions/Tasks/functionscreatingapps.htm
  • https://docs.oracle.com/en-us/iaas/Content/Functions/Tasks/functionstroubleshooting.htm

想直接用这个技能？

本站把开放许可（MIT / Apache 等）的技能按仓库打包整理到网盘，点一下转存到你自己的网盘，不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接，不打包。

去原始仓库

它属于哪个仓库

仓库oracle/skills
星标★ 845
本站分层T2
该仓技能数14
原文件路径oci/SKILL.md

同一个仓库里的其他技能

看这个仓库的全部 14 个技能