Upgrade in an Oracle Cloud Infrastructure US Government Cloud Region

This topic describes how to upgrade Oracle Integration Generation 2 to Oracle Integration 3 in an Oracle Cloud Infrastructure US Government Cloud region.

The process to upgrade in an Oracle Cloud Infrastructure US Government Cloud region is similar to upgrading in other regions. However, you must complete some additional pre-upgrade steps:
  1. Grant Oracle Integration access to your tenancy. Add the following policy statements to your tenancy:
    allow service integration to read users in tenancy
allow service integration to read groups in tenancy
allow service integration to read group-memberships in tenancy
allow service integration to manage credentials in tenancy
allow service integration to read policies in tenancy
allow service integration to read compartments in tenancy
allow service integration to manage domains in tenancy
allow service integration to manage integration-instances in tenancy
  2. On the Upgrade page of your Oracle Integration Generation 2 instance, in the Policy OCIDs of Service Role box, enter the OCIDs for the policies you created to grant access to your service role groups. See Assign Policies to Oracle Integration Service Role Groups. These service role group mappings will be migrated to the Oracle Integration 3 instance during upgrade.
    Description Example Policy

    Grant the ServiceAdministrator role for a compartment

    allow group OICAdminGroup to be ServiceAdministrator for integration-instances in compartment OICCompartment

    Grant the ServiceDeveloper role for a compartment

    allow group OICDeveloperGroup to be ServiceDeveloper for integration-instances in compartment OICCompartment

    Grant the ServiceInvoker role for an Oracle Integration instance

    allow group OICInvokerGroup to be ServiceInvoker for integration-instances in compartment OICCompartment

    where all {target.app.name='test-instance1', target.app.type='integration-instances'}

    Here the where clause grants users assigned to group OICInvokerGroup the ServiceInvoker role to one Oracle Integration instance identified by its instance name and created in OICCompartment.

    Grant the ServiceMonitor role for two Oracle Integration instances

    allow group OICMonitorGroup to be ServiceMonitor for integration-instances in compartment OICCompartment

    where any {target.app.name='test-instance1', target.app.name='instance-prod-1'}

    This policy grants the ServiceMonitor Role to the OICMonitorGroup group over two instances identified by their respective names in OICCompartment.

    Note:

    If you don't have any service role mapping policies in Oracle Integration Generation 2, you can skip updating the Policy OCIDs of Service Role field on the Upgrade page. In such cases, you need to manually assign the service roles to users in the IDCS application after upgrade.

Continue with the remaining upgrade process, starting with Check Upgrade Readiness and Correct Precheck Issues.