metadata: add Oracle Cloud IMDSv2 service

[chl117]

Summary

Cloudbase-Init did not have a native Oracle Cloud Infrastructure metadata service. OCI Instance Metadata Service v2 exposes metadata under /opc/v2/ and requires every request to include:

Authorization: Bearer Oracle

Without an OCI-specific provider, Cloudbase-Init cannot retrieve OCI metadata through IMDSv2 when legacy IMDSv1 access is disabled. Metadata-dependent operations such as retrieving the instance ID, configuring the hostname, and processing user data are therefore unavailable.

This PR adds OracleCloudService, which:

• Retrieves the instance ID and hostname from OCI IMDSv2.
• Retrieves and base64-decodes instance user data.
• Adds the required authorization header to every metadata request.
• Adds the metadata IP route when configured.
• Provides OCI-specific metadata URL and HTTPS options.
• Registers the new oraclecloud configuration group.

The authorization header is added by overriding the service’s HTTP request method, following the existing GCE and MaaS provider patterns. No shared metadata base-class changes are required.

How to reproduce

1. Launch a Windows instance in OCI with legacy IMDSv1 access disabled.

2. Configure Cloudbase-Init to use:

   cloudbaseinit.metadata.services.oraclecloudservice.OracleCloudService
   

3. An unauthenticated request to the following IMDSv2 endpoint is rejected:

   http://169.254.169.254/opc/v2/instance/id
   

4. The same request succeeds when it includes:

   Authorization: Bearer Oracle
   

OCI documents the IMDSv2 endpoints and authorization requirement here:

https://docs.oracle.com/en-us/iaas/Content/Compute/Tasks/gettingmetadata.htm

Test plan

New unit tests cover:

• Successful service loading.
• Service load failure handling.
• OCI authorization-header injection.
• Preservation of caller-provided headers.
• Instance ID retrieval.
• Hostname retrieval.
• Base64 user-data decoding.

Oracle service tests:

stestr run \
cloudbaseinit.tests.metadata.services.test_oraclecloudservice
# Ran: 6# Passed: 6# Failed: 0

Full Python test suite:

stestr run --slowest
# Ran: 1075# Passed: 1075# Failed: 0

Repository-wide lint:

flake8
# Passed

DCO sign-off on the commit.

Related

• OCI IMDSv2 documentation: https://docs.oracle.com/en-us/iaas/Content/Compute/Tasks/gettingmetadata.htm
• Existing GCE and MaaS metadata services use the same provider-specific HTTP header pattern.

[ader1990]

Hello, I have updated the main tree with the updated pip modules and also the test resources PR has been merged. Can you please rebase on master and then also enable the functional test for oracle here: https://github.com/cloudbase/cloudbase-init/blob/master/.github/workflows/cloudbase_init_tests.yml#L65?

Thanks.

[chl117]

Hello, I rebased this PR onto the latest master and enabled the Oracle functional tests in cloudbase_init_tests.yml.

[ader1990]

Thank you for the contribution, much appreciated!

[ader1990]

With the merge of the docs PR #209, the documentation is now available at: https://cloudbase-init.readthedocs.io/en/latest/services.html#oracle-cloud-service.