Provision OKE on Oracle Cloud - Step by Step Guide

flowchart LR
    subgraph Step1["1. Provision"]
        TF[terraform apply]
    end

    subgraph Step2["2. Push"]
        Git[git push]
    end

    subgraph Step3["3. Wait"]
        Boot[Cloud-init<br/>Bootstrap]
    end

    subgraph Step4["4. Verify"]
        Check[kubectl get nodes]
    end

    TF --> Git --> Boot --> Check

Provisioning

After creating terraform.tfvars, run Terraform to provision the infrastructure:

cd tf-oke
terraform init
terraform apply

sequenceDiagram
    participant You as Developer
    participant TF as Terraform
    participant OCI as OCI API
    participant OKE as OKE Cluster

    You->>TF: terraform apply
    TF->>OCI: Create VCN
    TF->>OCI: Create Subnets
    TF->>OCI: Create OKE Cluster
    TF->>OCI: Create Node Pool
    OCI->>OKE: Provision Control Plane
    OCI->>OKE: Provision Worker Nodes
    TF->>You: Output Cluster Details
    Note over OKE: Cluster creation takes ~10-15m

Terraform creates the OCI networking, OKE cluster, and node pool, then generates Kubernetes manifests in the argocd/ directory.

Push Manifests

The generated manifests must be committed to your repository for Argo CD to sync them:

cd ..
git add argocd/
git commit -m "Configure cluster manifests"
git push

flowchart LR
    TF[Terraform] -->|generates| Manifests[argocd/]
    Manifests -->|git push| GH[GitHub]
    GH -->|syncs| Argo[Argo CD]
    Argo -->|deploys| Cluster[OKE Cluster]

Bootstrapping

The OKE cluster control plane is managed by Oracle. Once Terraform completes, the cluster is active, but we need to configure kubectl and install Argo CD.

Configure kubectl:

oci ce cluster create-kubeconfig \
  --cluster-id $(terraform output -raw cluster_id) \
  --file $HOME/.kube/config \
  --region $(terraform output -raw region) \
  --token-version 2.0.0 \
  --kube-endpoint PUBLIC_ENDPOINT

Install Argo CD:

kubectl create namespace argocd
kubectl apply -n argocd --server-side -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.1/manifests/install.yaml
kubectl apply -f ../argocd/applications.yaml

Allow approximately five minutes for Argo CD to initialize and begin syncing applications.

Verification

Check Nodes

kubectl get nodes

Expected output:

NAME             STATUS   ROLES   AGE   VERSION
10.0.10.x        Ready    node    5m    v1.35.2
10.0.10.y        Ready    node    5m    v1.35.2

Check Applications

kubectl get applications -n argocd

Expected output:

NAME                SYNC STATUS   HEALTH STATUS
argocd-ingress      Synced        Healthy
cert-manager        Synced        Healthy
docs-app            Synced        Healthy
envoy-gateway       Synced        Healthy
external-dns        Synced        Healthy
external-secrets    Synced        Healthy
gateway-api-crds    Synced        Healthy
homer-app           Synced        Healthy
k3s-docs-app        Synced        Healthy
managed-secrets     Synced        Healthy
metrics-server      Synced        Healthy
openclaw-app        Synced        Healthy
openclaw-operator   Synced        Healthy

Check Pods

kubectl get pods -A

All pods should be Running except for completed Job pods.

Verify DNS and TLS

After a few minutes, test the deployed application:

dig +short k8s.yourdomain.com
curl -I https://k8s.yourdomain.com

Troubleshooting First Deploy

Applications Stuck in Unknown/OutOfSync

If ArgoCD applications remain in Unknown status after initial deploy, force a hard refresh:

for app in gateway-api-crds cert-manager external-dns external-secrets envoy-gateway managed-secrets argocd-ingress docs-app homer-app k3s-docs-app openclaw-operator openclaw-app metrics-server; do
  kubectl patch app $app -n argocd --type merge -p '{"metadata":{"annotations":{"argocd.argoproj.io/refresh":"hard"}}}'
  sleep 5
done

HTTPS Verification

After all applications are synced, verify HTTPS works:

curl -I https://k8s.yourdomain.com
curl -I https://cd.k8s.yourdomain.com

Both should return HTTP/2 200. HTTP requests should redirect with 301:

curl -I http://k8s.yourdomain.com

See Common Issues for more solutions.