1Z0-1067-25 Question 33
Single answerYou are responsible for deploying a new microservices application on Oracle Cloud Infrastructure (OCI). Your team has chosen Terraform to provision core resources (Compute instances, VCN, security lists) and Ansible to configure each instance (installing software, setting environment variables, etc.) after Terraform completes. Which approach should you use to ensure that both infrastructure provisioning and configuration remain consistent, maintainable, and repeatable across development, test, and production environments?
- A
Use only Terraform to handle both provisioning and software configuration in a single execution plan.
- B
Separate your Terraform and Ansible configurations, but store them together in one repository and use Terraform output data to generate an Ansible dynamic inventory.
- C
Configure Terraform to trigger Ansible automatically by embedding Ansible Playbooks directly in the Terraform main configuration file.
- D
Run Ansible first to configure a local environment, then export the configurations to Terraform for provisioning in OCI.
Show answer and explanation
Correct answer: B
Explanation
In multi-stage deployments on OCI, it's recommended to separate infrastructure provisioning from configuration management. Terraform excels at creating and maintaining OCI resources, whereas Ansible manages the detailed configuration after those resources are provisioned. By storing both Terraform and Ansible definitions in version control, and passing resource outputs from Terraform to Ansible's dynamic inventory, you can ensure efficient, repeatable, and maintainable deployments. For more details, refer to the Oracle Cloud Infrastructure documentation on 'Managing Infrastructure with Terraform' and 'Automating Configuration with Ansible in OCI.'
- A. Incorrect.
Option 1 is incorrect. While Terraform can run provisioners, using it for detailed software configuration can complicate the code base and reduce flexibility, making it harder to reuse your infrastructure definitions.
- B. Correct.
Option 2 is correct. It's a standard best practice to handle infrastructure provisioning and software configuration separately. Storing them in the same repository ensures version control, and using Terraform output data to generate an Ansible dynamic inventory allows smooth handover of resource details from Terraform to Ansible.
- C. Incorrect.
Option 3 is incorrect. Embedding Ansible Playbooks directly in Terraform's main configuration file leads to tightly coupled infrastructure and configuration definitions, reducing clarity and maintainability.
- D. Incorrect.
Option 4 is incorrect. This reverses the recommended sequence (provision first, then configure). Ansible cannot configure OCI resources that don�t yet exist, and exporting configurations from a local environment can be error-prone.