feat(graph): add oracle autonomous db (#22)

Author: daddycocoaman

docs/analysis/arm-nodes/oracle/oracle-autonomous-db.md

@@ -0,0 +1,54 @@
+# OracleAutonomousDB
+
+Represents Oracle Autonomous Database resources discovered from Azure ARM.
+
+**Labels:** `:ArmResource:OracleAutonomousDB`
+
+**Properties:**
+
+- `id` - Resource ID (primary key)
+- `actualUsedDataStorageSizeInTbs` - Actual used storage size in TB
+- `allocatedStorageSizeInTbs` - Allocated storage size in TB
+- `backupRententionPeriodInDays` - Backup retention period in days
+- `characterSet` - Database character set
+- `databaseType` - Oracle database type (from ARM `dataBaseType`)
+- `dbVersion` - Database version
+- `displayName` - Display name
+- `isLocalDataGuardEnabled` - Whether local Data Guard is enabled
+- `isMtlsConnectionRequired` - Whether mTLS is required for connections
+- `isRemoteDataGuardEnabled` - Whether remote Data Guard is enabled
+- `localDisasterRecoveryType` - Local disaster recovery type
+- `ociUrl` - Oracle Cloud URL
+- `ocid` - Oracle Cloud identifier
+- `openMode` - Database open mode
+- `permissionLevel` - Permission/access level
+- `privateEndpoint` - Private endpoint resource
+- `privateEndpointIp` - Private endpoint IP address
+- `privateEndpointLabel` - Private endpoint label
+- `timeCreated` - Creation timestamp
+- `timeLocalDataGuardEnabled` - Timestamp when local Data Guard was enabled
+- `highConnectionString` - High workload connection string
+- `mediumConnectionString` - Medium workload connection string
+- `lowConnectionString` - Low workload connection string
+- Dynamic URL properties from `connectionUrls` (e.g. `apexUrl`, `ordsUrl`, `sqlDevWebUrl`, `graphStudioUrl`, `machineLearningNotebookUrl`, `databaseTransformsUrl`)
+
+## Relationships
+
+### Incoming
+
+- **ArmResource** → `HAS_ORACLE_RESOURCE` → **OracleAutonomousDB** - Subnet-linked parent resource contains this database
+
+## Examples
+
+```cypher
+// Find Oracle autonomous databases and connection info
+MATCH (db:OracleAutonomousDB)
+RETURN db.displayName, db.dbVersion, db.openMode, db.permissionLevel
+```
+
+```cypher
+// Find databases with mTLS not required
+MATCH (db:OracleAutonomousDB)
+WHERE db.isMtlsConnectionRequired = false
+RETURN db.displayName, db.privateEndpoint
+```

docs/analysis/edges/has-oracle-resource.md

@@ -0,0 +1,26 @@
+# HAS_ORACLE_RESOURCE
+
+Represents the relationship between an ARM resource and Oracle database resources hosted within it.
+
+**Direction:** `(subnet)-[:HAS_ORACLE_RESOURCE]->(oracleDb)`
+
+**Description:** Indicates that an ARM resource (typically a subnet) contains or is associated with an Oracle Autonomous Database resource.
+
+**Properties:** None
+
+## Usage
+
+- **ArmResource** → `HAS_ORACLE_RESOURCE` → **OracleAutonomousDB** - Subnet or parent resource associated with an Oracle Autonomous Database
+
+## Query Examples
+
+```cypher
+// Find all Oracle databases and their parent resources
+MATCH (src:ArmResource)-[:HAS_ORACLE_RESOURCE]->(db:OracleAutonomousDB)
+RETURN src.id, db.displayName, db.dbVersion
+
+// Find Oracle databases accessible via private endpoint
+MATCH (src:ArmResource)-[:HAS_ORACLE_RESOURCE]->(db:OracleAutonomousDB)
+WHERE db.privateEndpointIp IS NOT NULL
+RETURN src.id, db.displayName, db.privateEndpointIp
+```

src/graph/config/azure/arm/oracle/oracle_autonomous_db.tera.yaml

@@ -0,0 +1,47 @@
+name: "Oracle Autonomous Database"
+label: "{{ LABELS.OracleAutonomousDB }}"
+table_name: "resources"
+resource_type: "oracle.database/autonomousdatabases"
+properties:
+  - "/id"
+  - "/properties"
+cypher: |
+    UNWIND $batch AS row
+    MERGE (obj:{{ LABELS.ArmResource }} {id: toLower(row.id)})
+    SET obj:{{ LABELS.OracleAutonomousDB }}
+
+    SET obj += {
+        actualUsedDataStorageSizeInTbs: row.properties.actualUsedDataStorageSizeInTbs,
+        allocatedStorageSizeInTbs: row.properties.allocatedStorageSizeInTbs,
+        backupRententionPeriodInDays: row.properties.backupRetentionPeriodInDays,
+        characterSet: row.properties.characterSet,
+        databaseType: row.properties.dataBaseType, // Note: property name in ARM is "dataBaseType" with a capital B
+        dbVersion: row.properties.dbVersion,
+        displayName: row.properties.displayName,
+        isLocalDataGuardEnabled: row.properties.isLocalDataGuardEnabled,
+        isMtlsConnectionRequired: row.properties.isMtlsConnectionRequired,
+        isRemoteDataGuardEnabled: row.properties.isRemoteDataGuardEnabled,
+        localDisasterRecoveryType: row.properties.localDisasterRecoveryType,
+        ociUrl: row.properties.ociUrl,
+        ocid: row.properties.ocid,
+        openMode: row.properties.openMode,
+        permissionLevel: row.properties.permissionLevel,
+        privateEndpoint: row.properties.privateEndpoint,
+        privateEndpointIp: row.properties.privateEndpointIp,
+        privateEndpointLabel: row.properties.privateEndpointLabel,
+        timeCreated: row.properties.timeCreated,
+        timeLocalDataGuardEnabled: row.properties.timeLocalDataGuardEnabled,
+
+        highConnectionString: row.properties.connectionStrings.high,
+        mediumConnectionString: row.properties.connectionStrings.medium,
+        lowConnectionString: row.properties.connectionStrings.low
+    }
+
+    // Connection URLs. Not sure of all values so adding them dynamically
+    FOREACH (k IN coalesce(keys(row.properties.connectionUrls), []) |
+      SET obj[k] = row.properties.connectionUrls[k]
+    )
+
+    MERGE (sub: {{ LABELS.ArmResource }} {id: toLower(row.properties.subnetId)})
+    MERGE (sub)-[:{{ REL.HAS_ORACLE_RESOURCE }}]->(obj)
+    RETURN count(*) AS _

src/graph/config/constants.yaml

@@ -34,6 +34,7 @@ REL:
   HAS_NIC: "HAS_NIC"
   HAS_NSG: "HAS_NSG"
   HAS_OAUTH_GRANT: "HAS_OAUTH_GRANT"
+  HAS_ORACLE_RESOURCE: "HAS_ORACLE_RESOURCE"
   HAS_PARAMETER: "HAS_PARAMETER"
   HAS_PEERING: "HAS_PEERING"
   HAS_POLICY: "HAS_POLICY"
@@ -149,6 +150,7 @@ LABELS:
   NetworkInterface: "NetworkInterface"
   NetworkSecurityGroup: "NetworkSecurityGroup"
   NetworkWatcher: "NetworkWatcher"
+  OracleAutonomousDB: "OracleAutonomousDB"
   PanCloudNgfwFirewall: "PanCloudNgfwFirewall"
   PanCloudNgfwLocalRulestack: "PanCloudNgfwLocalRulestack"
   PrivateDnsZone: "PrivateDnsZone"

zensical.toml

@@ -226,6 +226,9 @@ nav = [
       { "Machine Learning" = [
         "analysis/arm-nodes/machinelearning/ml-workspace.md",
       ] },
+      { "Oracle" = [
+        "analysis/arm-nodes/oracle/oracle-autonomous-db.md",
+      ] },
       { "Palo Alto" = [
         "analysis/arm-nodes/paloalto/pan-cloudngfw-firewall.md",
         "analysis/arm-nodes/paloalto/pan-cloudngfw-localrulestack.md",
@@ -321,6 +324,7 @@ nav = [
       "analysis/edges/has-nic.md",
       "analysis/edges/has-nsg.md",
       "analysis/edges/has-oauth-grant.md",
+      "analysis/edges/has-oracle-resource.md",
       "analysis/edges/has-parameter.md",
       "analysis/edges/has-peering.md",
       "analysis/edges/has-policy.md",