OCTO Cloud-Native Platform¶

Two-service cloud-native platform with shared Oracle ATP, full OCI observability (MELTS: Metrics, Events, Logs, Traces, SQL), IDCS SSO, cross-service distributed tracing, and automated remediation.

Drone Shop CRM Portal Live Shop Live CRM

What is OCTO?¶

The OCTO Cloud-Native Platform is a two-service architecture built on Oracle Cloud Infrastructure, demonstrating how enterprise workloads integrate with OCI's observability, security, and AI services.

Both services share a single Oracle ATP database, enabling cross-service data correlation and distributed tracing visible in OCI APM Topology.

Recent Architecture Updates¶

• CRM owns catalog and storefront administration — products, stock, pricing, category changes, shop assignment, and storefront metadata are now managed from the CRM control plane.
• Shop stays customer-facing — the public storefront remains focused on browse, cart, checkout, and shipment flows; operational edits are intentionally removed from the customer frontend.
• Public and private CRM URLs are split — browser-visible links use https://crm.octodemo.cloud, while backend service-to-service calls may continue to use the internal cluster-local CRM endpoint.
• Frontend hardening is live — CRM page rendering, observability beacon ingestion, CSP-safe scripts, and favicon handling were updated to remove recent runtime errors.

Architecture at a Glance¶

flowchart TD
    Customer(["Customer (Browser + RUM)"])
    IDCS["OCI IAM Identity Domain"]

    subgraph OKE ["OCI OKE Cluster"]
        subgraph NS1 ["octo-drone-shop"]
            DroneShop["OCTO Drone Shop<br/>FastAPI · 98 routes"]
            WGW["Workflow Gateway<br/>Go · Select AI"]
        end
        subgraph NS2 ["enterprise-crm"]
            CRM["Enterprise CRM Portal<br/>FastAPI · ~80 routes"]
        end
    end

    subgraph OCI ["OCI Observability"]
        APM["OCI APM"]
        Logging["OCI Logging"]
        Monitoring["OCI Monitoring"]
        WAF["OCI WAF"]
        CloudGuard["Cloud Guard"]
    end

    DB[(Oracle ATP<br/>shared)]

    Customer -->|HTTPS| WAF --> DroneShop
    Customer -->|HTTPS| CRM
    Customer -.->|SSO| IDCS
    DroneShop <-->|"W3C traceparent<br/>orders + customer enrichment"| CRM
    DroneShop --> WGW
    DroneShop --> DB
    CRM --> DB
    WGW --> DB
    DroneShop -.-> APM
    CRM -.-> APM
    DroneShop -.-> Logging
    CRM -.-> Logging
    DroneShop -.-> Monitoring

Key Capabilities¶

Tenancy Portability¶

Set one variable and everything derives:

export DNS_DOMAIN="yourcompany.cloud"
# → shop.yourcompany.cloud (shop URL, CORS, SSO callback)
# → crm.yourcompany.cloud (CRM URL, customer sync)
# → All IDCS redirect URIs auto-derived

No tenancy OCIDs, regions, or hostnames are hardcoded in the codebase.

OCI-DEMO Components¶

Part of the OCI-DEMO ecosystem alongside Ops Portal and OCI Coordinator with Remediation Agent v2.