docs: update README for v1.2 with RAG and Embeddings features
- Update version badge to 1.2 - Add RAG description to AI Chat Agent section - Add Embeddings Management section with feature details - Add RAG Pipeline to architecture diagram - Add Embeddings API endpoints to API Reference - Add Embedding Models table (Cohere Embed v3.0/light) - Update ADB Vector setup guide with GenAI config and embedding model - Add Step 5 for Embeddings workflow - Update project structure line counts - Add v1.2 to version history
This commit is contained in:
66
README.md
66
README.md
@@ -9,7 +9,7 @@
|
||||
</p>
|
||||
|
||||
<p align="center">
|
||||
<img src="https://img.shields.io/badge/version-1.1-C74634?style=flat-square" alt="Version">
|
||||
<img src="https://img.shields.io/badge/version-1.2-C74634?style=flat-square" alt="Version">
|
||||
<img src="https://img.shields.io/badge/python-3.12-3776AB?style=flat-square" alt="Python">
|
||||
<img src="https://img.shields.io/badge/FastAPI-0.115-009688?style=flat-square" alt="FastAPI">
|
||||
<img src="https://img.shields.io/badge/OCI-GenAI-C74634?style=flat-square" alt="OCI">
|
||||
@@ -23,14 +23,15 @@
|
||||
|
||||
OCI CIS AI Agent is a self-hosted web application that automates **CIS Oracle Cloud Infrastructure Foundations Benchmark 3.0** compliance checks, powered by **OCI Generative AI** for intelligent analysis and an **MCP (Model Context Protocol)** server architecture for extensible task execution.
|
||||
|
||||
The platform combines security compliance scanning, AI-powered chat, infrastructure exploration, and vector-based knowledge storage into a single, containerized solution with Oracle Cloud's official light theme.
|
||||
The platform combines security compliance scanning, AI-powered chat with **RAG (Retrieval-Augmented Generation)**, infrastructure exploration, and vector-based knowledge storage into a single, containerized solution with Oracle Cloud's official light theme.
|
||||
|
||||
---
|
||||
|
||||
## Features
|
||||
|
||||
### 🤖 AI Chat Agent
|
||||
### 🤖 AI Chat Agent with RAG
|
||||
- **OCI Generative AI** integration via official SDK (`oci.generative_ai_inference`)
|
||||
- **RAG (Retrieval-Augmented Generation)**: automatically queries ADB vector store for relevant context before generating responses
|
||||
- 12 models across 4 providers: **Cohere** (Command A/R/R+), **Meta** (Llama 4/3.3/3.2/3.1), **Google** (Gemini 2.5), **xAI** (Grok 3/4)
|
||||
- 16 OCI regions supported with auto-generated endpoints
|
||||
- Full parameter control: temperature, max_tokens, top_p, top_k, frequency/presence penalty
|
||||
@@ -63,6 +64,15 @@ The platform combines security compliance scanning, AI-powered chat, infrastruct
|
||||
- Wallet ZIP upload and automatic extraction
|
||||
- Connection testing
|
||||
- Configurable embeddings table name (default: `CIS_EMBEDDINGS`)
|
||||
- Link to GenAI config for embedding generation via OCI GenAI
|
||||
|
||||
### 🧬 Embeddings Management
|
||||
- Dedicated tab for managing vector embeddings
|
||||
- **Embed CIS Reports**: automatically chunk reports by section (IAM, Networking, Compute, etc.) and generate embeddings
|
||||
- **Upload text files**: upload `.txt` files, automatically chunked by paragraphs
|
||||
- **OCI GenAI Embeddings**: uses Cohere Embed models (v3.0, multilingual, light) via OCI GenAI `embed_text` API
|
||||
- Browse, inspect and delete individual embeddings from the ADB vector store
|
||||
- 4 embedding models supported: Cohere Embed English/Multilingual v3.0 (1024d), Light variants (384d)
|
||||
|
||||
### 🔐 Security
|
||||
- **JWT authentication** with configurable expiry
|
||||
@@ -92,6 +102,9 @@ The platform combines security compliance scanning, AI-powered chat, infrastruct
|
||||
│ │ │ MCP Servers │──▶ Tools │ │
|
||||
│ │ ├─────────────┤ │ │
|
||||
│ │ │ oracledb │──▶ ADB │ │
|
||||
│ │ ├─────────────┤ │ │
|
||||
│ │ │ RAG Pipeline │──▶ Embed + │ │
|
||||
│ │ │ │ Search │ │
|
||||
│ │ └─────────────┘ │ │
|
||||
│ │ │ │
|
||||
│ │ SQLite (agent.db) │ │
|
||||
@@ -208,14 +221,27 @@ Register MCP servers for extended task execution:
|
||||
|
||||
MCP servers can be **linked to ADB Vector** databases, enabling them to use the vector store as a tool during report execution.
|
||||
|
||||
### Step 4 — ADB Vector (Optional)
|
||||
### Step 4 — ADB Vector + RAG (Optional)
|
||||
|
||||
For persistent vector storage of CIS findings and embeddings:
|
||||
For persistent vector storage and RAG-powered chat:
|
||||
|
||||
1. Add DSN (TNS name from tnsnames.ora, e.g., `myatp_high`)
|
||||
2. Set credentials (username/password)
|
||||
3. Upload Wallet ZIP (for mTLS)
|
||||
4. Test the connection
|
||||
3. Select a **GenAI Config** (for embedding generation via OCI GenAI)
|
||||
4. Select an **Embedding Model** (Cohere Embed v3.0 recommended)
|
||||
5. Upload Wallet ZIP (for mTLS)
|
||||
6. Test the connection
|
||||
7. Click **Create Table** to initialize the embeddings table in ADB
|
||||
|
||||
### Step 5 — Embeddings (Optional)
|
||||
|
||||
Navigate to the **Embeddings** tab to populate the vector store:
|
||||
|
||||
1. **From CIS Reports**: Select a completed report and generate embeddings (1 per section)
|
||||
2. **From text files**: Upload `.txt` files for automatic chunking and embedding
|
||||
3. Browse and manage existing embeddings
|
||||
|
||||
Once embeddings exist, the **chat automatically uses RAG** — it queries the ADB vector store for relevant context before generating responses with the selected GenAI model.
|
||||
|
||||
---
|
||||
|
||||
@@ -241,12 +267,12 @@ Allow group <group-name> to read buckets in compartment <compartment-name>
|
||||
```
|
||||
oci-cis-agent/
|
||||
├── backend/
|
||||
│ ├── app.py # FastAPI application (933 lines)
|
||||
│ ├── app.py # FastAPI application (~1100 lines)
|
||||
│ ├── cis_runner.py # CIS Benchmark check executor
|
||||
│ ├── Dockerfile # Python 3.12 + OCI CLI
|
||||
│ └── requirements.txt # Dependencies
|
||||
├── frontend/
|
||||
│ └── index.html # SPA with Oracle Cloud theme (419 lines)
|
||||
│ └── index.html # SPA with Oracle Cloud theme (~620 lines)
|
||||
├── nginx/
|
||||
│ └── default.conf # Reverse proxy config
|
||||
├── docker-compose.yml # Orchestration
|
||||
@@ -314,12 +340,22 @@ oci-cis-agent/
|
||||
|
||||
| Method | Endpoint | Description |
|
||||
|--------|----------|-------------|
|
||||
| POST | `/api/adb/config` | Save ADB connection |
|
||||
| POST | `/api/adb/config` | Save ADB connection (with GenAI config + embedding model) |
|
||||
| GET | `/api/adb/configs` | List ADB connections |
|
||||
| POST | `/api/adb/{id}/upload-wallet` | Upload wallet ZIP |
|
||||
| POST | `/api/adb/test/{id}` | Test ADB connection |
|
||||
| POST | `/api/adb/{id}/ensure-table` | Create embeddings table in ADB |
|
||||
| DELETE | `/api/adb/configs/{id}` | Delete ADB config |
|
||||
|
||||
### Embeddings
|
||||
|
||||
| Method | Endpoint | Description |
|
||||
|--------|----------|-------------|
|
||||
| POST | `/api/embeddings/report/{rid}` | Generate embeddings from CIS report (chunked by section) |
|
||||
| POST | `/api/embeddings/upload` | Upload .txt file and generate embeddings (chunked by paragraphs) |
|
||||
| GET | `/api/embeddings/{vid}/list` | List embeddings in ADB (paginated) |
|
||||
| DELETE | `/api/embeddings/{vid}/{doc_id}` | Delete individual embedding |
|
||||
|
||||
### Chat & Reports
|
||||
|
||||
| Method | Endpoint | Description |
|
||||
@@ -360,6 +396,15 @@ oci-cis-agent/
|
||||
| xAI | Grok 4 | GENERIC |
|
||||
| xAI | Grok 3 | GENERIC |
|
||||
|
||||
### Embedding Models
|
||||
|
||||
| Provider | Model | Dimensions |
|
||||
|----------|-------|------------|
|
||||
| Cohere | Embed English v3.0 | 1024 |
|
||||
| Cohere | Embed Multilingual v3.0 | 1024 |
|
||||
| Cohere | Embed English Light v3.0 | 384 |
|
||||
| Cohere | Embed Multilingual Light v3.0 | 384 |
|
||||
|
||||
### GenAI Regions
|
||||
|
||||
`us-chicago-1` · `us-ashburn-1` · `us-phoenix-1` · `uk-london-1` · `eu-frankfurt-1` · `ap-tokyo-1` · `ap-osaka-1` · `sa-saopaulo-1` · `ca-toronto-1` · `ap-melbourne-1` · `ap-mumbai-1` · `eu-amsterdam-1` · `me-jeddah-1` · `ap-singapore-1` · `ap-seoul-1` · `sa-vinhedo-1`
|
||||
@@ -386,6 +431,7 @@ oci-cis-agent/
|
||||
|
||||
| Version | Date | Changes |
|
||||
|---------|------|---------|
|
||||
| **v1.2** | 2026-03 | RAG pipeline (OCI GenAI embeddings + ADB vector search), dedicated Embeddings tab, CIS report chunking, file upload embedding |
|
||||
| **v1.1** | 2025-02 | OCI SDK GenAI (exact pattern), OCI Account Explorer, MCP↔ADB linking, full chat parameters |
|
||||
| **v1.0** | 2025-02 | Initial release: OCI theme, GenAI integration, MCP servers, ADB vector, JWT+MFA+RBAC |
|
||||
|
||||
|
||||
Reference in New Issue
Block a user