v3.15.0.0

[hdamecharla]

Release Notes – Version v3.15.0.0

Overview

This release introduces enhancements across automation pipelines, SAP installation playbooks, and platform compatibility. It includes security updates, improved error handling, support for new OS versions, and refined configuration logic.

---

Key Enhancements

🔐 Security & Compliance

• Updated step-security/harden-runner to v2.12.1 across all GitHub workflows.
• Upgraded codeql-action to v3.29.0 for improved static analysis.
• Enforced CRL validation (SAPINST_ENFORCE_CRL=true) across SAP installation playbooks for enhanced certificate handling (SAP Note: 3207613).

⚙️ SAP Installation Improvements

• Refactored error handling in SAP installation playbooks to use select('search', 'ERROR') for cleaner diagnostics.
• Added support for web_sidadm_uid in Web Dispatcher templates.
• Improved conditional logic for Oracle observer and shared home tasks.
• Enhanced mount logic for AFS and ANF with better validation and fallback handling.

📦 Dependency Updates

• Updated multiple Azure SDK packages and Microsoft Identity libraries to latest stable versions.
• Upgraded Python setup and dependency review actions in CI workflows.

🧪 Testing & Validation

• Introduced cibadmin cluster readiness check for Pacemaker on SUSE.
• Improved SAPHanaSR hook deployment and validation for scale-out clusters on RHEL.

🖥️ Platform & OS Support

• Added support for:
  • Configurations based on RedHat 9.4.
  • RedHat 8.10 in cluster configuration.
  • SUSE SLES_SAP 15.6 in SAPHanaSR and pacemaker roles.

🧰 Tooling & Automation

• Added TerraformInstaller@1 to pipelines for dynamic Terraform provisioning.
• Refined Azure DevOps pipeline environment variables for consistency and clarity.
• Improved GitHub Actions for Ansible linting and Trivy scanning.

---

Bug Fixes

• Corrected logic for observer tier detection in Oracle deployments.
• Fixed mountpoint handling in /etc/fstab for HANA scale-out configurations.
• Addressed inconsistencies in SAPINST command formatting across roles.

---

Breaking Changes

• CRL enforcement is now enabled by default. For air-gapped environments, this may require manual override.
• Deprecated legacy error line extraction logic in favor of select('search', 'ERROR').

---

Upgrade Notes

• Ensure all pipeline variables are updated to reflect new environment variable names.
  • Upgrade steps for Azure DevOps, rename the "CP_" and "WL_" prefixes for all variables in the variable groups. CP_ARM_SUSCRIPTION_ID -> ARM_SUSCRIPTION_ID
• Review CRL enforcement implications for your deployment environment.
• Validate compatibility with new OS versions if applicable.

---

This discussion was created from the release v3.15.0.0.