sap-automation - v3.16.0.2

📦 Release Notes v3.16.0.2 – Managed DevOps & Install Enhancements

Overview

This is a hotfix for v3.16.0.1 and fixes issues with deploying some of the components.

This release introduces comprehensive support for the new SLES and RHEL for SAP Applications distribution, alongside critical updates to Pacemaker and SBD configurations for improved cluster reliability. It also enhances error handling in custom Python filters, refines SAP-related tasks, and standardizes deployment pipelines with improved tooling and variable management. These changes collectively improve system robustness, maintainability, and deployment consistency across environments.

🆕 New Features

SUSE Linux Support
- Added support for new SUSE OS release across package, repository, and variable definitions.
- Updated conditional logic in cluster and mount tasks to ensure compatibility with the new distribution.
RedHat Support
- Added support for RHEL 9.6 OS release across package, repository, and variable definitions.

🔧 Improvements

Pacemaker and SBD Configuration

Increased stonith-timeout from 144 to 210 seconds for both RedHat and SUSE roles to improve fencing reliability.
Refactored SBD configuration:
- Replaced static delay start with OS-specific values.
- Moved timeout and dependency settings to systemd override files for better maintainability.

Error Handling and Logging

Enhanced exception handling in custom Python filter plugins:
- Added detailed exception messages and stack traces.
- Introduced type checks to prevent runtime errors.

SAP and Package Management

Updated SAP note references for accuracy.
Corrected symlink creation for compat-sap-c++ version 13.
Removed unnecessary installation of dbus-1-python in the iSCSI server role.

Deployment Pipeline Enhancements

Terraform Installation
- Added TerraformInstaller@1 task to pipelines:
- 01-deploy-control-plane.yaml
- 02-sap-workload-zone.yaml
- 03-sap-system-deployment.yaml
- 04-sap-software-download.yaml
- 05-DB-and-SAP-installation.yaml
- Ensures Terraform is installed before execution.
Key Vault and Subscription Variable Standardization
- Replaced $(Preparation.VAULT_NAME) with $(KEYVAULT) for clarity.
- Updated $(ARM_SUBSCRIPTION_ID) to $(Preparation.ARM_SUBSCRIPTION_ID) for consistency.
Ansible Installation Reinstatement
- Re-enabled and updated inline Bash script for installing ansible-core and required collections.
- Applied changes to 05-DB-and-SAP-installation.yaml and 04-sap-software-download.yaml.
Environment Cleanup
- Removed unused DEPLOYER_KEYVAULT variable from 01-deploy-control-plane.yaml.

🐞 Bug Fixes

Corrected undefined variable issues in the chrony role related to Python interpreter selection.
Improved compatibility and linting accuracy by updating Ansible and Ansible-Lint versions in GitHub Actions workflow.

📄 Miscellaneous

Updated GRUB configuration tasks for RHEL 8.x to improve reliability and ensure consistent boot behavior.

Full Changelog: https://github.com/Azure/sap-automation/compare/v3.16.0.1...v3.16.0.2

- HCL
Published by hdamecharla 8 months ago

sap-automation - v3.16.0.1

📦 Release Notes v3.16.0.1 – Managed DevOps & Install Enhancements

Overview

This release introduces comprehensive support for the new SUSE Linux Enterprise Server for SAP Applications distribution, alongside critical updates to Pacemaker and SBD configurations for improved cluster reliability. It also enhances error handling in custom Python filters, refines SAP-related tasks, and standardizes deployment pipelines with improved tooling and variable management. These changes collectively improve system robustness, maintainability, and deployment consistency across environments.

🆕 New Features

SUSE Linux Support
- Added support for new SUSE OS release across package, repository, and variable definitions.
- Updated conditional logic in cluster and mount tasks to ensure compatibility with the new distribution.

🔧 Improvements

Pacemaker and SBD Configuration

Increased stonith-timeout from 144 to 210 seconds for both RedHat and SUSE roles to improve fencing reliability.
Refactored SBD configuration:
- Replaced static delay start with OS-specific values.
- Moved timeout and dependency settings to systemd override files for better maintainability.

Error Handling and Logging

Enhanced exception handling in custom Python filter plugins:
- Added detailed exception messages and stack traces.
- Introduced type checks to prevent runtime errors.

SAP and Package Management

Updated SAP note references for accuracy.
Corrected symlink creation for compat-sap-c++ version 13.
Removed unnecessary installation of dbus-1-python in the iSCSI server role.

Deployment Pipeline Enhancements

Terraform Installation
- Added TerraformInstaller@1 task to pipelines:
- 01-deploy-control-plane.yaml
- 02-sap-workload-zone.yaml
- 03-sap-system-deployment.yaml
- 04-sap-software-download.yaml
- 05-DB-and-SAP-installation.yaml
- Ensures Terraform is installed before execution.
Key Vault and Subscription Variable Standardization
- Replaced $(Preparation.VAULT_NAME) with $(KEYVAULT) for clarity.
- Updated $(ARM_SUBSCRIPTION_ID) to $(Preparation.ARM_SUBSCRIPTION_ID) for consistency.
Ansible Installation Reinstatement
- Re-enabled and updated inline Bash script for installing ansible-core and required collections.
- Applied changes to 05-DB-and-SAP-installation.yaml and 04-sap-software-download.yaml.
Environment Cleanup
- Removed unused DEPLOYER_KEYVAULT variable from 01-deploy-control-plane.yaml.

🐞 Bug Fixes

Corrected undefined variable issues in the chrony role related to Python interpreter selection.
Improved compatibility and linting accuracy by updating Ansible and Ansible-Lint versions in GitHub Actions workflow.

📄 Miscellaneous

Updated GRUB configuration tasks for RHEL 8.x to improve reliability and ensure consistent boot behavior.

v3.16.0.1 by @devanshjainms in https://github.com/Azure/sap-automation/pull/807

Full Changelog: https://github.com/Azure/sap-automation/compare/v3.16.0.0...v3.16.0.1

- HCL
Published by devanshjainms 8 months ago

sap-automation - v3.16.0.0

Release v3.16.0.0

Overview

This release delivers substantial enhancements to NVMe support for Azure VMs, particularly on RHEL and SUSE platforms. It introduces improved Terraform automation, refined Azure Key Vault integration, and more robust deployment scripting. The update also includes critical fixes, improved error handling, and better metadata extraction. Notably, this release incorporates support for STONITH SBD fencing in RHEL clusters, expanded OS compatibility, and automation improvements for disk preparation and validation.

🚀 New Features

NVMe Support Enhancements

Enhanced GRUB configuration and NVMe timeout handling.
Streamlined preflight checks with improved debug output.
Improved detection of NVMe modules and reboot requirements across RHEL and SUSE.

STONITH SBD Configuration for RHEL

Integrated logic to support SBD-based fencing in RHEL clusters using Azure shared disks.
Addressed service dependencies (iscsi, iscsid, sbd) and ensured proper enablement on boot.
Improved cluster initialization logic and clarified configuration steps for zonal deployments using ZRS disks.
Documented fallback strategies and DR region reconfiguration steps for SBD devices.
Updated test automation logic to reflect correct node names and handle skipped test cases gracefully.

Other enhancements

Azure Metadata Retrieval
- Added tasks to extract Subscription ID, Resource Group Name, and VM Name from Azure metadata.
Terraform Enhancements
- Exported TF_VAR_subscription_id for improved configuration.
- Introduced new configurations for M832 and M896 VM series.
SDAFWebApp Initialization
- Bootstrapped with .NET 8.0 and essential package references.

🔧 Improvements

OS Compatibility and Automation

Developed cross-OS scripts to automate NVMe preparation, including initramfs updates, FS tab validation, and GRUB parameter checks.
Enhanced udev rules to support namespace ID (NSID) detection and LUN mapping, resolving compatibility issues on older OS versions like SUSE 15 SP3 and RHEL 8.8.
Introduced fallback logic to extract NSID from ID_PATH or /sys/class/block/<device>/nsid when udevadm fails to return expected values.

Deployment Scripts

Improved Azure login handling and environment variable management.
Enhanced error reporting and debug logging across scripts.
Streamlined control plane cleanup and variable group handling.

Key Vault Integration

Refined retrieval logic using Azure Graph API.
Improved secret existence checks and error handling.

Terraform State Management

Refactored state resource ID retrieval.
Simplified output definitions and variable assignments.

Logging and Debugging

Replaced echo statements with structured banners.
Improved traceability in secret retrieval and deployment stages.

🐞 Bug Fixes

Corrected key vault existence checks using user ARM ID.
Fixed output variable naming inconsistencies (random_identifier → random_id).
Resolved GRUB configuration and NVMe timeout logic issues.
Addressed Terraform apply failure handling.
Corrected module names and region paths in SDAFUtilities.
Fixed string comparison syntax and removed redundant flags.

🛠 Infrastructure & Configuration

Provider Versions
- Updated azurerm to 4.35.0 and azapi to 2.5.0.
Variable Management
- Improved handling of unset/null variables.
- Streamlined variable group assignments and cleanup.
Script Enhancements
- Added support for MSI and ARM variables.
- Improved script permissions and execution flow.
Repository Maintenance
- Removed obsolete scripts and variables.

📄 Miscellaneous

Added documentation for RHEL 8.6 ambiguity.
Refactored modules for improved readability and maintainability.
Upgraded GitHub Actions and Azure SDK packages via Dependabot.

- HCL
Published by hdamecharla 9 months ago

sap-automation - v3.15.0.0

Release Notes – Version v3.15.0.0

Overview

This release introduces enhancements across automation pipelines, SAP installation playbooks, and platform compatibility. It includes security updates, improved error handling, support for new OS versions, and refined configuration logic.

Key Enhancements

🔐 Security & Compliance

Updated step-security/harden-runner to v2.12.1 across all GitHub workflows.
Upgraded codeql-action to v3.29.0 for improved static analysis.
Enforced CRL validation (SAPINST_ENFORCE_CRL=true) across SAP installation playbooks for enhanced certificate handling (SAP Note: 3207613).

⚙️ SAP Installation Improvements

Refactored error handling in SAP installation playbooks to use select('search', 'ERROR') for cleaner diagnostics.
Added support for web_sidadm_uid in Web Dispatcher templates.
Improved conditional logic for Oracle observer and shared home tasks.
Enhanced mount logic for AFS and ANF with better validation and fallback handling.

📦 Dependency Updates

Updated multiple Azure SDK packages and Microsoft Identity libraries to latest stable versions.
Upgraded Python setup and dependency review actions in CI workflows.

🧪 Testing & Validation

Introduced cibadmin cluster readiness check for Pacemaker on SUSE.
Improved SAPHanaSR hook deployment and validation for scale-out clusters on RHEL.

🖥️ Platform & OS Support

Added support for:
- Configurations based on RedHat 9.4.
- RedHat 8.10 in cluster configuration.
- SUSE SLES_SAP 15.6 in SAPHanaSR and pacemaker roles.

🧰 Tooling & Automation

Added TerraformInstaller@1 to pipelines for dynamic Terraform provisioning.
Refined Azure DevOps pipeline environment variables for consistency and clarity.
Improved GitHub Actions for Ansible linting and Trivy scanning.

Bug Fixes

Corrected logic for observer tier detection in Oracle deployments.
Fixed mountpoint handling in /etc/fstab for HANA scale-out configurations.
Addressed inconsistencies in SAPINST command formatting across roles.

Breaking Changes

CRL enforcement is now enabled by default. For air-gapped environments, this may require manual override.
Deprecated legacy error line extraction logic in favor of select('search', 'ERROR').

Upgrade Notes

Ensure all pipeline variables are updated to reflect new environment variable names.
- Upgrade steps for Azure DevOps, rename the "CP" and "WL" prefixes for all variables in the variable groups. CPARMSUSCRIPTIONID -> ARMSUSCRIPTION_ID
Review CRL enforcement implications for your deployment environment.
Validate compatibility with new OS versions if applicable.

- HCL
Published by hdamecharla 10 months ago

sap-automation - v3.14.1.0

What's Changed

This release includes several changes across multiple files to improve the functionality and configuration of the deployment scripts. The key changes include updates to Ansible playbooks and templates for SAP and Oracle installations, as well as minor adjustments to YAML configuration files.

Summary of Changes

Ensure Terraform commands in shell scripts return the correct exit code
An option has been added to each Terraform module to allow enabling Encryption at Host via encryption_at_host_enabled variable.
Corrected directory ownership assignment for /hana/* directories from non-existent {{ sidadm }} to the proper {{ hdbadm }} user ID
Preserved ARM_SUBSCRIPTION_ID throughout authentication processes when using Managed Service Identity (MSI)
Fixed remediation logic for storage accounts to support provider upgrades with data_plane_available setting
Refactored ReplaceResourceInStateFile function to accept direct input rather than relying on external context
Enhanced robustness for workload zones by improving resource property handling for zones not recently redeployed
Resolved infrastructure deployment failures in SYBASE standalone deployments when enable_app_tier_deployment is set to false
Fixed circular mount issues of /sapmnt in standalone deployments using NFS_provider = NONE with supported_tiers for SCS and SYBASE

Acknowledgements

@pkrcm, @SteffenBoThomsen

Full Changelog: https://github.com/Azure/sap-automation/compare/v3.14.0.0...v3.14.1.0

- HCL
Published by hdamecharla about 1 year ago

sap-automation - v3.14.0.0

Problem

This pull request enhances infrastructure configuration and security workflows.

High Availability Enhancements

Added HANA active/read-enabled system replication in Pacemaker clusters:
- Added second front-end to HDB load balancer with separate health probe/rule
- Configured HANA replication with logreplay_readaccess mode
- Added Pacemaker resource g_secip_
Implemented SAPHanaSR-angi resource agent integration:
- Introduced use_sles_saphanasr_angi (terraform) and use_hanasr_angi (ansible) variables for SAPHanaSR-angi resource agent configuration
Added DB2 cluster properties for RHEL8:
- Implemented resource priority
- Set fence delay of 15s
Changed enqueue replication configuration:
- Updated keepalive parameter to uppercase
- Set priority for primary IPaddr2 and azure-lb resources with priority-fencing-delay
- Reset failcounts using crm resource clear post-configuration
bugfix: Fixed sapadm user creation

Infrastructure Management

Enhanced network configuration:
- Added *_flow_timeout_in_minutes for management/workload zone VNETs (default: null)
- Added network_enable_route_propagation for subnet route tables (default: true)
- Renamed agent_network_id to additional_network_id
- Added IPTags support for public IP addresses
Improved storage account management:
- Added data_plane_available for access control
- Updated scripts to remove/reimport state file resources for schema updates
Added resource naming flexibility:
- Introduced custom_random_id for resource name suffixes
- Removed DEPLOYERRANDOMID and LIBRARYRANDOMID dependencies

DevOps and Security

Streamlined deployment pipelines:
- Replaced inline bash scripts with external files
- Added helper functions and FORCE_RESET parameter
- Enhanced debug/warning logging
- Updated environment variable names
Updated Ansible configuration:
- Standardized ANSIBLECOLLECTIONSPATH
- Improved retry logic and delays
- Enhanced iSCSI configuration tasks
- Updated Key Vault to use lowercase vault names
- Removed VC++ 2013 component
Added security workflows:
- dependabot.yml for Actions, NuGet, npm updates
- codeql.yml for C#, JavaScript, Python vulnerability detection
- dependency-review.yml for PR scanning
- ossf-scorecard.yml with harden-runner
- trivy.yml for vulnerability scanning
- Pre-commit hooks: gitleaks, shellcheck, eslint, pylint

- HCL
Published by hdamecharla over 1 year ago

sap-automation - v3.13.0.1

v3.13.0.1

New Features:

Added prevent_deletion_if_contains_resources property to LandscapeModel and SystemModel to prevent deletion of resource groups containing resources
Updated JSON and template files to include the new prevent_deletion_if_contains_resources property

Dependency Updates:

Updated several package references in Webapp/SDAF/SDAFWebApp.csproj to their latest versions for improved performance and security.

Ansible Roles Modifications:

Modified Ansible roles to adopt Oracle Linux and standardized version patterns (deploy/ansible/roles-os/1.1-swap/defaults/main.yaml).
Adjusted ZYPP_LOCK_TIMEOUT from 20 to 60 seconds in multiple Ansible tasks to prevent timeout issues
Added tasks to ensure the Azure scheduled events resource is started and display its status (deploy/ansible/roles-os/1.17-generic-pacemaker/tasks/1.17.2.0-cluster-Suse.yml).
Enhanced SCS/ERS validation tasks to set Python version and move cluster groups if necessary (deploy/ansible/roles-sap/5.6-scsers-pacemaker/tasks/5.6.6-validate.yml).

- HCL
Published by hdamecharla over 1 year ago

sap-automation - v3.13.0.0

v3.13.0.0

This release includes several updates to the codebase, primarily focusing on enhancing validation logic, adding new configuration parameters, and updating dependencies. The most important changes include improvements to validation attributes, the addition of new parameters for storage account configuration, and updates to dependency versions.

New Features

Support for HANA Scale-out architectures with HANA shared on Azure NetApp files or Azure Files

Support for new Mv3 SKUs for SAP HANA on Azure Virtual Machines

Features updates

Ability to control the SMB file share creation PR 648
Ability to configure the control plane storage accounts without SharedAccess Keys PR 639
Add Zypper timeouts PR 647
Mount permissions updates PR 638
Add the ability to define Private Link DNS zones in a separate resource group PR 645

Terraform Enhancements

Locking the azurerm and azuread provider versions to ensure that provider updates will not impact the release

azurerm provider version: 4.4.0
azuread provider version: 3.0.2

Validation Enhancements

Webapp/SDAF/Models/CustomValidators.cs: Enhanced the PrivateEndpointIdValidator and StorageAccountIdValidator to handle arrays and added null checks.

New Configuration Parameters

Webapp/SDAF/Models/LandscapeModel.cs and Webapp/SDAF/Models/SystemModel.cs: Added new boolean parameters related to shared access keys and file share creation.
Webapp/SDAF/ParameterDetails/LandscapeDetails.json, Webapp/SDAF/ParameterDetails/SystemDetails.json, Webapp/SDAF/ParameterDetails/LandscapeTemplate.txt, and Webapp/SDAF/ParameterDetails/SystemTemplate.txt: Updated to include the new parameters for shared access keys and file shares.

Dependency Updates

Webapp/SDAF/SDAFWebApp.csproj: Updated multiple Azure and Microsoft package versions to the latest releases.

Workflow and Configuration Updates

.github/workflows/github-actions-ansible-lint.yml: Updated actions to specific commit SHAs for better stability.
.github/workflows/ossf-scorecard.yml: Added a new workflow for Scorecard supply-chain security analysis.
deploy/ansible/ansible.cfg: Changed the log path and allowed world-readable temporary files.

- HCL
Published by hdamecharla over 1 year ago

sap-automation - v3.12.0.0

What's Changed

V3.12.0.0 by @devanshjainms in https://github.com/Azure/sap-automation/pull/624
Hotfixes before release by @KimForss in https://github.com/Azure/sap-automation/pull/626
Bring in the missing SAP media change by @KimForss in https://github.com/Azure/sap-automation/pull/627
Hotfix2 - ACSS changes by @KimForss in https://github.com/Azure/sap-automation/pull/628

Full Changelog: https://github.com/Azure/sap-automation/compare/v3.11.0.3...v3.12.0.0

- HCL
Published by hdamecharla over 1 year ago

sap-automation - v3.11.0.3

What's Changed

Pacemaker Configuration Updates: Incorporate updates from the latest documentation, including parameters like priority_fencing_delay and pcmk_delay_max etc
Saptune Configuration: Add new Ansible tasks to utilize saptune for configuring SUSE machines
NAT Gateway Provisioning: Update the workload zone Terraform files to enable the provisioning of a NAT gateway
SAP on Azure Quality Check integration with SDAF by @SteffenBoThomsen
Improvement- Custom LVM striping support by @SteffenBoThomsen
Bugfix - Terraform module fixes and regex fixes by @daradicscsaba
Improvement- Set HDB schema name for ABAP and JAVA systems by @jesperseverinsen
Fixed AMS provider creation issues
Refactor YAML files for Az DevOps pipeline execution to improve code organization and readability
Az DevOps project setup script fixes to support both MSI and SPN based deployments
Fixes to handle certain scenarios where public cloud SDKs would not be installed

Full Changelog: https://github.com/Azure/sap-automation/compare/v3.11.0.2...v3.11.0.3

- HCL
Published by devanshjainms almost 2 years ago

sap-automation - v3.11.0.2

What's Changed

Bugfix - constraint Azure scheduled events agent installation by @hjstam in https://github.com/Azure/sap-automation/pull/576
Bump Azure.Identity from 1.10.4 to 1.11.0 in /Webapp/SDAF by @dependabot in https://github.com/Azure/sap-automation/pull/580
3.11.0.2 Release by @KimForss in https://github.com/Azure/sap-automation/pull/582
- Improvements to HANA Scaleout with Standby on ANF
- Passwordless deployments using Managed Identities
- DevOps project SetUp improvements

Full Changelog: https://github.com/Azure/sap-automation/compare/v3.11.0.1...v3.11.0.2

- HCL
Published by hdamecharla almost 2 years ago

sap-automation - v3.11.0.1

This hotfix resolves the following.

Problem

Fixing an issue which occurs when checking for the SAP Library storage account in a multi subscription scenario.

Solution

Ensure that the check is done against the correct subscription.

What's Changed

Hotfix for 3.11 by @KimForss in https://github.com/Azure/sap-automation/pull/564

Full Changelog: https://github.com/Azure/sap-automation/compare/v3.11.0.0...v3.11.0.1

- HCL
Published by hdamecharla about 2 years ago

sap-automation - v3.11.0.0

Release Notes for SAP Deployment Automation Framework v3.11.0.0

This release adds support for: - HANA Scale out with worker/stand by node using shared ANF - Azure Monitor for SAP support - Using MSI for the deployer - Pre-validation script to validate the environment before SDAF deployment - URL validation script for checking that the relevant URL's are opened - Add a post deployment playbook for providing hooks for customers - SystemD based SAP Startup framework for SLES and RHEL based deployments - Support for encrypted DB2 databases - Fix for BOM download when checksum is not present in the file. - Az DevOps setup script now supports cross-tenant deployments. - Disable basic authentication on the webapp - More granular control of DNS registrations - Support for kdump optional fencing device on RHEL deployments - Configure SBD devices for SLES cluster during cluster init - Update load balancer properties to use probe_threshold = 2 - General stability and functionality improvements for pipelines and scripts.

What's Changed

Release 3.11 PR by @KimForss in https://github.com/Azure/sap-automation/pull/561

Testing

All solutions and improvements have been tested using the SDAF deployment pipelines and the command line to ensure they work effectively.

Feedback

We appreciate your feedback and are committed to continuously enhancing your experience with our product. Please feel free to reach out if you have any questions or require further assistance via issues or discussions.

Additional Notes

For troubleshooting issues with the framework, please refer to the troubleshooting document.

Full Changelog: https://github.com/Azure/sap-automation/compare/v3.10.1.0...v3.11.0.0

- HCL
Published by hdamecharla about 2 years ago

sap-automation - Release v3.10.1.0

Release v3.10.1.0

Notes

Problem

The introduction of new more descriptive variables for the Ansible configuration caused a few of the pipelines to fail.

No support for a Linux utility VM in the workload zone deployment.

No support for systemd based SAP deployments which are default for the newer OS and Kernel

No support for configuring Ansible 2.15 on the deployer.

General improvements for the deployment of infrastructure wrapper scripts and pipelines

Solution

Refactor the code to add backward compatibility functionality that will allow for the successful execution of the pipelines.

Add support for Linux utility VM in the workload zone deployment.

Add support for systemd based SAP deployments which are default for the newer OS and Kernel

Add support for configuring Ansible 2.15 on the deployer.

General improvements for the deployment of infrastructure wrapper scripts and pipelines

Testing

All solutions and improvements have been tested using the SDAF deployment pipelines and the command line to ensure they work effectively.

Feedback

We appreciate your feedback and are committed to continuously enhancing your experience with our product. Please feel free to reach out if you have any questions or require further assistance via issues or discussions.

Additional Notes

For troubleshooting issues with the framework, please refer to the troubleshooting document.

Full Changelog: https://github.com/Azure/sap-automation/compare/v3.10.0.0...v3.10.1.0

- HCL
Published by hdamecharla over 2 years ago

sap-automation - Release 3.10.0.0

Release v3.10.0.0

Notes

Support for SBD and ISCSI based stonith devices
ACSS registration playbook
Ability to provision separate PPG for Application and DB servers
Ability to restore encrypted Db2 database restores
Azure scheduled events support for RHEL
General performance and readability improvements

Testing

All solutions and improvements have been tested using the SDAF deployment pipelines and the command line to ensure they work effectively.

Feedback

We appreciate your feedback and are committed to continuously enhancing your experience with our product. Please feel free to reach out if you have any questions or require further assistance via issues or discussions.

Additional Notes

For troubleshooting issues with the framework, please refer to the troubleshooting document.

- HCL
Published by hdamecharla over 2 years ago

sap-automation - Release 3.9.3.0

Release Notes - Version 3.9.3.0

Overview

This release addresses several important issues and introduces enhancements to improve your experience with our product. It includes fixes, updates, and new features to make your workflows more efficient and secure.

Changes

1. Resource Tagging - Issue: Resource tags were not consistently applied to all resources. - Solution: We've fixed this problem to ensure that resource tags are correctly and uniformly applied, simplifying resource management.

2. Terraform Compatibility - Issue: Compatibility issues between Terraform v1.6 and older versions. - Solution: We've addressed these issues, ensuring smooth operations. - ⏰ terraform version on the deployer is upgraded to v1.6 to be aligned with the latest release. Look at the Additional Notes on upgrading the deployer.

3. IP Address Management - Issue: Complicated IP address assignment affecting Ansible integration. - Solution: We've improved the logic for gathering IP addresses by using IMDS, making it more straightforward to work with Ansible.

4. Enhanced Security - Issue: Pipeline permissions for variable groups and agent pools needed improvement. - Solution: Enhanced security by assigning proper pipeline permissions, ensuring a more secure environment.

5. Deployer Extension Behavior - Issue: Deployer extension sometimes displayed unintended configuration details in logs. - Solution: This issue is resolved, preventing configuration exposure in logs.

6. tfvars File Management - Issue: Centralized storage of tfvars files was missing for command-line deployments. - Solution: We now copy tfvars files into the Terraform state storage account, providing better control and organization.

7. Code Readability Enhancements - Issue: General deployment and code readability needed improvement for both Ansible and Terraform. - Solution: We've made various code readability enhancements, streamlining deployment and management processes.

Testing

All solutions and improvements have been tested using the SDAF deployment pipelines and the command line to ensure they work effectively.

Additional Notes

If you encounter difficulties upgrading the control plane VM, we recommend manually removing the configure_deployer extension from the VM and then redeploy.

Feedback

We appreciate your feedback and are committed to continuously enhancing your experience with our product.

Please feel free to reach out if you have any questions or require further assistance via issues or discussions.

- HCL
Published by hdamecharla over 2 years ago

sap-automation - Release 3.9.2.0

Overview

This hotfix release focuses on enhancements, bug fixes, and general stability improvements for SAP installation.

Problems Addressed

Improvements to dynamic BOM processes to accommodate future code changes.
Format of some of the terraform modules to enhance readability.
Refactor of some of the scripts to improve stability.

Testing

All changes have been tested using the SDAF deployment pipelines.

- HCL
Published by hdamecharla over 2 years ago

sap-automation - Release 3.9.0.0

Overview

This release focuses on enhancements, bug fixes, and general stability improvements for SAP installation.

Problems Addressed

Lack of support for simple mount for SLES deployments.
Absence of support for susChkSrv for SLES HANA deployments. Note: susChkSrv extends the functionality of the main SAPHanaSR HA provider by executing a configurable action when a SAP HANA service is not running on a node.
Identified issues during runs:
- When HANA database runs on ANF volumes, volumes are added to be managed by the pacemaker cluster.
- Default values for "resource-stickiness" and "migration-threshold" are not set on the HANA cluster.
- The timeout value of monitor operation for filesystem and ASCS/ERS resources differs from documentation.
- ASCS/ERS profile changes are sometimes skipped.
Other general enhancements.

Solutions Implemented

Added new tasks under deploy/ansible/roles-sap/5.6-scsers-pacemaker to support simple mount for SLES deployments.
Updated 5.5.3-SAPHanaSR under deploy/ansible/roles-sap/5.5-hanadb-pacemaker to support susChkSrv for SLES HANA deployments.
Updated deploy/ansible/roles-sap/5.6-scsers-pacemaker to support the following:
- Added support for resource-stickiness and migration-threshold for HANA cluster.
- Added support for timeout value of monitor operation for filesystem and ASCS/ERS resources.
- Added support for ASCS/ERS profile changes.
Updated deploy/ansible/roles-sap/5.5-hanadb-pacemaker to support the following:
- Added support for resource-stickiness and migration-threshold for HANA cluster.
- Added ANF volumes to pacemaker cluster.
Various files have been updated to support general stability improvements.

Testing

All changes have been tested using the SDAF deployment pipelines.

- HCL
Published by hdamecharla over 2 years ago

sap-automation - Release 3.8.3.5

HotFix

When ansible code failed during the PAS installation with message server or database offline, then error message doesn't have the proper information on the error. With this code change we will be getting below error messages

- HCL
Published by hdamecharla over 2 years ago

sap-automation - Release 3.8.3.5

HotFix

When ansible code failed during the PAS installation with message server or database offline, then error message doesn't have the proper information on the error. With this code change we will be getting better error messages.

- HCL
Published by hdamecharla over 2 years ago

sap-automation - Release 3.8.3.4

HotFix

Provides graceful failover with exit code INSTALL:0023, when dynamic BOM download fails

- HCL
Published by hdamecharla over 2 years ago

sap-automation - Release 3.8.3.3

HotFix

Resolves bug #470 - unnecessary characters in Japan region codes

- HCL
Published by hdamecharla over 2 years ago

sap-automation - Release 3.8.3.2

HotFix

Removed duplicate "dotnet" argument in dotnet-sdk alias command for Ubuntu and SLES.
logical volumes gets created in wrong order. usrsapinstall lv gets created first of all the lvs for vgsap due to which usrsapinstall gets all the 100% free space from vgsap

- HCL
Published by hdamecharla almost 3 years ago

sap-automation - Release 3.8.3

Release 3.8.3

Enhanced Features

Added support for the Flexible Orchestration of Virtual Machine Scale Set which enhances virtual machine scaling capabilities.
Introduced support for SAP HANA Azure Virtual Machine Premium SSD v2 storage configurations to improve data storage and access performance.

Updates and Improvements

Implemented new patches and parameter adjustments to our Oracle services, enhancing their overall performance and security.
Harmonized secondary IP configuration across all distributions, resulting in a more streamlined network setup process.
Increased the resilience of the Control Plane pipeline to improve the stability and reliability of system operations.
ACSS dev team has upgraded the error code system, providing more accurate and useful diagnostics for troubleshooting.

- HCL
Published by hdamecharla almost 3 years ago

sap-automation - Release 3.8.2

New Supported scenarios

Support for RedHat 9

General updates

Add a fix for the software download pipeline.

What's Changed

3.8.2 release by @KimForss in https://github.com/Azure/sap-automation/pull/452

Full Changelog: https://github.com/Azure/sap-automation/compare/v3.8.1.0...v3.8.2.0

- HCL
Published by hdamecharla almost 3 years ago

sap-automation - Release 3.8.1

New Supported scenarios

Application Volume Groups

Support for Azure NetApp Volume Groups

General updates

Ability to control if the DevOps agent logs on using managed identity or service principal Enhanced upgrade support Using Powershell DSC for User role assignement instead of native Ansible modules

- HCL
Published by KimForss almost 3 years ago

sap-automation - SDAF Release 3.8

New Supported scenarios

Sybase

Now includes support for Sybase deployments.

Windows HA

Allows you to deploy SAP workloads on a Windows Server Failover Cluster (WSFC) for high availability.

Requirements

Existing Active Directory domain
Existing SAP user identities (SIDadm etc) created in Active Directory and saved in workload key vault.
When creating identities in Keyvault, we do not need to prefix the domain name to the account, just SAM account name will do.
AD User with domain join permissions, along with "Read all properties" and "Create Computer objects" on the OU where the cluster objects will be created.

For more information see Windows deployments

General updates

Stability and user experience improvements to make the automation process smoother and more reliable. Improved DNS support, support for external Private DNS Zones and Control Plane hosted Private DNS Zones

DevOps updates

The latest code includes updates to DevOps functionality.

Ansible

Now supports configuration of Windows HA deployments using Ansible. Includes support for deploying Sybase databases using Ansible on Linux.

Terraform updates

The latest code includes various miscellaneous updates to the Terraform code, such as bug fixes and performance improvements.

- HCL
Published by KimForss almost 3 years ago

sap-automation - 3.7 Release

Release Notes 3.7

New Supported scenarios

Oracle Automatic Storage Management (ASM) support
Windows standalone support

Windows support

Requirements

Existing Active Directory domain
Existing SAP user identities (SIDadm etc) created in Active Directory and saved in workload key vault.
AD User with domain join permissions

See more info see Windows deployments

General updates

Stability and user experience improvements.

DevOps updates

Pipeline execution using managed identities.

Ansible

Oracle ASM support
Windows standalone support
Better Pacemaker HA validation
Support for deployments of SAP Applications using JAVA
Additional configuration for HA setups (hdbuserstore)
Dynamic BoM support

Terraform updates

Minor updates

### Miscallaneous updates - DNS registration for secondary DNS addresses - Ability to provide additional parameters to the Ansible configuration files

What's Changed

Update SWPM10SP36winlatest to current SAP release 3 by @shekharsorot in https://github.com/Azure/sap-automation/pull/394
Update vm-webdisp.tf by @KimForss in https://github.com/Azure/sap-automation/pull/396
Use bomprocessingbecome variable and fix microsoftsuppliedbom_archive path variable by @hjstam in https://github.com/Azure/sap-automation/pull/401
Add try around module.commoninfrastructure.adminsubnet variable by @hjstam in https://github.com/Azure/sap-automation/pull/405
SAP software provisioning manager (sapinst) should be run with umask 022 by @hjstam in https://github.com/Azure/sap-automation/pull/402
Update S4HANA2021FP01_v0001ms BOM / BOM validator by @hjstam in https://github.com/Azure/sap-automation/pull/411
Create PR for release v 3.7.0.0 by @hdamecharla in https://github.com/Azure/sap-automation/pull/421

Full Changelog: https://github.com/Azure/sap-automation/compare/v3.6.1.0...v3.7.0.0

- HCL
Published by KimForss about 3 years ago

sap-automation - v 3.6.1 release

The release has minor fixes - External Private DNS support, adds the correct DNS names - DB2, corrected the DBLoad j2 template to use the correct Unicode settings - S4 HANA 2021, added the correct credentials for the host agent - Web Application, zone dropdowns added for the application tier VMs - Pipelines, fallback to SPN credentials if the User Assigned Identities lack the required permissions

What's Changed

v 3.6.1. release by @KimForss in https://github.com/Azure/sap-automation/pull/377

Full Changelog: https://github.com/Azure/sap-automation/compare/v3.6.0.0...v3.6.1.0

- HCL
Published by KimForss over 3 years ago

sap-automation - 3.6 Release

Release Notes 3.6

SDAF Configuration Web Application

The Web Application will facilitate the configuration and deployment activities from a Web based UX. - Supports configuration and deployment of workload zones and systems - Supports SAP installation

New Supported scenarios

DB2, standalone and HA using Pacemaker
RedHat 8.6

DevOps updates

This release allows the customers to choose if they consume the Terraform and Ansible code directly from Github or from local repositories. - Automated setup of DevOps projects - Repositories - Pipelines - Service Principals - Service Connections

Repository rationalization

With this release we are splitting the repository structure to three discrete repositories - Workspaces for Customer specific configuration files (tfvars, ansible hosts files) - Code (Pipelines, Terraform, Ansible, Web Application) - Samples (Terraform, Bill of Material files)

Ansible

DB2 support
Ansible core

Terraform updates

Minor updates

### Miscallaneous updates - Support for using managed identities for fencing on Pacemaker - Networking (Private Endpoints, Service Endpoints) - Storage account and Key vault networking updates

- HCL
Published by KimForss over 3 years ago

sap-automation - Release v3.4.1.0

This is a minor incremental release

Updates

100% Ansible Lint coverage for all the Ansible roles/tasks.

Terraform updates - better handling of KeyVault deletions (better purge control support)

Cluster updates - Removing the SSH key exchanges on Red Hat 8

Miscellaneous updates - disabling SELinux on HANA nodes

- HCL
Published by KimForss almost 4 years ago

sap-automation - Release v3.4.0.0

This release adds support for:

Oracle deployments

You can deploy Oracle systems using the following configurations:

Standalone
Highly Available using Oracle Data Guard
Shared Home installations (Multi-SID)

For more information see: Oracle in SDAF

Azure NetApp files

You can use Azure NetApp files for:

HANA data, log and shared volumes
Using ANF for sapmnt
Using ANF for installation media
Using ANF for SAP transport volume
mounting /usr/sap from Azure NetApp files
Support for both green field and brown field deployments

For more information see: Azure NetApp files

Azure files NFS

Using AFS for sapmnt
Using AFS for installation media
Using AFS for SAP transport volume
Private endpoint support
Support for both green field and brown field deployments

For more information see: Azure files NFS

Azure DevOps

The deployer Virtual Machines can now be configured as self hosted agents automatically.
You can deploy multiple deployers
Improved error messages in pipelines

SAP virtual hostname support

You can deploy SAP systems using virtual hostnames.

For more information see: Configure the SAP System

Bill of Materials

SAP S4/HANA 2021
SAP S4/HANA 2020
HANA SPS Revision 61
HANA SPS Revision 59
SAP NetWeaver for Oracle 19
Oracle 19

Miscellaneous

Automatic sas-token creation/renewal
Support for RBAC on workload zone key vault
Sizing configurations for supported E series virtual machines
Updated Bill of Materials files
Sample updates (formatting)
Code improvements
- Terraform
- Ansible

- HCL
Published by KimForss almost 4 years ago

sap-automation - v3.3.0.0 release

This release adds support for

Azure DevOps Services.
Azure DevOps Pipelines
Azure Files for AFS

This release adds supports for Azure DevOps Pipelines and Azure DevOps Repos.

For more info on how to use them see Configuring Azure DevOps and DevOps tutorial The pipeline definitions are available in the /deploy/pipelines folder.

Azure Files for NFS

This release will support using Azure Files for NFS as storage for SAP shared files. For more info see Workload zone AFS configuration and SAP System AFS configuration

Other changes

Miscellaneous feature enhancements:

Updated Bill Of Material files
Terraform updates:
- bug fixes
- code improvements
Ansible playbook and task updates:
- Improved logging
- Rescue actions for SAP High Availability installation
- Sequence updates for SAP High Availability installation
- Changes to BOM processing and storage

- HCL
Published by KimForss about 4 years ago

sap-automation - v3.1.0.0 release

New Features

Support for Azure Files NFS for SAP Shared Files.

Samples

Updated samples that leverage AFS

Workload Zone using AFS

QA-WEEU-SAP05-INFRASTRUCTURE

SAP system using AFS

QA-WEEU-SAP05-Q00

Deployment scripts

Miscallaneous fixes

- HCL
Published by KimForss about 4 years ago

sap-automation - v3.0.0.0 release

This release enables the full deployment of SAP HANA both as standalone or highly available configuration.

What's Changed

Terraform template updates SAP BoM updates Ansible playbook updates Deployment script updates.

- HCL
Published by KimForss over 4 years ago

Recent Releases of sap-automation

sap-automation - v3.16.0.2

📦 Release Notes v3.16.0.2 – Managed DevOps & Install Enhancements

Table of Contents

Overview

🆕 New Features

🔧 Improvements

Pacemaker and SBD Configuration

Error Handling and Logging

SAP and Package Management

Deployment Pipeline Enhancements

🐞 Bug Fixes

📄 Miscellaneous

sap-automation - v3.16.0.1

📦 Release Notes v3.16.0.1 – Managed DevOps & Install Enhancements

Table of Contents

Overview

🆕 New Features

🔧 Improvements

Pacemaker and SBD Configuration

Error Handling and Logging

SAP and Package Management

Deployment Pipeline Enhancements

🐞 Bug Fixes

📄 Miscellaneous

sap-automation - v3.16.0.0

Release v3.16.0.0

Overview

🚀 New Features

NVMe Support Enhancements

STONITH SBD Configuration for RHEL

Other enhancements

🔧 Improvements

OS Compatibility and Automation

Deployment Scripts

Key Vault Integration

Terraform State Management

Logging and Debugging

🐞 Bug Fixes

🛠 Infrastructure & Configuration

📄 Miscellaneous

sap-automation - v3.15.0.0

Release Notes – Version v3.15.0.0

Overview

Key Enhancements

🔐 Security & Compliance

⚙️ SAP Installation Improvements

📦 Dependency Updates

🧪 Testing & Validation

🖥️ Platform & OS Support

🧰 Tooling & Automation

Bug Fixes

Breaking Changes

Upgrade Notes

sap-automation - v3.14.1.0

What's Changed

Summary of Changes

Acknowledgements

sap-automation - v3.14.0.0

Problem

High Availability Enhancements

Infrastructure Management

DevOps and Security

sap-automation - v3.13.0.1

v3.13.0.1

New Features:

Dependency Updates:

Ansible Roles Modifications:

sap-automation - v3.13.0.0

v3.13.0.0

New Features

Features updates

Terraform Enhancements

Validation Enhancements

New Configuration Parameters

Dependency Updates

Workflow and Configuration Updates

sap-automation - v3.12.0.0

What's Changed

sap-automation - v3.11.0.3