Release v3.17.0.0 (#905)

* Fix role assignment conditions and update virtual network ID referenc… (#826)

* Refactor exit handling in deploy scripts to use return codes for better error reporting

* Don't exit before committing changes

* Add error handling for saving DEPLOYER_KEYVAULT in variable group

* Remove unnecessary variable initialization for install_deployer_return_value in install_deployer.sh

* Add Azure account information display on Terraform apply failure

* Add Azure user information display when already logged in

* Enable Azure login visibility in control plane preparation stage

* Update agent PAT variable to use PAT instead of AccessToken

* Update agent PAT variable to use AccessToken instead of PAT

* Refactor count condition for vault_agent DNS zone link to improve clarity and reliability

* Refactor count condition for blob_agent DNS zone link to enhance readability and maintainability

* Refactor count condition for vnet_mgmt_blob-agent DNS zone link to improve clarity and reliability

* Refactor installer script calls to improve error handling and clarity

* Refactor deployer environment file handling for improved clarity and error checking

* Refactor deployer environment file path handling for improved clarity

* Refactor workload environment file handling to differentiate between v1 and v2 scripts

* Refactor deployer environment file name construction for improved clarity

* Refactor deployer environment file handling to support v1 and v2 scripts with improved error checking

* Refactor workload zone script to extract deployer region from environment variable for improved clarity

* Refactor control plane name construction to use DEPLOYER_ENVIRONMENT for improved accuracy

* Refactor variable group construction to use DEPLOYER_ENVIRONMENT for improved consistency

* Refactor control plane name and variable group construction to use DEPLOYER_ENVIRONMENT for improved consistency

* Set visibleAzLogin to false in control plane preparation script for enhanced security

* Update VARIABLE_GROUP assignment to use DEPLOYER_ENVIRONMENT for consistency

* Refactor NFS mount options and conditions for improved clarity and consistency

* Remove unused approve variable and streamline return value assignment in install_deployer script

* Remove unnecessary deployer plan name argument from terraform apply command

* Refactor NSG resource count conditions for improved clarity and consistency

* Refactor key vault access policy count conditions for improved clarity and consistency

* Refactor network security group output values to use variable conditions for improved flexibility

* Refactor subnet ID handling to improve clarity and prevent errors in local variable definitions

* Refactor subnet ID handling to improve clarity and consistency in local variable definitions

* Refactor storage subnet ID handling to improve clarity and prevent errors in variable conditions

* Refactor role assignment dependencies in key vault to improve clarity and reduce redundancy

* Refactor key vault secret name assignment to use variable for improved flexibility

* Refactor key vault secret name assignment to use local variable for improved clarity

* Change the logic for ssh keys from existing key vaults

* Add a try statement to check for empty data sources

* Update deploy/terraform/terraform-units/modules/sap_system/common_infrastructure/variables_local.tf

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update deploy/terraform/terraform-units/modules/sap_system/app_tier/variables_local.tf

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update deploy/terraform/terraform-units/modules/sap_system/app_tier/variables_local.tf

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update deploy/terraform/terraform-units/modules/sap_system/common_infrastructure/variables_local.tf

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Use try function to handle potential errors when splitting subnet IDs in local variables

* Refactor resource group handling and improve subnet ID parsing logic in Terraform configurations

* Add logging for saving DEPLOYER_KEYVAULT in variable group

* Fix application tier variable references in network interface and VM configurations

* Fix syntax error in subnet ID parsing and remove redundant deployment variable

* Update deploy/terraform/terraform-units/modules/sap_landscape/subnets.tf

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update deploy/terraform/terraform-units/modules/sap_system/app_tier/vm-app.tf

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update deploy/terraform/terraform-units/modules/sap_system/app_tier/variables_local.tf

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update deploy/terraform/terraform-units/modules/sap_system/app_tier/variables_local.tf

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update deploy/terraform/terraform-units/modules/sap_system/common_infrastructure/variables_local.tf

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update deploy/terraform/terraform-units/modules/sap_system/common_infrastructure/nsgs.tf

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update deploy/terraform/run/sap_deployer/transform.tf

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update package references in SDAFWebApp.csproj to latest versions

* chore: simplify redundant terenary operation for existence checks.

* fix: update count condition for SAP web dispatcher subnet to improve clarity

* fix: update key vault access policy condition to include permission assignment option

* fix: enhance subnet_id assignment logic to include additional fallback options

* fix: improve storage subnet output logic for better fallback handling

* fix: enhance subnet_id assignment logic to include conditional checks for landscape_tfstate keys

* fix: simplify subnet_id assignment logic for network interface based on infrastructure conditions

* fix: refine admin subnet count logic for improved clarity and consistency

* fix: simplify NSG count logic for application and web subnets for improved clarity

* fix: simplify NSG count logic for application and web subnets for improved clarity

* fix: adjust return value handling in Terraform plan execution for improved error management

* fix: correct return value handling in Terraform plan execution for accurate error reporting

* fix: add resource group name and ID to locals for improved resource management

* Add scripts for upgrading Azure DevOps variable groups and utility functions

- Created Upgrade-ControlPlaneVariableGroup.ps1 to migrate variable names in the control plane variable group.
- Created Upgrade-WorkloadZoneVariableGroup.ps1 to migrate variable names in the workload zone variable group and copy values from the control plane variable group.
- Implemented Copy-AzDevOpsVariableGroupVariable function to facilitate copying variables between Azure DevOps variable groups.
- Added Set-AdoManagedIdentityCredentials function to set managed identity credentials in Azure DevOps variable groups.
- Added Set-AdoSPNCredentials function to set service principal credentials in Azure DevOps variable groups.
- Enhanced error handling and logging throughout the scripts for better traceability.

* fix: update webapp parameter handling for improved conditional checks

* fix: enhance webapp variable handling in deployment scripts for improved logging and management

* fix: update role assignment commands to use ARM_OBJECT_ID for improved resource access management

* fix: refactor HANA Pacemaker configuration to use blockinfile for colocation constraints and improve cleanup process

* Bump actions/dependency-review-action from 4.7.1 to 4.7.3 (#828)

* Bump Microsoft.Identity.Web and Microsoft.Identity.Web.UI (#830)

* Bump aquasecurity/trivy-action from 0.31.0 to 0.33.1 (#832)

* Bump actions/setup-python from 5.6.0 to 6.0.0 (#833)

* Pipeline v1 fixes (#844)

* Ensure 03-sap-system-deployment uses  VARIABLE_GROUP_ID in getVariableFromVariableGroup calls, in a couple of places it was using VARIABLE_GROUP instead, which resulted in an int conversion error.

* Ensure that v1 pipelines allow multiple networks, which was lost in translation during the v1/v2 pipeline split.

* remove quotes from comments

* remove extra line which broke post playbook hooks

* fix: update version label to 3.16.0.3 across multiple scripts and configuration files (#834)

* fix: update version label to 3.16.0.3 across multiple scripts and configuration files

* fix: update version label to v3.16.0.3 in multiple scripts for consistency

* fix: update version label to v3.16.0.3 in New-SDAFADOProject.ps1 for consistency

---------

Co-authored-by: Kimmo Forss <kimforss@microsoft.com>

* ANF and scale out updates (#847)

* ANF and scale out updates

* Update deploy/terraform/terraform-units/modules/sap_deployer/app_service.tf

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Kimmo Forss <kimforss@microsoft.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Bump Azure.Identity from 1.15.0 to 1.16.0 (#845)

* Bump actions/checkout from 4.2.2 to 5.0.0 (#809)

* fix: add preparation tasks for SAP HANA scale-out installation (#856)

* Pass storage account name and subscription to install pipeline (#855)

* Pass the control plane subscription along the installation pipeline so it doesn't have to be parsed

* add missing end parenthesis

* Ensure oracle-postprocessing pas in supported_tiers check is valid

* ensure that the sap-automation provided installation param inifile works for oracle installations. The current solution ends up with multiple declarations of SAPINST.CD.PACKAGE.CD?, one for HANA and one for ORACLE, HANA is listed first and takes precedence. This is problematic when the default oracle installation extract the db export into {{ target_media_location }}/EXPORT and not {{ target_media_location }}/DB_EXPORT which is the case for HANA.

* Show the right state file in message.

* Scale out changes for DB install and DB HA configuration (#860)

* Refactor HANA Pacemaker Scaleout Ansible tasks and Terraform modules

- Removed unnecessary manual start tasks for HANA database in RedHat and Suse cluster preparation playbooks.
- Updated Suse cluster scaleout tasks to ensure proper configuration of resources and constraints.
- Enhanced post-provision reporting for SBD devices status and hook script verification.
- Improved Terraform module outputs to include observer shared disks and adjusted subnet configurations for high availability.
- Added observer VM data disk attachment to ensure proper disk management in the cluster setup.
- Updated inventory output files to include observer shared disks in the ASDs list.

* feat: add permission settings for /hana/shared directory in scale-out tasks

* fix: update backend pool association for SAP HANA scale-out scenario and export policy rule NetApp volume configurations
- For ANF volume `protocols_enabled` key in `export_policy_rule` block is deprecated. The key is now called `protocol`
- Adjust the loadbalancer backend pool association to account for the SAP HANA scale-out HA scenario

* fix: update export policy rule to use 'protocols_enabled' instead of 'protocol' for NetApp volumes

* fix: update disk attachment reference for observer VMs in outputs.tf

* fix: update observer shared disks output to reference azurerm_linux_virtual_machine

* fix: streamline Ansible playbooks by removing redundant lines and improving readability

* fix: remove unnecessary run_once and delegate_to from AFS mount task

* fix: update SAP SID variable in package update task and use dynamic group ID for AFS mount tasks

* lint-fix: fixing ansible-lint errors

---------

Co-authored-by: hdamecharla <hdamecharla@microsoft.com>

* Refactor output files to improve variable handling and ensure proper trimming of subnet CIDR values (#863)

* Refactor output files to improve variable handling and ensure proper trimming of subnet CIDR values

* Fix variable name in outputs.tf for consistency in disk output definitions

* Update disk output definitions to use dynamic VM names for improved compatibility across different VM types

---------

Co-authored-by: Kimmo Forss <kimforss@microsoft.com>

* Refactor Oracle ASM playbooks for improved clarity and organization; add temporary directory creation and debug messages for DB SID and Oracle version.

* fix: update file permissions to use string format for mode in Oracle ASM tasks

* Update to the hosts.j2 Ansible template  (#869)

* fix: update version comparison for cloud-netconfig-azure in Pacemaker tasks (#871)

* Bump step-security/harden-runner from 2.13.0 to 2.13.1

Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.13.0 to 2.13.1.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@ec9f2d5...f4a75cf)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.13.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump dotnet-ef from 9.0.6 to 9.0.9

---
updated-dependencies:
- dependency-name: dotnet-ef
  dependency-version: 9.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump actions/setup-python from 5.6.0 to 6.0.0 (#872)

* Bump Azure.Identity from 1.15.0 to 1.16.0 (#876)

* Enhancement: NVMe disk setup and detection logic (#879)

Enhance NVMe support for Azure VMs on RHEL and SUSE with improved udev rules and symlink verification

* Refactor disk handling and variable naming for clarity (#882)

The changes improve disk zone assignment logic when using backup disks with ZRS storage, standardize IOPS/MBPS settings, and optimize Ansible disk definitions.

- Enhanced backup disk handling with ZRS storage type detection and zone assignment logic
- Standardized disk IOPS/MBPS configuration to support both UltraSSD_LRS and PremiumV2_LRS disk types
- Improved proximity placement group logic for Windows VMs and optimized Ansible disk definitions

* Bump actions/checkout from 4.3.0 to 5.0.0 (#874)

* Bump Azure.ResourceManager.Compute from 1.11.0 to 1.12.0 (#873)

* Bump ossf/scorecard-action from 2.4.2 to 2.4.3 (#878)

* Powershell and web app uppdates (#897)

* fix: update Azure package references to latest versions

* feat: add new Red Hat and Oracle Linux images, and update Windows Server 2025 details

* feat: update workload zone and environment handling in models and views; adjust JSON parameters

* Add Get-SDAFUserAssignedIdentity function and update related scripts

- Introduced Get-SDAFUserAssignedIdentity function to retrieve user-assigned identities from Azure.
- Updated SDAFUtilities.psd1 to export the new function.
- Modified New-SDAFADOProject and New-SDAFADOWorkloadZone scripts to include ControlPlaneName and WorkloadZoneName parameters.
- Enhanced Remove-SDAFADOProject and Remove-SDAFADOWorkloadZone scripts to support ControlPlaneName and WorkloadZoneName.
- Updated variable group management to include MSI_ID for better identity management.
- Improved role assignment logic for Managed Identities in workload zone creation.

* feat: add validation for SID length, update deployment flags, and modify VM image SKU

* fix: update Managed Identity client ID retrieval and role assignment logic in New-SDAFADOWorkloadZone function

* fix: update Managed Identity client ID retrieval and role assignment logic in New-SDAFADOWorkloadZone function

* fix: improve role assignment logging for Managed Identity in New-SDAFADOWorkloadZone function

* fix: enhance role assignment logging in New-SDAFADOWorkloadZone function

* fix: update Azure.ResourceManager.Network and Azure.ResourceManager.Storage package versions, and upgrade Microsoft.Identity.Web packages

* Update deploy/scripts/pwsh/SDAFUtilities/Public/New-SDAFADOProject.ps1

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Apply suggestion from @Copilot

Applying Copilot suggestion

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* fix: update LandscapeModel to initialize workload_zone_id with an empty string and remove trailing spaces in parameter descriptions of New-SDAFADOWorkloadZone

* fix: improve formatting and consistency in LandscapeController for workload zone handling

* fix: remove redundant checks for environment and network logical name in LandscapeController

* fix: remove unused RoleAssignmentId from Get-SDAFUserAssignedIdentity function

---------

Co-authored-by: Kimmo Forss <kimforss@microsoft.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Hemanth Damecharla <71097261+hdamecharla@users.noreply.github.com>

* Add support for ASMLib v3 and for UEK7, updated Oracle installation tasks and Data guard configuration (#898)

* Add support for ASMLib v3 and for UEK7, updated tasks for Oracle installation and for Data Guard setup, NVMe updates

* Enhance Azure NVMe udev rules and LUN calculator for compatibility with older distributions, improving namespace ID handling and device identification methods.

* Enhance Azure NVMe udev rules and LUN calculator for improved compatibility with older distributions, ensuring proper namespace ID handling and device identification.

* Refactor task names for consistency in NVMe support scripts across RHEL and SUSE, improving readability and maintaining a uniform format.

* Remove Windows Disk Setup default configuration variables, streamlining the deployment process.

* Remove unused oracle_asm_sector_size variable from ansible-input-api.yaml, cleaning up configuration.

* Apply suggestion from @Copilot

Apply Copilot suggestion

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Kimmo Forss <kimforss@microsoft.com>
Co-authored-by: Hemanth Damecharla <71097261+hdamecharla@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Config updates (#899)

* Refactor Sybase sizes configuration: reorganize storage definitions and add accelerated networking for 512, 1024, and 2048 configurations

* fix: specify Python version as 3.10 in GitHub Actions workflow

* fix: update lun_start values for storage configurations in sybase_sizes.json

---------

Co-authored-by: Kimmo Forss <kimforss@microsoft.com>
Co-authored-by: hdamecharla <hdamecharla@microsoft.com>

* Misc Terraform updates, provider updates and resource definition updates (#900)

* Refactor SAP Terraform Modules for Consistency and Clarity

- Removed unnecessary package 'dos2unix' from configure_deployer.sh template.
- Added new variable 'naming_new' to variables_global.tf for additional resource naming.
- Removed dependency on key vault in vm-deployer.tf for deployer VM.
- Updated export policy rules in ANF resources to use 'protocol' instead of 'protocols_enabled'.
- Changed 'enable_rbac_authorization' to 'rbac_authorization_enabled' in key vault resource.
- Added role assignments for Key Vault Administrator and Secrets Officer with appropriate conditions.
- Updated virtual machine resources to use 'automatic_updates_enabled' instead of 'enable_automatic_updates'.
- Changed 'enable_floating_ip' to 'floating_ip_enabled' in load balancer rules across various modules.
- Updated local variables and resource references to use 'dual_network_interfaces' instead of 'dual_nics' for consistency.
- Improved handling of network interface IDs in various VM resources to reflect the new naming convention.

* Add key vault secrets configuration for Azure deployment

* Update deploy/terraform/terraform-units/modules/sap_landscape/key_vault_sap_landscape.tf

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Kimmo Forss <kimforss@microsoft.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update scripts for control plane removal and web app configuration (#902)

* Update scripts for control plane removal and web app configuration

- Bump Terraform version from 1.12.2 to 1.13.3 in multiple scripts.
- Refactor environment and location extraction logic in control plane scripts.
- Introduce new helper functions for configuration file retrieval.
- Update PowerShell utility functions for managed identity role assignments.
- Add new script for Ansible installation with specific versioning.
- Create new web app configuration scripts for v1 and v2 with detailed setup instructions.
- Ensure consistent handling of environment configuration files across scripts.
- Improve error handling and logging in various deployment scripts.

* Update deploy/scripts/installer_v2.sh

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update deploy/scripts/installer.sh

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Refactor Azure CLI commands in SDAFUtilities scripts for improved identity management and role assignment

---------

Co-authored-by: Kimmo Forss <kimforss@microsoft.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Refactor and enhance SAP deployment playbooks (#901)

* Refactor and enhance SAP deployment playbooks

- Updated task names for clarity and consistency in the 5.3 application server installation role.
- Removed unnecessary backward compatibility checks and redundant tasks in the application installation process.
- Improved error handling and logging for database load balancer checks.
- Enhanced the post-installation tasks to accommodate Oracle ASM configurations.
- Added default configuration variables for Windows disk setup, including disk mounting strategies and allocation unit sizes.
- Standardized comments and task descriptions across various roles for better readability.
- Adjusted user account definitions for Oracle to ensure accurate comments and roles.

* Remove unused SAP mounts defaults configuration file

* Enhance Oracle post-processing tasks: update DBLoad check name, add checks for zombie standby processes, and clean orphaned shared memory segments

* Refactor Oracle Data Guard playbooks: remove commented-out tasks and streamline logging configuration

* Add pause task to stabilize Data Guard configuration during finalize process

* Enhance Oracle Data Guard post-deployment tasks: add error handling for broker start and streamline verification process for secondary database configuration

* Refactor Oracle Data Guard finalize tasks: improve task organization and enhance configuration verification

* Fix Oracle Data Guard finalize task: add exit command to shell script for proper termination

* Refactor Ansible configuration: enable stdout callback for YAML output and improve callback formatting

* Refactor Oracle Data Guard finalize task: remove unnecessary exit command from shell script and standardize formatting

* Remove Windows Disk Setup default configuration file: eliminate unused YAML file for disk setup variables

* Update SDAF version to 3.17.0.0 across multiple scripts and configuration files

* Add Oracle Data Guard templates for primary and standby configurations

- Created ASM filesystem structure for primary and standby databases.
- Defined database parameters for Data Guard configuration.
- Implemented service creation and trigger for high availability.
- Configured Data Guard settings including log transport and protection modes.
- Added listener configurations for both primary and standby databases.
- Developed RMAN restore scripts for standby databases.
- Established SQLNet and TNS names configurations for database connectivity.
- Included scripts for managing redo log states on standby databases.

* Remove unnecessary blank lines in Oracle installation task YAML file

---------

Co-authored-by: Kimmo Forss <kimforss@microsoft.com>

* Refactor deployment YAML files to enhance parameter definitions and streamline variable management across control plane, workload zone, and system deployment configurations. (#903)

* Refactor deployment YAML files to enhance parameter definitions and streamline variable management across control plane, workload zone, and system deployment configurations.

* Update deploy/pipelines/05-DB-and-SAP-installation.yaml

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update deploy/pipelines/01-deploy-control-plane.yaml

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Add install script for Ansible with dependency management and version control

* Update deploy/pipelines/01-deploy-control-plane.yaml

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update deploy/pipelines/01-deploy-control-plane.yaml

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Remove unnecessary blank lines in Oracle installation task file

* Remove obsolete 05-install-observer.yaml task file for Oracle Data Guard

---------

Co-authored-by: Kimmo Forss <kimforss@microsoft.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Bump actions/checkout from 4.3.0 to 5.0.0 (#891)

* Bump github/codeql-action from 3.29.8 to 4.30.8 (#885)

* Bump actions/dependency-review-action from 4.7.1 to 4.8.1 (#886)

* Bump Azure.Identity from 1.15.0 to 1.17.0 (#883)

* Bump actions/checkout from 4.3.0 to 5.0.0

Bumps [actions/checkout](https://github.com/actions/checkout) from 4.3.0 to 5.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@08eba0b...08c6903)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Nadeen Noaman <95418928+nnoaman@users.noreply.github.com>

* Release317 validations (#904)

### **Summary of Updates**

*   **Terraform & Pipeline Fixes**
    *   Corrected indentation for Terraform installation tasks in DB and SAP installation pipelines.
    *   Fixed path references and updated playbook options for consistency.
    *   Specified version for `community.general` collection in Ansible Galaxy installation.
    *   Refactored JMESPath installation logic for clarity and conditional execution.

*   **SDAF Enhancements**
    *   Added `ControlPlaneSubscriptionId` parameter to `New-SDAFADOWorkloadZone`.
    *   Introduced Managed Identity support:
        *   Added `ManagedIdentityId` parameter (mandatory).
        *   Improved parameter handling and verbose output for debugging.
    *   Refactored parameter descriptions and output messages for clarity.

*   **Oracle Database & Data Guard Improvements**
    *   Enhanced environment variable management (`ORACLE_HOME`, `ORACLE_SID`, `ORACLE_BASE`) across playbooks.
    *   Implemented shutdown/restart procedures and improved error handling.
    *   Updated duplication and finalization tasks for better status checks.
    *   Streamlined SSFS file handling and cleanup tasks.
    *   Standardized SQL\*Plus syntax and improved verification logic.
    *   Added checks for ORA-specific errors and optimized post-deployment steps.

*   **General Refactoring**
    *   Streamlined controller constructors and improved code readability.
    *   Updated workload zone descriptions and UI elements in `LandscapeDetails.json`.
    *   Added Azure DevOps repository and pipeline links to index views.

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Kimmo Forss <kimforss@microsoft.com>
Co-authored-by: hdamecharla <hdamecharla@microsoft.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Bump github/codeql-action from 4.30.8 to 4.31.1 (#896)

* Bump github/codeql-action from 3.29.8 to 4.30.8 (#885)

* Bump actions/dependency-review-action from 4.7.1 to 4.8.1 (#886)

* Bump Azure.Identity from 1.15.0 to 1.17.0 (#883)

* Bump github/codeql-action from 4.30.8 to 4.31.1

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.30.8 to 4.31.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@f443b60...5fe9434)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.31.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Kimmo Forss <kimmo.forss@microsoft.com>

* Bump ossf/scorecard-action from 2.4.2 to 2.4.3 (#892)

* Bump github/codeql-action from 3.29.8 to 4.30.8 (#885)

* Bump actions/dependency-review-action from 4.7.1 to 4.8.1 (#886)

* Bump Azure.Identity from 1.15.0 to 1.17.0 (#883)

* Bump ossf/scorecard-action from 2.4.2 to 2.4.3

Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.4.2 to 2.4.3.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](ossf/scorecard-action@05b42c6...4eaacf0)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-version: 2.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Nadeen Noaman <95418928+nnoaman@users.noreply.github.com>

* chore: add initial changelog.md

* Enhancement: add debug mode parameter and update related logic

* Bump aquasecurity/trivy-action from 0.31.0 to 0.33.1 (#841)

Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.31.0 to 0.33.1.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](aquasecurity/trivy-action@76071ef...b6643a2)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-version: 0.33.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump step-security/harden-runner from 2.13.0 to 2.13.1 (#890)

* Bump github/codeql-action from 3.29.8 to 4.30.8 (#885)

* Bump actions/dependency-review-action from 4.7.1 to 4.8.1 (#886)

* Bump Azure.Identity from 1.15.0 to 1.17.0 (#883)

* Bump step-security/harden-runner from 2.13.0 to 2.13.1

Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.13.0 to 2.13.1.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@ec9f2d5...f4a75cf)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.13.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Kimmo Forss <kimmo.forss@microsoft.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Devansh Jain <86314060+devanshjainms@users.noreply.github.com>
Co-authored-by: Kimmo Forss <kimforss@microsoft.com>
Co-authored-by: Kimmo Forss <kimmo.forss@microsoft.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: hdamecharla <hdamecharla@microsoft.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Steffen Bo Thomsen <steffen.bo.thomsen@lego.com>
Co-authored-by: Hemanth Damecharla <71097261+hdamecharla@users.noreply.github.com>

Author: 8 people

.github/workflows/codeql.yml

@@ -41,16 +41,16 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
+        uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
         with:
           egress-policy: audit
 
       - name: Checkout repository
-        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v4.30.8
+        uses: github/codeql-action/init@5fe9434cd24fe243e33e7f3305f8a5b519b70280 # v4.31.1
         with:
           languages: ${{ matrix.language }}
           # If you wish to specify custom queries, you can do so here or in a config file.
@@ -60,7 +60,7 @@ jobs:
       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v4.30.8
+        uses: github/codeql-action/autobuild@5fe9434cd24fe243e33e7f3305f8a5b519b70280 # v4.31.1
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -73,6 +73,6 @@ jobs:
       #   ./location_of_script_within_repo/buildscript.sh
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v4.30.8
+        uses: github/codeql-action/analyze@5fe9434cd24fe243e33e7f3305f8a5b519b70280 # v4.31.1
         with:
           category: "/language:${{matrix.language}}"

.github/workflows/dependency-review.yml

@@ -17,11 +17,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
+        uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
         with:
           egress-policy: audit
 
       - name: 'Checkout Repository'
-        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: 'Dependency Review'
         uses: actions/dependency-review-action@40c09b7dc99638e5ddb0bfd91c1673effc064d8a # v4.8.1

.github/workflows/github-actions-ansible-lint.yml

@@ -9,17 +9,17 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
+        uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
         with:
           egress-policy: audit
 
       - name: Checkout the code
-        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #v4.3.0
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 #v5.0.0
 
       - name: Setup Python
-        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 #v5.6.0
+        uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c #v6.0.0
         with:
-          python-version: '3.x'
+          python-version: '3.10'
 
       - name: Install Ansible and Ansible-Lint
         run: |

.github/workflows/ossf-scorecard.yml

@@ -32,17 +32,17 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
+        uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
         with:
           egress-policy: audit
 
       - name: "Checkout code"
-        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           persist-credentials: false
 
       - name: "Run analysis"
-        uses: ossf/scorecard-action@05b42c624433fc40578a4040d5cf5e36ddca8cde # v2.4.2
+        uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
         with:
           results_file: results.sarif
           results_format: sarif
@@ -73,6 +73,6 @@ jobs:
       # Upload the results to GitHub's code scanning dashboard (optional).
       # Commenting out will disable upload of results to your repo's Code Scanning dashboard
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v4.30.8
+        uses: github/codeql-action/upload-sarif@5fe9434cd24fe243e33e7f3305f8a5b519b70280 # v4.31.1
         with:
           sarif_file: results.sarif

.github/workflows/trivy.yml

@@ -19,15 +19,15 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Harden Runner
-      uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
+      uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
       with:
         egress-policy: audit
 
     - name: Checkout code
-      uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+      uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
     - name: Run Trivy vulnerability scanner (file system)
-      uses: aquasecurity/trivy-action@76071ef0d7ec797419534a183b498b4d6366cf37 # 0.31.0
+      uses: aquasecurity/trivy-action@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8 # 0.33.1
       with:
         scan-type: 'fs'
         ignore-unfixed: true
@@ -37,7 +37,7 @@ jobs:
         output: report-fs.sarif
 
     - name: Upload Trivy report (fs) GitHub Security
-      uses: github/codeql-action/upload-sarif@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v4.30.8
+      uses: github/codeql-action/upload-sarif@5fe9434cd24fe243e33e7f3305f8a5b519b70280 # v4.31.1
       with:
         sarif_file: report-fs.sarif
         category: 'fs'