Feature/local inifiles

.github/workflows/codeql.yml

@@ -41,7 +41,7 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
+        uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
         with:
           egress-policy: audit
 
@@ -50,7 +50,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0
+        uses: github/codeql-action/init@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1
         with:
           languages: ${{ matrix.language }}
           # If you wish to specify custom queries, you can do so here or in a config file.
@@ -60,7 +60,7 @@ jobs:
       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0
+        uses: github/codeql-action/autobuild@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -73,6 +73,6 @@ jobs:
       #   ./location_of_script_within_repo/buildscript.sh
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0
+        uses: github/codeql-action/analyze@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1
         with:
           category: "/language:${{matrix.language}}"

.github/workflows/dependency-review.yml

@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
+        uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
         with:
           egress-policy: audit
 

.github/workflows/github-actions-ansible-lint.yml

@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
+        uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
         with:
           egress-policy: audit
 

.github/workflows/ossf-scorecard.yml

@@ -32,7 +32,7 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
+        uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
         with:
           egress-policy: audit
 
@@ -64,7 +64,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: "Upload artifact"
-        uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0
+        uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
         with:
           name: SARIF file
           path: results.sarif
@@ -73,6 +73,6 @@ jobs:
       # Upload the results to GitHub's code scanning dashboard (optional).
       # Commenting out will disable upload of results to your repo's Code Scanning dashboard
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0
+        uses: github/codeql-action/upload-sarif@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1
         with:
           sarif_file: results.sarif

.github/workflows/trivy.yml

@@ -19,7 +19,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Harden Runner
-      uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
+      uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
       with:
         egress-policy: audit
 
@@ -37,7 +37,7 @@ jobs:
         output: report-fs.sarif
 
     - name: Upload Trivy report (fs) GitHub Security
-      uses: github/codeql-action/upload-sarif@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0
+      uses: github/codeql-action/upload-sarif@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1
       with:
         sarif_file: report-fs.sarif
         category: 'fs'

Webapp/SDAF/SDAFWebApp.csproj

@@ -15,27 +15,27 @@
 
 
   <ItemGroup>
-    <PackageReference Include="Azure.Data.Tables" Version="12.9.1" />
-    <PackageReference Include="Azure.Identity" Version="1.13.1" />
+    <PackageReference Include="Azure.Data.Tables" Version="12.10.0" />
+    <PackageReference Include="Azure.Identity" Version="1.13.2" />
     <PackageReference Include="Azure.ResourceManager" Version="1.13.0" />
     <PackageReference Include="Azure.ResourceManager.Compute" Version="1.7.0" />
     <PackageReference Include="Azure.ResourceManager.KeyVault" Version="1.3.0" />
-    <PackageReference Include="Azure.ResourceManager.Network" Version="1.10.0-beta.1" />
+    <PackageReference Include="Azure.ResourceManager.Network" Version="1.10.0" />
     <PackageReference Include="Azure.ResourceManager.Resources" Version="1.9.0" />
     <PackageReference Include="Azure.ResourceManager.Storage" Version="1.3.0" />
     <PackageReference Include="Azure.Storage.Blobs" Version="12.23.0" />
     <PackageReference Include="Microsoft.AspNetCore.Authentication.AzureAD.UI" Version="7.0.0-preview.6.22330.3" />
     <PackageReference Include="Microsoft.Extensions.Azure" Version="1.9.0" />
-    <PackageReference Include="Microsoft.Identity.Web" Version="3.5.0" />
-    <PackageReference Include="Microsoft.Identity.Web.UI" Version="3.5.0" />
+    <PackageReference Include="Microsoft.Identity.Web" Version="3.6.0" />
+    <PackageReference Include="Microsoft.Identity.Web.UI" Version="3.6.0" />
     <PackageReference Include="Microsoft.VisualStudio.Services.InteractiveClient" Version="19.246.0-preview" />
     <PackageReference Include="Microsoft.VisualStudio.Web.CodeGeneration.Design" Version="9.0.0" />
     <PackageReference Include="Newtonsoft.Json" Version="13.0.3" />
     <PackageReference Include="NuGet.Packaging" Version="6.12.1" />
     <PackageReference Include="System.Data.SqlClient" Version="4.9.0" />
     <PackageReference Include="System.Linq.Async" Version="6.0.1" />
     <PackageReference Include="System.Net.Http" Version="4.3.4" />
-    <PackageReference Include="System.Runtime.Caching" Version="9.0.0" />
+    <PackageReference Include="System.Runtime.Caching" Version="9.0.1" />
     <PackageReference Include="System.Text.RegularExpressions" Version="4.3.1" />
   </ItemGroup>
 

deploy/ansible/playbook_05_00_00_sap_scs_install.yaml

@@ -119,12 +119,12 @@
       ansible.builtin.set_fact:
         this_sid:
           {
-            'sid': '{{ sap_sid | upper }}',
-            'dbsid_uid': '{{ hdbadm_uid }}',
-            'sidadm_uid': '{% if platform == "SYBASE" %}{{ asesidadm_uid }}{% else %}{{ sidadm_uid }}{% endif %}',
+            'sid':          '{{ sap_sid | upper }}',
+            'dbsid_uid':    '{{ hdbadm_uid }}',
+            'sidadm_uid':   '{{ UIDs[ platform ].uid }}',
             'ascs_inst_no': '{{ scs_instance_number }}',
-            'pas_inst_no': '{{ pas_instance_number }}',
-            'app_inst_no': '{{ app_instance_number }}'
+            'pas_inst_no':  '{{ pas_instance_number }}',
+            'app_inst_no':  '{{ app_instance_number }}'
           }
       tags:
         - always
@@ -215,12 +215,12 @@
           ansible.builtin.set_fact:
             this_sid:
               {
-                'sid': '{{ sap_sid | upper }}',
-                'dbsid_uid': '{{ hdbadm_uid }}',
-                'sidadm_uid': '{% if platform == "SYBASE" %}{{ asesidadm_uid }}{% else %}{{ sidadm_uid }}{% endif %}',
+                'sid':          '{{ sap_sid | upper }}',
+                'dbsid_uid':    '{{ hdbadm_uid }}',
+                'sidadm_uid':   '{{ UIDs[ platform ].uid }}',
                 'ascs_inst_no': '{{ scs_instance_number }}',
-                'pas_inst_no': '{{ pas_instance_number }}',
-                'app_inst_no': '{{ app_instance_number }}'
+                'pas_inst_no':  '{{ pas_instance_number }}',
+                'app_inst_no':  '{{ app_instance_number }}'
               }
 
         - name:                        "SCS Installation Playbook: Define list of SIDs"
@@ -301,7 +301,7 @@
                     name:              roles-sap/7.0.0-post-install
                   vars:
                     suffix:            "_SCS"
-                    prefix:            "{{ bom.product_ids.scs.replace('.', '/').replace('/ABAP', '').split(':')[1] }}"
+                    prefix:            "{{ bom.product_ids.scs.replace('.', '/').replace('/ABAP', '').replace('/JAVA', '').split(':')[1] }}"
                     path:              'INSTALL/DISTRIBUTED/{{ scs_bom_instance_type }}/{{ instance_type }}'
                     tier:              'scs'
                     this_sid:          "{{ sid_to_be_deployed.sid | upper }}"
@@ -567,7 +567,7 @@
                 name:                  roles-sap/7.0.0-post-install
               vars:
                 suffix:                "_SCS"
-                prefix:                "{{ scs_bom_id.replace('.', '/').replace('/ABAPHA', '').replace('/HA', '').split(':')[1] }}"
+                prefix:                "{{ scs_bom_id.replace('.', '/').replace('/JAVAHA', '').replace('/ABAPHA', '').replace('/HA', '').split(':')[1] }}"
                 path:                  'INSTALL/HA/{{ scs_bom_instance_type }}/{{ instance_type }}'
                 tier:                  'scs'
                 this_sid:              "{{ sap_sid | upper }}"
@@ -581,7 +581,7 @@
                 name:                  roles-sap/7.0.0-post-install
               vars:
                 suffix:                "_ERS"
-                prefix:                "{{ ers_bom_id.replace('.', '/').replace('/ABAPHA', '').replace('/HA', '').split(':')[1] }}"
+                prefix:                "{{ ers_bom_id.replace('.', '/').replace('/ABAPHA', '').replace('/JAVAHA', '').replace('/HA', '').split(':')[1] }}"
                 path:                  'INSTALL/HA/{{ ers_bom_instance_type }}/ERS'
                 tier:                  'ers'
                 this_sid:              "{{ sap_sid | upper }}"

deploy/ansible/playbook_05_02_sap_pas_install.yaml

@@ -87,12 +87,12 @@
       ansible.builtin.set_fact:
         this_sid:
           {
-            'sid': '{{ sap_sid | upper }}',
-            'dbsid_uid': '{{ hdbadm_uid }}',
-            'sidadm_uid': '{% if platform == "SYBASE" %}{{ asesidadm_uid }}{% else %}{{ sidadm_uid }}{% endif %}',
-            'ascs_inst_no': '{{ scs_instance_number }}',
-            'pas_inst_no': '{{ pas_instance_number }}',
-            'app_inst_no': '{{ app_instance_number }}'
+              'sid':          '{{ sap_sid | upper }}',
+              'dbsid_uid':    '{{ hdbadm_uid }}',
+              'sidadm_uid':   '{{ UIDs[ platform ].uid }}',
+              'ascs_inst_no': '{{ scs_instance_number }}',
+              'pas_inst_no':  '{{ pas_instance_number }}',
+              'app_inst_no':  '{{ app_instance_number }}'
           }
 
     - name:                            "PAS Installation Playbook: - Set 'pas' tier facts"
@@ -163,12 +163,12 @@
       ansible.builtin.set_fact:
         this_sid:
           {
-            'sid': '{{ sap_sid | upper }}',
-            'dbsid_uid': '{{ hdbadm_uid }}',
-            'sidadm_uid': '{% if platform == "SYBASE" %}{{ asesidadm_uid }}{% else %}{{ sidadm_uid }}{% endif %}',
-            'ascs_inst_no': '{{ scs_instance_number }}',
-            'pas_inst_no': '{{ pas_instance_number }}',
-            'app_inst_no': '{{ app_instance_number }}'
+                'sid':          '{{ sap_sid | upper }}',
+                'dbsid_uid':    '{{ hdbadm_uid }}',
+                'sidadm_uid':   '{{ UIDs[ platform ].uid }}',
+                'ascs_inst_no': '{{ scs_instance_number }}',
+                'pas_inst_no':  '{{ pas_instance_number }}',
+                'app_inst_no':  '{{ app_instance_number }}'
           }
 
     - name:                            "PAS Installation Playbook: Define list of SIDs"

deploy/ansible/playbook_05_03_sap_app_install.yaml

@@ -87,12 +87,12 @@
           ansible.builtin.set_fact:
             this_sid:
               {
-                'sid': '{{ sap_sid | upper }}',
-                'dbsid_uid': '{{ hdbadm_uid }}',
-                'sidadm_uid': '{% if platform == "SYBASE" %}{{ asesidadm_uid }}{% else %}{{ sidadm_uid }}{% endif %}',
+                'sid':          '{{ sap_sid | upper }}',
+                'dbsid_uid':    '{{ hdbadm_uid }}',
+                'sidadm_uid':   '{{ UIDs[ platform ].uid }}',
                 'ascs_inst_no': '{{ scs_instance_number }}',
-                'pas_inst_no': '{{ pas_instance_number }}',
-                'app_inst_no': '{{ app_instance_number }}'
+                'pas_inst_no':  '{{ pas_instance_number }}',
+                'app_inst_no':  '{{ app_instance_number }}'
               }
 
         - name:                            "APP Installation Playbook: Define list of SIDs"
@@ -151,12 +151,12 @@
       ansible.builtin.set_fact:
         this_sid:
           {
-            'sid': '{{ sap_sid | upper }}',
-            'dbsid_uid': '{{ hdbadm_uid }}',
-            'sidadm_uid': '{% if platform == "SYBASE" %}{{ asesidadm_uid }}{% else %}{{ sidadm_uid }}{% endif %}',
-            'ascs_inst_no': '{{ scs_instance_number }}',
-            'pas_inst_no': '{{ pas_instance_number }}' ,
-            'app_inst_no': '{% if app_instance_number is defined %}{{ app_instance_number }}{% else %}00{% endif %}'
+                'sid':          '{{ sap_sid | upper }}',
+                'dbsid_uid':    '{{ hdbadm_uid }}',
+                'sidadm_uid':   '{{ UIDs[ platform ].uid }}',
+                'ascs_inst_no': '{{ scs_instance_number }}',
+                'pas_inst_no':  '{{ pas_instance_number }}',
+                'app_inst_no':  '{{ app_instance_number }}'
           }
 
     - name:                            "APP Installation Playbook: Define list of SIDs"

deploy/ansible/roles-db/4.0.0-hdb-install/tasks/main.yaml

@@ -51,6 +51,34 @@
     msg:                               "INSTALL:0001:Unable to find hdblcm, please check that the installation media is mounted"
   when: not hdblcm_found.stat.exists
 
+- name:                                "SAP HANA: check sp version from manifest"
+  ansible.builtin.shell: |
+                                       set -o pipefail
+                                       grep sp-number manifest | cut -d ":" -f 2 | tr -d [:space:]
+  args:
+    chdir:                             "{{ target_media_location }}/CD_HDBSERVER/SAP_HANA_DATABASE/server"
+  register:                            manifest_hana_sp
+
+- name:                                "SAP HANA: Show sps leve"
+  ansible.builtin.debug:
+    msg:                               "HANA SP Level: {{ manifest_hana_sp.stdout }}"
+
+- name:                                "SAP HANA: Set fact when sps is 08 or higher"
+  ansible.builtin.set_fact:
+    hana_sp08_or_higher:               "{{ manifest_hana_sp.stdout is version('080', '>=') }}"
+
+# all | client | es | ets | lcapps | server | smartda | streaming | rdsync | xs | studio | afl | sca | sop | eml | rme | rtl | trp
+- name:                                "SAP HANA: Set HANA components"
+  ansible.builtin.set_fact:
+    hana_components:                   "server, lcapps, afl, vch2021"
+  when:
+    - hana_sp08_or_higher
+    - hana_components == 'all'
+
+- name:                                "SAP HANA: Show HANA components"
+  ansible.builtin.debug:
+    msg:                               "HANA Components: {{ hana_components }}"
+
 - name:                                "HANA Install"
   block:
 

deploy/ansible/roles-db/4.0.0-hdb-install/templates/HANA_2_00_install.rsp

@@ -257,13 +257,13 @@ xs_trust_pem=
 lss_inst_path=/lss/shared
 
 # Local Secure Store User Password
-lss_user_password=
+lss_user_password={{ pwd_os_sidadm }}
 
 # Local Secure Store User ID
-lss_userid=
+lss_userid={{ lss_uid }}
 
 # Local Secure Store User Group ID
-lss_groupid=
+lss_groupid={{ lss_gid }}
 
 # Local Secure Store User Home Directory ( Default: /usr/sap/${sid}/lss/home )
 lss_user_home=/usr/sap/${sid}/lss/home
@@ -272,7 +272,7 @@ lss_user_home=/usr/sap/${sid}/lss/home
 lss_user_shell=/bin/sh
 
 # Local Secure Store Auto Backup Password
-lss_backup_password=
+lss_backup_password={{ pwd_os_sidadm }}
 
 [streaming]
 

deploy/ansible/roles-db/4.0.3-hdb-install-scaleout/templates/HANA_2_00_install_scaleout.rsp

@@ -25,7 +25,7 @@ verify_signature=n
 components={{ _rsp_components }}
 
 # Install Execution Mode ( Default: standard; Valid values: standard | optimized )
-install_execution_mode=standard
+install_execution_mode=optimized
 
 # Ignore failing prerequisite checks
 ignore=
@@ -251,19 +251,20 @@ xs_cert_key=
 # XS Advanced Trust Certificate
 xs_trust_pem=
 
+
 [lss]
 
 # Installation Path for Local Secure Store ( Default: /lss/shared )
 lss_inst_path=/lss/shared
 
 # Local Secure Store User Password
-lss_user_password=
+lss_user_password={{ pwd_os_sidadm }}
 
 # Local Secure Store User ID
-lss_userid=
+lss_userid={{ lss_uid }}
 
 # Local Secure Store User Group ID
-lss_groupid=
+lss_groupid={{ lss_gid }}
 
 # Local Secure Store User Home Directory ( Default: /usr/sap/${sid}/lss/home )
 lss_user_home=/usr/sap/${sid}/lss/home
@@ -272,7 +273,7 @@ lss_user_home=/usr/sap/${sid}/lss/home
 lss_user_shell=/bin/sh
 
 # Local Secure Store Auto Backup Password
-lss_backup_password=
+lss_backup_password={{ pwd_os_sidadm }}
 
 [streaming]