Automation Toolkit Release v2026.2.0

CD3 Automation Toolkit v2026.2.0

Author: bhlohumi

Dockerfile

@@ -45,6 +45,7 @@ RUN  sudo dnf install -y oraclelinux-release-el9 && \
 sudo chown -R $USERNAME:$USERNAME /cd3user/ && \
 sudo sed -i -e 's/\r$//' /cd3user/oci_tools/cd3_automation_toolkit/shell_script.sh && \
 bash /cd3user/oci_tools/cd3_automation_toolkit/shell_script.sh && \
+sudo microdnf install git-2.39.3 -y && \
 sudo dnf clean all && \
 sudo rm -rf /var/cache/dnf && \
 sudo chmod -R 740 /cd3user/ && \
@@ -67,8 +68,8 @@ sudo rm -rf terraform-provider-null_${TF_NULL_PROVIDER}_linux_amd64.zip terrafor
 fi
 
 ##################################### START INSTALLING JENKINS ###################################
-ARG JENKINS_VERSION=2.504.1
-ARG JENKINS_SHA=81026db18b0c4aad6b62cf408e4c42e5797661b41c517b37df606238e89b9df1
+ARG JENKINS_VERSION=2.504.3
+ARG JENKINS_SHA=ea8883431b8b5ef6b68fe0e5817c93dc0a11def380054e7de3136486796efeb0
 ARG JENKINS_PLUGIN_MANAGER_VERSION=2.12.13
 ARG PLUGIN_CLI_URL=https://github.com/jenkinsci/plugin-installation-manager-tool/releases/download/${JENKINS_PLUGIN_MANAGER_VERSION}/jenkins-plugin-manager-${JENKINS_PLUGIN_MANAGER_VERSION}.jar
 
@@ -95,7 +96,6 @@ COPY --chown=cd3user:cd3user jenkins_install/plugins.txt ${REF}/plugins.txt
 RUN if [ "$USE_DEVOPS" == "YES" ]; then \
     sudo microdnf install -y java-21-openjdk && \
     sudo microdnf install -y java-21-openjdk-devel && \
-    sudo microdnf install git-2.39.3 -y && \
     sudo mkdir -p ${REF}/init.groovy.d && \
     sudo chown -R cd3user:cd3user ${JENKINS_INSTALL} && \
     sudo curl -fsSL http://updates.jenkins-ci.org/download/war/${JENKINS_VERSION}/jenkins.war -o ${JENKINS_INSTALL}/jenkins.war && \

OCIWorkVMStack/oci_images.tf

@@ -1,5 +1,5 @@
 variable "marketplace_source_images" {
-  type = map(object({
+  /*type = map(object({
     ocid                  = string
     is_pricing_associated = bool
     compatible_shapes     = set(string)
@@ -10,5 +10,6 @@ variable "marketplace_source_images" {
       is_pricing_associated = false
       compatible_shapes     = []
     }
-  }
+  }*/
+  default = ""
 }

README.md

@@ -7,7 +7,7 @@
 
 <br>
 
-  [What's New](https://github.com/oracle-devrel/cd3-automation-toolkit/releases/tag/v2026.1.2) &nbsp;•&nbsp;[Excel Templates](https://oracle-devrel.github.io/cd3-automation-toolkit/latest/excel-templates/) &nbsp;•&nbsp;[CD3 Docs](https://oracle-devrel.github.io/cd3-automation-toolkit/latest/cd3-overview/)&nbsp;•&nbsp; [Watch & Learn](https://www.youtube.com/playlist?list=PLPIzp-E1msrbJ3WawXVhzimQnLw5iafcp) &nbsp;•&nbsp;[Blogs & Tutorials](https://oracle-devrel.github.io/cd3-automation-toolkit/latest/tutorials/) &nbsp;•&nbsp;[Livelabs](https://apexapps.oracle.com/pls/apex/f?p=133:180:112501098061930::::wid:3724) &nbsp;•&nbsp;[Slack Channel](https://oracle-devrel.github.io/cd3-automation-toolkit/latest/queries) 
+  [What's New](https://github.com/oracle-devrel/cd3-automation-toolkit/releases/tag/v2026.2.0) &nbsp;•&nbsp;[Excel Templates](https://oracle-devrel.github.io/cd3-automation-toolkit/latest/excel-templates/) &nbsp;•&nbsp;[CD3 Docs](https://oracle-devrel.github.io/cd3-automation-toolkit/latest/cd3-overview/)&nbsp;•&nbsp; [Watch & Learn](https://www.youtube.com/playlist?list=PLPIzp-E1msrbJ3WawXVhzimQnLw5iafcp) &nbsp;•&nbsp;[Blogs & Tutorials](https://oracle-devrel.github.io/cd3-automation-toolkit/latest/tutorials/) &nbsp;•&nbsp;[Livelabs](https://apexapps.oracle.com/pls/f?p=133:180:112501098061930::::wid:3724) &nbsp;•&nbsp;[Slack Channel](https://oracle-devrel.github.io/cd3-automation-toolkit/latest/queries)
 
 <br>
 
@@ -74,7 +74,7 @@ Evaluate Terraform plans to identify potential security risks, misconfigurations
 </table>
 
 
-📌 The Toolkit also extends its support to <b>ADB@Azure</b>
+📌 The Toolkit now support to <b>ADB@Azure</b>, <b>Exa@Azure(create only)</b>, <b>ADB@GCP</b>, <b>Exa@GCP(create only)</b>.
 
 <br>
 

cd3_automation_toolkit/Release-Notes

@@ -1,3 +1,15 @@
+-------------------------------------
+CD3 Automation Toolkit Tag v2026.2.0
+Jul 31st, 2026
+-------------------------------------
+1. Added multi-cloud Database Service support for Azure and GCP, including creation of ADB and Exadata resources, ADB export, and offline tfvars generation. Exadata export is not included in this release.
+2. Added support for multiple secondary VNICs for OCI instances.
+3. Added support for preemptible node pool configuration for OKE.
+4. Updated the CIS compliance report to version 3.2.1.
+5. Added identity output separation and fixed RPC deduplication and user export behavior.
+6. Included bug fixes for ADB, NSG rules, buckets, the OCI Resource Manager stack, and other minor issues.
+7. Upgraded Jenkins core from 2.504.1 to 2.504.3 for compatibility with the current Jenkins plugin update-center catalog.
+
 -------------------------------------
 CD3 Automation Toolkit Tag v2026.1.2
 Jul 10th, 2026
@@ -9,7 +21,7 @@ CD3 Automation Toolkit Tag v2026.1.1
 May 8th, 2026
 -------------------------------------
 1. Support for export of resources from all child compartments of a parent without specifying them separately in command line.
-2. Deprecate python script createTenancyConfig.py. Instead use connectCloud.py
+2. Deprecate python scripts createTenancyConfig.py and setUpOCI.py. Instead use connectCloud.py and setUpCloud.py
 3. Fixed ordering issue for views for export of DNS resolvers.
 4. Minor internal bug fixes.
 

cd3_automation_toolkit/azurecloud/python/database/export_adb_azure.py

@@ -42,18 +42,18 @@ def normalize_enum_token(value):
     return s.split(".", 1)[1] if "." in s else s
 
 
-def _format_rg_vnet_subnet_from_id(net_id: str) -> str:
-    """Return 'resourceGroup@vnet::subnet' from a subnet ARM ID."""
+def _parse_subnet_arm_id(net_id: str):
+    """Return the resource group, virtual network, and subnet from a subnet ARM ID."""
     if not net_id:
-        return ""
+        return "", "", ""
     parts = net_id.strip("/").split("/")
     try:
         rg = parts[parts.index("resourceGroups") + 1]
         vnet = parts[parts.index("virtualNetworks") + 1]
         subnet = parts[parts.index("subnets") + 1]
-        return f"{rg}@{vnet}::{subnet}"
+        return rg, vnet, subnet
     except (ValueError, IndexError):
-        return ""
+        return "", "", ""
 
 
 def _get_rg_from_id(resource_id: str) -> str:
@@ -106,21 +106,13 @@ def print_adbs_azure(adb, values_for_column: Dict[str, List], state: Dict, tf_or
     # Tags (dict) — kept as metadata only if the sheet has 'Common Tags' column(not used yet)
     common_tags = azrCommonTools._flatten_tags(getattr(adb, "tags", None))
 
-    # Prefer subnetId to derive rg@vnet::subnet; private endpoint IDs don't contain vnet/subnet names
+    # Prefer subnetId because private endpoint IDs don't contain vnet/subnet names
     subnet_id = pick_first_not_none(
         getattr(props, "subnet_id", None),
         getattr(props, "subnetId", None),
     )
-    formatted_net = _format_rg_vnet_subnet_from_id(subnet_id)
-
-    # Optional: keep raw IDs if needed elsewhere
-    network_details_raw = pick_first_not_none(
-        getattr(props, "subnet_id", None),
-        getattr(props, "subnetId", None),
-        getattr(props, "private_endpoint_id", None),
-        getattr(props, "privateEndpointId", None),
-        "",
-    )
+    network_rg, vnet_name, subnet_name = _parse_subnet_arm_id(subnet_id)
+    odb_network_details = f"{network_rg}::{vnet_name}" if network_rg and vnet_name else ""
 
     # Whitelisted IPs (array of strings)
     ips_list = pick_first_not_none(
@@ -204,9 +196,11 @@ def print_adbs_azure(adb, values_for_column: Dict[str, List], state: Dict, tf_or
             values_for_column[col_header].append(adb_location)
         elif col_header == "ADB Display Name":
             values_for_column[col_header].append(adb_name)
-        elif col_header == "Network Details":
-            # Write the formatted rg@vnet::subnet if available; else leave blank or fall back to raw
-            values_for_column[col_header].append(formatted_net or "")
+        # Keep network and subnet separate because the ADB-Azure generator reads them from two workbook columns.
+        elif col_header == "ODB Network Details":
+            values_for_column[col_header].append(odb_network_details)
+        elif col_header == "ODB Network Subnet Details":
+            values_for_column[col_header].append(subnet_name)
         elif col_header == "Whitelisted IP Addresses":
             values_for_column[col_header].append(whitelisted_ips)
         elif col_header == "DB Name":
@@ -341,4 +335,4 @@ def export_adb_azure(inputfile: str, outdir: str,credentials,
     if importCommands.get("global"):
         importCommands["global"] += f'\n{tf_or_tofu} plan\n'
         with open(script_file, 'a', encoding='utf-8') as importCommandsfile:
-            importCommandsfile.write(init_commands + importCommands["global"])
+            importCommandsfile.write(init_commands + importCommands["global"])

cd3_automation_toolkit/common/opa/Network/oci_enforce_container_config.rego

@@ -15,7 +15,6 @@ enforce_container_engine_config {
 
     container.is_private_cluster
     container.is_encryption_enabled
-    container.is_pod_security_policy_enabled
 }
 
 #To enforce secure configuration for container instances

cd3_automation_toolkit/common/python/commonTools.py

@@ -120,7 +120,11 @@ def write_to_cd3(values_for_column, cd3file, sheet_name,append=False):
 
 
         #rows_len=len(rows)
-        rows_len = len(values_for_column["Region"])
+        try:
+            rows_len = len(values_for_column["Region"])
+        except KeyError as e:
+            rows_len = len(values_for_column["Location"])
+
         sheet_max_rows = sheet.max_row
         #If no rows exported from OCI, remove the sample data as well
         if(rows_len == 0) :

cd3_automation_toolkit/connectGCP.properties

@@ -8,7 +8,7 @@
 prefix=
 
 # Auth Mechanism for GCP APIs - api_key
-# Please make sure to add IAM policies for service account before executing connectContainerToGCP.py
+# Please make sure to add IAM policies for service account before executing connectCloud.py
 auth_mechanism=api_key
 # Path to JSON file having private key information for the service account;
 # Defaults to /cd3user/gcp/keys/gcp_api_private.json when left empty