WebLogic Deploy Tooling 4.2.1

Major New Features

None

Other Changes

• #1717, #1728 - Extended the API integration between WebLogic Kubernetes Toolkit UI and WDT to pass back the encrypted
  passwords when running the Prepare Model Tool from the WebLogic Kubernetes Toolkit UI.
• #1722 - Added logic to detect a situation where the user specified in domainInfo:/AdminUserName is also listed in
  the topology:/Security/User list of users and update the topology:/Security/User user's Password field to be
  the same as that specified in domainInfo:/AdminPassword.
• #1723 - Added support for the WebLogic Server 12.2.1.4 and 14.1.1 July 2024 PSUs.

Bug Fixes

• #1713 - Added logic at startup to detect when WDT logging is not properly configured.
• #1715 - Fixed a bug where the domainInfo:/OPSSWalletPassphrase field was not properly handled when using the
  Prepare Model Tool or when using the Discover Domain Tool with the -target argument.
• #1716 - Fixed the Discover Domain Tool documentation to add missing command-line arguments.
• #1718 - Fixed an issue with the NativeVersionEnabled attribute of NMProperties not working correctly when running
  the Update Domain Tool.
• #1720 - Fixed an issue with RCU pre-check error handling that was causing an unhandled Jython error.
• #1721 - Fixed a bug in the SSH directory listing command for a remote Unix machine.
• #1724 - Fixed an off-by-one error when using the Archive Helper Tool's remove custom command with a name that starts
  with wlsdeploy/custom/ or config/wlsdeploy/custom/ that was causing the specified location to not be removed.
• #1727, #1729 - Fixed an issue with Create Domain Tool's RCU pre-check functionality that was causing a Jython
  AttributeException for set when the STB DataSource was defined in the resources:/JDBCSystemResource section of the
  model and specifying one or more JDBC driver properties.
• #1730 - Fixed an issue where an application or library deployment plan was not being collected when the SourcePath
  contained an excluded location like @@ORACLE_HOME@@.

Known Issues

• SSH support requires a reasonably recent version of Bouncy Castle. WDT picks up Bouncy Castle from WLST so, for example,
  the 12.2.1.4.0 GA release fails with the following error, as mentioned at hierynomus/sshj#895.
  Applying a recent PSU should resolve the issue for 12.2.1.4 and 14.1.1.

  SEVERE Messages:
          1. WLSDPLY-20008: verifySSH argument processing failed: Failed to initialize SSH context: Failed to SSH connect to host myhost.oracle.com: no such algorithm: X25519 for provider BC

• SSH support for the Update Domain Tool and Deploy Apps Tool does not work when using an archive file and the remote
  WebLogic Server is running on Windows using the optional, Windows-provided, OpenSSH component. This is due to an
  issue with the SSHJ library WDT is using. See hierynomus/sshj#929 for more information.

See https://oracle.github.io/weblogic-deploy-tooling/userguide/limitations/limitations/ for the current set of known limitations.

WebLogic Deploy Tooling 4.2.0

Major New Features

None

Other Changes

• #1682 - Added support for discovering built-in security provider data in online mode. This includes
  DefaultAuthenticator users and groups, XACMLAuthorizer policies, XACMLRoleMapper roles, and DefaultCredentialMapper
  user/password credential mappings. As with other discovery features, default values are filtered out and will not
  appear in the model. By default, discovering users and credential mappings require the use of WDT encryption so that
  no clear text passwords are stored in the model or variable files.
• #1682 - Normalized XACMLRoleMapper role handling by removing the previous discovery of XACMLRoleMapper roles (that was
  not working with newer versions of WebLogic anyway) and removing version limitations during provisioning.
• #1682 - Deprecated the -use_encryption command-line argument and replaced it with -passphrase_prompt to make the
  purpose of the argument clearer.
• #1682 - Relaxed the JDK 8 requirement to use WDT encryption. Later versions of JDK 7 have the necessary algorithm
  support so now WDT determines at startup whether the underlying JDK supports WDT encryption or not.
• #1682 - Used the values of the -admin_user and provided password to populate the domainInfo:/AdminUserName and
  domainInfo:/AdminPassword fields when discovering security provider data.
• #1688 - Enhanced variable tokenization support to include passwords in discovered security provider data.
• #1689 - Added the ability to discover the OPSS wallet when running in online mode.
• #1693 - Changed the wko, wko-dii (deprecated), and wko-pv target values to refer to the latest versions instead
  of WebLogic Kubernetes Operator 3 versions. Added wko3, wko3-dii, and wko3-pv to accommodate users that still
  require the ability to use these older versions.
• #1697 - Added support for the Prepare Model Tool to preserve any one-way hashed passwords in the model.
• #1700 - Added support for storing XACML policy and role definitions that could not be converted to their original
  policy and role expressions as XACML files in the archive file.

Bug Fixes

• #1687 - Fixed a problem with the Discover Domain Tool not properly handling Data Source user names with spaces with
  older versions of WebLogic Server.
• #1690 - Fixed a problem with determining the default security realm name that caused it to always be myrealm.
• #1692 - Fixed a misleading error message when the model points to an application outside of the archive file that
  does not exist.
• #1695 - Fixed an issue where the WebLogic Kubernetes Operator domain.yaml was including a placeholder for the
  domainHome attribute in all cases so that the WebLogic Image Tool could populate it when creating the image.
  This was occurring even in use cases where the WebLogic Image Tool did not have this information. WDT no longer does
  this and will only include the domainHome in the case where the user has specified it on the command line, or in the kubernetes section of the model.
• #1698 - Fixed issues with the new messages related to the security provider data discovery features.
• #1701 - Moved the TestSummaryHandler logging class out of the installer since it is only meant for supporting unit tests.
• #1702 - Fixed a bug in deployment plan discovery for exploded applications.
• #1703 - Fixed a bug in discovery of domainBin scripts.
• #1705 - Added missing validation for the WLSUserPasswordCredentialMappings section.
• #1706 - Fixed a validation bug that was causing lax validation to fail when archive entries were missing.
• #1707 - Fixed a bug in the handling of the ActiveContextHandlerEntry attribute of an Auditor security provider.

Known Issues

• SSH support requires a reasonably recent version of Bouncy Castle. WDT picks up Bouncy Castle from WLST so, for example,
  the 12.2.1.4.0 GA release fails with the following error, as mentioned at hierynomus/sshj#895.
  Applying a recent PSU should resolve the issue for 12.2.1.4 and 14.1.1.

  SEVERE Messages:
          1. WLSDPLY-20008: verifySSH argument processing failed: Failed to initialize SSH context: Failed to SSH connect to host myhost.oracle.com: no such algorithm: X25519 for provider BC

• SSH support for the Update Domain Tool and Deploy Apps Tool does not work when using an archive file and the remote
  WebLogic Server is running on Windows using the optional, Windows-provided, OpenSSH component. This is due to an
  issue with the SSHJ library WDT is using. See hierynomus/sshj#929 for more information.

See https://oracle.github.io/weblogic-deploy-tooling/userguide/limitations/limitations/ for the current set of known limitations.

WebLogic Deploy Tooling 4.1.1

Major New Features

None

Other Changes

• #1685 - Filtered out the default OptionalFeatures folders when they have no attributes so that they do not show up
  in the online discovered model.

Bug Fixes

• #1677 - Fixed a bug where creating a user with extra attributes would result in invalid LDIFT entries.
• #1678 - Fixed a bug that was causing errors when deploying a new application and the server required a restart.
• #1679 - Fixed a bug where the SSHJ libraries (that only work with JDK 8 and above) were causing the tools to fail
  when running with JDK 7.
• #1680 - Fixed the DataSourceLogFile and WebServerLog folders default value for the DateFormatPattern attribute
  for WLS versions prior to 12.2.1 so that they no longer show up in the online discovered model.
• #1681 - Worked around a pre-12.2.1 WLST bug that was preventing the online tools from determining the server's WLS version.
• #1683 - Fixed a bug with the Model Help Tool where our use of JLine libraries (that only work with JDK 8 and above)
  were causing the Model Help tool to fail when run with JDK 7.

Known Issues

• SSH support requires a reasonably recent version of Bouncy Castle. WDT picks up Bouncy Castle from WLST so, for example,
  the 12.2.1.4.0 GA release fails with the following error, as mentioned at hierynomus/sshj#895.
  Applying a recent PSU should resolve the issue for 12.2.1.4 and 14.1.1.

  SEVERE Messages:
          1. WLSDPLY-20008: verifySSH argument processing failed: Failed to initialize SSH context: Failed to SSH connect to host myhost.oracle.com: no such algorithm: X25519 for provider BC

• SSH support for the Update Domain Tool and Deploy Apps Tool do not work when using an archive file and the remote
  WebLogic Server is running on Windows using the optional, Windows-provided, OpenSSH component. This is due to an
  issue with the SSHJ library WDT is using. See hierynomus/sshj#929 for more information.

See https://oracle.github.io/weblogic-deploy-tooling/userguide/limitations/limitations/ for the current set of known limitations.

WebLogic Deploy Tooling 4.1.0

Major New Features

None

Other Changes

• #1668 - Added new discover passwords feature that allows the user to discover passwords and store them in the model in encrypted format.

Bug Fixes

• #1675 - Fixed a bug with replacing environment variable tokens on Windows.

Known Issues

• SSH support requires a reasonably recent version of Bouncy Castle. WDT picks up Bouncy Castle from WLST so, for example,
  the 12.2.1.4.0 GA release fails with the following error, as mentioned at hierynomus/sshj#895.
  Applying a recent PSU should resolve the issue for 12.2.1.4 and 14.1.1.

  SEVERE Messages:
          1. WLSDPLY-20008: verifySSH argument processing failed: Failed to initialize SSH context: Failed to SSH connect to host myhost.oracle.com: no such algorithm: X25519 for provider BC

• SSH support for the Update Domain Tool and Deploy Apps Tool do not work when using an archive file and the remote
  WebLogic Server is running on Windows using the optional, Windows-provided, OpenSSH component. This is due to an
  issue with the SSHJ library WDT is using. See hierynomus/sshj#929 for more information.

See https://oracle.github.io/weblogic-deploy-tooling/userguide/limitations/limitations/ for the current set of known limitations.

WebLogic Deploy Tooling 4.0.1

Major New Features

None

Other Changes

• #1664 - Added support for the OptionalFeatureDeployment top-level folder.
• #1665, #1667 - Formalized support for both the replicated config/wlsdeploy/custom/ and non-replicated
  wlsdeploy/custom locations. Added support in the Archive Helper Tool and tweaked the validation message
  to only notify the user if they are only using the non-replicated location.
• #1669 - Enhanced the WLS Policy support to allow users to modify built-in policies.
• #1674 - Added 12.2.1.4 and 14.1.1 April 2024 PSU support.

Bug Fixes

• #1666 - Fixed a bug with extracting the WebLogic Remote Console extension that caused an error if the archive file
  includes a directory entry.
• #1670 - Worked around a Jython 2.2.1 bug with posixpath.isfile() where it was returning False when the answer
  should have been True.
• #1672 - Added None checks around plan file name calculations.

Known Issues

• SSH support requires a reasonably recent version of Bouncy Castle. WDT picks up Bouncy Castle from WLST so, for example,
  the 12.2.1.4.0 GA release fails with the following error, as mentioned at hierynomus/sshj#895.
  Applying a recent PSU should resolve the issue for 12.2.1.4 and 14.1.1.

  SEVERE Messages:
          1. WLSDPLY-20008: verifySSH argument processing failed: Failed to initialize SSH context: Failed to SSH connect to host myhost.oracle.com: no such algorithm: X25519 for provider BC

• SSH support for the Update Domain Tool and Deploy Apps Tool do not work when using an archive file and the remote
  WebLogic Server is running on Windows using the optional, Windows-provided, OpenSSH component. This is due to an
  issue with the SSHJ library WDT is using. See hierynomus/sshj#929 for more information.

See https://oracle.github.io/weblogic-deploy-tooling/userguide/limitations/limitations/ for the current set of known limitations.

WebLogic Deploy Tooling 4.0.0

Major New Features

• #1481 - Added new Verify SSH Tool to support testing an environment for using the new SSH support.
• #1516 - Added SSH support for Discover Domain, Update Domain, and Deploy Apps Tools that will allow
  these tools to work against a WebLogic domain running on a remote machine.
• #1548, #1553, #1556 - Revamped the Model Help Tool to improve the semantics and behavior of interactive mode.
  Added online mode support. Fixed CRDs to work consistently with alias folders and attributes.
• #1550 - Refactored the archive file and moved content extraction into $DOMAIN_HOME/config/wlsdeploy for some types
  to take advantage of existing Pack/Unpack behavior and admin server to managed server replications capabilities.
• #1584 - Added support for creating WebLogic authorization policies during domain creation (GitHub issue #1496).
• #1641, #1643, #1644, #1645, #1646, #1647, #1648, #1650 - Overhauled Application and Library provisioning. As part of
  this overhaul, we have tried to define the semantics for non-archived application deployments, particularly
  with online Update Domain and Deploy Applications tools. For non-archive applications/libraries, online deployment of
  binaries outside of the archive will always assume that the binaries are available to the Administration Server at the
  model-specified paths. Neither the -remote or SSH options will attempt to upload the non-archived binaries.
• #1654, #1655, #1656, #1658, #1659, #1661 - Overhaul of the Create Domain Tool's support for running RCU and applying
  RCU-related changes to the RCU Data Sources.

Other Changes

• #1544 - Consolidated multiple internal WLST helper methods to get an MBean.
• #1552 - Added typedef support for discoverExcludedBinariesList to allow OIG to add a custom application in the
  Oracle Home to the archive file.
• #1564 - Added Discover Domain Tool support for discovering the WebLogic Remote Console domain extension.
• #1568 - Added the ability to remove MBean assignments in the model by setting them to null or empty (GitHub issue #1483).
• #1569 - Improved version handling for online operations to always use the server's WebLogic Server version.
• #1572 - Enhanced the wlsdeploy.debugToStdout system property to also include exception stacktraces when set to true.
  This will help WebLogic Kubernetes Operator users running into WDT issues to see the details normally hidden in
  the log files.
• #1583 - Eliminated the -domain_home argument from tools running in online mode.
• #1586 - Simplified variable injector configuration and customization.
• #1587 - Removed deprecated RCU-related command-line arguments from the Create Domain Tool.
• #1588 - Deprecated the domainInfo section's OPSSSecrets attribute and replaced it with OPSSWalletPassphrase to
  better represent the purpose of the attribute.
• #1592 - Deprecated Verrazzano support.
• #1598 - Added support for online wallet distribution to managed servers in upcoming versions of WebLogic Server.
• #1599 - Added support for the 12.2.1.4 and 14.1.1 January 2024 PSUs.
• #1605 - Deprecated the Deploy Applications Tool. The intention going forward is that users should be able to use
  the Update Domain Tool, which already does everything that the Deploy Applications Tool does and more.
• #1613 - Added ability to use variable tokens in the SAML 2 data initialization property files that will be replaced
  during domain creation or update processing.
• #1614 - Updated Discover Domain Tool to overwrite existing variable and archive files if they already exist.
• #1616 - Improved RCUDbInfo validation in Create Domain tool.
• #1630 - Replaced the -variable_property_file argument in the Inject Variables tool with -variable_file
• #1653 - Added support for creating a domain with password digests enabled and users that are properly provisioned so
  that you do not need to delete and recreate the users after the server is started.
• #1654 - Added OAM and OIG domain typedefs to support the Oracle Identity Management team's Kubernetes offering.
  Please be aware that these are not intended to be general-purpose, WDT typedefs and are only supported by
  the Oracle Identity Management team in the context of their Kubernetes offering!
• #1654 - Deprecated the RCUDbInfo section's databaseType attribute and replaced it
  with oracle_database_connection_type.

Bug Fixes

• #1555 - Fixed issues with creating and discovering UnixMachine objects in online mode.
• #1562 - Added missing default values for RCUDbInfo attributes.
• #1563 - Fixed an issue with Compare Model where it was trying to compare an invalid field.
• #1565 - Suppressed logging of domain typedef information by the exit context used to handle unexpected errors.
• #1575 - Added support for storing the CreateTableDDLFile script referenced by the TransactionLogJDBCStore in the
  archive file.
• #1579 - Fixed an issue that limited the number of secret keys that could be referenced by the model.
• #1584 - Fixed an issue where online updates that required restarts were using a 12.2.1+ API even with older versions.
• #1603 - Fixed a bug related to online WLST error message formatting.
• #1608 - Fixed a bug in creating Security groups that are members of another group.
• #1610 - Fixed a bug where the Create Domain and Update Domain Tools were trying to create a security provider that
  is not valid in the current WebLogic Server version.
• #1615 - Fixed an issue where certain errors during online update or deploy operations could leave a pending edit
  state that caused subsequent invocations to fail due to the pending edit state.
• #1619 - Fixed a bug that was causing offline discovery to omit the LogRotation attribute when the value was set to none.
• #1631 - Fixed an issue where the Update Domain and the Deploy Applications Tools running in online mode were trying to
  call start on an application when earlier changes required a server restart.
• #1634 - Fixed an issue with the ResourceManagement MBean when running the Discover Domain Tool in online mode with
  WebLogic Server 14.1.1 and newer.
• #1636 - Fixed an issue with Update Domain and Deploy Applications Tools when using the -remote option that was
  causing a TODO message to be generated when there was nothing for the user to do.
• #1638 - Fixed an issue with the Update Domain and Deploy Applications Tools where the application specified a
  PlanDir and a PlanPath but the online deployment was ignoring the PlanDir, resulting in a file does
  not exist error when attempting to deploy the application.
• #1642 - Fixed deployment issues with deploying applications not included in an archive file.
• #1643 - Fixed an issue with Discover Domain where application/library path tokenization was preventing adding
  deployments to the archive file.
• #1657 - Fixed an issue with the JRF pre-check functionality of the Create Domain Tool where it was ignoring any Data
  Source overrides for the STB data source set in the model.
• #1659 - Fixed an issue with the Create Domain Tool where it was ignoring any Data Source overrides for the OPSS data
  source set in the model when fixing the jps-copfig.xml and jps-config-jse.xml files.
• #1660 - Fixed an issue with the Update Domain Tool running in online mode against a JRF domain that was causing extra
  analysis of applications and libraries that the JRF domain typedef declares as filtered.

Known Issues

• SSH support requires a reasonably recent version of Bouncy Castle. WDT picks up Bouncy Castle from WLST so, for example,
  the 12.2.1.4.0 GA release fails with the following error, as mentioned at hierynomus/sshj#895.
  Applying a recent PSU should resolve the issue for 12.2.1.4 and 14.1.1.

  SEVERE Messages:
          1. WLSDPLY-20008: verifySSH argument processing failed: Failed to initialize SSH context: Failed to SSH connect to host myhost.oracle.com: no such algorithm: X25519 for provider BC

• SSH support for the Update Domain Tool and Deploy Apps Tool do not work when using an archive file and the remote
  WebLogic Server is running on Windows using the optional, Windows-provided, OpenSSH component. This is due to an
  issue with the SSHJ library WDT is using. See hierynomus/sshj#929 for more information.

See https://oracle.github.io/weblogic-deploy-tooling/userguide/limitations/limitations/ for the current set of known limitations.

WebLogic Deploy Tooling 3.5.4

Major New Features

None

Other Changes

• #1600 - Added alias updates to support the Jan 2024 PSUs.

Bug Fixes

• #1607 - Fixed an issue with assigning groups to parent groups.
• #1620 - Fixed an issue that caused an attribute with the WLST value none to be interpreted as a Python None.
• #1635 - Fixed an issue with the ResourceManagement attribute in WebLogic Server 14.1.1 and higher.

Known Issues

None

WebLogic Deploy Tooling 3.5.3

Major New Features

None

Other Changes

• #1573 - Enhanced the wlsdeploy.debugToStdout system property to also include exception stacktraces when set to true. This will help WebLogic Kubernetes Operator users running into WDT issues to see the details normally hidden in the log files.

Bug Fixes

• #1561 - Fixed a NullPointerException when there is missing fields in the RCUDbInfo section.
• #1590 - Fixed an issue with the ServiceProviderSingleLogoutRedirectUri attribute in the October 2023 PSUs for 12.2.1.4 and 14.1.1 that was causing an error.
• #1590 - Fixed an issue with exception creation in 14.1.1 that was causing error messages not to be properly populated due to Jython 2.7.1 vararg method binding being broken.

Known Issues

None

See https://oracle.github.io/weblogic-deploy-tooling/userguide/limitations/limitations/ for the current set of known limitations.

WebLogic Deploy Tooling 3.5.2

Major New Features

None

Other Changes

• #1557 - Added support for provisioning the WebLogic Remote Console domain extension WAR file.

Bug Fixes

• #1547 - Fixed a bug with password validation causing a NullPointerException when the domainInfo section was
  missing from the model.
• #1554 - Fixed a problem where the Discover Domain tool would hang when running in online mode and an edit lock exists.

Known Issues

None

See https://oracle.github.io/weblogic-deploy-tooling/userguide/limitations/limitations/ for the current set of known limitations.

WebLogic Deploy Tooling 3.5.1

Major New Features

None

Other Changes

None

Bug Fixes

• #1542 - Fixed a Prepare Model issue related to the new password validation feature introduced in 3.5.0

Known Issues

None

See https://oracle.github.io/weblogic-deploy-tooling/userguide/limitations/limitations/ for the current set of known limitations.