teched2025-XP264

XP264- Explore how to run cloud-native applications on SAP BTP, Kyma runtime

Description

This repository contains the material for the SAP TechEd 2025 session catalog number XP264 - Explore how to run cloud-native applications on SAP BTP, Kyma runtime.

• Day-2 Operations: Management, Maintenance, Monitoring, and Optimization
• Technical connectivity to public and private (on-premise) systems

Overview

This session introduces attendees to Day-2 operations with SAP BTP, Kyma runtime - a managed kubernetes environment to help connect and extend enterprise applications in the cloud-native world.

During the session you will learn...

• how to operate applications with SAP BTP, Kyma runtime and discover the power of smooth integration with cloud applications and on-premise systems using the advanced connectivity features.
• to explore operational best practices from mastering troubleshooting techniques and intelligent root-cause analysis to event-driven autoscaling that adapts to your business needs in real time.
• about BTP multitenant applications with SAP BTP, Kyma runtime.

Requirements

The requirements to follow the exercises in this repository are...

Important

You must be able to fork the repository and activate the github actions at the fork. This is mandatory for this session!
Thus, you may need a GitHub user.
If you haven't got one yet, please sign-up on GitHub before the workshop or at the very beginning of the session.

Important

The session content is provided exclusively on the SAP-Samples github, and many excercises have been implemented as CI/CD Github Actions worflows (GHA).

Important

The security is paramount!
With the Github Action IDP-delegated authentication flow, there is no more need to provide kubernetes and btp credentials when using the github actions.

• ✅ The Github Action workflows acting as the OIDC provider.
• ✅ All the kubernetets environments in the landscape are configured to trust GitHub’s token identity provider. They come with the pre-configured OIDC applications leveraging the built-in Gardener OIDC shoot extension.
• ✅ SAP Cloud Identity Services acting as a platform IDP on the BTP side of the house has been federated with the Github actions OIDC Provider
• ✅ As a result, the very short-lived credentials are being fetched and rotated automatically on the behalf of the repository user for both kubernetes and btp platform operations.

Warning

Personal devices ought not to be used for this session.

• However, the good news is you may run the GHA-based exercises directly, from your forked repository, in the Chrome browser on the provided teched laptops.

Tip

Session directions.

The session is pretty packed with content and information. To make the best use of your time you may want to follow the below tips.

• 👉 Run and take time to inspect the results of the built-in automations. Ask questions. And if you feel like doing, go ahead and create your own variants as well.

• 👉 The recommendation is, however, to go with the mere flow of the exercises and leave the rest for homework.

• For any exercise which may require a terminal use, you may use the VSCode integrated terminal.

Note

• As this is the Day-2 operation brief, the entire cloud landscape has been pre-configured with a number of shared components, namely:

  • 🔗 SAP Cloud Identity Services (SAP IAS)
  • 🔗 SAP Cloud Logging
  • 🔗 SAP HANA Cloud
  • 🔗 ArgoCDaaS
  • 🔗 SAP BTP Connectivity services - Destination service, Connectivity service, Cloud Connector, Connectivity Proxy and Transparent Proxy
  • 🔗 S4/HANA On-premise (private cloud) with the Cloud Connector in the private network.

• All of the SAP Kyma environments have been configured to the same template (via terraform automation).

• Last but not least, you will be able to play with a SAP Build multi-tenant application pre-deployed to one of the kyma provider clusters.

• 📓 FYI: There are several additional command line tools available on your SAP TECHED 2025 Client laptops, namely:

  • kubectl plugin list

    The following compatible plugins are available:
    
    C:\Software\CLI\Kubernetes\kubectl-convert.exe
    C:\Users\TE-06\.krew\bin\kubectl-krew.exe
    C:\Users\TE-06\.krew\bin\kubectl-oidc_login.exe
    C:\Users\TE-06\.krew\bin\kubectl-resource_capacity.exe
    C:\Users\TE-06\.krew\bin\kubectl-view_serviceaccount_kubeconfig.exe 
    

  • jq, curl, kyma cli, terraform, etc.

Let's get started...

• Exercise 0 - Preparation Steps

  • Exercise 0.0 - Sign up for a GitHub account
  • Exercise 0.1 - Fork the teched2025-XP264 repository
  • Exercise 0.2 - Let the session begin!
  • Exercise 0.3 - BTP landscape at a glance (optional)
  • Exercise 0.4 - Let's talk SAP BTP, Kyma Runtime architecture (optional)

• Exercise 1 - First things first. Day-2 with SAP Kyma managed kubernetes runtime

  • Exercise 1.1 - Easy access to your session landscape (with SSO).
  • Exercise 1.2 - Built-in github automation flows
  • Exercise 1.3 - Zoom on Kyma CLI (optional)
  • Exercise 1.4 - Firefighter access
  • Exercise 1.5 - Terraforming kyma runtime environment (optional)
  • Exercise 1.6 - Multitenancy playground (optional)

• Exercise 2 - Using External Scalers. Keda - the Kubernetes Event-driven Autoscaler.

  • Exercise 2.0 - Introduction to kubernetes autoscalers
  • Exercise 2.1 - HPA - Horizontal Pod Autoscaler
  • Exercise 2.2 - KEDA - Kubernetes Event-driven Autoscaler
  • Exercise 2.3 - KEDA - Cron based scaler (optional)

• Exercise 3 - Explore Kyma Telemetry Features with SAP Cloud Logging

  • Exercise 3.0 - Simulate some load
  • Exercise 3.1 - Access SAP Cloud Logging
  • Exercise 3.2 - Explore Logs
  • Exercise 3.3 - Explore Metrics
  • Exercise 3.4 - Explore Traces

• Exercise 4 - Explore SAP BTP Connectivity Capabilities in Kyma

  • Exercise 4.1 - Overview of the Kyma Modules
  • Exercise 4.2 - Explore the SAP BTP Connectivity modules
  • Exercise 4.3 - Explore Day-2 Relevant Operations

• Exercise 5 - Configure Transparent Proxy Kyma Module

  • Exercise 5.1 - Navigate to your working Namespace in Kyma Dashboard
  • Exercise 5.2 - Create a dynamic Destination Custom Resource
  • Exercise 5.3 - Create a static Destination Custom Resource
  • Exercise 5.4 - Explore the results of the creation of the Destination CRs

• Exercise 6 - Use Transparent Proxy Kyma Module

  • Exercise 6.1 - Run a cURL Pod Included in the Istio Service Mesh
  • Exercise 6.2 - Connect to remote systems defined as destinations using the dynamic "gateway" Destination CR
  • Exercise 6.3 - Connect to a remote system defined as destination using the dedicated (static) "s4any" Destination CR

• Exercise 7 - Enable Transparent Proxy Kyma Module (optional)

  • Exercise 7.1 - Navigate To The Kyma Dashboard
  • Exercise 7.2 - Enable Transparent Proxy Module
  • Exercise 7.3 - Explore What Changed In The Kyma Instance

Session Feedback. Thank you!

Additional resources

SAP Kyma in Developers Tutorial Navigator: here.
SAP Kyma runtime samples: here

Contributing

Please read the CONTRIBUTING.md to understand the contribution guidelines.

Code of Conduct

Please read the SAP Open Source Code of Conduct.

How to obtain support

Support for the content in this repository is available during the actual time of the online session for which this content has been designed. Otherwise, you may request support via the Issues tab.

License

Copyright (c) 2025 SAP SE or an SAP affiliate company. All rights reserved. This project is licensed under the Apache Software License, version 2.0 except as noted otherwise in the LICENSE file.