How to build reusable work for BTP

resources:
- name: my-cf-service-instance-resource
  type: org.cloudfoundry.managed-service
  parameters:
    service-plan: "lite"
    service: application-logs

modules:
- name: my-mta-managed-app-module
  type: application
  path: "appBits.zip"
  requires:
    - name: my-cf-service-instance-resource

_schema-version: '3.1'
ID: sample.app.prod
extends: sample.app

modules:
  - name: my-app
    parameter:
      memory: 4GB
      instances: 2

# cf deploy <mtar> -e prod.mtaext

- name: jobscheduler-broker
  properties:
    user: ${generated-user}
    password: ${generated-password}
  parameters:
    create-service-broker: true
    service-broker-space-scoped: true
    service-broker-name: jobscheduler
    service-broker-user: ${generated-user}
    service-broker-password: ${generated-password}
    service-broker-url: ${default-url}

{
  "services": [{
    "name": "fake-service",
    "id": "acb56d7c-XXXX-XXXX-XXXX-feb140a59a66",
    "description": "A fake service.",
    "bindable": true,
    "plans": [{
      "name": "fake-plan-1",
      "id": "d3031751-XXXX-XXXX-XXXX-a42377d3320e",
      "free": false
    }]
  }]
}

# create a subaccount in eu30 region (GCP)
resource "btp_subaccount" "my_project" {
  name      = "My Project"
  subdomain = "my-project"
  region    = "eu30"
}

btp login
btp create accounts/subaccount --display-name <my-subaccount> --region <my-region> --subdomain <my-subaccount-subdomain>
btp assign accounts/entitlement --to-subaccount <my-subaccount-id> --for-service <my-service> --plan <my-service-plan> --amount <number>
btp create accounts/environment-instance --subaccount <my-subaccount-id> --display-name <my-environment> --environment <cloudfoundry> --plan standard --parameters "{\"instance_name\":\"myOrg\"}"

apiVersion: services.cloud.sap.com/v1
kind: ServiceInstance
metadata:
    name: {SERVICE_INSTANCE_NAME}
    namespace: {NAMESPACE}
spec:
    serviceOfferingName: {SERVICE_OFFERING_NAME}
    servicePlanName: {SERVICE_PLAN_NAME}
    externalName: {SERVICE_INSTANCE_NAME}

"scopes": [
  {
    "name"         : "$XSAPPNAME.Viewer",
    "description"  : "View log",
    "granted-apps" : ["$XSAPPNAME(application,appa)"]
  }
]

{
  "xsappname" : "hello-world",
  "scopes"    : [
    { "name" : "$XSAPPNAME.Display", "description" : "display" },
    { "name" : "$XSAPPNAME.Edit",    "description" : "edit" }
  ]
}

general:
  gitSshKeyCredentialsId: GitHub_Test_SSH
steps:
  cloudFoundryDeploy:
    deployTool: 'cf_native'
    cloudFoundry:
      org: 'testOrg'
      space: 'testSpace'
      credentialsId: 'MY_CF_CREDENTIALSID_IN_JENKINS'

resource "btp_subaccount_entitlement" "alert_notification_service" {
  subaccount_id = "6aa64c2f-38c1-49a9-b2e8-cf9fea769b7f"
  service_name  = "alert-notification"
  plan_name     = "free"
}

terraform {
  required_providers {
    btp = {
      source  = "SAP/btp"
      version = "1.26.0"
    }
  }
}

provider "btp" {
  globalaccount = "my-global-account-subdomain"
}

modules:
- name: myapp
  type: javascript.nodejs
  parameters:
    buildpack: https://github.com/cloudfoundry/nodejs-buildpack.git#v1.8.34

version = 1
SPDX-PackageName = "terraform-provider-btp"
SPDX-PackageDownloadLocation = "https://github.com/sap/terraform-provider-btp"

[[annotations]]
path = "**"
precedence = "aggregate"
SPDX-FileCopyrightText = "2026 SAP SE or an SAP affiliate company and terraform-provider-btp contributors"
SPDX-License-Identifier = "Apache-2.0"

"role-templates": [ {
    "name": "Viewer",
    "description": "View all books",
    "scope-references": [ "$XSAPPNAME.Display" ]
} ],
"oauth2-configuration": {
    "token-validity": 900,
    "redirect-uris": ["https://myapp.cfapps.eu10.hana.ondemand.com"],
    "credential-types": ["binding-secret","x509"]
}

apiVersion: services.cloud.sap.com/v1
kind: ServiceBinding
metadata:
  name: {BINDING_NAME}
spec:
  serviceInstanceName: {SERVICE_INSTANCE_NAME}
  credentialsRotationPolicy:
    enabled: true
    rotatedBindingTTL: 48h
    rotationFrequency: 600h

# Container spec
      securityContext:
        privileged: false
        allowPrivilegeEscalation: false
        runAsNonRoot: true
        capabilities:
          drop:
            - ALL
        readOnlyRootFilesystem: true