https://raw.githubusercontent.com/ajmaradiaga/feeds/main/scmt/topics/SAP-BTP-Kyma-runtime-qa.xmlSAP Community - SAP BTP, Kyma runtime2026-02-21T18:00:25.717528+00:00python-feedgenSAP BTP, Kyma runtime Q&A in SAP Communityhttps://community.sap.com/t5/technology-q-a/how-to-perform-remote-table-replication-if-the-hdi-container-is-created/qaq-p/13989322How to perform Remote Table Replication if the HDI Container is created from Kyma Environment?2025-01-17T17:45:18.820000+01:00abhinavsingh04https://community.sap.com/t5/user/viewprofilepage/user-id/906761<P>Hi,</P><P>I want to perform Remote Table Replication and have successfully achieved this in the Cloud Foundry environment. However, my main goal is to perform the same for an HDI Container created in the Kyma environment.</P><P>The challenge I’m facing is that in the SAP HANA Cloud Database, when I navigate to <STRONG>Add Instance > HDI Container</STRONG>, I can only see containers created in the Cloud Foundry environment. The containers created in the Kyma environment are not visible, which eventually prevents me from setting up Virtual Tables and Remote Subscriptions.</P><P>Could you please guide me on how to achieve this?</P><P>Thanks,<BR />Abhinav</P>2025-01-17T17:45:18.820000+01:00https://community.sap.com/t5/technology-q-a/sap-btp-cloud-foundry-java-heap-dumps-to-sap-object-store/qaq-p/13994642SAP BTP Cloud foundry Java Heap dumps to SAP Object Store2025-01-23T18:02:31.248000+01:00RishiSutharhttps://community.sap.com/t5/user/viewprofilepage/user-id/1688230<P>Hi,</P><P> </P><P>I am attempting to push Java heap and thread dumps to a persistent location for further analysis. Persistent storage is required if a container goes down and the Java Heap or thread dumps taken can be lost if container goes down. Following the steps provided in the blog below java heap and thread dumps are able to be taken but are stored locally within the container. It can be exported to a local machine but the files can be very large in GBs.</P><P><A href="https://community.sap.com/t5/technology-blogs-by-sap/java-heap-and-thread-dumps-on-sap-btp-cloud-foundry/ba-p/13514382" target="_blank">https://community.sap.com/t5/technology-blogs-by-sap/java-heap-and-thread-dumps-on-sap-btp-cloud-foundry/ba-p/13514382</A></P><P>Is there a known solution around sending these files to SAP object store or another persistent storage location?</P><P>Thanks,</P><P>Rishi</P>2025-01-23T18:02:31.248000+01:00https://community.sap.com/t5/technology-q-a/kyma-apirule-v2alpha1-maxage-default-causing-an-error-in-terraform/qaq-p/13998387Kyma APIRule v2alpha1: MaxAge default causing an error in Terraform2025-01-27T17:21:35.941000+01:00SeanKilleenhttps://community.sap.com/t5/user/viewprofilepage/user-id/164460<P>Hi all,</P><P>I'm working to migrate my existing entries for APIRule v1beta1 to v2alpha1, and I've hit upon something that I think might be an issue with the default manifest coming from Terraform.</P><P>Below is my original version of the v1beta1 rule in our Terraform (since it's just a manifest it should map to the YAML directly):</P><pre class="lia-code-sample language-yaml"><code>resource "kubernetes_manifest" "api_gateway_seq" {
depends_on = [
kubernetes_namespace_v1.o11y, data.kubernetes_service_v1.grafana_service, kubernetes_namespace_v1.dns_management,
kubernetes_manifest.istio_gateway
]
for_each = local.gateways
manifest = {
apiVersion = "gateway.kyma-project.io/v1beta1"
kind = "APIRule"
metadata = {
name = "seq-apigateway-https-${each.value.suffix}"
namespace = kubernetes_namespace_v1.o11y.metadata[0].name
}
spec = {
gateway = each.value.gateway
host = "seq.${each.value.host}"
service = {
name = data.kubernetes_service_v1.seq.metadata[0].name
port = 80
}
rules = [{
path = "/.*"
methods = ["GET", "POST", "PUT", "DELETE"]
accessStrategies = [{
handler = "allow"
config = {}
}]
}]
}
}
}</code></pre><P>And below are the modifications I've made to support v2alpha1 --</P><UL><LI>Updated "host" to "hosts" with an array of 1</LI><LI>Added namespace to service</LI><LI>Added noAuth = true</LI></UL><pre class="lia-code-sample language-yaml"><code>resource "kubernetes_manifest" "api_gateway_seq" {
depends_on = [
kubernetes_namespace_v1.o11y, data.kubernetes_service_v1.grafana_service, kubernetes_namespace_v1.dns_management,
kubernetes_manifest.istio_gateway
]
for_each = local.gateways # we have multiple gateways
manifest = {
apiVersion = "gateway.kyma-project.io/v2alpha1"
kind = "APIRule"
metadata = {
name = "seq-apigateway-https-${each.value.suffix}"
namespace = kubernetes_namespace_v1.o11y.metadata[0].name
}
spec = {
gateway = each.value.gateway
hosts = ["seq.${each.value.host}"]
service = {
name = data.kubernetes_service_v1.seq.metadata[0].name
namespace = data.kubernetes_service_v1.seq.metadata[0].namespace
port = 80
}
rules = [{
path = "/.*"
methods = ["GET", "POST", "PUT", "DELETE"]
noAuth = true
}]
}
}
}</code></pre><P> However, when I attempt to apply the Terraform, I see:</P><P>> AttributeName("maxAge"): can't use tftypes.String as tftypes.Number</P><P>I can't find any reference to maxAge in any default YAML files I've seen, but it does seem like it factors into corsPolicy.</P><P>Is there an appropriate default I should be moving to here? Or is this an issue with the standard resource definition?</P>2025-01-27T17:21:35.941000+01:00https://community.sap.com/t5/technology-q-a/unable-to-open-trail-tenant/qaq-p/14003997Unable to open Trail Tenant2025-02-02T11:32:50.590000+01:00chonavinhttps://community.sap.com/t5/user/viewprofilepage/user-id/674984<P>Hi Experts,</P><P>I have been using the Trial Tenants for over a month now. However, when I tried to open the tenant recently, I encountered the following error:</P><P>No Client with request id: sb-it-prov!t196</P><P>Authorization Request Error: The request for authorization was invalid.</P><P>Enclosed screen shot for your reference.</P><P>Thanks,</P><P>Vinay Chonale</P><P> </P>2025-02-02T11:32:50.590000+01:00https://community.sap.com/t5/technology-q-a/how-to-enable-cloud-identity-services-for-kyma-runtime/qaq-p/14019819How to enable Cloud Identity Services for Kyma runtime2025-02-18T10:48:23.134000+01:00renejurmannhttps://community.sap.com/t5/user/viewprofilepage/user-id/163345<P>Hi experts,</P><P>I try to update an existing Kyma runtime using the SAP Cloud Identity Services as Custom Identity Provider.<BR />I followed the blog <A href="https://community.sap.com/t5/technology-blogs-by-sap/configure-custom-sap-ias-tenant-with-sap-btp-kyma-runtime-environment/ba-p/13676954" target="_self">Configure Custom SAP IAS tenant with SAP BTP Kyma runtime environment</A></P><P>So, I created a new namespace in my Kyma environment. Here I created a service instance using offering name "identity" and plan name "application" setting following parameters:</P><pre class="lia-code-sample language-yaml"><code>assertion-attributes:
email: mail
first_name: firstName
groups: companyGroups
last_name: lastName
locale: language
login_name: loginName
mail: mail
scope: companyGroups
user_uuid: userUuid
default-attributes: {}
display-name: Kyma runtime
home-url: https://api.#######.kyma.ondemand.com
name: ias-kyma-#######
oauth2-configuration:
grant-types:
- authorization_code
- authorization_code_pkce_s256
public-client: true
redirect-uris:
- https://dashboard.kyma.cloud.sap
- http://localhost:8000
token-policy:
access-token-format: default
refresh-parallel: 3
token-validity: 3600
subject-name-identifier:
attribute: mail
fallback-attribute: none
user-access: internal</code></pre><P>Based on this service instance I created a service binding called "skr-ias-binding" with secret name "skr-ias-binding-secret" and following parameters:</P><pre class="lia-code-sample language-json"><code>{
"credential-type": "NONE"
}</code></pre><P>Once the service binding was provisioned I copied the ClientId and Url from the secret and updated the Kyma runtime using following JSON:</P><pre class="lia-code-sample language-json"><code>{
"oidc": {
"issuerURL": "https://ouriastenant.accounts.ondemand.com",
"clientID": "########-####-####-####-############",
"usernameClaim": "sub",
"groupsClaim": "groups",
"signingAlgs": [
"RS256"
],
"usernamePrefix": "-"
},
"administrators": [
"user1@mycompany.com",
"user2@mycompany.com"
]
}</code></pre><P>The Kyma runtime was updated successfully. And when I launch the dashboard I'm also asked to log in with my IAS user.</P><P>However, after login I see following error:</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="renejurmann_0-1739871575983.png" style="width: 400px;"><img src="https://community.sap.com/t5/image/serverpage/image-id/226981i0145823CC651BC8C/image-size/medium?v=v2&px=400" role="button" title="renejurmann_0-1739871575983.png" alt="renejurmann_0-1739871575983.png" /></span></P><P>When I check the network trace within the developer tools of the browser I see lot of HTTP 401 errors telling me I'm not authorized. But when I decode the Bearer token attached to the requests I can see all my users details. The "sub" attribute of the Bearer token contains my email which is also configured to be an administrator of the Kyma environment.</P><P>Within the IAS admin console I can see the new application. From the configuration it looks good as also described in <A href="https://help.sap.com/docs/btp/sap-business-technology-platform/configure-custom-identity-provider-for-kyma" target="_self" rel="noopener noreferrer">SAP Help</A>:</P><P>Redirect URIs are set to "<A href="https://dashboard.kyma.cloud.sap"" target="_blank" rel="nofollow noopener noreferrer">https://dashboard.kyma.cloud.sap" </A>and "<A href="http://localhost:8000"" target="_blank" rel="nofollow noopener noreferrer">http://localhost:8000"</A> <BR />The grant types "Authorization code" and "Enforce PKCE" are checked (but no other grant type)<BR />The Public Client is enabled</P><P> </P><P>Did I miss a step?</P><P>regards</P><P>René</P>2025-02-18T10:48:23.134000+01:00https://community.sap.com/t5/technology-q-a/in-calls-pallet-externals-request-reply-processing-option-not-showing/qaq-p/14045399In Calls Pallet - Externals - Request Reply - Processing Option not showing.2025-03-15T07:23:47.855000+01:00HarshaVardhanReddyhttps://community.sap.com/t5/user/viewprofilepage/user-id/2029148<P>IN SAP CPI Trail Account - In Calls Pallet - Externals - Request Reply - Processing Option not showing. nis there any this issue, it shouldnot wprk in trail versions.</P>2025-03-15T07:23:47.855000+01:00https://community.sap.com/t5/enterprise-resource-planning-q-a/where-can-i-get-training-for-sap-certification-exam-c-cpe-2409/qaq-p/14092255where can i get training for SAP certification exam C_CPE_24092025-05-02T19:39:02.548000+02:00Vaishali_Porthihttps://community.sap.com/t5/user/viewprofilepage/user-id/1486014<P><SPAN>"Could you provide information on where to find documentation or tutorials that outline the prerequisites for:</SPAN></P><UL><LI><SPAN>Building side-by-side extensions</SPAN></LI><LI><SPAN>Developing applications in SAP BTP, Kyma Runtime</SPAN></LI><LI><SPAN>Developing applications in SAP BTP, Cloud Foundry runtime </SPAN></LI><LI><SPAN>Developing advanced extensions with SAP Cloud SDK on SAP BTP?"</SPAN></LI></UL><P><SPAN>"An example screenshot related to building side-by-side extensions on SAP BTP is referenced in this context."</SPAN></P>2025-05-02T19:39:02.548000+02:00https://community.sap.com/t5/technology-q-a/helm-install-issue-when-following-tutorial-for-cdm-to-integrate-application/qaq-p/14149209Helm install issue when following tutorial for CDM to integrate application with SAP Build workzone2025-07-10T10:30:07.904000+02:00AbhishekBantiyahttps://community.sap.com/t5/user/viewprofilepage/user-id/2002845<P>I am following the tutorial <A href="https://developers.sap.com/tutorials/integrate-with-work-zone-kymaruntime.html" target="_blank" rel="noopener noreferrer">https://developers.sap.com/tutorials/integrate-with-work-zone-kymaruntime.html</A> with respect to CDM for deploying application to kyma.<BR />Tutorial mentions to delete the destination configuration in chart/values.yaml. However after doing the step when one does the helm install command, it throws an exception saying no value for destination service instance and plan found<BR /><BR />I reckon this is because destination has also been bound in the srv configuration<BR /><BR />Tutorial only says to delete destination binding in the html5-deployer section.<BR /><BR />Should one also go ahead and delete the destination binding for srv as well</P>2025-07-10T10:30:07.904000+02:00https://community.sap.com/t5/technology-q-a/apirule-not-working-on-kyma/qaq-p/14159264APIRule not working on kyma2025-07-22T15:57:28.731000+02:00MalayaKumarDashttps://community.sap.com/t5/user/viewprofilepage/user-id/2122944<P>API rules not working on this cluster : <A href="https://api.bc6186c.kyma.ondemand.com/" target="_blank" rel="noopener nofollow noreferrer">https://api.bc6186c.kyma.ondemand.com/</A></P><P> </P><P>While exposing I used {APP}.c-{CLUSTER_DOMAIN} which used to work but not working anymore.</P>2025-07-22T15:57:28.731000+02:00https://community.sap.com/t5/technology-q-a/can-t-open-the-commerce-mock-application-lt-deploy-commerce-mock/qaq-p/14180367Can't open the Commerce Mock Application.<Deploy Commerce Mock Application in SAP BT>2025-08-14T09:39:58.972000+02:00bessie123https://community.sap.com/t5/user/viewprofilepage/user-id/2225764<P><A href="https://developers.sap.com/tutorials/cp-kyma-mocks.html#bfee5f18-44f6-46b4-921a-4c1964e60f14" target="_blank" rel="noopener noreferrer">https://developers.sap.com/tutorials/cp-kyma-mocks.html#bfee5f18-44f6-46b4-921a-4c1964e60f14</A> Deploy Commerce Mock Application in SAP BTP, Kyma Runtime In the step4,I can't open the Commerce Mock Application in website.why?</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="bessie123_0-1755157037175.png" style="width: 400px;"><img src="https://community.sap.com/t5/image/serverpage/image-id/300676iC27718F5A63584D0/image-size/medium?v=v2&px=400" role="button" title="bessie123_0-1755157037175.png" alt="bessie123_0-1755157037175.png" /></span><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="bessie123_1-1755157136679.png" style="width: 400px;"><img src="https://community.sap.com/t5/image/serverpage/image-id/300677iCC0284117AFAE9E1/image-size/medium?v=v2&px=400" role="button" title="bessie123_1-1755157136679.png" alt="bessie123_1-1755157136679.png" /></span></P><P> </P>2025-08-14T09:39:58.972000+02:00https://community.sap.com/t5/technology-q-a/deploy-an-application-as-container-on-sap-btp-kyma-runtime/qaq-p/14222076Deploy an application as container on SAP BTP Kyma runtime2025-09-19T09:10:26.183000+02:00Ankur_Kumar1https://community.sap.com/t5/user/viewprofilepage/user-id/171016<P><STRONG>Disclaimer: The insights shared in this blog are based on my personal observations and learning. They may not apply universally, and I encourage readers to conduct their own research and make an informed decision before using this content for productive use.</STRONG></P><P>We are excited to launch a new series of blogs that will guide you through deploying container-based applications on the SAP BTP Kyma Runtime environment. This series will not only cover the fundamentals of containerization but also provide hands-on insights, best practices, and real-world examples to help you harness the full potential of Kyma for scalable, cloud-native application deployment.</P><H3 id="toc-hId-1889974015">Steps to Enable the Kyma Runtime Environment</H3><OL><LI><P><STRONG>Access Your Trial Account</STRONG></P><UL><LI><P>Log in to your SAP BTP Trial account.</P></LI></UL></LI><LI><P><STRONG>Create or Open a Subaccount</STRONG></P><UL><LI><P>Navigate to your global account.</P></LI><LI><P>Either open an existing subaccount or create a new subaccount dedicated for Kyma Runtime.</P></LI></UL></LI><LI><P><STRONG>Enable Kyma Runtime</STRONG></P><UL><LI><P>In the subaccount, go to the <STRONG>Entitlements</STRONG> section and make sure Kyma Runtime is assigned.</P></LI><LI><P>Navigate to <STRONG>Kyma Environment</STRONG> and enable the runtime.</P></LI><LI><P>The setup process may take a few minutes while the environment is being provisioned.</P></LI></UL></LI><LI><P><STRONG>Download the Kubeconfig File</STRONG></P><UL><LI><P>Once Kyma is active, download the <STRONG>Kubeconfig URL</STRONG> file.</P></LI><LI><P>Store it securely and add it to your kyma folder (this will be used to authenticate your local CLI with the Kyma cluster).</P></LI></UL></LI></OL><P><SPAN><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Ankur_Kumar1_0-1756797826391.png" style="width: 999px;"><img src="https://community.sap.com/t5/image/serverpage/image-id/307665iFBC95F6CB7786A3F/image-size/large?v=v2&px=999" role="button" title="Ankur_Kumar1_0-1756797826391.png" alt="Ankur_Kumar1_0-1756797826391.png" /></span></SPAN></P><H3 id="toc-hId-1693460510">Introduction</H3><P>Looking to take your Spring Boot Eureka application to the next level by deploying it securely and reliably on the Kyma Runtime within SAP Business Technology Platform (BTP)? This guide provides a step-by-step walkthrough of the entire lifecycle: from packaging your application as an OCI-compliant container image, pushing it to a trusted container registry, and defining Kubernetes manifests, all the way to deploying it on Kyma. By the end, your Eureka service will be running in a scalable, cloud-native environment, fully integrated with the capabilities of SAP BTP.</P><P>Kyma bridges the gap between cloud-native technologies and SAP’s enterprise cloud infrastructure—so mastering these steps will help you build robust solutions that integrate well with SAP BTP.</P><H3 id="toc-hId-1496947005">Prerequisites</H3><P>Before you start, make sure you have the following in place:</P><UL><LI>An <STRONG>SAP BTP subaccount with the <STRONG>Kyma Runtime enabled.</STRONG></STRONG></LI><LI>The Kubernetes command-line tool (kubectl) configured with your Kyma cluster (kubeconfig).</LI><LI><STRONG>Docker installed locally.</STRONG></LI><LI>A <STRONG>Docker Hub account (or equivalent OCI registry).</STRONG></LI><LI>A simple SpringBoot eureka app ready (for example, created via the Express generator tutorial).</LI></UL><H3 id="toc-hId-1300433500">Step 1: Identify Key Domains and Subdomains</H3><UL><LI>From your SAP BTP Cockpit, note down the <STRONG>Subaccount subdomain. This is used later for routing, hostnames, etc.</STRONG></LI><LI><SPAN>From your kubeconfig.yml file, find the </SPAN><STRONG>Kyma cluster domain, for example something like *.kyma.shoot.live.k8s-hana.ondemand.com.</STRONG></LI></UL><P>These values are needed when you later define the Kubernetes and API routing resources.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Ankur_Kumar1_1-1758208035162.png" style="width: 999px;"><img src="https://community.sap.com/t5/image/serverpage/image-id/316594i5DD00DB06AFB1AFB/image-size/large?v=v2&px=999" role="button" title="Ankur_Kumar1_1-1758208035162.png" alt="Ankur_Kumar1_1-1758208035162.png" /></span></P><P> </P><H3 id="toc-hId-1103919995">Step 2: Build Your App into an OCI Image or using docker</H3><P>You can build Docker-images in many ways, but one of the recommended approaches is to use <STRONG>Cloud Native Buildpacks (CNB), for example via the <STRONG>Paketo Buildpacks.</STRONG></STRONG></P><UL><LI><P>Install the pack CLI tool.</P></LI></UL><pre class="lia-code-sample language-bash"><code>brew install buildpacks/tap/pack</code></pre><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Ankur_Kumar1_2-1758208149277.png" style="width: 999px;"><img src="https://community.sap.com/t5/image/serverpage/image-id/316595i379CCC99F2ED9E55/image-size/large?v=v2&px=999" role="button" title="Ankur_Kumar1_2-1758208149277.png" alt="Ankur_Kumar1_2-1758208149277.png" /></span></P><P>From your application directory, build the image with a command like:</P><DIV class=""><DIV class=""><DIV class=""><DIV class=""> </DIV></DIV></DIV></DIV><pre class="lia-code-sample language-bash"><code>pack build <your-dockerhub-account>/my-kyma-app:v1 \ --builder paketobuildpacks/builder-jammy-full</code></pre><P>This takes your source code, applies buildpacks, sets up the runtime image without needing a Dockerfile (unless you need custom behavior).</P><P>Using docker, we can use the below command to build an image</P><pre class="lia-code-sample language-bash"><code>docker build -t <repository_name>/<image_name>:<tag> <path_to_dockerfile_context></code></pre><H3 id="toc-hId-907406490">Step 3: Push the Image to Docker Hub</H3><P>Once built, you need to get the image into a container registry that your Kyma cluster can pull from.</P><P>Log into Docker:</P><DIV class=""><DIV class=""><DIV class=""><DIV class=""> </DIV></DIV></DIV></DIV><pre class="lia-code-sample language-bash"><code>docker login -u <your-Docker-ID> -p <password></code></pre><P>Push the image:</P><DIV class=""><DIV class=""><DIV class=""><DIV class=""><DIV class=""> </DIV></DIV></DIV></DIV></DIV><pre class="lia-code-sample language-bash"><code>docker push <your-dockerhub-account>/<IMAGE_NAME>:<TAG_NAME></code></pre><P> </P><H3 id="toc-hId-710892985">Step 4: Prepare the Deployment Namespace</H3><P>In your Kyma cluster, it's best to isolate your application in its own namespace (or use existing ones as per your organizational setup).</P><DIV class=""><DIV class=""><DIV class=""><DIV class=""> </DIV></DIV></DIV></DIV><pre class="lia-code-sample language-yaml"><code>kubectl create namespace my-namespace</code></pre><DIV class=""><P>Alternatively, this can be done via the Kyma dashboard UI.</P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Ankur_Kumar1_3-1758261018278.png" style="width: 999px;"><img src="https://community.sap.com/t5/image/serverpage/image-id/316773i620BBCC3ED9FA8E1/image-size/large?v=v2&px=999" role="button" title="Ankur_Kumar1_3-1758261018278.png" alt="Ankur_Kumar1_3-1758261018278.png" /></span><P> </P><H3 id="toc-hId-514379480">Step 5: Allow Kyma to Pull Your Image Securely</H3><P>If your image is in a private registry (or even if public but you want more control), create a Kubernetes secret of type docker-registry. This allows your cluster's nodes / pods to authenticate with Docker Hub.</P><DIV class=""><DIV class=""><DIV class=""> </DIV></DIV></DIV></DIV><pre class="lia-code-sample language-bash"><code>kubectl -n multitenancy-ns create secret docker-registry registry-secret --docker-server=https://index.docker.io/v1/ --docker-username=<docker-id> --docker-password=<password> --docker-email=<email></code></pre><P><SPAN>or use can use you own docker credential's to pull the image and deploy it on kyma cluster.</SPAN></P><pre class="lia-code-sample language-bash"><code>docker pull [IMAGE_NAME]:[TAG]</code></pre><P>In your Kubernetes deployment manifests, refer to this secret under imagePullSecrets.</P><H3 id="toc-hId-317865975">Step 6: Define Kubernetes and Kyma Manifests</H3><P>You’ll need YAML manifest files to define:</P><UL><LI>Deployment: Defines your app pods, container image, resource limits, probes (liveness/readiness), etc.</LI><LI>Service: Exposes your pod(s) internally on Kubernetes.</LI><LI>APIRule (Kyma Gateway object): Exposes the service externally via the Kyma gateway, defines host, route, and allowed HTTP methods (GET, POST, etc.).</LI><LI>NetworkPolicy: (Optional / depending on your security posture) To restrict access, allow only certain ingress, etc.</LI></UL><P>Here’s a simplified structure of what goes into the k8s-deployment-backend.yaml manifest:</P><H4 id="toc-hId-250435189">a. Define an APIRule to securely expose your application endpoint to external users.</H4><pre class="lia-code-sample language-yaml"><code>apiVersion: gateway.kyma-project.io/v2
kind: APIRule
metadata:
labels:
app: euraka-application
name: euraka-application
spec:
gateway: kyma-system/kyma-gateway
hosts:
- euraka-application
rules:
- path: /*
methods: ["GET", "POST", "PUT", "PATCH"]
noAuth: true
service:
name: euraka-application
port: 80</code></pre><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Ankur_Kumar1_4-1758261242863.png" style="width: 999px;"><img src="https://community.sap.com/t5/image/serverpage/image-id/316776i208D0EEAEE50216F/image-size/large?v=v2&px=999" role="button" title="Ankur_Kumar1_4-1758261242863.png" alt="Ankur_Kumar1_4-1758261242863.png" /></span></P><H4 id="toc-hId--443795411"> </H4><H4 id="toc-hId--640308916">b. Create a Deployment resource that will orchestrate the rollout and scaling of your application.</H4><pre class="lia-code-sample language-yaml"><code>apiVersion: apps/v1
kind: Deployment
metadata:
labels:
app: euraka-application
name: euraka-application
spec:
replicas: 1
selector:
matchLabels:
app: euraka-application
template:
metadata:
labels:
app: euraka-application
sidecar.istio.io/inject: "true"
spec:
imagePullSecrets:
- name: euraka-application-secret
containers:
- env:
image: <IMAGE_NAME>:<TAG_NUMBER>
name: euraka-application
ports:
- name: http
containerPort: 8761
protocol: TCP</code></pre><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Ankur_Kumar1_5-1758261400931.png" style="width: 999px;"><img src="https://community.sap.com/t5/image/serverpage/image-id/316778iB5FEF4E59C468D4D/image-size/large?v=v2&px=999" role="button" title="Ankur_Kumar1_5-1758261400931.png" alt="Ankur_Kumar1_5-1758261400931.png" /></span></P><P> </P><H4 id="toc-hId--836822421">c. Create a Service resource that routes traffic to your application’s pods and makes it discoverable.</H4><pre class="lia-code-sample language-yaml"><code>apiVersion: v1
kind: Service
metadata:
labels:
app: euraka-application
name: euraka-application
spec:
ports:
- port: 80
protocol: TCP
targetPort: 8761
selector:
app: euraka-application</code></pre><P>Make sure you replace placeholders (account names, namespace, hostnames) with your actual values.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Ankur_Kumar1_6-1758261848615.png" style="width: 999px;"><img src="https://community.sap.com/t5/image/serverpage/image-id/316786iF049DDBD5DEE469D/image-size/large?v=v2&px=999" role="button" title="Ankur_Kumar1_6-1758261848615.png" alt="Ankur_Kumar1_6-1758261848615.png" /></span></P><H4 id="toc-hId--1033335926">d. Create a NetworkPolicy to manage how your application is exposed and which traffic is allowed.</H4><pre class="lia-code-sample language-yaml"><code>apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: multitenancy
spec:
ingress:
- from:
- namespaceSelector:
matchLabels:
kubernetes.io/metadata.name: istio-system
podSelector:
matchLabels:
app: istio-ingressgateway
podSelector:
matchLabels:
release: multitenancy
policyTypes:
- Ingress</code></pre><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Ankur_Kumar1_7-1758262039518.png" style="width: 999px;"><img src="https://community.sap.com/t5/image/serverpage/image-id/316790i31608CA472B5E993/image-size/large?v=v2&px=999" role="button" title="Ankur_Kumar1_7-1758262039518.png" alt="Ankur_Kumar1_7-1758262039518.png" /></span></P><P> </P><H3 id="toc-hId--936446424">Step 7: Deploy to Kyma Runtime</H3><P>Once your manifest YAML is ready:</P><DIV class=""><DIV class=""><DIV class=""><DIV class=""><DIV class=""> </DIV></DIV></DIV></DIV></DIV><pre class="lia-code-sample language-yaml"><code>kubectl -n my-namespace apply -f deployment.yaml
kubectl -n my-namespace apply -f service.yaml
kubectl -n my-namespace apply -f rule.yaml
kubectl -n my-namespace apply -f network.yaml</code></pre><DIV class=""><P>This will create the Service, Deployment, APIRule (gateway), etc.</P><H3 id="toc-hId--1132959929">Step 8: Access Your Application</H3><UL><LI><P>In the Kyma Dashboard, navigate to <STRONG>Namespaces → your namespace → find the <STRONG>APIRule or associated <EM>Host URL.</EM></STRONG></STRONG></P></LI><LI><P>Copy the external URL enabled by the APIRule’s host field and open it in your browser.</P></LI></UL></DIV><P>If everything went well, you should see the response your Spring Boot Eureka app sends (could be a "Home Page" or whatever default you configured).</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Ankur_Kumar1_8-1758262106818.png" style="width: 999px;"><img src="https://community.sap.com/t5/image/serverpage/image-id/316791iE8A200C45643481F/image-size/large?v=v2&px=999" role="button" title="Ankur_Kumar1_8-1758262106818.png" alt="Ankur_Kumar1_8-1758262106818.png" /></span></P><P> </P><H3 id="toc-hId--1329473434">Summary</H3><P>Deploying a Spring Boot Eureka application to Kyma involves a series of well-defined steps that ensure your app is containerized, securely stored, properly exposed, and seamlessly running in a scalable, cloud-native environment. While the process may seem detailed at first, once you’ve gone through it a few times, it becomes a repeatable pattern you can apply with confidence.</P><P>By following this flow, you’ll be able to:**</P><UL><LI><P><STRONG>Accelerate delivery</STRONG> — move quickly from code to deployment.</P></LI><LI><P><STRONG>Ensure consistency</STRONG> — maintain reliable behavior across development, staging, and production environments.</P></LI><LI><P><STRONG>Leverage Kyma’s strengths</STRONG> — tap into Kubernetes-native features like autoscaling, intelligent routing, and network/security policies.”**</P></LI></UL>2025-09-19T09:10:26.183000+02:00https://community.sap.com/t5/technology-q-a/kyma-application-cannot-send-traces-to-the-telemetry-module-rbac-access/qaq-p/14236052Kyma Application Cannot Send Traces to the Telemetry Module (RBAC: Access Denied)2025-10-06T18:55:18.575000+02:00Lozanhttps://community.sap.com/t5/user/viewprofilepage/user-id/1763190<P>Hi everyone,</P><P>We wanted to perform some tracing tests on our Kyma cluster with the Telemetry module enabled.<BR />For this purpose, we deployed the <STRONG>OpenTelemetry Demo</STRONG> application in our custom namespace, following the guide:</P><P><A href="https://kyma-project.io/#/telemetry-manager/user/integration/opentelemetry-demo/README" target="_blank" rel="noopener nofollow noreferrer">Kyma OpenTelemetry Demo Integration</A></P><P>All prerequisites were completed successfully. Our telemetry backend is an <STRONG>ELK stack instance</STRONG> — the connection to it works, and we can see logs arriving there. However, the demo application is <STRONG>not able to send traces and logs</STRONG> to the dedicated Telemetry gateways.<BR />We see the following errors in the application logs:</P><pre class="lia-code-sample language-csharp"><code>[Error] File: /opentelemetry-cpp/exporters/otlp/src/otlp_grpc_log_record_exporter.cc:173
[OTLP LOG GRPC Exporter] Export() failed: RBAC: access denied
[Error] File: /opentelemetry-cpp/exporters/otlp/src/otlp_grpc_exporter.cc:159
[OTLP TRACE GRPC Exporter] Export() failed with status_code: "PERMISSION_DENIED" error_message: "RBAC: access denied"</code></pre><P>The logs are visible in Kibana, so they are probably being collected by the <STRONG>log agent(s)</STRONG>. Do we need any additional configuration (e.g., custom <STRONG>Roles</STRONG> or <STRONG>Istio AuthorizationPolicies</STRONG>), or is the demo app expected to work out of the box?</P><P>Thanks in advance for your help!</P><P><SPAN>Lozan </SPAN></P>2025-10-06T18:55:18.575000+02:00https://community.sap.com/t5/technology-q-a/preparing-for-sap-c-cpe-here-s-how-i-m-studying-each-section-without/qaq-p/14259599Preparing for SAP C_CPE? Here’s How I’m Studying Each Section Without Feeling Overwhelmed2025-11-03T19:56:45.656000+01:00Chahathttps://community.sap.com/t5/user/viewprofilepage/user-id/1574359<P>Whenever I start learning something new, I like to have everything in order.<BR />Before I even open the first tutorial, I plan what I’ll study first, what comes next, and how I’ll track it.</P><P>Recently, I started preparing for the SAP C_CPE (<SPAN class="">SA</SPAN>P Certified Associate - Backend Developer -<SPAN> </SPAN>SAP Cloud Application Programming Model) certification. Since this exam covers a mix of BTP architecture, SAP BAS, CAP, Side by side extensions, Cloud Foundry & Kyma Runtime it can easily feel like too much at once. So I created a simple structure to move step by step without feeling lost.</P><P>I began with the learning about BTP, and doing hands on by following SAP Learning Journeys, creating subaccount and adding entitlements and services (It gave me a very clear understanding of BTP architecture) and then Developing appliaction using high productivity tools of SAP BAS, Cloud Application Programming Model (CAP) because it’s the foundation of most topics in this certification. I’m spending around two weeks learning about CDS models, service layers and how everything connects in a CAP project. I’m following the official SAP Learning Journey <A href="https://learning.sap.com/certifications/sap-certified-associate-backend-developer-sap-cloud-programming-model" target="_blank" rel="noopener noreferrer">https://learning.sap.com/certifications/sap-certified-associate-backend-developer-sap-cloud-programming-model </A>and doing small hands-on exercises along the way.</P><P>My next focus is Cloud Foundry. I’ll spend about a week learning how to <SPAN>efficiently develop, run, and manage cloud-native applications on SAP BTP, Cloud Foundry Runtime.</SPAN></P><P>After that, I’ll move to Side by side extention on BTP. This will cover <SPAN>deploying extension and integrating the app into SAP Build Work Zone</SPAN>.</P><P>The next stage is Developing Appliactions in Kyma Environment. I’ll take about two weeks to explore<SPAN> a comprehensive understanding of Kubernetes and to orchestrate the deployment of the applications in the cloud. </SPAN></P><P>Finally, I’ll study Advanced Extensions with SAP Cloud SDK for about two more weeks. These are slightly advanced topics but very useful for understanding to <SPAN>develop and integrate Java, JavaScript, and TypeScript extension applications for SAP solutions like SAP S/4HANA Cloud Public Edition.</SPAN></P><P><SPAN>So in short, this will be my roadmap-</SPAN></P><P><STRONG>Recommended Study Sequence</STRONG></P><P>Here’s the order I suggest, from foundational to more advanced :</P><OL><LI><STRONG>Exploring SAP Business Technology Platform</STRONG> 5hrs (link : <A href="https://learning.sap.com/courses/exploring-sap-business-technology-platform" target="_blank" rel="noopener noreferrer">https://learning.sap.com/courses/exploring-sap-business-technology-platform</A>)<UL><LI>This gives you a broad overview of the entire platform (services, architecture, what BTP is). Good for building your base understanding.</LI><LI>So start here.</LI></UL></LI><LI><STRONG>Develop Full‑Stack Applications Using Productivity Tools in SAP Business Application Studio 8hrs</STRONG> (<A href="https://learning.sap.com/learning-journeys/develop-full-stack-applications-using-productivity-tools-in-sap-business-application-studio" target="_blank" rel="noopener noreferrer">https://learning.sap.com/learning-journeys/develop-full-stack-applications-using-productivity-tools-in-sap-business-application-studio</A>)<UL><LI>Once you know the platform, you learn the developer tooling (BAS = Business Application Studio) which is key for CAP and full-stack apps. </LI><LI>So this is your next step.</LI></UL></LI><LI><STRONG>Develop Applications on SAP BTP, Cloud Foundry Runtime</STRONG> 4hrs(<A href="https://learning.sap.com/learning-journeys/developing-applications-on-sap-btp-cloud-foundry-runtime" target="_blank" rel="noopener noreferrer">https://learning.sap.com/learning-journeys/developing-applications-on-sap-btp-cloud-foundry-runtime</A>)<UL><LI>The Cloud Foundry runtime is a major runtime environment in BTP. Understanding how to build and deploy there is critical. </LI></UL></LI><LI><STRONG>Build Side‑by‑Side Extensions on SAP BTP</STRONG> 8hrs (<A href="https://learning.sap.com/learning-journeys/build-side-by-side-extensions-on-sap-btp" target="_blank" rel="noopener noreferrer">https://learning.sap.com/learning-journeys/build-side-by-side-extensions-on-sap-btp</A>)<UL><LI>After tooling and platform basics, you dive into extension scenarios (for example side-by-side extensions of S/4HANA using CAP). This aligns closely with CAP certification topics.</LI></UL></LI><LI><STRONG>Developing Applications in SAP BTP, Kyma Runtime</STRONG> 8hrs(<A href="https://learning.sap.com/learning-journeys/developing-applications-in-sap-btp-kyma-runtime" target="_blank" rel="noopener noreferrer">https://learning.sap.com/learning-journeys/developing-applications-in-sap-btp-kyma-runtime</A>)<UL><LI>Kyma Runtime is more advanced (Kubernetes, microservices, event-mesh) and often sits on top of foundational knowledge. </LI></UL></LI><LI><STRONG>Develop Advanced Extensions with SAP Cloud SDK</STRONG> 11hrs (<A href="https://learning.sap.com/learning-journeys/develop-advanced-extensions-with-sap-cloud-sdk" target="_blank" rel="noopener noreferrer">https://learning.sap.com/learning-journeys/develop-advanced-extensions-with-sap-cloud-sdk</A>)<UL><LI>This is relatively specialized/advanced (SAP Cloud SDK, perhaps custom libraries, integrations). Once you’ve mastered the fundamentals above, you go here.</LI></UL></LI></OL><P>By the end of this plan, I’ll go through a short revision period with mock questions and quick notes from my learning.</P><P>This structured approach keeps my study plan clear and prevents me from feeling overwhelmed.<BR />I study for two to four hours a day which feels realistic, and the small milestones make it easier to stay consistent.</P><P>If you’re also preparing for C_CPE, it really helps to make your own sequence instead of jumping randomly between topics. The Learning Journeys are excellent resources, but having a personal roadmap makes a big difference.</P><P> </P><P>I’d love to hear how others are preparing for this certification too.<BR />What topics are you finding most challenging so far and how are you managing the learning.</P>2025-11-03T19:56:45.656000+01:00https://community.sap.com/t5/technology-q-a/how-can-i-access-the-alert-notification-dashboard-for-an-instance-bound-to/qaq-p/14260233How can I access the Alert Notification dashboard for an instance bound to a Kyma application?2025-11-04T12:31:03.507000+01:00Ciribomflaxhttps://community.sap.com/t5/user/viewprofilepage/user-id/1458750<P>I have an application deployed on the Kyma runtime. I created a service instance and binding and can create alert notifications from my application. Now I need a way to consume/query those notifications. For applications deployed directly on BTP there is way to access the dashboard of the Alert Notification service, but I can't find a way to do that for the instance bound to my Kyma app.</P>2025-11-04T12:31:03.507000+01:00https://community.sap.com/t5/technology-q-a/transport-app-to-another-btp-subaccount/qaq-p/14262513Transport app to another BTP subaccount2025-11-06T21:13:48.158000+01:00tskwinhttps://community.sap.com/t5/user/viewprofilepage/user-id/823618<P>Hi Community,<BR />how can I transport an app (e.g. SAP IAS) from one BTP subaccount to another ?</P><P>Thanks for your help.</P><P> </P><P>Best Regards</P>2025-11-06T21:13:48.158000+01:00https://community.sap.com/t5/technology-q-a/optimize-cost-and-usage-of-capacity-units-in-btp-kyma-runtime/qaq-p/14276460Optimize Cost and usage of Capacity units in BTP KYMA runtime2025-11-24T22:43:13.013000+01:00Sarathbabu_Siripurapuhttps://community.sap.com/t5/user/viewprofilepage/user-id/2231893<P>how to calculate and Optimize Cost and usage of Capacity units in BTP KYMA runtime. is it possible to add alert mechanism. </P>2025-11-24T22:43:13.013000+01:00https://community.sap.com/t5/enterprise-resource-planning-q-a/how-can-i-design-a-scalable-secure-and-cost-optimized-architecture-using/qaq-p/14288640How Can I Design a Scalable, Secure, and Cost-Optimized Architecture Using Microsoft Azure Services2025-12-11T11:03:57.092000+01:00aliveallen360https://community.sap.com/t5/user/viewprofilepage/user-id/2258698<P>I’m currently working on modernizing our organization’s IT infrastructure and evaluating how we can fully leverage Microsoft Azure Services to build a scalable, secure, and cost-efficient cloud environment. Since our business is rapidly growing and we plan to migrate multiple legacy applications, databases, analytics workloads, and internal services to the cloud, I’m looking for guidance on the best architectural approach and which Azure services we should prioritize.</P><P><STRONG>1. How Should I Choose the Right Azure Compute Services?</STRONG></P><UL><LI>What decision framework should I follow to select the best compute option for microservices, web apps, APIs, or batch processing workloads?</LI></UL><P><STRONG>2. Looking for Real-World Guidance</STRONG></P><P>If anyone has designed or implemented a full-scale enterprise architecture on Azure:</P><UL><LI>What were your biggest challenges and lessons learned?</LI><LI>What services did you prioritize, and what pitfalls should I avoid?</LI><LI>Any reference architectures or step-by-step practices would be extremely helpful.</LI><LI>Are there recommended patterns for mixing serverless and container-based workloads?</LI></UL>2025-12-11T11:03:57.092000+01:00https://community.sap.com/t5/technology-q-a/why-does-sap-hana-cloud-show-estimated-cost-in-a-btp-trial-account/qaq-p/14293523Why does SAP HANA Cloud show estimated cost in a BTP Trial account?2025-12-18T16:14:37.193000+01:00Silvia_Almodovar45https://community.sap.com/t5/user/viewprofilepage/user-id/2271362<P>Hello everyone:</P><P>I have an SAP BTP trial account and am trying to deploy an application in Kyma using SAP HANA Cloud.<BR />During the process, I am asked to create an SAP HANA Cloud instance, but when I do so, a pop-up window appears showing an estimated cost calculation.</P><P>My question is:<BR />With an SAP BTP trial account, is it not possible to create an SAP HANA Cloud database instance for free without any cost?</P><P>Thanks in advance!<span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="BTP_instance.png" style="width: 999px;"><img src="https://community.sap.com/t5/image/serverpage/image-id/353712i741244D62E338E9D/image-size/large?v=v2&px=999" role="button" title="BTP_instance.png" alt="BTP_instance.png" /></span></P>2025-12-18T16:14:37.193000+01:00https://community.sap.com/t5/technology-q-a/kyma-high-availability/qaq-p/14317517Kyma High availability2026-01-29T10:06:02.828000+01:00akullerhttps://community.sap.com/t5/user/viewprofilepage/user-id/14806<P>Hello everyone,</P><P>This is a silly question, but I can't really find the right answer.</P><P>Let's assume we are creating a basic Kyma cluster with three nodes. According to the documentation, they are in different regions. How is a region defined? As with CF, in a different data centre?</P><P>The more interesting question is, how are the components updated? Is this done per node? So as not to cripple the entire cluster? Is this then based on region, as with CF? Where can I see the time periods for this, is there a note?</P><P>There is therefore no need to set up multiple clusters in different sub-accounts.</P><P>If this is the case, Kyma would be the more elegant option than a multi-region setup using CF.</P><P>Best regards</P>2026-01-29T10:06:02.828000+01:00https://community.sap.com/t5/enterprise-resource-planning-q-a/need-help-verifying-phone-number/qaq-p/14321105Need Help Verifying Phone Number2026-02-04T04:20:59.232000+01:00tran_dinhda527b5fhttps://community.sap.com/t5/user/viewprofilepage/user-id/2278819<P>I'm having trouble verifying the phone number for BTP Trial account.</P><P>I'm getting an error message: "We did not send you a code because you are not allowed to request phone calls. Please contact your system administrator." When I’m trying to request a code.</P><P>I'm currently living in Vietnam. Is there a way to verify via SMS or other way?</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="tran_dinhda527b5f_0-1770175075900.png" style="width: 400px;"><img src="https://community.sap.com/t5/image/serverpage/image-id/368724iAF13DCC11CB02C1F/image-size/medium?v=v2&px=400" role="button" title="tran_dinhda527b5f_0-1770175075900.png" alt="tran_dinhda527b5f_0-1770175075900.png" /></span></P><P> </P><P> </P>2026-02-04T04:20:59.232000+01:00