To consume SAP Cloud Platform services in your Minikube, your cluster must be registered at the Service Manager in the context of a subaccount. For this, you need a Global account and a subaccount, and must be administrator of this subaccount. For your production Kubernetes cluster has to be configured the same way with SAP Cloud Platform to establish the connection.
Prerequisites
Kubernetes Cluster
Kubectl – v1.7 or higher
Helm 3 – install helm in Mac OS using brew (currently it will install v3.1.1). You can also download the desired version of helm from release site and install manually.
brew install helmService Manger CLI v1.7.3 or higher – Link
Tiller (Helm Server Side Component) – As we are using Helm 3, we don’t need to run init.
Configuration In SAP Cloud Platform
Get a sub account or create a new sub account under your global account. Make sure you are the security administrator to see the security tab in the left navigation. I have created a sub account SCP-K8 for my usage.
Access to Service Manager API
The Kubernetes cluster must be registered at the Service Manager to access services from SAP Cloud Platform in Kubernetes. For this, you first need to obtain the credentials for the Service Manager.
Navigate to the sub account in SAP Cloud Platform Cockpit → Subscriptions → Service Manager and subscribe.
Assign your IDP users to the sub account service administrator collection
In the SAP Cloud Platform cockpit, navigate to your subaccount and choose Security → Trust Configuration → SAP ID Service.
Assign Subaccount Service Administrator role collection to your email address.
Repeat the same for other users to have access to Service Manager API
Login to Service Manager
Login to Service Manger using Service Manager CLI.
smctl login -a https://service-manager.cfapps.<landscape domain> --param subdomain=<subdomain>
User: <user name with service manager role>
Password: *****For me following are the details
smctl login -a https://service-manager.cfapps.sap.hana.ondemand.com --param subdomain=scpk8Register Sub Account Scoped Cluster
$ smctl register-platform minikube kubernetes
ID Name Type Description Created Updated Labels Username Password
------------------------------------ -------- ---------- ----------- --------------------------- --------------------------- -------------------------------------------------- -------------------------------------------- --------------------------------------------
4f7c0ef1-2e84-4124-b55f-7a36f2d79843 minikube kubernetes 2020-02-25T04:30:28.971113Z 2020-02-25T04:30:28.971113Z subaccount_id=55d8129b-1e6b-4231-9c80-000ae080f9dd xxxxxxxxxxxxxxusernamexxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxpasswordxxxxxxxxxxxxxxxxxxxxxSave the credential some where safe. We will be needing this while configuring service manager broker.
Install Service Catalog in Minikube
If all prerequisites like minikube, kubectl, helm are installed you can start your minikube cluster using the following command.
minikube start --vm-driver=hyperkit --hyperkit-vpnkit-sock=/Users/xxx/Library/Containers/com.docker.docker/Data/vpnkit.eth.sock --kubernetes-version=1.17.3Now when your helm is connected to tiller at minikube, we are ready to install service-catalog using helm. Let’s first add the service-catalog repository to helm.
helm repo add svc-cat https://svc-catalog-charts.storage.googleapis.comLet’s see if we have the service-catalog available for install. Use the following command to search in the repository.
helm search repo service-catalog//in helm 3
helm search service-catalog// in helm 2
//As I am using helm 3
$ helm search repo service-catalog
NAME CHART VERSION APP VERSION DESCRIPTION
svc-cat/catalog 0.2.1 service-catalog API server and controller-manag...
svc-cat/catalog-v0.2 0.2.2 service-catalog API server and controller-manag...Now let’s install service-catalog using the following command.
kubectl create namespace catalog
helm install catalog svc-cat/catalog --namespace catalog --version 0.3.0-beta.2Install Service Manger Broker Proxy in Minikube
Add the service manager broker proxy repository to helm.
helm repo add peripli 'https://peripli.github.io'Install the service manager agent using the following command.
kubectl create namespace service-broker-proxy
helm install service-broker-proxy peripli/service-broker-proxy-k8s \
--namespace service-broker-proxy \
--set image.tag=v0.3.2 \
--set config.sm.url=https://service-manager.cfapps.sap.hana.ondemand.com \
--set sm.user=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx \
--set sm.password=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxsm.user and sm.password, we have already got while registering our cluster using service manager cli. sm.url is the service manager url.
Install Service Catalog CLI
Use following to install service catalog cli in Mac OS. This is required to work with service catalog installed in minikube.
curl -sLO https://download.svcat.sh/cli/latest/darwin/amd64/svcat
chmod +x ./svcat
mv ./svcat /usr/local/bin/
svcat version --clientConfigure svcat to use your local kubeconfig
export kubeconfig="/Users/xxx/.kube/config"Test The Connectivity To SAP Cloud Platform
$ svcat marketplace
CLASS PLANS DESCRIPTION
+-----------------------------+-------------+---------------------------------+
feature-flags lite Feature Flags service for
controlling feature rollout
sdm standard Document management for
Business Applications
auditlog-management default Retrieve logs and change
retention
malware-scanner external Scan single files for threats,
via HTTP
transport standard Provides programmatic access
to Transport Management.
transport-ci standard Provides programmatic access
to Transport Management.
hana-cloud hana Leverage the in-memory data
processing capabilities of
SAP HANA in the cloud as one
simple gateway to all data.
metering-service development Metering-as a Service on
SAP Cloud platform enables
services to meter their usage
information, so it can be used
later for commercial purposes
like billing or license
compliance.
default
sap-onpremise-extensibility api-access Connects extension
applications running in an SAP
Cloud Platform subaccount to
an On-Premise system.
xsuaa broker Manage application
authorizations and trust to
identity providers.
application You may have to modify your entitlement in SAP Cloud Platform Cockpit. For doing so navigate to SAP Cloud Platform Cockpit → Entitlements → Configure Entitlements → Add Service Plans and save once done.
Now let’s create a service instance of xsuaa using the following command.
$ svcat provision mdcs-hana --class hana-cloud --plan hana
Name: xsuaa-example
Namespace: default
Status:
Class: xsuaa
Plan: z48zz57zz45zgt9z2fzjz4azz47zz4-fd5fd60de69db525c44c9608067cb61a
Parameters:
No parameters definedLet’s now get all the instances that were provisioned.
$ svcat get instance
NAME NAMESPACE CLASS PLAN STATUS
+----------------+-----------+-------+-----------------------------------------------------------------+--------+
xsuaa-example default xsuaa z48zz57zz45zgt9z2fzjz4azz47zz4-fd5fd60de69db525c44c9608067cb61a ReadyLet’s try deprovisioning the service instance.
svcat deprovision xsuaa-exampleMulti Cloud Architecture gives you the provision to support platforms across multiple cloud provides. Like SAP Cloud Platform, you can have service manger broker set up for Google Cloud Platform and Amazon Web Services too.
Original Article:
https://blogs.sap.com/2020/03/29/register-minikube-kubernetes-cluster-with-scp-service-manager/