Skip to content

Commit

Permalink
Merge pull request #65 from SAP-samples/deprecate/self-onboarding
Browse files Browse the repository at this point in the history
Deprecate/self onboarding
  • Loading branch information
alperdedeoglu authored Oct 13, 2024
2 parents 39de2fa + 710d62f commit 7472aa8
Show file tree
Hide file tree
Showing 266 changed files with 2 additions and 83,408 deletions.
2 changes: 0 additions & 2 deletions DC_TOC.md
Original file line number Diff line number Diff line change
Expand Up @@ -46,7 +46,6 @@ Prerequisites
- [Integrate a consumer's IdP](https://github.com/SAP-samples/btp-cap-multitenant-saas/blob/main/docu/4-expert/integrate-consumers-idp/README.md)<!-- dc-card: {"label": ["Basics"]} dc-card -->
- [Use local/hybrid development](https://github.com/SAP-samples/btp-cap-multitenant-saas/blob/main/docu/4-expert/local-hybrid-development/README.md)<!-- dc-card: {"label": ["Hands-On"]} dc-card -->
- [Manage tenant database containers](https://github.com/SAP-samples/btp-cap-multitenant-saas/blob/main/docu/4-expert/manage-tenant-containers/README.md)<!-- dc-card: {"label": ["Hands-On"]} dc-card -->
- [Self-Onboarding of SaaS tenants](https://github.com/SAP-samples/btp-cap-multitenant-saas/blob/main/docu/4-expert/saas-self-onboarding/README.md)<!-- dc-card: {"label": ["Hands-On"]} dc-card -->
- [Send emails using Microsoft Graph API](https://github.com/SAP-samples/btp-cap-multitenant-saas/blob/main/docu/4-expert/send-emails-graph-api/README.md)<!-- dc-card: {"label": ["Hands-On"]} dc-card -->
- [Update tenant databases containers](https://github.com/SAP-samples/btp-cap-multitenant-saas/blob/main/docu/4-expert/update-tenant-containers/README.md)<!-- dc-card: {"label": ["Hands-On"]} dc-card -->
- [Cloud Foundry - Use SAP Transport Management](https://github.com/SAP-samples/btp-cap-multitenant-saas/blob/main/docu/4-expert/-CloudFoundry-/configure-transport-management/README.md)<!-- dc-card: {"label": ["Hands-On","Cloud Foundry"]} dc-card -->
Expand All @@ -57,7 +56,6 @@ Prerequisites
- [Cloud Foundry - Using the SAP Theme Designer](https://github.com/SAP-samples/btp-cap-multitenant-saas/blob/main/docu/4-expert/-CloudFoundry-/using-sap-theme-designer/README.md)<!-- dc-card: {"label": ["Hands-On","Cloud Foundry"]} dc-card -->
- [Cloud Foundry - External Session Management](https://github.com/SAP-samples/btp-cap-multitenant-saas/blob/main/docu/4-expert/-CloudFoundry-/approuter-external-session-management/README.md)<!-- dc-card: {"label": ["Hands-On","Cloud Foundry"]} dc-card -->
- [Kyma - Setup custom domain usage](https://github.com/SAP-samples/btp-cap-multitenant-saas/blob/main/docu/4-expert/-Kyma-/custom-domain-usage/README.md)<!-- dc-card: {"label": ["Hands-On","Kyma"]} dc-card -->
- [Kyma - Self-Onboarding and One-Domain](https://github.com/SAP-samples/btp-cap-multitenant-saas/blob/main/docu/4-expert/-Kyma-/saas-self-onboarding/README.md)<!-- dc-card: {"label": ["Hands-On","Kyma"]} dc-card -->
- Complete
- [Share your Feedback](https://github.com/SAP-samples/btp-cap-multitenant-saas/blob/main/docu/5-complete/share-feedback/README.md)
- [Complete the Mission](https://github.com/SAP-samples/btp-cap-multitenant-saas/blob/main/docu/5-complete/complete-mission/README.md)
Expand Down
3 changes: 1 addition & 2 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -92,7 +92,6 @@ After adding some or all of the Advanced Features, the following **Expert Featur
**Kyma** (only)

- [Custom domain usage](./docu/4-expert/-Kyma-/custom-domain-usage/README.md)
- [Onboarding Automation and One Domain](./docu/4-expert/-Kyma-/saas-self-onboarding/README.md)
- [Setup a Continuous Integration Scenario](./docu/4-expert/-Kyma-/setup-cicd-for-project/README.md)


Expand Down Expand Up @@ -182,7 +181,7 @@ Please check the below details on these additional entitlements required for the
- Automated Credential Rotation (Workaround available - 2023/06/09)
- **Problem**: Users are facing a callback authentication error after successful login via SAP IAS as part of the One-Domain concept.
- **Issue**: Activating the automated credential rotation of the SAP BTP Service Operator renews the X.509 certificate of the respective SAP IAS service bindings. As the Application Router caches the binding details for performance reasons, the cached X.509 certificate is not valid anymore after rotation. This results in an authentication error between Application Router and SAP IAS.
- **Workaround**: A restart of the Application Router after credential rotation will solve this issue and the latest X.509 certificate is being cached. This restart can be automated in a Kubernetes/Kyma CronJob, starting a new Deployment rollout according to your credential rotation cycle. You can find an example incl. roles and service accounts in the respective Expert Features ([click here](./docu/4-expert/-Kyma-/saas-self-onboarding/files/yaml/deployment-restart.yaml)). Combined with an external Redis cache for Application Router session management, downtimes can be minimized or completely mitigated! Make sure to have a sufficient overlap of both, the old and new X.509 certificate (*rotatedBindingTTL: 24h* & *rotationFrequency: 48h*), so the cached credentials are still valid until the restart has happened!
- **Workaround**: A restart of the Application Router after credential rotation will solve this issue and the latest X.509 certificate is being cached. This restart can be automated in a Kubernetes/Kyma CronJob, starting a new Deployment rollout according to your credential rotation cycle. Combined with an external Redis cache for Application Router session management, downtimes can be minimized or completely mitigated! Make sure to have a sufficient overlap of both, the old and new X.509 certificate (*rotatedBindingTTL: 24h* & *rotationFrequency: 48h*), so the cached credentials are still valid until the restart has happened!
- **Solution**: Issue has been addressed and a potential notification mechanism might trigger an automated update of the Application Router cache in the future (subject to change).
- Consumer extension API issue (Workaround available - 2022/12/19)
- **Problem**: Applying a Consumer extension currently results in the Push API not being usable by the extended Tenant anymore.
Expand Down
1 change: 1 addition & 0 deletions docu/1-discover/6-whats-new/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,3 +8,4 @@ On this section of the tutorial, you will find a summary of all new features aft
| Date | Title | Branch | Short description |
| ---------- | --------------------------------- | ------ | ------------------------------------------------------------------------------------------------- |
| 2023-08-18 | Tenant onboarding using Terraform | main | Added [Expert Feature](../../4-expert/btp-terraform-setup/) for Tenant Onboarding using Terraform |
| 2024-10-13 | Self onboarding has been deprecated | main | Still can be reached under *self-onboarding-archive* branch, but will no longer be maintained |
Loading

0 comments on commit 7472aa8

Please sign in to comment.