Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Deprecate/self onboarding #65

Merged
merged 2 commits into from
Oct 13, 2024
Merged

Deprecate/self onboarding #65

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
f39b0b5
Self onboarding removed
alperdedeoglu Oct 13, 2024
710d62f
update what's new
alperdedeoglu Oct 13, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 0 additions & 2 deletions DC_TOC.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -46,7 +46,6 @@ Prerequisites
- [Integrate a consumer's IdP](https://github.com/SAP-samples/btp-cap-multitenant-saas/blob/main/docu/4-expert/integrate-consumers-idp/README.md)<!-- dc-card: {"label": ["Basics"]} dc-card -->
- [Use local/hybrid development](https://github.com/SAP-samples/btp-cap-multitenant-saas/blob/main/docu/4-expert/local-hybrid-development/README.md)<!-- dc-card: {"label": ["Hands-On"]} dc-card -->
- [Manage tenant database containers](https://github.com/SAP-samples/btp-cap-multitenant-saas/blob/main/docu/4-expert/manage-tenant-containers/README.md)<!-- dc-card: {"label": ["Hands-On"]} dc-card -->
- [Self-Onboarding of SaaS tenants](https://github.com/SAP-samples/btp-cap-multitenant-saas/blob/main/docu/4-expert/saas-self-onboarding/README.md)<!-- dc-card: {"label": ["Hands-On"]} dc-card -->
- [Send emails using Microsoft Graph API](https://github.com/SAP-samples/btp-cap-multitenant-saas/blob/main/docu/4-expert/send-emails-graph-api/README.md)<!-- dc-card: {"label": ["Hands-On"]} dc-card -->
- [Update tenant databases containers](https://github.com/SAP-samples/btp-cap-multitenant-saas/blob/main/docu/4-expert/update-tenant-containers/README.md)<!-- dc-card: {"label": ["Hands-On"]} dc-card -->
- [Cloud Foundry - Use SAP Transport Management](https://github.com/SAP-samples/btp-cap-multitenant-saas/blob/main/docu/4-expert/-CloudFoundry-/configure-transport-management/README.md)<!-- dc-card: {"label": ["Hands-On","Cloud Foundry"]} dc-card -->
Expand All @@ -57,7 +56,6 @@ Prerequisites
- [Cloud Foundry - Using the SAP Theme Designer](https://github.com/SAP-samples/btp-cap-multitenant-saas/blob/main/docu/4-expert/-CloudFoundry-/using-sap-theme-designer/README.md)<!-- dc-card: {"label": ["Hands-On","Cloud Foundry"]} dc-card -->
- [Cloud Foundry - External Session Management](https://github.com/SAP-samples/btp-cap-multitenant-saas/blob/main/docu/4-expert/-CloudFoundry-/approuter-external-session-management/README.md)<!-- dc-card: {"label": ["Hands-On","Cloud Foundry"]} dc-card -->
- [Kyma - Setup custom domain usage](https://github.com/SAP-samples/btp-cap-multitenant-saas/blob/main/docu/4-expert/-Kyma-/custom-domain-usage/README.md)<!-- dc-card: {"label": ["Hands-On","Kyma"]} dc-card -->
- [Kyma - Self-Onboarding and One-Domain](https://github.com/SAP-samples/btp-cap-multitenant-saas/blob/main/docu/4-expert/-Kyma-/saas-self-onboarding/README.md)<!-- dc-card: {"label": ["Hands-On","Kyma"]} dc-card -->
- Complete
- [Share your Feedback](https://github.com/SAP-samples/btp-cap-multitenant-saas/blob/main/docu/5-complete/share-feedback/README.md)
- [Complete the Mission](https://github.com/SAP-samples/btp-cap-multitenant-saas/blob/main/docu/5-complete/complete-mission/README.md)
Expand Down
3 changes: 1 addition & 2 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -92,7 +92,6 @@ After adding some or all of the Advanced Features, the following **Expert Featur
**Kyma** (only)

- [Custom domain usage](./docu/4-expert/-Kyma-/custom-domain-usage/README.md)
- [Onboarding Automation and One Domain](./docu/4-expert/-Kyma-/saas-self-onboarding/README.md)
- [Setup a Continuous Integration Scenario](./docu/4-expert/-Kyma-/setup-cicd-for-project/README.md)


Expand Down Expand Up @@ -182,7 +181,7 @@ Please check the below details on these additional entitlements required for the
- Automated Credential Rotation (Workaround available - 2023/06/09)
- **Problem**: Users are facing a callback authentication error after successful login via SAP IAS as part of the One-Domain concept.
- **Issue**: Activating the automated credential rotation of the SAP BTP Service Operator renews the X.509 certificate of the respective SAP IAS service bindings. As the Application Router caches the binding details for performance reasons, the cached X.509 certificate is not valid anymore after rotation. This results in an authentication error between Application Router and SAP IAS.
- **Workaround**: A restart of the Application Router after credential rotation will solve this issue and the latest X.509 certificate is being cached. This restart can be automated in a Kubernetes/Kyma CronJob, starting a new Deployment rollout according to your credential rotation cycle. You can find an example incl. roles and service accounts in the respective Expert Features ([click here](./docu/4-expert/-Kyma-/saas-self-onboarding/files/yaml/deployment-restart.yaml)). Combined with an external Redis cache for Application Router session management, downtimes can be minimized or completely mitigated! Make sure to have a sufficient overlap of both, the old and new X.509 certificate (*rotatedBindingTTL: 24h* & *rotationFrequency: 48h*), so the cached credentials are still valid until the restart has happened!
- **Workaround**: A restart of the Application Router after credential rotation will solve this issue and the latest X.509 certificate is being cached. This restart can be automated in a Kubernetes/Kyma CronJob, starting a new Deployment rollout according to your credential rotation cycle. Combined with an external Redis cache for Application Router session management, downtimes can be minimized or completely mitigated! Make sure to have a sufficient overlap of both, the old and new X.509 certificate (*rotatedBindingTTL: 24h* & *rotationFrequency: 48h*), so the cached credentials are still valid until the restart has happened!
- **Solution**: Issue has been addressed and a potential notification mechanism might trigger an automated update of the Application Router cache in the future (subject to change).
- Consumer extension API issue (Workaround available - 2022/12/19)
- **Problem**: Applying a Consumer extension currently results in the Push API not being usable by the extended Tenant anymore.
Expand Down
1 change: 1 addition & 0 deletions docu/1-discover/6-whats-new/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,3 +8,4 @@ On this section of the tutorial, you will find a summary of all new features aft
| Date | Title | Branch | Short description |
| ---------- | --------------------------------- | ------ | ------------------------------------------------------------------------------------------------- |
| 2023-08-18 | Tenant onboarding using Terraform | main | Added [Expert Feature](../../4-expert/btp-terraform-setup/) for Tenant Onboarding using Terraform |
| 2024-10-13 | Self onboarding has been deprecated | main | Still can be reached under *self-onboarding-archive* branch, but will no longer be maintained |
Loading
Loading