sap-btp-service-manager

SAP BTP Service Manager Skill

Safety Notice

This listing is imported from skills.sh public index metadata. Review upstream SKILL.md and repository scripts before running.

Copy this and send it to your AI assistant to learn

Install skill "sap-btp-service-manager" with this command: npx skills add secondsky/sap-skills/secondsky-sap-skills-sap-btp-service-manager

SAP BTP Service Manager Skill

Related Skills

  • sap-btp-cloud-platform: Use for platform fundamentals, service understanding, and BTP integration

  • sap-btp-best-practices: Use for production deployment patterns and service management guidelines

  • sap-btp-connectivity: Use for destination configuration when services require connectivity setup

  • sap-cap-capire: Use for CAP service provisioning and binding management

Comprehensive skill for managing services across SAP BTP environments using SAP Service Manager.

Table of Contents

  • When to Use This Skill

  • Quick Start

  • Core Concepts

  • Cloud Foundry Operations

  • Kubernetes Operations

  • SMCTL CLI Reference

  • API Reference

  • Bundled Resources

When to Use This Skill

Use this skill when working on tasks involving:

Service Instance Management:

  • Creating service instances in Cloud Foundry, Kyma, Kubernetes, or other environments

  • Provisioning services via SAP BTP cockpit, SMCTL CLI, or BTP CLI

  • Configuring service parameters and labels

  • Deleting service instances and managing lifecycle

Service Binding Management:

  • Creating bindings to deliver credentials to applications

  • Binding service instances to Cloud Foundry applications

  • Creating service keys for external client access

  • Managing Kubernetes ServiceBinding CRDs

Platform & Broker Management:

  • Registering platforms (OSBAPI-enabled systems)

  • Registering service brokers

  • Managing broker catalogs and offerings

  • Updating and deleting platform/broker registrations

Authentication & Authorization:

  • Configuring OAuth2 client credentials

  • Working with X.509 certificate authentication

  • Assigning Subaccount Service Administrator role

  • Managing service manager plans and scopes

Kubernetes/Kyma Integration:

  • Setting up SAP BTP Service Operator

  • Creating ServiceInstance and ServiceBinding CRDs

  • Migrating from Service Catalog (svcat) to SAP BTP Service Operator

  • Installing cert-manager for operator communication

API & CLI Operations:

  • Using SMCTL command-line interface

  • Using BTP CLI for service management

  • Working with Service Manager REST APIs

  • Filtering and querying service resources

Troubleshooting:

  • Debugging service provisioning failures

  • Resolving binding credential issues

  • Handling rate limiting (HTTP 429)

  • Checking async operation status

Quick Start

  1. Install SMCTL CLI

⚠️ Important: The SMCLI repository was archived on September 30, 2025. While the tool remains functional, consider migration strategies for long-term SAP BTP workflows.

Recommended Method (Go):

Install via Go (preferred approach)

go install github.com/Peripli/service-manager-cli@latest

Add to PATH (if not already)

export PATH=$PATH:$(go env GOPATH)/bin smctl --version

Alternative Method (Prebuilt Binary):

Download from: https://github.com/Peripli/service-manager-cli/releases/latest

tar -xzf smctl-*.tar.gz && chmod +x smctl sudo mv smctl /usr/local/bin/ && smctl --version

Note: While the prebuilt binary method remains functional, the Go installation approach is officially recommended. Consider evaluating SAP's native BTP CLI as an alternative for new deployments.

  1. Login

Interactive login

smctl login -a https://service-manager.cfapps.<region>.hana.ondemand.com
--param subdomain=<subdomain>

Client credentials

smctl login -a https://service-manager.cfapps.<region>.hana.ondemand.com
--param subdomain=<subdomain> --auth-flow client-credentials
--client-id <id> --client-secret <secret>

  1. Basic Operations

Browse services

smctl marketplace

Create instance (async)

smctl provision my-instance <service> <plan>

Create binding

smctl bind my-instance my-binding

Core Concepts

Service Manager Architecture

SAP Service Manager is the central registry for service brokers and platforms in SAP BTP.

Primary Resources:

  • Platforms - OSBAPI-enabled systems where applications run

  • Service Brokers - Intermediaries advertising service catalogs

  • Service Instances - Individual service instantiations

  • Service Bindings - Access credentials for instances

  • Service Plans - Capability sets offered by services

  • Service Offerings - Service advertisements from brokers

Service Manager Plans

Plan Purpose Scopes

subaccount-admin Full management 10 scopes (manage + read)

subaccount-audit Read-only monitoring 6 scopes

container Isolated management 7 scopes

Roles

  • Subaccount Service Administrator - Full CRUD on resources

  • Subaccount Service Viewer - Read-only access (Feature Set B)

Cloud Foundry Operations

Service Instance & Binding

Via Cockpit: Services > Instances > Create > Select service/plan > Cloud Foundry runtime

Via CF CLI:

Create instance

cf create-service <service> <plan> <instance-name>

Bind to app

cf bind-service <app-name> <instance-name>

Create service key (external access)

cf create-service-key <instance-name> <key-name>

Kubernetes Operations

Prerequisites

  • Kubernetes cluster with kubectl v1.7+

  • Helm v3.1.2+

  • SMCTL v1.10.1+

Setup Service Operator

  1. Install cert-manager:

kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.12.0/cert-manager.yaml

  1. Create Service Manager resources:

smctl provision sm-operator service-manager service-operator-access --mode sync smctl bind sm-operator sm-operator-binding --mode sync smctl get-binding sm-operator-binding -o json

  1. Deploy operator:

helm repo add sap-btp-operator https://sap.github.io/sap-btp-service-operator/ helm install sap-btp-operator sap-btp-operator/sap-btp-operator
--namespace sap-btp-operator --create-namespace
--set manager.secret.clientid=<id>
--set manager.secret.clientsecret=<secret>

Create Resources

ServiceInstance:

apiVersion: services.cloud.sap.com/v1alpha1 kind: ServiceInstance metadata: name: my-service-instance spec: serviceOfferingName: <service-offering> servicePlanName: <plan-name>

ServiceBinding:

apiVersion: services.cloud.sap.com/v1alpha1 kind: ServiceBinding metadata: name: my-binding spec: serviceInstanceName: my-service-instance

Reference: See references/kubernetes-operator.md for complete guide.

BTP CLI Operations

Alternative to SMCTL using the unified BTP CLI:

Create instance

btp create services/instance
--subaccount <subaccount-id>
--service <service-name>
--plan <plan-id>
--parameters '{"key":"value"}'
--labels '{"env":["dev"]}'

Get instance details

btp get services/instance <instance-id>
--subaccount <subaccount-id>
--show-parameters

Create binding

btp create services/binding
--subaccount <subaccount-id>
--binding <binding-name>
--service-instance <instance-id>

Platform management

btp list services/platform --subaccount <id> btp register services/platform --subaccount <id> --name <name> --type <type> btp unregister services/platform <platform-id> --subaccount <id>

API Operations

Retrieve OAuth2 Token

curl '<uaa_url>/oauth/token' -X POST
-H 'Accept: application/json'
-d 'grant_type=client_credentials&client_id=<clientid>&client_secret=<clientsecret>'

Response:

{ "access_token": "<token>", "token_type": "bearer", "expires_in": 43199, "scope": "<xsappname>.job.read <xsappname>.event.read" }

API Base URI

https://service-manager.cfapps.<region>.hana.ondemand.com/v1/

Rate Limiting

Three concurrent tiers enforced:

  • Level 1: All APIs - 10,000/hour, 1,000/minute

  • Level 2: Resource-specific - 1,000-6,000/hour

  • Level 3: Instance operations - 50-6,000/hour

HTTP 429 returned with Retry-After header when limits exceeded.

Filtering

Query parameters:

  • fieldQuery

  • Filter by resource attributes

  • labelQuery

  • Filter by resource labels

  • Operators: eq , ne , in , contains , etc.

Reference: See references/rate-limiting-filtering.md for complete rate limits and filtering details.

SMCTL Command Reference

Key Commands

Category Commands Description

Authentication login , logout

Manage sessions

Instances provision , deprovision , list-instances

Service instance lifecycle

Bindings bind , unbind , list-bindings

Service binding management

Brokers register-broker , update-broker

Service broker operations

Platforms register-platform , list-platforms

Platform registration

Marketplace marketplace

Browse service offerings

Common Flags

  • --mode sync/async

  • Execution mode (default: async)

  • -c, --parameters

  • JSON configuration

  • -o, --output

  • Output format (json, yaml, text)

  • -v, --verbose

  • Detailed output

Reference: See references/smctl-commands.md for complete command reference with all flags and examples.

Common Operations

Check Async Operation Status

Get operation URL from provision/bind response

smctl status /v1/service_instances/<id>/operations/<op-id>

API:

GET /v1/{resourceType}/{resourceID}/operations/{operationID}

Response states: in progress , succeeded , failed

Delete Service Instance

Prerequisites:

  • Remove all service bindings

  • Remove all service keys

  • Instance not bound to applications

Force delete without confirmation

smctl deprovision my-instance -f

Sync mode

smctl deprovision my-instance --mode sync

Note: Kyma/Kubernetes instances cannot be deleted from BTP cockpit.

Assign Administrator Role

  • Navigate to subaccount > Security > Trust Configuration > SAP ID Service

  • Enter user email

  • Click Show Assignments > Add User

  • Assign Role Collection > Select "Subaccount Service Administrator"

Troubleshooting

Issue: Cannot see service in marketplace

Check:

  • Service entitlement added to subaccount?

  • Quota assigned (enterprise accounts)?

  • Correct region selected?

Issue: Instance creation fails

Check:

  • Valid plan selected?

  • Parameters JSON syntax correct?

  • Quota not exceeded?

  • Required dependencies provisioned?

Debug:

smctl get-instance <name> -o json

Check "last_operation" for error details

Issue: Rate limit exceeded (HTTP 429)

Solution:

  • Check Retry-After header

  • Implement exponential backoff

  • Batch operations where possible

  • Consider caching responses

Issue: Binding credentials missing

Check:

  • Binding completed successfully?

  • Correct binding name referenced?

  • Secret created (Kubernetes)?

SMCTL

smctl get-binding <name> -o json

Kubernetes

kubectl get secrets <binding-name> -o yaml

Issue: X.509 authentication fails

Check:

  • Certificate not expired?

  • Correct certificate/key pair?

  • Certificate chain complete?

  • Client ID matches certificate?

Best Practices

  1. Use Sync Mode for Scripts

smctl provision my-instance service plan --mode sync

  1. Label Resources

smctl provision my-instance service plan
-c '{}'
--labels '{"environment":"production","team":"platform"}'

  1. Use Service Keys for External Access

Instead of binding to apps, create service keys for external clients.

  1. Implement Retry Logic

For async operations, poll status with exponential backoff.

  1. Choose Appropriate Plans

  • subaccount-admin : Full management

  • subaccount-audit : Read-only monitoring

  • container : Isolated per-instance access

  1. Secure Credentials

  • Rotate service keys periodically

  • Use X.509 for production

  • Store credentials in secret managers

Bundled Resources

Templates (5 files)

Ready-to-use templates in templates/ directory:

  • service-instance-cf.json - Cloud Foundry instance parameters

  • service-binding-cf.json - Cloud Foundry binding parameters

  • service-instance-k8s.yaml - Kubernetes ServiceInstance CRD

  • service-binding-k8s.yaml - Kubernetes ServiceBinding CRD

  • oauth-token-request.sh - OAuth2 token retrieval script

Reference Documentation (7 files)

Detailed documentation in references/ directory:

  • api-reference.md - Complete API endpoints, operations, and examples

  • smctl-commands.md - Full SMCTL CLI reference with all flags and usage

  • btp-cli-commands.md - Comprehensive BTP CLI command reference

  • kubernetes-operator.md - Service Operator setup, CRDs, migration guide

  • rate-limiting-filtering.md - Rate limits, filtering, and best practices

  • roles-permissions.md - Plans, roles, scopes, and authorization details

  • service-catalog-legacy.md - Legacy svcat and broker proxy setup (deprecated)

Quick Reference Templates

Official Documentation Links

Primary Resources

API Documentation

Related Documentation

Instructions for Claude

When using this skill:

  • Identify the environment - Cloud Foundry, Kyma, Kubernetes, or Other

  • Choose appropriate tool - SMCTL, BTP CLI, CF CLI, kubectl, or cockpit

  • Use correct authentication - OAuth2, X.509, or interactive

  • Check rate limits - Implement retry logic for bulk operations

  • Verify async completion - Poll status for provision/bind operations

  • Reference templates - Use provided templates for common operations

  • Check reference files - Detailed information in references/ directory

For Cloud Foundry: Use cf CLI or cockpit For Kubernetes: Use ServiceInstance/ServiceBinding CRDs For Other environments: Use SMCTL or BTP CLI For API access: Retrieve OAuth2 token first

When troubleshooting:

  • Check operation status for async operations

  • Verify credentials and permissions

  • Review rate limits if getting 429 errors

  • Check prerequisites (entitlements, quotas, dependencies)

License: GPL-3.0 Version: 1.1.1 Maintained by: E.J. Repository: https://github.com/secondsky/sap-skills

Source Transparency

This detail page is rendered from real SKILL.md content. Trust labels are metadata-based hints, not a safety guarantee.

Open in GitHubOpen in ClawHub

Related Skills

Related by shared tags or category signals.

General

sap-abap

No summary provided by upstream source.

Repository SourceNeeds Review
117-secondsky
General

sap-fiori-tools

No summary provided by upstream source.

Repository SourceNeeds Review
82-secondsky
General

sap-cap-capire

No summary provided by upstream source.

Repository SourceNeeds Review
74-secondsky
General

sap-abap-cds

No summary provided by upstream source.

Repository SourceNeeds Review
59-secondsky