In this exercise, we will take the previously developed application and deploy it to SAP Cloud Platform.
The MTA descriptor file and the xs-security configuration require some smaller extension to work within the cloud environment.
Because of the quota restrictions of the trial account that we are using in this session, we need to set a memory limit for the 'cpl166js' and 'cpl166ui' module. The module 'cpl166db' does not need to be restricted as the type com.sap.xs.hdi already includes an implicit memory limit to 256MB.
Open the mta.yaml file in the editor and select 'cpl166js' module. Add a new parameter with the key 'memory' and the value 256M.
Add the same parameter for the module 'cpl166ui'.
Now we need to add some advanced security configuration. Therefore select the module 'cpl166js' and add a property with the key SAP_JWT_TRUST_ACL and the value [{"clientid":"sb-cpl166js", "identityzone": "*"}]:
Now select the module 'cpl166ui' and add a property with the key 'TENANT_HOST_PATTERN' and the value
^(.*)-trial-dev-cpl166ui.cfapps.eu10.hana.ondemand.com:
Because the hana service is named hanatrial in the trial organization, we need to specify this additional mapping in the mta.yaml. Therefore open the mta.yaml and for the module 'cpl166db' under Resources for 'hdi-container' add an additional paramter with the key service and hanatrial.
Now, click Save. Afterwards please open the mta.yaml file with the code editor and check that for the two files 'cpl166js' and 'cpl166ui' the value 256M was saved. If not, please correct it manually and save again. Unfortunately, we have found a bug here in this system, which causes with the save in the graphical editor to remove the M.
For the cloud deployment we need to create an mta archive. Right-click on the project-name 'CPL166MTA' and select 'Build'. Wait for the builder to finish.
A new folder called 'mta_archives' has appeared. Unfold it by clicking on the folder. It contains a folder called 'CPL166MTA'. Unfold this folder as well. Inside you will find the newly created mta archive with the name 'cpl166mta_2.0.0.mtar'.
Export the archive to you local harddisk by right-clicking and selecting 'Export'. This will start the download in the browser.
In this step we will deploy our new application to Cloud Foundry. On your Laptop, open the Windows Explorer and navigate to the location where you have downloaded the applications mta archive in Step 2. Usually this is the 'Downloads' folder.
Open a command window by right-clicking in the Explorer and selecting 'Open Command Window Here'.
First we need to set the correct api endpoint of the SAP Cloud Foundry Trial installation by entering one of the following commands (depending on your region) and confirm by pressing enter. Choose the first one with 'eu10' if your Cloud Foundry trial account is in the region 'Europe (Frankfurt) CF/AWS' or choose the second one with 'us10' if your Cloud Foundry trial account is in the region 'US East (VA) CF/AWS'.
cf api https://api.cf.eu10.hana.ondemand.com
cf api https://api.cf.us10.hana.ondemand.com
After a few seconds, the command will come back with a success message.
Now we need to login. Enter the following command and confirm by pressing enter.
cf login
The prompt will ask you for your credentials, enter the email and password and confirm each step by pressing enter.
With the login done, we can start the application deployment. Therefore enter the deploy command as follows and confirm by pressing enter.
cf deploy cpl166mta_2.0.0.mtar
Similar to the previous exercise, we now need to create a role collection and assign it to our user in order to be authorized to access our new application.
Firstly we need to logon once to our uaa tenant to make our user known. Navigate to the url below depending on your trial account location. You need to replace <p-username> with your username.
https://<p-username>trial.authentication.eu10.hana.ondemand.com
https://<p-username>trial.authentication.us10.hana.ondemand.com
Login with your credentials and then switch back to the SAP Cloud Platform Cockpit.
Open the "Security" menu item and navigate to Role Collections page. Create a new collection called 'cpl166_collection'
Click on the new collection 'cpl166_collection' and assign both 'cpl166View' and 'cpl166Create' roles from the deployed application using the dropdown lists
Navigate to the Trust Configuration page.
Click on 'SAP ID Service'. This brings you to another view called 'Role Collection Assignment'.
Enter your username in the search field and click on 'Show Assignments'. This enables the button 'Add Assignment'. Click on the button. In the popup select the previously created role collection and confirm by clicking 'Add Assignment'.
After deployment and role collection configuration you can copy the url of the cpl166ui application as shown after the deploy command and open it in your browser to test it in the cloud. The command cf apps will show you all deployed application microservices again. Alternatively or additionally, you can now also go back to your SAP Cloud Platform cockpit, refresh and you will see your deployed applications there. Under the application microservice cpl166ui you will see the same URL which you can also open directly from there.