Automate Operations with the Command Line Interface (CLI)

In this step, you need to open the script file in your favorite text editor and enter the values in each placeholder according to your trial account and the names and custom properties of the directories and subaccounts that you want to create.

These lines declare global variables that will be used in the script: 

declare region="<enter your trial region, e.g., eu10, us10, ap21>" 
declare global_account_subdomain="<enter your trial global account subdomain, see below where it is located>" 
declare directory_name="<enter a name for the directory of the new project, e.g., Project X>" 
declare directory_description="<enter a description for the directory of the new project, e.g., Directory for project X of partner Y>" 
declare contact_person="<enter the email address of your partner company´s contact person>" 
declare department="<enter the department relevant for your new project, e.g., HR>" 
declare subaccounts="dev test prod" 
declare space="<enter a name for the space. e.g., dev>" 
declare delay=15

The delay of 15 seconds will allow asynchronous processes to finish.

TIP: Your global account subdomain can be derived from the cockpit: 

Let’s take a closer look at the script we’ve provided to understand it better.

This tells the script to stop executing in case of errors:

set -o errexit 

This function prints the input text it gets to the screen and colors it in yellow:

log() { 
  echo -e "\e[93m$*\e[0m" 
} 

This function performs the login to your global account on SAP BTP:

login_sapcp() { 
 
  local user=$1 
  local pass=$2 
  local region=$3 
  local subdomain=$4 
 
  log Authenticating with SAP BTP 
  sapcp login \ 
    --url "https://cpcli.cf.${region}.hana.ondemand.com" \ 
    --subdomain "$subdomain" \ 
    --user "$user" \ 
    --password "$pass" 
 
} 

If two-factor authentication (2FA) is activated on the SAP BTP landscape, then you need to append the passcode generated by the SAP Authenticator to your password.

For example, if your password is Abcd and the authenticator-generated passcode is 1234, enter the password as Abcd1234.

Two-factor authentication is only relevant for Password grant type authorization.

The following function creates a new directory in your trial global account, with the name and description that you provided in Step 3.

In addition, it sets the directory features, admin, and custom properties. 
There are two custom properties here: 

• Contact Person: Name of a contact person from the partner’s company
• Department: The department relevant for the project

create_directory() { 
 
  local subdomain=$1 
  local name=$2 
  local desc=$3 
  local admin=$4 
  local features=DEFAULT,ENTITLEMENTS,AUTHORIZATIONS 
  local result 
 
  result=$( 
    sapcp create accounts/directory \ 
      --global-account "$subdomain" \ 
      --features "$features" \ 
      --display-name "$name" \ 
      --description "$desc" \ 
      --directory-admins "[\"$admin\"]" \ 
      --custom-properties "$(printf '[{"key": "Contact Person", "value": "%s"}, {"key": "Department", "value": "%s"}]' "$contact_person" "$department")" 
  ) 
 
  # Return directory ID 
  awk '/^directory id:/ { print $NF }' <<< "$result" 
 
} 

The following function assigns the service and plan it receives as input, as an entitlement to a directory.

In the main function of the script, we’ll use the following function to assign two service entitlements to your directory:

• SAP Alert Notification service (standard)
• SAP HANA Cloud (hana)

Since distribute and auto-assign are specified, every subaccount that is created in or moved to the directory will automatically be assigned these entitlements as well (as long as the directory has remaining quota for these services). 

assign_distributed_entitlement() { 
 
  local directory=$1 
  local service=$2 
  local plan=$3 
 
  log "Initiating distributed entitlement assignments for $service / $plan ..." 
  sapcp assign accounts/entitlement \ 
    --to-directory "$directory" \ 
    --for-service "$service" \ 
    --plan "$plan" \ 
    --distribute \ 
    --auto-assign 
 
} 

This function generates a random ID that will be used as each subaccount’s subdomain, as it needs to be unique:

generate_id() { 
  date | md5 | head -c 8 
} 

The following function creates a new subaccount in a directory:

create_subaccount() { 
 
  local name=$1 
  local region=$2 
  local email=$3 
  local directory_id=$4 
  local subdomain 
  local result 
 
  subdomain=$(generate_id) 
 
  result=$( 
    sapcp create accounts/subaccount \ 
      --display-name "$name" \ 
      --subdomain "$subdomain" \ 
      --region "$region" \ 
      --subaccount-admins "[\"$email\"]" \ 
      --directory "$directory_id" 
  ) 
 
  # Return subaccount ID 
  awk '/^subaccount id:/ { print $NF }' <<< "$result" 
 
} 

The following function creates a Cloud Foundry org in the subaccount it receives as input:

create_cf_environment() { 
 
    local subaccount=$1 
    local subaccount_id=$2 
    local display_name=$3 
 
    log "Initiating CF environment creation for $subaccount ..." 
    sapcp create accounts/environment-instance \ 
      --subaccount "$subaccount_id" \ 
      --environment cloudfoundry \ 
      --display-name "$display_name" 
      --service cloudfoundry \
      --plan standard
}

This function performs the login to Cloud Foundry:

login_cf() { 
 
  local user=$1 
  local pass=$2 
  local region=$3 
  local org=$4 
 
  log Authenticating with Cloud Foundry 
  cf login \ 
    -a "https://api.cf.${region}.hana.ondemand.com" \ 
    -o "$org" \ 
    -u "$user" \ 
    -p "$pass" 
 
} 

If two-factor authentication (2FA) is activated on the SAP BTP landscape, then you need to append the passcode generated by the SAP Authenticator to your password.

For example, if your password is Abcd and the authenticator-generated passcode is 1234, enter the password as Abcd1234.

Two-factor authentication is only relevant for Password grant type authorization.

This function creates a new space, using native cf CLI:

create_new_space() { 
 
  local org=$1 
  local space=$2 
 
  log "Creating new space $space in org $org ..." 
  cf create-space "$space" -o "$org" 
  sleep "$delay" 
  cf target -o "$org" -s "$space" 
 
}

The main flow is executed in the main function: 

main() { 
 
  local user pass directory_id subaccount subaccount_id org 
 
  # Obtain credentials for SAP BTP / Cloud Foundry 
  echo Please enter your SAP BTP trail credentials 
  read -r -p 'Email: ' user 
  read -r -s -p 'Password: ' pass 
  echo 
 
  # Authenticate with SAP BTP 
  login_sapcp "$user" "$pass" "$region" "$global_account_subdomain" 
 
  # Create new directory 
  log Initiating directory creation ... 
  directory_id=$( 
    create_directory \ 
      "$global_account_subdomain" \ 
      "$directory_name" \ 
      "$directory_description" \ 
      "$user" 
  ) 
  log "Directory creation initiated, ID is $directory_id" 
 
  # Add two service entitlements that child subaccounts will get 
  assign_distributed_entitlement "$directory_id" alert-notification standard 
  assign_distributed_entitlement "$directory_id" hana-cloud-trial hana 
 
  # Create new subaccounts in the directory 
  log Initiating creation of subaccounts ... 
  for subaccount in $subaccounts; do 
 
    subaccount_id=$(create_subaccount "$subaccount" "$region" "$user" "$directory_id") 
    log "Subaccount $subaccount creation initiated, ID is $subaccount_id" 
 
    # Wait for async subaccount creation to end 
    log "Waiting for subaccount creation to complete ..." 
    sleep "$delay" 
 
    # Create a Cloud Foundry environment in the new subaccount 
    create_cf_environment "$subaccount" "$subaccount_id" "${subaccount}_org" 
 
  done 
 
  # Pick the first subaccount/org for further processing 
  org="$(echo "$subaccounts" | cut -d' ' -f 1)_org" 
 
  # Authenticate with Cloud Foundry 
  login_cf "$user" "$pass" "$region" "$org" 
 
  # Create new space and target it 
  create_new_space "$org" "$space" 
 
  # Create SAP HANA Cloud trial service in targeted space 
  echo Creating HANA Cloud trial service ... 
  cf create-service hana-cloud-trial hana hana_instance \ 
    -c ' 
      { 
        "data": { 
          "edition": "cloud", 
          "memory": 30, 
          "serviceStopped": false, 
          "storage": 120, 
          "systempassword": "Init2020", 
          "vcpu": 0, 
          "versionIndicator": "", 
          "whitelistIPs": [] 
        } 
      }' 
 
} 

The last step is to call the main function:

main "$@"