Automating SAP HANA Cloud Tasks with the Terraform Provider for SAP BTP

1. Download Terraform from Install Terraform.

   Extract the download into a folder such as C:\Terraform and add that folder to your path.

2. Create a folder and a provider file. Replace notepad or pico with your favorite editor.

   Shell (Microsoft Windows)

   Copy

   mkdir C:\HC_Terraform
   cd C:\HC_Terraform
   notepad provider.tf
   

   Shell (Linux)

   Copy

   mkdir ~/HC_Terraform
   cd ~/HC_Terraform
   pico provider.tf
   

   Terraform provides a registry of providers, one of which is the Terraform Provider for SAP BTP.

   

3. Paste the following contents into provider.tf and save the file. This file will specify that we wish to use the Terraform Provider for SAP BTP, which version to use, and which global SAP BTP account to target. Details of what has changed between releases can be found on the Releases page.

   Terraform

   Copy

   terraform {
     required_providers {
       btp = {
         source  = "SAP/btp"
         version = "~>1.3.0"
       }
     }
   }
   
   provider "btp" {
     globalaccount = "xxxxxxxx-8bb4-4df3-bd09-cc6e044fa174"
   }
   

   Update the value of globalaccount to match your account. This value can be obtained from the URL parameter in the SAP BTP Cockpit

4. Initialize the project.

   Shell

   Copy

   terraform init
   

   

For additional details, see Creating SAP HANA Cloud Instances Using Terraform and Basic CLI Features.

1. Create a file named main.tf.

   Shell (Microsoft Windows)

   Copy

   notepad main.tf
   

   Shell (Linux)

   Copy

   pico main.tf
   

   Paste the following code into main.tf.

   Terraform

   Copy

   #Create a subaccount
   resource "btp_subaccount" "my_subaccount" {
     name      = "Subaccount 1"
     subdomain = "subaccount-1"
     region    = "ca10"
   }
   
   #Add an entitlement for hana to the subaccount
   resource "btp_subaccount_entitlement" "my_sap_hana_cloud_entitlement" {
     subaccount_id = btp_subaccount.my_subaccount.id
     service_name  = "hana-cloud"
     plan_name     = "hana"
   }
   
   #Add entitlement for SAP HANA Cloud Central to the subaccount
   resource "btp_subaccount_entitlement" "my_sap_hana_cloud_tooling_entitlement" {
     subaccount_id = btp_subaccount.my_subaccount.id
     service_name  = "hana-cloud-tools"
     plan_name     = "tools"
   }
   

   Additional details can be found at btp_subaccount_entitlement and btp_subaccount (Resource).

2. Provide credentials for Terraform to use with the SAP BTP.

   Shell (Microsoft Windows)

   Copy

   set BTP_USERNAME=dan@hotmail.com
   set BTP_PASSWORD=mypassword
   

   Shell (Linux)

   Copy

   export BTP_USERNAME=dan@hotmail.com
   export BTP_PASSWORD=mypassword
   

3. Apply the changes.

   Shell

   Copy

   terraform apply -auto-approve
   

   Alternatively, to view the changes that would be made run the command below.

   Shell

   Copy

   terraform plan
   

   

4. In the SAP BTP Cockpit, examine the subaccount and added entitlements.

   

1. Paste the following code at the end of main.tf. Update the user_name value to match your SAP BTP user name.

   Terraform

   Copy

   #Create a subscription to the tooling
   resource "btp_subaccount_subscription" "my_tooling_subscription" {
     subaccount_id = btp_subaccount.my_subaccount.id
     app_name      = "hana-cloud-tools"
     plan_name     = "tools"
     depends_on = [
       btp_subaccount_entitlement.my_sap_hana_cloud_tooling_entitlement
     ]
   }
   
   #Assign role collection to user
   resource "btp_subaccount_role_collection_assignment" "my_role_collection_assignment" {
     subaccount_id = btp_subaccount.my_subaccount.id
     role_collection_name = "SAP HANA Cloud Administrator"
     user_name            = "dan@hotmail.com"
     depends_on = [
       btp_subaccount_subscription.my_tooling_subscription
     ]
   }
   

   Additional details can be found at btp_subaccount_subscription (Resource).

2. Apply the changes.

   Shell

   Copy

   terraform apply -auto-approve
   

   

3. In the SAP BTP Cockpit, examine the subscription and assigned role collection.

   
   

1. Paste the following code at the end of main.tf.

   Terraform

   Copy

   #Lookup the serviceplan_id for SAP HANA database
   data "btp_subaccount_service_plan" "my_hana_plan" {
     subaccount_id = btp_subaccount.my_subaccount.id
     name = "hana"
     offering_name = "hana-cloud"
     depends_on = [
       btp_subaccount_entitlement.my_sap_hana_cloud_tooling_entitlement
     ]
   }
   
   #Create or Update an SAP HANA Cloud database instance
   resource "btp_subaccount_service_instance" "my_sap_hana_cloud_instance" {
     subaccount_id = btp_subaccount.my_subaccount.id
     serviceplan_id = data.btp_subaccount_service_plan.my_hana_plan.id
     name = "my_hdb"
     #parameters = jsonencode({"data": { "memory": 32, "vcpu": 2, "systempassword": "Hana1234"}})
     parameters = jsonencode({
       data = {
         memory = 32
         vcpu = 2
         systempassword = "Hana1234"
       }
     })
   }
   

   Additional details can be found at btp_subaccount_service_instance (Resource).

   Create an SAP HANA Database Instance Using Terraform demonstrates adding the parameter generateSystemPassword and the additional creation of a service binding so that the database password does not need to be included in the parameters.

2. Apply the changes.

   Shell

   Copy

   terraform apply -auto-approve
   

   

3. Open SAP HANA Cloud Central and view the created SAP HANA Cloud, SAP HANA database.

   

1. Update the parameters line in the last section of main.tf to include the parameter below.

   Terraform

   Copy

   labels = {
       "Contact" = ["Dan cell: 123 456 7890", "Dan email: dan@hotmail.com" ]
   }
   

   

2. Apply the changes.

   Shell

   Copy

   terraform apply -auto-approve
   

   

3. View the change in the SAP BTP Cockpit.

   

1. Update the parameters line in the last section of main.tf to include the parameter below.

   Terraform

   Copy

   whitelistIPs = ["0.0.0.0/0"]
   

   

   When an SAP HANA Cloud database instance is created, by default it limits the incoming connections as shown below.

   

   The changes above will enable connections from any location and is equivalent to the Allow all IP addresses option.

2. Apply the changes.

   Shell

   Copy

   terraform apply -auto-approve
   

   

   In the event you need to see more details about the changes being applied, see Accessing sensitive data in local executions.

3. Open SAP HANA Cloud Central and view the changed setting.

   

Congratulations! You have now used the Terraform to declaratively provision and update an SAP HANA Cloud instance.