Automate provisioning SAP Cloud Identity Authentication service instance

[kwiatekus]

Description

Prototype a kyma cli command that configures SAP IAS tenant as Identity Provider for Kyma. This includes:

• provisioning and binding a SAP Identity services (IAS) via btp-operator
• establishing trust between the IAS service instance and btp subaccount (how ? in automated way) And not includes:
• updating kyma instance with oidc params (separate command to uopdate kyma instance)

Reasons

Provisioning and configuring SAP IAS Service instance as kyma identity provider is complex, multi-stage process that when not automated, is definitely error-prone.

Having a cli command that takes off the burden is very much expected.

Attachments

Gist example from @ptesny explaining the process (with screenshots) and with automation suggestions inline in the text

[ptesny]

There is another gist of mine with the BTP CLI this time.... Jumpstart kymaruntime environment from SAP BTP trial.