mta.yaml

_schema-version: "3.1"
ID: abap-saas-reference-solution
version: 1.0.3

parameters:
  app-domain:
  route-prefix:
  appname:
  addon-product-name:
  # empty version means that always the latest available version is used when creating a new system
  # so, default value is ""
  addon-product-version:
  provider-admin-email:
  saas-display-name:
  saas-description:
  tenant-mode: multi
  enable-parallel-deployments: true
  usage-mode:
  size-of-runtime:
  size-of-persistence:
  consumer-id-pattern:
  # empty plan name means that 'default' plan is used
  plan-name:
  application-log-level:
  abap-endpoint-timeout:
  send-x-frame-options:
  consumer-tenant-limit:
  sap-system-name:

modules:
  - name: approuter
    type: javascript.nodejs
    path: router
    parameters:
      keep-existing-routes: true
      routes:
        - route: cis${route-prefix}.${app-domain}
      app-name: ${appname}
      memory: 1024MB
    properties:
      TENANT_HOST_PATTERN: (.*)${route-prefix}.${app-domain}
      XS_APP_LOG_LEVEL: ${application-log-level}
      SEND_XFRAMEOPTIONS: ${send-x-frame-options}
      INCOMING_CONNECTION_TIMEOUT: ${abap-endpoint-timeout}
      SAP_JWT_TRUST_ACL:
        - clientid: "*"
          identityzone: sap-provisioning
      # according to https://help.sap.com/docs/btp/sap-business-technology-platform/websockets?q=HANDLE_WEBSOCKET_EXT&locale=en-US&version=LATEST
      HANDLE_WEBSOCKET_EXT: async
    requires:
      - name: xsuaa
      - name: saas-registry
      - name: abap-solution
        parameters:
          config:
            abap_endpoint_timeout: ${abap-endpoint-timeout}
      - name: application-log

resources:
  - name: xsuaa
    type: com.sap.xs.uaa
    requires:
      - name: abap-solution
    parameters:
      service-plan: application
      service-name: xsuaa
      config:
        oauth2-configuration:
          redirect-uris:
            - "https://*.${app-domain}/**"
          credential-types:
            - binding-secret   
        xsappname: ${appname}
        tenant-mode: shared
        scopes:
          - name: $XSAPPNAME.Callback
            description: With this scope set, the callbacks for tenant onboarding, offboarding and getDependencies can be called.
            grant-as-authority-to-apps:
              - $XSAPPNAME(application,sap-provisioning,tenant-onboarding)
        foreign-scope-references:
          - uaa.user
        role-collections:
          - name: ${appname}-admin
            role-template-references:
              - $XSSERVICENAME(${appname}-abap-solution).SolutionAdmin

  - name: saas-registry
    type: org.cloudfoundry.managed-service
    parameters:
      service: saas-registry
      service-plan: application
      service-name: saas-registry
      config:
        xsappname: ${appname}
        appName: ${appname}
        appUrls:
          getDependencies: https://cis${route-prefix}.${app-domain}/callback/v1.0/dependencies
          onSubscription: https://cis${route-prefix}.${app-domain}/callback/v1.0/tenants/{tenantId}
        displayName: ${saas-display-name}
        description: ${saas-description}

  - name: abap-solution
    type: org.cloudfoundry.managed-service
    parameters:
      service: abap-solution
      service-plan: standard
      service-name: ${appname}-abap-solution
      config:
        name: ${appname}
        consumer_id_pattern: ${consumer-id-pattern}
        plans:
          - plan_name: ${plan-name}
            addon_product_name: ${addon-product-name}
            size_of_runtime: ${size-of-runtime}
            size_of_persistence: ${size-of-persistence}
            provider_admin_email: ${provider-admin-email}
            consumer_tenant_limit: ${consumer-tenant-limit}
            sap_system_name: ${sap-system-name}
            usage: ${usage-mode}
        xs-security:
          xsappname: xs-app-${appname}
  - name: application-log
    type: org.cloudfoundry.managed-service
    parameters:
      service: application-logs
      service-plan: lite
      service-name: application-log