All skills
secondsky avatar

/sap-btp-connectivity

@620a19a
by Eddiesecondsky/sap-skills456 stars
120

SAP BTP Connectivity skill covering Destination Service, Connectivity Service, Cloud Connector, Connectivity Proxy, and Transparent Proxy for Kubernetes. Use when configuring destinations (HTTP, RFC, LDAP, MAIL, TCP), setting up cloud-to-on-premise connectivity, implementing OAuth and principal propagation, deploying connectivity proxies in Kubernetes/Kyma, troubleshooting connectivity errors (405, 407, 503), or configuring multitenancy.

Use this Skill: https://skilld.dev/gh/secondsky/sap-skills/sap-btp-connectivity

This session only. Nothing lands on disk.

README.md

≈2.1k tokens on demand. Your agent reads this file only when SKILL.md points to it.

SAP BTP Connectivity Skill

Status: Production Ready Last Updated: 2025-11-27 Documentation: 383 files SKILL.md: 317 lines


Capability Index

Capability Status
Commands 1: /btp-destination-diagnose
Agents 0
Hooks No
MCP No
LSP No
Source Freshness last_verified: 2025-11-27; live destination and Cloud Connector checks pending.
Verification npm run validate; live connectivity tests require tenant/network access.

Overview

This skill provides comprehensive knowledge for SAP BTP Connectivity, covering all components needed for secure cloud-to-cloud, cloud-to-on-premise, and on-premise-to-cloud connectivity.

Components Covered

  • Destination Service: Manage connection metadata, authentication, routing
  • Connectivity Service: Enable Kubernetes on-premise connectivity
  • Cloud Connector: Secure tunnel for on-premise systems
  • Connectivity Proxy: Kubernetes component for on-premise access
  • Transparent Proxy: Unified destination access in Kubernetes

Auto-Trigger Keywords

Primary Keywords

  • SAP BTP Connectivity
  • Destination Service
  • Cloud Connector
  • Connectivity Proxy
  • Transparent Proxy
  • Principal Propagation

Secondary Keywords

  • SAP BTP destination
  • on-premise connectivity
  • hybrid connectivity
  • OAuth2SAMLBearerAssertion
  • OAuth2ClientCredentials
  • PrincipalPropagation
  • service channel
  • SOCKS5 proxy
  • RFC destination
  • LDAP destination
  • TCP destination
  • Kyma connectivity
  • Cloud Foundry connectivity
  • reverse proxy tunnel
  • virtual host mapping
  • access control configuration

Error-Based Keywords

  • HTTP 405 connectivity proxy
  • HTTP 407 proxy authentication
  • HTTP 503 Cloud Connector
  • destination not found
  • principal propagation failed
  • Cloud Connector connection failed
  • cannot connect to subaccount
  • access denied resource

What This Skill Does

Provides Knowledge For

  1. Destination Configuration

    • HTTP, RFC, LDAP, MAIL, TCP destinations
    • 17+ authentication types
    • Internet, OnPremise, PrivateLink proxy types
  2. Cloud Connector Setup

    • Installation on Windows, Linux, macOS
    • Access control configuration
    • High availability (master-shadow)
    • Security best practices
  3. Kubernetes/Kyma Connectivity

    • Connectivity Proxy installation and configuration
    • Transparent Proxy setup and usage
    • Destination Custom Resources
    • Service channels
  4. Authentication Flows

    • OAuth2ClientCredentials
    • OAuth2SAMLBearerAssertion
    • OAuth2JWTBearer
    • Principal Propagation
    • Client certificates
  5. REST API Usage

    • Destination Service endpoints
    • Token retrieval
    • CRUD operations
    • Multitenancy support

When to Use This Skill

Use When

  • Creating or modifying BTP destinations
  • Setting up Cloud Connector for on-premise access
  • Implementing user propagation between systems
  • Deploying connectivity in Kubernetes/Kyma
  • Troubleshooting connectivity errors
  • Configuring OAuth authentication for destinations
  • Setting up high availability for Cloud Connector
  • Implementing multitenancy for destinations

Do Not Use When

  • Configuring SAP Integration Suite flows (use integration-suite skill)
  • Setting up BTP identity and access (use btp-iam skill)
  • Developing CAP applications (use sap-cap skill)
  • Working with SAPUI5/Fiori (use sapui5 skill)

Known Issues Prevented

Issue Without Skill With Skill Source
405 on Connectivity Proxy Common Prevented HTTP vs HTTPS usage
Missing Proxy-Authorization Common Prevented Header configuration
Cloud Connector split-brain Possible Prevented HA best practices
Token caching failures Possible Prevented Resilience patterns
Principal propagation errors Common Prevented JWT header guidance
Certificate expiration Possible Prevented Renewal procedures

Token Efficiency Metrics

Scenario Without Skill With Skill Savings
Destination setup ~8k tokens ~2k tokens ~75%
Cloud Connector config ~10k tokens ~2.5k tokens ~75%
Kubernetes proxy setup ~12k tokens ~3k tokens ~75%
Troubleshooting ~6k tokens ~1.5k tokens ~75%
Average ~9k tokens ~2.25k tokens ~75%

Quick Usage Examples

Create HTTP Destination

"Create an HTTP destination named 'my-api' with OAuth2ClientCredentials authentication"

Set Up Cloud Connector

"How do I install and configure Cloud Connector for Windows?"

Deploy Connectivity Proxy

"Help me deploy Connectivity Proxy in my Kubernetes cluster"

Troubleshoot Connection

"I'm getting HTTP 503 when connecting to my on-premise system"

Skill Contents

sap-btp-connectivity/
├── SKILL.md                              # Main skill file (317 lines - optimized)
├── README.md                             # This file
├── references/
│   ├── http-destinations.md              # HTTP destination properties
│   ├── rfc-destinations.md               # RFC destination & pooling
│   ├── mail-tcp-ldap-destinations.md     # Mail, TCP, LDAP config
│   ├── authentication-types.md           # All 17+ auth types
│   ├── cloud-connector.md                # Cloud Connector setup
│   ├── kubernetes-connectivity.md        # Kubernetes proxies
│   ├── destination-service-api.md        # REST API reference
│   ├── advanced-configuration.md         # MTA, chaining, ZTIS
│   ├── java-sdk-development.md           # Java APIs, JCo, SAP Cloud SDK
│   ├── mail-protocols.md                 # SMTP, IMAP, POP3 configuration
│   ├── identity-propagation-scenarios.md # ABAP, NetWeaver Java, IDP
│   ├── operational-guides.md             # Network zones, solution mgmt
│   ├── connectivity-alternatives-and-config.md # Reverse proxy, RFC config
│   └── troubleshooting.md                # Common issues
└── templates/
    ├── destination-http-oauth.json       # HTTP destination templates
    ├── destination-onpremise.json        # On-premise templates
    ├── connectivity-proxy-values.yaml    # Helm values
    └── transparent-proxy-values.yaml     # Helm values

Documentation Sources

Official SAP Documentation

SAP Business Accelerator Hub

Release Notes


Version Information

Component Documented Version Last Verified
Cloud Connector 2.x 2025-11-22
Connectivity Proxy Latest 2025-11-22
Transparent Proxy 1.9.0 2025-11-22
Destination Service v1 API 2025-11-22

Maintenance Schedule

  • Quarterly: Check for SAP documentation updates
  • On Release: Update for major version changes
  • Continuous: Address reported issues

Related Skills

  • sap-btp-setup: BTP account and subaccount configuration
  • sap-cap: Cloud Application Programming Model
  • sap-integration-suite: Integration flows
  • sap-btp-security: IAM and authentication

License

GPL-3.0 License - See LICENSE file in repository root.


Last Updated: 2025-11-27 Next Review: 2026-02-27 Maintainer: Eduard Jiglau Email: hello@sap-ai-skills.com Website: https://sap-ai-skills.com

Source: SKILL.md on GitHub

1 alert16d5 checks · Risk SAFE
  • Gen Agent Trust Hub16d

    This skill provides comprehensive documentation and configuration templates for SAP BTP Connectivity, covering Destination Service, Cloud Connector, and Kubernetes proxy components. It follows security best practices, utilizes official SAP resources, and provides safe templates for connectivity setup.

  • Socket16d

    No alerts

  • Snyk16d

    Risk: LOW · No issues

  • Runlayer6mo

    11/21 files flagged

  • ZeroLeaks5mo

    Score: 93/100 · 2 sections analyzed

Signed by skilld at 620a19a. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub 2 weeks ago.

Activeupdated 2 months ago
Other metadata
metadata
{
  "maintainer": "Eduard Jiglau",
  "maintainer_email": "hello@sap-ai-skills.com",
  "website": "https://sap-ai-skills.com",
  "version": "2.4.1",
  "last_verified": "2025-11-27",
  "keywords": [
    "SAP BTP",
    "Connectivity",
    "Destination Service",
    "Cloud Connector",
    "Connectivity Proxy",
    "Transparent Proxy",
    "Kyma",
    "Kubernetes",
    "OAuth",
    "Principal Propagation",
    "RFC",
    "LDAP",
    "on-premise",
    "hybrid connectivity",
    "service channels",
    "SOCKS5",
    "reverse proxy",
    "tunnel"
  ]
}

README badge

README badge for secondsky/sap-skills/sap-btp-connectivity