## 4.3.1.3 SAP BTP Operator Module
Use the SAP BTP Operator module to enable service management and consume SAP BTP services from your Kyma cluster.
## What Is SAP BTP Operator?
The SAP BTP Operator module provides service management, which allows you to consume SAP BTP services from your Kyma cluster using Kubernetes-native tools. Within the SAP BTP Operator module, BTP Manager installs the SAP BTP service operator. The SAP BTP service operator enables provisioning and managing service instances and service bindings of SAP BTP services. Consequently, your Kubernetes-native applications can access and use the services from your cluster.
## Features
The SAP BTP Operator module provides the following features:
- Credentials and access preconfiguration: Your Secret is readily available on Kyma runtime creation. See Preconfigured Credentials and Access [page 1887].
- Customization of the default credentials and access: You can customize the default sap-btp-manager Secret. See Customizing the Default Credentials and Access [page 1890].
- Multitenancy: You can configure multiple subaccounts in a single cluster. See Working with Multiple Subaccounts [page 1901].
- Lifecycle management of service instances and service bindings: You can create, update, and delete service instances and service bindings. See Creating Service Instances and Service Bindings [page 1892], Updating Service Instances [page 1895], and Deleting Service Bindings and Service Instances [page 1897].
- Service binding rotation: You can enhance security by automatically rotating the credentials associated with your service bindings. See Rotating Service Bindings [page 1909].
- Service binding Secret formatting: You can use different attributes in your ServiceBinding resource to generate different formats of your Secret resources. See Formatting Service Binding Secrets [page 1910].
## Scope
By default, the SAP BTP Operator module consumes SAP BTP services from the subaccount in which you created it. To consume the services from multiple subaccounts in a single Kyma cluster, configure a dedicated Secret for each additional subaccount.
## Architecture
The SAP BTP Operator module provides and retrieves the initial credentials that your application needs to use an SAP BTP service.
<!-- image -->
Depending on the number of configured Secrets, SAP BTP Operator can have access to multiple subaccounts within your cluster.
<!-- image -->
For more information on multitenancy, see Working with Multiple Subaccounts [page 1901].
## SAP BTP, Kyma Runtime
SAP BTP, Kyma runtime runs on a Kubernetes cluster and wraps the SAP BTP Operator module, API server, and one or more applications. The application or multiple applications are the actual consumers of SAP BTP services.
## BTP Manager
BTP Manager is an operator based on the Kubebuilder framework. It extends the Kubernetes API by providing the BtpOperator Custom Resource Definition (CRD) .
BTP Manager performs the following operations:
- Manages the lifecycle of the SAP BTP service operator, including provisioning of the latest version, updating, and deprovisioning.
- Configures the SAP BTP service operator.
## SAP BTP Service Operator
The SAP BTP service operator is an open-source component that allows you to connect SAP BTP services to your cluster and manage them using Kubernetes-native tools. It is responsible for communicating with
SAP Service Manager. The operator's resources, service instances and service bindings, come from the services.cloud.sap.com API group.
## SAP Service Manager
SAP Service Manager is the central registry for service brokers and platforms in SAP BTP, which enables you to do the following:
- Consume platform services in any connected runtime environment.
- Track the creation and management of service instances.
- Share services and service instances between different runtimes.
SAP Service Manager uses Open Service Broker API (OSB API) to communicate with service brokers.
## Service Brokers
Service brokers manage the lifecycle of services. SAP Service Manager interacts with service brokers using OSB API to provision and manage service instances and service bindings.
## API/Custom Resource Definitions
The btpoperators.operator.kyma-project.io Custom Resource Definition (CRD) describes the kind and the format of data that SAP BTP Operator uses to configure resources.
See the documentation related to the BtpOperator custom resource (CR):
- SAP BTP Operator Custom Resource
- Service Instance Custom Resource
- Service Binding Custom Resource
## Resource Consumption
To learn more about the resources used by the SAP BTP Operator module, see SAP BTP Operator [page 3164].