Erläuterung
A Persistent Volume Claim (PVC) is a request for storage by a user. It is similar to a Pod, which is a request for compute resources by a user. A PVC enables a Pod to consume a slice of the available storage in the cluster without knowing the details of the underlying storage infrastructure. A PVC is associated with a StorageClass, which defines the type and characteristics of the storage. A PVC is also bound to a Persistent Volume (PV), which is an abstraction of the physical or cloud-based storage resource. A PV is created by the cluster administrator and has a lifecycle independent of any Pod. A PVC can specify the size, access mode, and storage class of the PV it requires. Before deploying an application that needs persistent state, a user must create a PVC for the Pod that will run the application. The PVC will then be automatically bound to a suitable PV by the cluster, or dynamically provisioned if the storage class supports it. The Pod can then mount the PVC as a volumeand access the persistent storage12345. References: Persistent Volumes | Kubernetes, How Kubernetes Persistent Volume Claims Work – CBT Nuggets, Exploring Kubernetes Storage: Persistent Volumes and Persistent Volume Claims – Atatus, Configure a Pod to Use a PersistentVolume for Storage | Kubernetes, kubernetes – How to mount a persistent volume on a Deployment/Pod using PersistentVolumeClaim? – Stack Overflow.

Erläuterung
The SAP BTP Service Operator for Kubernetes is a Kubernetes operator that enables you to consume SAP BTP services from your Kubernetes cluster using Kubernetes-native tools. It communicates with the Service Manager, which acts as an intermediary for the Kubernetes API server to negotiate the initial provisioning and retrieve the credentials necessary for the application to use a managed service. The Service Manager uses the Open Service Broker API to communicate with service brokers, which are responsible for managing the lifecycle of service instances and bindings12. The following diagram illustrates the architecture of the SAP BTP Service Operator for Kubernetes1:
As you can see, the architecture of the SAP BTP Service Operator for Kubernetes consists of the following parts12:
API server: The API server is the main component of the Kubernetes control plane. It exposes the Kubernetes API and handles the requests from the clients, such as kubectl or the SAP BTP Service Operator. The API server also interacts with the etcd, which is the persistent storage for the cluster data.
SAP BTP Service Operator: The SAP BTP Service Operator is a custom controller that watches the Kubernetes API server for changes to the custom resources (CRs) that represent the SAP BTP service instances and bindings. It reconciles the desired state of the CRs with the actual state of the SAP BTP services by calling the Service Manager API.
Service Manager: The Service Manager is a component of SAP BTP that acts as a proxy between the SAP BTP Service Operator and the service brokers. It provides a unified API for managing service instances and bindings across different platforms and environments. It also handles the authentication and authorization of the requests from the SAP BTP Service Operator.
Service Broker: The service broker is a component that implements the Open Service Broker API and provides the logic for provisioning, deprovisioning, binding, and unbinding service instances. The service broker can be either a native SAP BTP service broker or a third-party service broker that is registered in the Service Manager. References: Introducing SAP BTP Service Operator | SAP Blogs, Working with SAP BTP Service Operator | SAP Help Portal, SAP/sap-btp-service-operator – GitHub

Erläuterung
Kyma uses Kubernetes secrets as the secret and configuration management feature. A secret is an object that contains sensitive data, such as passwords, tokens, or keys, that can be accessed by authorized pods or users.
Secrets can be created manually, generated dynamically, or imported from external sources. Kyma provides a custom resource (CR) called ServiceBinding that allows you to create secrets for service instances and inject them into your workloads. You can also use the Service Catalog UI or the Service Management CLI to manage your secrets123. References: Secrets | Kubernetes, Service Binding | SAP Help Portal, Service Catalog
| SAP Help Portal, Service Management CLI | SAP Help Portal

Erläuterung
Namespaces are used to isolate groups of resources in a Kubernetes cluster1. Namespaces provide a logical scope for resources, such as pods, services, deployments, and secrets. Namespaces can be used to separate different environments, teams, projects, or applications within the same cluster. Namespaces also enable resource quota management, access control, and service discovery within the cluster2. Namespaces are not the same as organizations and spaces, which are concepts used in Cloud Foundry to manage applications and services3. Semantic versioning is a convention for assigning version numbers to software releases, not a method for isolating resources. Object groups are not a native Kubernetes concept, but a term used in some tools or frameworks to group related resources. References: 1(https://learn.microsoft.com/en-us/azure/aks/operator-best-practices-cluster-isolation), 2(
,

Erläuterung
Some of the features of Kubernetes are:
Immutability and self-healing: Kubernetes treats pods as immutable, meaning that they are not modified after they are created. Instead, pods are replaced with new ones when they need to be updated or repaired. This ensures that the pods are always in a consistent and predictable state. Kubernetes also monitors the health and availability of the pods and automatically restarts, reschedules, or replicates them if they fail or become unresponsive1.
Extensibility and ecosystem: Kubernetes is designed to be extensible and modular, allowing users to customize and extend its functionality according to their needs. Kubernetes supports various extensions, such as custom resources, operators, admission controllers, schedulers, network plugins, storage plugins, and more. Kubernetes also has a large and vibrant ecosystem of tools, services, and applications that are built on top of or integrate with it2.
Automated rollouts and rollbacks: Kubernetes enables users to deploy and update their applications with zero downtime, using declarative configuration and rolling updates. Kubernetes ensures that only a certain number of pods are changed at a time, and that the new pods are ready before terminating the old ones. Kubernetes also tracks the history of each update and allows users to roll back to a previous version if something goes wrong3.
Referenzen:
1: Pods | Kubernetes
2: Extending Kubernetes | Kubernetes
3: Deployments | Kubernetes

Erläuterung
SAP BTP, Kyma runtime uses the following open-source projects to expose and analyze in-cluster telemetry data:
Loki: Loki is a log aggregation system that collects logs from various sources and stores them in a scalable and queryable way. Loki is integrated with Grafana to provide a unified interface for log analysis1.
Prometheus: Prometheus is a time-series database that collects metrics from instrumented applications and stores them in a time-series database. Prometheus is a pull-based system, which means that applications need to expose an endpoint from which Prometheus can scrape the metrics2.
Grafana: Grafana is a visualization and analysis tool to visualize and query time-series data. With Grafana, you can create dashboards that show the current state of your applications. Grafana can easily visualize data from Prometheus, Loki, and other sources2.
Referenzen:
1: Accessing the built-in observability tools of Kyma runtime
2: Describing Observability in Kyma