Repository navigation
docs(#2810): HANA-native AI Core embedding setup + grant CREATE PSE - #2844
Merged
Merged
Conversation
Basic setup to connect the existing tutorials-aicore instance to the tutorials-hana container for DB-native VECTOR_EMBEDDING (issue #2810), ahead of any rewrite. - db/src/_grants.hdbgrants: grant CREATE PSE to the container user via the existing tutorials-kg-grantor UPS. Capability probe confirmed the _RT user already holds CREATE REMOTE SOURCE; CREATE PSE was the only missing privilege for the sapgenaihub remote source. - docs/developers/operations/hana-aicore-embeddings.md: setup runbook (built-in NLP tier A, AI Core remote-source tier B, PSE+remote source SQL with DEV worked values, PROD checklist, auto-embedding appendix). PSE paste step described in prose (no literal PEM markers) to avoid a gitleaks private-key false positive. - docs/superpowers/specs: design doc with verified DEV facts. - CLAUDE.md: link the runbook in the deep-dive list. Tier A (built-in SAP_GXY.20250407) verified on DEV: 768-dim vector. Tier B deploy-gated on the CREATE PSE grant landing via db-deployer.
jung-thomas
force-pushed
the
feat/2810-hana-aicore-embedding-setup
branch
from
October 19, 2026 14:47
a47974d to
5e693b1
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Closes part of #2810 — the basic setup to connect our existing AI Core instance to the HANA DB and test
VECTOR_EMBEDDINGfrom the DB layer, before any rewrite of Node/CAP embeddings.What this does
db/src/_grants.hdbgrants— grantCREATE PSEto the container user via the existingtutorials-kg-grantorUPS (same pattern as the SPARQL grants).docs/developers/operations/hana-aicore-embeddings.md— setup runbook: built-in NLP tier, AI Core remote-source tier, PSE +sapgenaihubremote-source SQL with DEV worked values, PROD repeat checklist, and an auto-embedding appendix for the later rewrite.docs/superpowers/specs/2026-10-19-…-design.md— design doc with the verified DEV facts.CLAUDE.md— link the runbook.Verified on DEV (
tutorial-system/dev)VECTOR_EMBEDDING('…','DOCUMENT','SAP_GXY.20250407')as the container_RTuser → 768-dimREAL_VECTOR. The DB-layer path works today, no AI Core needed._RTuser already holdsCREATE REMOTE SOURCE; the only missing privilege isCREATE PSE— hence the one-line grant. A standaloneCREATE CREDENTIALobject isn't needed for the X509-PSE form.tutorials-aicore/ dedicated x509 keyhana-ai-core; remote source points at orchestration deploymentda6d9c5e3fb50c3d(joule-chat-orchestration).Not done here (deploy-gated / follow-up)
CREATE PSEgrant actually landing viatutorials-db-deployer— which only succeeds if the grantor holdsCREATE PSE WITH ADMIN OPTION. Runbook documents the failure signature + admin fallback. Not yet deployed.No application code changed; no rewrite of existing embedding features.