vania-janet/multiturn-rag-retrieval-data huggingface dataset:
Developers don’t waste time building complex logging systems, just to be able to troubleshoot live systems.

IBM® Event Streams for IBM Cloud® acts as the just-in-time events platform to bring in the rapidly changing information from the business partners’ inventory systems to IBM Cloud® Object Storage.

Compute, storage, and event management that run in public cloud with access to retail inventories across the globe, as needed

Technical solution:



* Red Hat OpenShift on IBM Cloud
* IBM® Event Streams for IBM Cloud®
* IBM Cloud® Object Storage
* IBM Cloud® Continuous Delivery
* IBM Cloud Logging and Monitoring
* App ID





 Step 1: Containerize apps by using microservices 



* Structure apps into a set of cooperative microservices that run within Red Hat OpenShift on IBM Cloud based on functional areas of the app and its dependencies.
* Deploy apps to container images that run in Red Hat OpenShift on IBM Cloud.
* Provide standardized DevOps dashboards through Kubernetes.
* Enable scaling of compute resources for batch and other inventory workloads that run infrequently.







 Step 2: Ensure global availability 



* Built-in HA tools in Red Hat OpenShift on IBM Cloud balance the workload within each geographic region, including self-healing and load balancing.
* Load-balancing, firewalls, and DNS are handled by IBM Cloud Internet Services.
* Using the toolchains and Helm deployment tools, the apps are also deployed to clusters across the globe, so workloads and data meet regional requirements, especially personalization.







 Step 3: Understand users 



* App ID provides sign-on capabilities without needing to change app code.
* After users have signed in, you can use App ID to create profiles and personalize a user's experience of your application.







 Step 4: Share data 



* IBM Cloud® Object Storage plus IBM® Event Streams for IBM Cloud® provides real-time and historical data storage, so that cross-sales offers represent available inventory from business partners.
* APIs allow the retailer’s business partners to share data into their e-commerce and B2B apps.







 Step 5: Deliver continuously
Moving your environment to IBM Cloud Kubernetes Service 

With IBM Cloud® Kubernetes Service, you can quickly and securely deploy container workloads for your apps in production. Learn more so that when you plan your cluster strategy, you optimize your setup to make the most of [Kubernetes](https://kubernetes.io/) automated deploying, scaling, and orchestration management capabilities.



 Moving your workloads to the IBM Cloud 

You have lots of reasons to move your workloads to IBM Cloud: reducing total cost of ownership, increasing high availability for your apps in a secure and compliant environment, scaling up and down in respond to your user demand, and many more. IBM Cloud Kubernetes Service combines container technology with open source tools, such as Kubernetes so that you can build a cloud-native app that can migrate across different cloud environments, avoiding vendor lock-in.

But how do you get to the cloud? What are your options along the way? And how do you manage your workloads after you get there?

Use this page to learn some strategies for your Kubernetes deployments on IBM Cloud Kubernetes Service. And engage with our team on [Slack](https://ibm-cloud-success.slack.com).

Not on slack yet? [!Request an invite](https://cloud.ibm.com/kubernetes/slack)



 What can I move to the IBM Cloud? 

With IBM Cloud, you have flexibility to create Kubernetes clusters in [off-premises, on-premises, or hybrid cloud environments](https://cloud.ibm.com/docs/containers?topic=containers-cs_ovdifferentiation). The following table provides some examples of what types of workloads that users typically move to the various types of clouds. You might also choose a hybrid approach where you have clusters that run in both environments.



IBM Cloud implementations support your workloads

 Workload Kubernetes Service off-prem on-prem 

 DevOps enablement tools Yes 
 Developing and testing apps Yes 
 Apps have major shifts in demand and need to scale rapidly Yes
Note that persistent storage of data such as application logs and cluster metrics are not set up by default.<br><br><br> 







 Applications and data 

You are completely responsible for the applications, workloads, and data that you deploy to IBM Cloud. However, IBM provides various tools to help you set up, manage, secure, integrate and optimize your apps as described in the following table.



Table 7. Applications and data

 Resource How IBM helps What you can do 

 Applications <br><br> * Provision clusters with Red Hat OpenShift components installed so that you can access the Red Hat OpenShift API to deploy and manage your containerized apps.<br> * Provide a number of managed add-ons to extend your app's capabilities, such as the Diagnostics and Debug Tool. Maintenance is simplified for you because IBM provides the installation and updates for the managed add-ons.<br> * Provide cluster integration with select third-party partnership technologies, such as Log Analysis, Monitoring, and Portworx.<br> * Provide automation to enable service binding to other IBM Cloud services.<br> * Create clusters with image pull secrets so that your deployments in the default Kubernetes namespace can pull images from IBM Cloud Container Registry.<br> * Provide access to Red Hat OpenShift APIs that you can use to set up Operators to add community, third-party, and your own services to your cluster. Note that Operators might not work without manual adjustments such as changes in cluster security policies.<br> * Provide storage classes and plug-ins to support persistent volumes for use with your apps.<br> * Automatically configure security settings to prevent insecure access, such as disabling SSH into the worker node compute hosts.<br> * Automatically integrate IBM Cloud IAM service access roles with Kubernetes RBAC roles in the cluster.<br> * Generate an API key that is used to access infrastructure permissions for each resource group and region.<br><br><br> <br><br> * Maintain responsibility for your apps, data, and their complete lifecycle.<br> * If you add community, third-party, your own, or other services to
More learning resources 

Review the following resources to get started faster or gain more in-depth technical information for IBM Cloud® for VMware Solutions.



*  Videos and demonstrations
*  Technical in-depth analysis
*  Tutorials
*  Community-contributed content





  Data sheets 



*  [IBM Cloud for VMware Solutions Protection data sheet](https://www.ibm.com/software/reports/compatibility/clarity-reports/report/html/softwareReqsForProduct?deliverableId=236C87407E7411E6BA51E79BE9476040)







  Platform extensions 

Review the architecture of all the [Virtualization Platform Extensions](https://www.ibm.com/cloud/architecture/architectures/virtualizationArchitecture/extensions) such as:



*  FortiGate® Security Appliance
*  IBM Cloud file and block storage
*  VMware NSX Edge™ Services Gateway
*  Secure virtualization
*  Veeam® backup and replication
*  VMware Aria® Automation
*  Zerto disaster recovery







  Videos and demonstrations 



*  [Veeam on IBM Cloud](https://www.ibm.com/demos/collection/Veeam-on-IBM-Cloud)
*  [Zerto on IBM Cloud](https://www.ibm.com/demos/collection/Zerto-on-IBM-Cloud)
*  [Resources and videos](https://www.ibm.com/cloud/architecture/architectures/virtualizationArchitecture/resources)







  VMware documentation 



*  [VMware Hybrid Cloud Extension documentation](https://cloud.vmware.com/vmware-hcx/resources)
Infrastructure health monitoring and notification Remediate all infrastructure and hypervisor environment issues. Notify customers of applicable incidents. Ascertain the impact of each incident that is reported. Engage IBM Support as required. 
 Infrastructure health management Continuously deliver new features, updates, and bug fixes as needed in a manner transparent to you. Schedule maintenance activities that have customer impact in advance and post notifications to the IBM Cloud status page. Set preferences to receive emails notifications. Monitor the IBM Cloud status page for general announcements. 
 Clusters, hosts, and storage resource management and observability Deploy a fully managed single-tenant VMware environment in a secured, IBM-owned infrastructure account to customer specifications. Fulfill customer requests for more infrastructure, such as adding and removing single-tenant clusters, bare metal compute, and storage. Integrate ordered infrastructure resources to work automatically with your cluster architecture and become available to your deployed apps and workloads. Provide monitoring by using IBM Cloud Monitoring to enable observability of your clusters. Control the amount of deployed infrastructure and ensure that the VMware environment has the proper amount of storage, networking, and compute resources to run workloads. Monitor compute, RAM, and storage usage in [IBM Cloud Monitoring](https://cloud.ibm.com/catalog/services/ibm-cloud-monitoringabout). Use the provided console tools to adjust VMware as a Service instance compute and storage capacity to meet the needs of your workload. 
 Application networking Deploy fully managed single-tenant VMware NSX-T™ edge configurations that are attached to virtual data centers that can be used to access the public internet and IBM Cloud private internet. Use the provided console tools to configure multiple virtual data centers to a single edge configuration. Or select a one-to-one virtual data center to networking edge mapping based on use case and bandwidth. When you put VMware workloads on the public and private IBM Cloud network, use NSX-T edge services firewalls, OS or application firewalls, and OS or application security configurations to protect workloads from threats and attacks. 
 Workload monitoring Forward to customer any network intrusion notifications detected. Triage virtualization and backup-related errors to determine whether the customer issue needs assistance.
[External link icon](https://cloud.ibm.com/docs-content/v1/content/8aa0853d34cf2349f1d2db8e5c61e6422a580169/icons/launch-glyph.svg)](https://www.ibm.com/blogs/cloud-computing/2016/08/10/practical-guide-paas/).

With the SaaS model, your provider maintains the systems through the actual application. The application is cloud-aware, and users can use different end points, depending on the software provider, to use the software. The cloud provider is responsible for all infrastructure and application management, which includes software updates, hardware repairs, and network settings. This model is often used in pay-as-you-go software licensing models. For more information, see [SaaS applications for business and IT](https://www.ibm.com/cloud/saas)![External link icon](https://cloud.ibm.com/docs-content/v1/content/8aa0853d34cf2349f1d2db8e5c61e6422a580169/icons/launch-glyph.svg).





 Cloud types 

There are three different types of clouds available: public, private, and hybrid. A public cloud includes a shared set of resources that are provisioned to allow access to a company's resources. It is hosted in a multi-tenant environment on a virtual server, and it can be accessed from anywhere.

A private cloud includes resources that are provisioned to allow access to a company's resources. It is hosted on dedicated hardware, such as a bare metal server, and either onsite at the company's office (or across offices) or by a cloud provider. A private cloud can be accessed from anywhere.

A hybrid cloud includes resources that combine the aspects of both public and private clouds. It is hosted both onsite at a company's office (or across offices) and by a cloud provider. A hybrid cloud can be accessed from anywhere.





 Next steps
* Deploy the manifest and shipment apps to container that run in IBM Cloud Kubernetes Service.
* Provide standardized DevOps dashboards through Kubernetes.
* Use IBM Secure Gateway to maintain secure connections to existing on-premises databases.







 Step 2: Ensure global availability 



* After Developers deploy the apps in their Dev and Test clusters, they use the IBM Cloud® Continuous Delivery toolchains and Helm to deploy country-specific apps into clusters across the globe.
* Workloads and data can then meet regional regulations.
* Built-in HA tools in IBM Cloud Kubernetes Service balance the workload within each geographic region, including self-healing and load balancing.







 Step 3: Data sharing 



* IBM Cloudant is a modern NoSQL database suitable a range of data-driven use cases from key-value to complex document-oriented data storage and query.
* To minimize queries to the regional databases, IBM Cloudant is used to cache the user's session data across apps.
* This configuration improves the front-end app usability and performance across apps on Kubernetes Service.
* While worker apps in IBM Cloud Kubernetes Service analyze on-premises data and store results in IBM Cloudant, IBM Cloud® Functions reacts to changes and automatically sanitizes data on the incoming feeds of data.
* Similarly, notifications of shipments in one region can be triggered through data uploads so that all down-stream consumers can access new data.









 Results 



* Microservices greatly reduce time to delivery for patches, bug fixes, and new features. Initial development is fast, and updates are frequently 10 times per week.
* Shipping customers and government officials have access to manifest data and can share customs data, while they comply with local regulations.
* The shipping company benefits from improved logistics management in the supply chain: reduced costs and faster clearance times.
* 99% are digital declarations, and 90% of imports processed without human intervention.
Applications can be deployed in minutes to a Kubernetes cluster on IBM Cloud, to either public or private clouds.

Open toolchain integrates more tools around Continuous Delivery such as IBM Cloud® Event Notifications, Slack, Atlassian JIRA, Sonatype Nexus, JFrog Artifactory, Sauce Labs, PagerDuty, and IBM Vulnerability Advisor. You can also substitute other tools for the Continuous Delivery capabilities, including GitHub and Jenkins. Developers can also use their favorite IDEs and editors, such as Visual Studio Code, Eclipse, and more.

Code repos, issue tracking systems, build systems, and deployment systems represent a wealth of data that can be used to help you deliver apps more efficiently and effectively. IBM Cloud® DevOps Insights uses big data analysis to provide valuable insights to Executives, Managers, and Developers. DevOps Insights aggregates and analyzes data from your DevOps toolchain to advise you about the risk of deploying specific changes, and areas to improve both your codebase and team productivity. The Delivery Pipeline can automatically gate deployment to an environment based on the risk of a change.

IBM Cloud DevOps provides concrete practices and architectures for cloud development. It enables Developers to get started quickly with new projects that employ the rich catalog of services on the IBM Cloud. IBM Cloud DevOps also provides Developers an open and integrated set of tools for automating delivery with speed and control.
All of the IBM Cloud® compute service options share the latest technology capabilities:



* Latest generation of VPC networking
* Latest Kubernetes delivery infrastructure
* Automatically securing apps with TLS
* Access to Kubernetes infrastructure and APIs for Kubernetes users
* Choice of public/internet-facing workloads or private ones
* The ability to build container images using Dockerfiles or use [Paketo buildpacks](https://paketo.io/)
* The ability to deploy container images from public or private image registries



No matter which IBM Cloud® compute you choose, you will have the latest cloud technology capabilities.

To learn more about migration details for potential migration targets for your existing IBM Cloud Foundry applications, see:



* [IBM Cloud Code Engine](https://cloud.ibm.com/docs/cloud-foundry-public?topic=cloud-foundry-public-deprecation_code_engine) migration details
* [IBM Cloud Kubernetes Service](https://cloud.ibm.com/docs/cloud-foundry-public?topic=cloud-foundry-public-deprecation_iks) migration details
* [Red Hat OpenShift on IBM Cloud](https://cloud.ibm.com/docs/cloud-foundry-public?topic=cloud-foundry-public-deprecation_openshift) migration details



To better understand your IBM Cloud Foundry application deployment in preparation for migration, see [IBM Cloud Foundry application deployment analysis.](https://cloud.ibm.com/docs/cloud-foundry-public?topic=cloud-foundry-public-deprecation_deploy_analysis)

See [IBM Cloud Foundry migration tooling.](https://cloud.ibm.com/docs/cloud-foundry-public?topic=cloud-foundry-public-deprecation_migration_tooling) for additional information on tools to assist in migration.





 Migrating applications 

Review the suggested steps for migrating your IBM Cloud Foundry applications to a new IBM Cloud® compute service.



 Step 1: Investigate & review your current IBM Cloud Foundry application deployments
<br><br> * Overview: [KMIP for VMware® on IBM Cloud](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-kmip_standalone_considerations)<br> * Tutorial: [Use IBM Cloud Hyper Protect Crypto Services to encrypt VMware disks](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-tutorial-kmip-vmware)<br> * Overview video: [IBM Cloud Hyper Protect Crypto Services and VMware® on IBM Cloud solutions](https://mediacenter.ibm.com/media/0_4wm4bq4s)<br> * Demo video: [Configuring KMIP in Hyper Protect Crypto Services for key management and distribution](https://mediacenter.ibm.com/media/1_e5gk6ktn)<br><br><br> 
 [Entrust DataControl for IBM Cloud](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-entrust-dc_considerations) - formerly known as HyTrust CloudControl The Entrust DataControl service integrates with Hyper Protect Crypto Services to protect your data with strong encryption and scalable key management. The service provides encryption at both the operating system level and at the data level to secure your workloads throughout their lifecycles. <br><br> * [Entrust CloudControl on IBM Cloud overview](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-entrust-cc_considerations)<br> * Entrust official website: [Entrust DataControl for IBM Cloud](https://www.entrust.com/digital-security/multi-cloud-encryption/datacontrol-ibm-cloud)<br><br><br>
IBM Security Services for SAP on IBM Cloud overview 

IBM Security Services for SAP® on IBM Cloud offer a cybersecurity solution to automate the monitoring and protection of SAP applications on IBM Cloud, and to keep workloads compliant and secure from inside and outside threats. IBM Security Services for SAP on IBM Cloud is a non-IBM product that is offered under terms and conditions from Entrust and Intel, not IBM.

These services, developed between IBM Security and Onapsis (an IBM Business Partner), are designed to implement and configure Onapsis specifically to your environment requirements for continuous workload visibility and protection.

Through continuous monitoring, the Onapsis Security Platform delivers a near real-time, preventive, detective, and corrective solution for securing SAP systems and applications. The Onapsis Security Platform provides unmatched coverage and protection with context-aware insight across SAP NetWeaver ABAP, Java® Platform, Enterprise Edition, and HANA platforms. The platform integrates with network security, security management, and associated workflows.



 Technical specifications for IBM Security Services for SAP 

IBM Security Services for SAP offer the following features:



* Comprehensive understanding of vulnerabilities and potential attack vectors.
* Methods to implement and avoid defects in ABAP code or SAP Transports.
* Identifying configuration vulnerabilities for ABAP, Java®, and HANA environments.
* Identifying missing or outdated SAP notes and patches.
* Identifying, monitoring and review of highly privileged SAP accounts.
* Enabling continuous monitoring of vulnerabilities with integration to existing SIEM solution.







 Key benefits of IBM Security Services for SAP 

You can expect the following benefits when you request IBM Security Services for SAP:



* Consultative engagement methods centered on your business objectives.
* Experienced end-to-end architectural experts that work jointly with the IBM Cloud team.
* Accelerated cloud adoption for successful implementation of SAP workloads on the cloud.
* Prescriptive best practices for solution implementation by using IBM Cloud Services products and features.
* Rapid learning and risk mitigation through access to IBM Cloud experts.







 Procedure to request IBM Security Services for SAP 



1. In the IBM Cloud for VMware Solutions console, scroll down to the services section and click IBM Security Services for SAP in the Featured workload solutions category.
* [integrated services for Key Protect](https://cloud.ibm.com/docs/key-protect?topic=key-protect-integrate-services) and the
* [integrated services for Hyper Protect Crypto Services](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-integrate-services).



Supported services include Object Storage, Block Storage for VPC, IBM Cloudant, IBM Db2 on Cloud, Kubernetes Service, IBM Cloud® Virtual Servers for Virtual Private Cloud and more. The [Secrets Manager](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-getting-started) allows to create, manage and lease secrets for both cloud services in apps. The secrets can be guarded (encrypted) by your root key.





 Example: Cloud Object Storage 

One of the most often used services is Object Storage. After you provisioned either Key Protect or Hyper Protect Crypto Services and created a root key with optionally making use of BYOK or KYOK, you can use that key when creating a new storage bucket. The following screenshot shows the UI to create a bucket with option to use a key from either service.

Zoom

![Control encryption in Object Storage](https://cloud.ibm.com/docs-content/v1/content/f84e2238288b7f0355715a4c355609ce7ac48fb0/solution-tutorials/images/solution51-extended-app-security/Sol51_COScrypto.png)

Control encryption in Object Storage

A similar flow is available for [Block Storage for VPC](https://cloud.ibm.com/docs/vpc?topic=vpc-block-storage-vpc-encryption) to encrypt VPC boot and data volumes.





 Example: Watson services 

Many solutions are based on services with artificial intelligence (AI). At IBM they are offered as [Watson services](https://cloud.ibm.com/developer/watson/services). By default, all data is encrypted.