vania-janet/multiturn-rag-retrieval-data huggingface dataset:
The IBM Cloud file storage (NFS) is in the IBM Cloud services network in the data center. Customers don't have direct access to the underlying storage infrastructure and use file shares.
* NTP service - In this architecture, the isolated recovery environment uses the ADDNS servers as a time source. The ADDNS servers use the IBM Cloud NTP service for their time reference.
* DNS service - In this architecture, the isolated recovery environment uses the ADDNS servers for name resolution. The ADDNS servers use the IBM Cloud DNS service for requests that they cannot resolve directly.



The cyber-recovery admins are your team responsible for the operation of the cyber-recovery environment. To enable separation of duties, the team members must be different from your production teams.





 Linux hardened repository 

The hardened repository is one or more IBM Cloud bare metal servers that run a supported Linux OS. For more information, see [Veeam Linux hardened repository](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions--veeam-cr-sa-lhr).





 Optional services 

The following services are optional but recommended to enable encrypted data stores, either Key Protect or Hyper Protect Crypto Services for key management with the KMIP service:



* Key Protect service - The Key Protect service is an encryption solution that allows data in the VMware datastores to be secured by using envelope encryption techniques that use FIPS 140-2 Level 3 certified cloud-based hardware security modules. For more information, see [About Key Protect](https://cloud.ibm.com/docs/key-protect?topic=key-protect-about).
* Hyper Protect Crypto Services - IBM Cloud Hyper Protect Crypto Services is a dedicated key management service and hardware security module that enables the user to take the ownership of the hardware security module to fully manage your encryption keys and to perform cryptographic operations. Hyper Protect Crypto Services is built on FIPS 140-2 Level 4-certified hardware. For more information, see [Getting started with IBM Cloud Hyper Protect Crypto Services](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-get-started).
[IBM Developer<br><br>Visit IBM Developer for technical articles, code patterns, tutorials, and more.<br><br>![112-Developer-tools.svg](https://cloud.ibm.com/media/docs/images/homepage/112-Developer-tools.svg)](https://developer.ibm.com/depmodels/cloud/)[Architecture Center<br><br>Discover the architecture references available for this product.<br><br>![190-Application-Platform.svg](https://cloud.ibm.com/media/docs/images/homepage/190-Application-Platform.svg)](https://www.ibm.com/cloud/architecture)[IBM Training<br><br>Build your skills with IBM Cloud training.<br><br>![83-Elements-of-the-cloud.svg](https://cloud.ibm.com/media/docs/images/homepage/83-Elements-of-the-cloud.svg)](https://www.ibm.com/training/cloud)[Community<br><br>Join the IBM Cloud community and collaborate with others.<br><br>![35-Connectivity.svg](https://cloud.ibm.com/media/docs/images/homepage/35-Connectivity.svg)](https://ic-devops-slack-invite.us-south.devops.cloud.ibm.com/)

 Latest updates 

[View more](https://cloud.ibm.com/docs/cloud-shell?topic=cloud-shell-release-notes-image)17 May 2023 | Simple Python Version Management (`pyenv`) is now available on IBM Cloud Shell

A preinstalled Python 3.11.2 is available by using `pyenv`.

31 March 2023 | The ibmcloud dev app commands are no longer available

When you deploy or run your application on Docker, the `ibmcloud dev` app commands are no longer available, including `ibmcloud dev build` and `ibmcloud dev run`.
Additional information and detailed steps for these tasks can be found in [Setting up your environment for your first order of IBM Cloud for VMware](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-completing_checklist) and [Requirements for the IBM Cloud Classic Infrastructure account when you use IBM Cloud for VMware](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-cloud-infra-acct-req).



1. [Create an IBM Cloud Classic Infrastructure API key](https://cloud.ibm.com/docs/account?topic=account-classic_keyscreate-classic-infrastructure-key). This task coordinates the infrastructure setup for the VMware SDDC (such as VLAN, Subnet, Bare Metal). If you request administrator access is requested, use the steps in [Locating an IAM account administrator](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-iam_verify_permissions) and [verify/update your user permissions](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-cloud-infra-acct-req).
2. Convert your IBM Cloud account to use [Virtual routing and forwarding (VRF) on IBM Cloud](https://cloud.ibm.com/docs/direct-link?topic=direct-link-overview-of-virtual-routing-and-forwarding-vrf-on-ibm-cloud), using the steps described in [Converting to virtual routing and forwarding](https://cloud.ibm.com/docs/direct-link?topic=direct-link-what-happens-during-the-account-conversion-process).

Enabling VRF permanently alters networking for your IBM Cloud account. Be sure that you have understood both the benefits and minor tradeoffs, which impact your account and resources. After you enable VRF, it cannot be disabled.
3.
With IBM Cloud, you have flexibility to create Red Hat OpenShift clusters in [off-premises, on-premises, or hybrid cloud environments](https://cloud.ibm.com/docs/containers?topic=containers-cs_ovdifferentiation). The following table provides some examples of what types of workloads that users typically move to the various types of clouds. You might also choose a hybrid approach where you have clusters that run in both environments.



IBM Cloud implementations support your workloads

 Workload Kubernetes Service off-prem on-prem 

 DevOps enablement tools Yes 
 Developing and testing apps Yes 
 Apps have major shifts in demand and need to scale rapidly Yes 
 Business apps such as CRM, HCM, ERP, and E-commerce Yes 
 Collaboration and social tools such as email Yes 
 RHEL workloads Yes 
 Bare metal Yes Yes 
 GPU compute resources Yes Yes 
 PCI and HIPAA-compliant workloads Yes Yes 
 Legacy apps with platform and infrastructure constraints and dependencies Yes 
 Proprietary apps with strict designs, licensing, or heavy regulations Yes 



Ready to run workloads off-premises in Red Hat OpenShift on IBM Cloud?
: Great! You're already in our public cloud documentation. Keep reading for more strategy ideas, or hit the ground running by [creating a cluster now](https://cloud.ibm.com/docs/containers?topic=containers-getting-started).

Want to run workloads in both on-premises and off-premises clouds?
: Explore [IBM Cloud Satellite](https://cloud.ibm.com/docs/satellite?topic=satellite-faqs) to extend the flexibility and scalability of IBM Cloud into your on-premises, edge, or other cloud provider environments.





 Can I automate my infrastructure deployments? 

If you want to run your app in multiple clusters, public and private environments, or even multiple cloud providers, you might wonder how you can make your deployment strategy work across these environments.
IBM Cloud® users have a choice of several modern application hosting runtime platforms on the IBM Cloud®.



* [IBM Cloud Code Engine](https://www.ibm.com/cloud/code-engine) is a fully managed, serverless platform that runs your containerized workloads, including web apps, micro-services, event-driven functions, or batch jobs. IBM Cloud Code Engine even builds container images for you from your source code. Because these workloads are all hosted within the same Kubernetes infrastructure, all of them can seamlessly work together. The IBM Cloud Code Engine experience is designed so that you can focus on writing code and not on the infrastructure that is needed to host it.
* [IBM Cloud® Kubernetes Service](https://www.ibm.com/cloud/kubernetes-service) is an open source platform for managing containerized workloads and services across multiple hosts, and offers management tools for deploying, automating, monitoring, and scaling containerized apps with minimal to no manual intervention.
* [Red Hat OpenShift on IBM Cloud](https://www.ibm.com/cloud/openshift) is a Kubernetes container platform that provides a trusted environment to run enterprise workloads. It extends the Kubernetes platform with built-in software to enhance app lifecycle development, operations, and security. With OpenShift, you can consistently deploy your workloads across hybrid cloud providers and environments.



For a comparison of these options, see [Migration options comparison](https://cloud.ibm.com/docs/cloud-foundry-public?topic=cloud-foundry-public-deprecation_option_comparison)

All of the IBM Cloud® compute service options share the latest technology capabilities:



* Latest generation of VPC networking
* Latest Kubernetes delivery infrastructure
* Automatically securing apps with TLS
* Access to Kubernetes infrastructure and APIs for Kubernetes users
* Choice of public/internet-facing workloads or private ones
* The ability to build container images using Dockerfiles or use [Paketo buildpacks](https://paketo.io/)
[IBM Cloud Schematics](https://cloud.ibm.com/docs/schematics?topic=schematics-getting-started) The IBM Cloud Schematics service delivers Terraform-as-a-Service. You can use it to organize your IBM Cloud resources across environments by using workspaces. [View docs](https://cloud.ibm.com/docs/schematics?topic=schematics-secure-datapi-encrypt) 
 [IBM® Event Streams for IBM Cloud®](https://cloud.ibm.com/docs/EventStreams?topic=EventStreams-getting_started) The Event Streams service is a high-throughput message bus built with Apache Kafka. You can use it for event ingestion into IBM Cloud and event stream distribution between your services and applications. [View docs](https://cloud.ibm.com/docs/EventStreams?topic=EventStreams-managing_encryption) 







 Developer tools service integrations 

You can integrate Key Protect with the following developer tools services.



Table 6. Supported developer tools services.

 Service Description Integration docs 

 [IBM Cloud Continuous Delivery](https://cloud.ibm.com/docs/ContinuousDelivery?topic=ContinuousDelivery-getting-started) The Continuous Delivery service provides a suite of tools that support DevOps best practices. You can use the service to manage toolchains, operate delivery pipelines, gain insights into code quality and vulnerabilities, integrate third party tools, and more. [Creating a Continuous Delivery service instance](https://cloud.ibm.com/docs/ContinuousDelivery?topic=ContinuousDelivery-create_cd_service)[Protecting your personal data when you use the Professional plan](https://cloud.ibm.com/docs/ContinuousDelivery?topic=ContinuousDelivery-cd_data_securitycd_professional_plan) 







 Understanding your integration 

When you integrate a supported service with Key Protect, you enable [envelope encryption](https://cloud.ibm.com/docs/key-protect?topic=key-protect-envelope-encryption) for that service.
Some are built for high availability and data durability (at the expense of more hardware and extra cost). Others favor speed and can churn out blazingly fast queries (but might lose data in a sudden power failure).

Cloudant



* 2023-03-30



[Enhance cloud security by applying context-based restrictions](https://cloud.ibm.com/docs/solution-tutorials?topic=solution-tutorials-cbr-enhanced-security)Enhance cloud security by applying context-based restrictions

This tutorial walks you through the process of implementing context-based restrictions (CBRs) in your IBM Cloud account. CBRs help you to secure the cloud environment further and move towards a zero trust security model.

Kubernetes service Object Storage

+7

Activity Tracker hosted event search,Container Registry,Secrets Manager,App ID,Cloudant,Key Protect,Log Analysis



* 2 hours
* 2023-06-28



[Apply end to end security to a cloud application](https://cloud.ibm.com/docs/solution-tutorials?topic=solution-tutorials-cloud-e2e-security)Apply end to end security to a cloud application

This tutorial walks you through key security services available in the IBM Cloud® catalog and how to use them together. An application that provides file sharing will put security concepts into practice.

Kubernetes service Object Storage

+8

Activity Tracker hosted event search,Container Registry,Secrets Manager,App ID,Cloudant,Key Protect,Log Analysis,Cloud Internet Services (CIS)



* 2 hours
* 2023-05-05



[Deploy microservices with Red Hat OpenShift on IBM Cloud](https://cloud.ibm.com/docs/solution-tutorials?topic=solution-tutorials-openshift-microservices)Deploy microservices with Red Hat OpenShift on IBM Cloud

This tutorial demonstrates how to deploy applications to Red Hat OpenShift on IBM Cloud. Red Hat OpenShift on IBM Cloud provides a great experience for developers to deploy software applications and for System Administrators to scale and observe the applications in production.

Red Hat OpenShift on IBM Cloud Log Analysis

+3
Video - Setting up a web app with security groups, load balancer & CDN 

IBM Cloud® network services, including load balancer, security groups, and CDN make it easy to build cloud-native applications with greater security, performance, and resiliency. In this demo, you'll learn how you can use these services to create a simple three-tiered web app in a matter of clicks.
[solution tutorial icon](https://cloud.ibm.com/media/docs/images/homepage/solution-tutorial.svg) [Public frontend and private backend in a Virtual Private Cloud](https://cloud.ibm.com/docs/solution-tutorials?topic=solution-tutorials-vpc-public-app-private-backend)Public frontend and private backend in a Virtual Private Cloud Solution tutorial

This tutorial walks you through creating your own IBM Cloud® Virtual Private Cloud (VPC) with multiple subnets and a virtual server instance (VSI) in each subnet. A VPC is your own, private cloud on shared cloud infrastructure with logical isolation from other virtual networks.

![solution tutorial icon](https://cloud.ibm.com/media/docs/images/homepage/solution-tutorial.svg) [Red Hat OpenShift Container Platform on VPC landing zone](https://cloud.ibm.com/docs/deployable-reference-architectures?topic=deployable-reference-architectures-ocp-ra)Red Hat OpenShift Container Platform on VPC landing zone Reference architecture

Red Hat OpenShift Container Platform on VPC landing zone is a deployable architecture solution that is based on the IBM Cloud for Financial Services reference architecture. It creates secure and compliant Red Hat OpenShift Container Platform workload clusters on a Virtual Private Cloud (VPC) network.

Deployable![ref architecture icon](https://cloud.ibm.com/media/docs/images/homepage/reference-architecture.svg) [Resilient and secure multi-region Kubernetes clusters with IBM Cloud Internet Services](https://cloud.ibm.com/docs/solution-tutorials?topic=solution-tutorials-multi-region-k8s-cis)Resilient and secure multi-region Kubernetes clusters with IBM Cloud Internet Services Solution tutorial
Overview 

Use IBM Cloud® Virtual Private Cloud to create your own space in IBM Cloud®. A virtual private cloud (VPC) is a secure, isolated virtual network that combines the security of a private cloud with the availability and scalability of IBM's public cloud.



 Logical isolation 

VPC gives your applications logical isolation from other networks, while providing scalability and security. To make this logical isolation possible, the VPC is divided into subnets that use a range of private IP addresses. You can create subnets in suggested prefix ranges, or bring your own public IP address range (BYOIP) to your IBM Cloud account. By default, all resources within the same VPC can communicate with each other over the private network, regardless of their subnet.





 Quick instance provisioning with high network performance 

You can quickly provision scalable compute resources in your VPC by creating virtual server instances with the core and RAM configuration that's best for your workload. You can select from the supported stock images or custom images that were imported from IBM Cloud Object Storage. All images are cloud-init enabled. You can connect to your instance without using a password by adding SSH keys.

You can create instances with up to 80 Gbps network bandwidth per instance. Each instance can be multi-homed, that is, you can create multiple network interfaces per instance.





 Multi-architecture images 

You can choose to create virtual server instances with different operating systems on x86_64 or s390x processor architecture. For more information, see [Images](https://cloud.ibm.com/docs/vpc?topic=vpc-about-images).





 Storage capabilities 

When you create an instance, a 100 GB block storage volume is automatically attached as a primary boot volume. To add secondary data volumes to your instance, create block storage volumes.





 External connectivity 

Several options are available for enabling your instances to communicate with the public internet:



* To enable all instances in a subnet to send outgoing traffic, attach a public gateway to the subnet.
* To enable communication to and from a particular instance, independent of whether the subnet is attached to a public gateway, associate the instance with a floating IP.
Maintenance is simplified for you because IBM provides the installation and updates for the managed add-ons.<br> * Provide cluster integration with select third-party partnership technologies, such as Log Analysis, Monitoring, and Portworx.<br> * Provide automation to enable service binding to other IBM Cloud services.<br> * Create clusters with image pull secrets so that your deployments in the default Kubernetes namespace can pull images from IBM Cloud Container Registry.<br> * Provide access to Kubernetes APIs that you can use to set up Operators to add community, third-party, and your own services to your cluster. Note that Operators might not work without manual adjustments such as changes in cluster security policies.<br> * Provide storage classes and plug-ins to support persistent volumes for use with your apps.<br> * Automatically configure security settings to prevent insecure access, such as disabling SSH into the worker node compute hosts.<br> * Automatically integrate IBM Cloud IAM service access roles with Kubernetes RBAC roles in the cluster.<br> * Generate an API key that is used to access infrastructure permissions for each resource group and region.<br><br><br> <br><br> * Maintain responsibility for your apps, data, and their complete lifecycle.<br> * If you add community, third-party, your
Deployment considerations for the roll-your-own VMware solution on VPC 

Roll-your-own VMware® solution in VPC is not a managed service. You can use IBM Cloud® services to build your own VMware solution in IBM Cloud VPC.

You are responsible for the VPC deployment and related networking resources, IBM Cloud bare metal server in VPCs and for the deployment, configuration, security, management, and monitoring of all VMware software components. With complete administrative access to the solution, you have great power and flexibility that requires significant technical, administrative, and operational expertise across various domains.

Managing a VMware in the IBM Cloud requires the same planning and expertise as planning for an on-premises instance. Software-defined technologies such as VMware NSX-T™ and VMware vSAN™ greatly simplify some aspects of instance management. However, management in IBM Cloud VPC might require new skills and tools for proper operation. For example, a proper understanding of IBM Cloud concepts and IBM Cloud VPC solutions and services are required.



 Sizing your VMware vSphere clusters 

A vSphere cluster is typically the boundary of shareable resources for VMware workloads. By definition, a vSphere High Availability (HA) cluster consists of two or more hosts. VMware vSphere® HA protects your virtual machines (VMs) if an ESXi host failure occurs by restarting VMs on other hosts in the cluster when an ESXi host fails. When you are planning the sizing for your VMware vSphere clusters in IBM Cloud VPC, consider the VMware best practices that are documented in [VMware validated designs](https://docs.vmware.com/en/VMware-Validated-Design/5.1/sddc-architecture-and-design/) to meet your capacity and high availability targets.

Theoretically, as each IBM Cloud VPC Bare Metal Server is deployed individually, you can build a solution as small as one ESXi host per IBM Cloud VPC zone. However, you need to take the high availability aspects into account.
IBM Cloud Monitoring integration 

IBM Cloud® Monitoring is a cloud-native and container-intelligent management system that you can include as part of your IBM Cloud® architecture. Use it to gain operational visibility into the performance and health of your applications, services, and platforms. It offers administrators, DevOps teams, and developers full-stack telemetry with advanced features to monitor and troubleshoot, define alerts, and design custom dashboards.

Currently, IBM Cloud Monitoring integration is available for DNS Services deployments according to the following table:



Table 1. IBM Cloud Monitoring regions

 Deployment Region IBM Cloud Monitoring Region 

 Dallas Dallas 
 Frankfurt Frankfurt 
 London London 
 Madrid Frankfurt Currently, Cloud Monitoring in Madrid is routed to Frankfurt until Madrid support is enabled. 
 Osaka Osaka 
 Paris Paris 
 São Paulo São Paulo 
 Sydney Sydney 
 Tokyo Tokyo 
 Toronto Toronto 
 Washington DC Washington DC 





 Platform metrics overview 

You can configure only one instance of the IBM Cloud® Monitoring service per region to collect platform metrics. Platform metrics are enabled by default in all instances, and cannot be disabled.



* Provision an instance of the IBM Cloud Monitoring service. After you provision the Monitoring instance, the Observability page opens. To continue working with IBM Cloud, go back to the IBM Cloud UI.
* To configure the Monitoring instance, you must turn on the platform metrics configuration setting.
* If a Monitoring instance in a region is already enabled to collect platform metrics, metrics from enabled-monitoring services are collected automatically and available for monitoring through this instance. For more information about enabled-monitoring services, see [IBM Cloud® services](https://www.ibm.com/cloud/services).
* Use the Metrics Router to allow customers to configure which Sysdig instance their platform metrics flows to. To learn more about Metrics Router, see [IBM Cloud Metrics Routing](https://cloud.ibm.com/docs/metrics-router).



To monitor platform metrics, check that the Monitoring instance is provisioned in the same region where the IBM Cloud instance is provisioned.





 Viewing metrics