vania-janet/multiturn-rag-retrieval-data huggingface dataset:
VPC: Setting up authorized IP addresses for IBM Cloud Object Storage 

Virtual Private Cloud

You can authorize your VPC Cloud Service Endpoint source IP addresses to access your IBM Cloud Object Storage bucket. When you set up authorized IP addresses, you can only access your bucket data from those IP addresses; for example, in an app pod.

Minimum required permissions
: Manager service access role for the IBM Cloud Kubernetes Service service.
: Writer service access role for the IBM Cloud Object Storage service.



1. [Follow the instructions to install the ibmc Helm plug-in](https://cloud.ibm.com/docs/containers?topic=containers-storage_cos_install). Make sure to install the ibm-object-storage-plugin and set the bucketAccessPolicy option to true.
2. Create one Manager HMAC service credential and one Writer HMAC service credential for your IBM Cloud Object Storage instance.



* [Creating HMAC credentials from the console](https://cloud.ibm.com/docs/cloud-object-storage?topic=cloud-object-storage-uhc-hmac-credentials-main).
* [Creating HMAC credentials from the CLI](https://cloud.ibm.com/docs/cloud-object-storage?topic=cloud-object-storage-uhc-hmac-credentials-mainuhc-create-hmac-credentials-cli).



3. Encode the apikey from your IBM Cloud Object Storage Manager credentials to base64.

echo -n "<cos_manager_apikey>" | base64
4. Encode the access-key and secret-key from your IBM Cloud Object Storage Writer credentials to base64.

echo -n "<cos_writer_access-key>" | base64
echo -n "<cos_writer_secret-key>" | base64
5. Create a secret configuration file with the values that you encoded. For the access-key and secret-key, enter the base64 encoded access-key and secret-key from the Writer HMAC credentials that you created.
Note: You will need to wait until the status changes to Active.



1. Under Service credentials, create New credential.
2. Set the name to secure-file-storage-cloudant-acckey.
3. Set Role to Manager.
4. Keep the default values for the the remaining fields.
5. Click Add.



3. Expand the newly created credentials and make note of the values. You will need them in a later step.
4. Under Manage, launch the Cloudant dashboard.
5. Click Create Database to create a Non-partitioned database named secure-file-storage-metadata.



IBM Cloudant instances on dedicated hardware allow private endpoints. Instances with dedicated service plans allow to define a list of allowed IP addresses. See [IBM Cloudant Secure access control](https://cloud.ibm.com/docs/Cloudant?topic=Cloudant-securitysecure-access-control) for details.





 Authenticate users 

With App ID, you can secure resources and add authentication to your applications. App ID [integrates](https://cloud.ibm.com/docs/containers?topic=containers-comm-ingress-annotationsapp-id) with Kubernetes Service to authenticate users accessing applications deployed in the cluster.

Before creating the App ID service, grant service access to Key Protect service. You must be the account owner or an administrator for the instance of Key Protect that you're working with. You must also have at least Viewer access for the App ID service.



1. Go to [Manage > Access IAM > Authorizations](https://cloud.ibm.com/iam/authorizations) and click Create.
2. Select the App ID service as your source service.
3. Select Key Protect as your target service.
4. Switch to Resources based on selected attributes, check Instance ID, select the Key Protect service instance created earlier.
5. Assign the Reader role under Service access.
6. Click Authorize to confirm the delegated authorization.



Now, Create an instance of the App ID service.
API keysare linked to user IDs or service IDs in your account and you can use them across IBM Cloud®. You can use an API key in the CLI or as part of automation to authenticate as your user or service identity. A [user API key](https://cloud.ibm.com/docs/Registry?topic=Registry-registry_accessregistry_access_user_apikey_create) is associated with a user and their access policies. A [service ID API key](https://cloud.ibm.com/docs/Registry?topic=Registry-registry_accessregistry_access_serviceid_apikey_create) has its own access policies. You can have several service IDs with different fine grained policies so that your automation is granted specific and limited capabilities.

When you create an IBM Cloud Kubernetes Service or Red Hat® OpenShift® on IBM Cloud® cluster, the cluster is created with an IBM Cloud IAM service ID that is given an IAM Reader service access policy to IBM Cloud Container Registry. The service ID credentials are authenticated in a nonexpiring service ID API key that is stored in image pull secrets in your cluster. The image pull secrets are added to the default Kubernetes namespace and to the list of secrets in the default service account for this Kubernetes namespace. If you require more service ID API keys or the service ID API key is missing, you can [create a service ID API key manually](https://cloud.ibm.com/docs/Registry?topic=Registry-registry_accessregistry_access_serviceid_apikey_create).

You can use service ID API keys in the following places:



* IBM Cloud Kubernetes Service or Red Hat OpenShift on IBM Cloud clusters. When you create IBM Cloud Kubernetes Service and Red Hat OpenShift on IBM Cloud clusters, one service ID is automatically created for each cluster. If you want more than one service ID, you can create them manually.
* Kubernetes and Red Hat® OpenShift® clusters that aren't on IBM Cloud. You must create your own service ID, API key, and pull secret.
For more information, see [Planning your cluster network setup](https://cloud.ibm.com/docs/containers?topic=containers-plan_clusters).

--kms-account-id <KMS_acount_ID>
: Optional: Must be included if the --kms-instance-id and --crk options are provided and the KMS instance resides in an account different from the cluster's account, otherwise it can be omitted. Setting up encryption by using a KMS from a different account is available for allowlisted accounts only. To get added to the allowlist, [open a case](https://cloud.ibm.com/unifiedsupport/cases/form) with support.

--kms-instance <KMS_instance_ID>
: Optional: Include the ID of a key management service (KMS) instance to use to encrypt the local disk on the worker nodes in the default worker pool. To list available KMS instances, run ibmcloud ks kms instance ls. If you include this option, you must also include the --crk option. Before you can use KMS encryption, you must create a KMS instance and set up the required service authorization in IAM. See [Managing encryption](https://cloud.ibm.com/docs/containers?topic=containers-encryptionworker-encryption) for the worker nodes in your cluster.

--crk <root_key>
: Optional: Include the ID of the root key in the KMS instance to use to encrypt the local disk on the worker nodes in the default worker pool. To list available root keys, run ibmcloud ks kms crk ls --instance-id. If you include this option, you must also include the --kms-instance option. Before you can use KMS encryption, you must create a KMS instance and set up the required service authorization in IAM. See [Managing encryption](https://cloud.ibm.com/docs/containers?topic=containers-encryptionworker-encryption) for the worker nodes in your cluster.

--secondary-storage STORAGE
: Optional.
Minimum required permissions
: Administrator platform access role for the cluster in IBM Cloud Kubernetes Service

Command options:

-c, --cluster CLUSTER
: Required: The name or ID of the cluster.

--version VERSION
: Optional: Specify the version of the add-on to install. If no version is specified, the default version is installed.



 Example addon disable image-key-synchronizer command 

ibmcloud oc cluster addon disable image-key-synchronizer --cluster my_cluster







 ibmcloud oc cluster addon disable kube-terminal 

Virtual Private Cloud

Classic infrastructure

Disable the [Kubernetes web terminal](https://cloud.ibm.com/docs/containers?topic=containers-kubernetes-service-clics_cluster_addon_disable) add-on. To use the Kubernetes web terminal in the IBM Cloud Kubernetes Service cluster console, you must re-enable the add-on first.

ibmcloud oc cluster addon disable kube-terminal --cluster CLUSTER [-f]

Minimum required permissions
: Administrator platform access role for the cluster in IBM Cloud Kubernetes Service

Command options:

-c, --cluster CLUSTER
: Required: The name or ID of the cluster.

-f
: Optional: Force the command to run with no user prompts.





 ibmcloud oc cluster addon disable openshift-data-foundation 

Virtual Private Cloud

Classic infrastructure

Disable the [OpenShift Data Foundation](https://cloud.ibm.com/docs/openshift?topic=openshift-deploy-odf-vpc) add-on.

ibmcloud oc cluster addon disable openshift-data-foundation --cluster CLUSTER [-f] [-q]

Minimum required permissions
: Administrator platform access role for the cluster in IBM Cloud Kubernetes Service

Command options:

-c, --cluster CLUSTER
: Required: The name or ID of the cluster.

-f
(https://cloud.ibm.com/docs/containers?topic=containers-access_cluster)



You can use the default port or set your own port to launch the Kubernetes dashboard for a cluster.



 Launching the Kubernetes dashboard from the IBM Cloud console 



1. Log in to the [IBM Cloud console](https://cloud.ibm.com/).
2. From the menu bar, select the account that you want to use.
3. From the menu ![Menu icon](https://cloud.ibm.com/docs-content/v1/content/4d497aff9e27b92fbbc2ee4e343a9ec4549cb1d7/icons/icon_hamburger.svg), click Kubernetes.
4. On the Clusters page, click the cluster that you want to access.
5. From the cluster detail page, click the Kubernetes Dashboard button.







 Launching the Kubernetes dashboard from the CLI 

Before you begin, [install the CLI](https://cloud.ibm.com/docs/containers?topic=containers-cli-install).



1. Get your credentials for Kubernetes.

kubectl config view -o jsonpath='{.users[0].user.auth-provider.config.id-token}'
2. Copy the id-token value that is shown in the output.
3. Set the proxy with the default port number.

kubectl proxy

Example output

Starting to serve on 127.0.0.1:8001
4. Sign in to the dashboard.



1. In your browser, navigate to the following URL:

http://localhost:8001/api/v1/namespaces/kube-system/services/https:kubernetes-dashboard:/proxy/
2. In the sign-on page, select the Token authentication method.
3.
Enable [boot volume encryption](https://cloud.ibm.com/docs/containers?topic=containers-encryptionworker-encryption-vpc). From the drop down menus, select a key management service (KMS) instance and root key to encrypt the local disk for each worker node in the default worker pool. If you choose not to enable this option when you create your cluster, you can enable it later.
12. Configure your cluster with a private or a public and a private cloud service endpoint by setting the Master service endpoint. For more information about what setup is required to run internet-facing apps, or to keep your cluster private, see [Planning your cluster network setup](https://cloud.ibm.com/docs/containers?topic=containers-plan_vpc_basicsvpc-workeruser-master).
13. Configure [Secrets Manager](https://cloud.ibm.com/docs/containers?topic=containers-secrets-mgr&interface=ui) for your cluster's Ingress instance. From the Secrets Manager instance drop down menu, choose an existing instance that you want to register to the cluster. If no instances are available, [create one](https://cloud.ibm.com/docs/containers?topic=containers-secrets-mgr). If you want to apply a secret group, choose one from the Secrets Manager group drop down menu. If you choose not to enable this option when creating your cluster, you can enable it later.
14. If you don't have the required infrastructure permissions to create a cluster, the Infrastructure permissions checker lists the missing permissions. Ask your account owner to [set up the API key](https://cloud.ibm.com/docs/containers?topic=containers-access-creds) with the required permissions.
15. Complete the Resource details to customize the unique cluster name and any [tags](https://cloud.ibm.com/docs/account?topic=account-tag) that you want to use to organize your IBM Cloud resources, such as the team or billing department.
16.
Getting help and support for Data Transfer Service 

If you experience an issue or have questions when you use Data Transfer Service, you can use the following resources before you open a support case.



*  Review the [FAQs](https://cloud.ibm.com/docs/DataTransferService?topic=DataTransferService-faqs) in the Product Documentation.
*  Check the status of the IBM Cloud® platform and resources by going to the [Status page](https://cloud.ibm.com/status).
*  Review [Stack Overflow](https://stackoverflow.com/questions/tagged/ibm-cloud) to see whether other users experienced the same problem. When you ask a question, tag the question with ibm-cloud and data-transfer-service, so it can be seen by the IBM Cloud development teams.



If you still can't resolve the problem, you can open a support case. For more information, see [Creating support cases](https://cloud.ibm.com/docs/get-support?topic=get-support-open-case). And, if you're looking to provide feedback, see [Submitting feedback](https://cloud.ibm.com/docs/overview?topic=overview-feedback).
Getting help and support 

If you experience an issue or have questions when you're working in the IBM Cloud® console, you can use the following resources before you open a support case.



*  Review the [FAQs](https://cloud.ibm.com/docs?tab=faqs&tags=get-support%2Cbilling-usage%2Caccount%2Csell) in the product documentation.
*  Review the troubleshooting documentation for [accounts](https://cloud.ibm.com/docs/account?topic=account-ts_logintoibm), [billing](https://cloud.ibm.com/docs/billing-usage?topic=billing-usage-cannot-access-billing-info), [selling on IBM Cloud](https://cloud.ibm.com/docs/sell?topic=sell-ts-view-usage), and [using the Support Center](https://cloud.ibm.com/docs/get-support?topic=get-support-ts_tech-support-case) to troubleshoot and resolve common issues.
*  Check the status of the IBM Cloud platform and resources by going to the [Status page](https://cloud.ibm.com/status).
*  Review [Stack Overflow](https://stackoverflow.com/questions/tagged/ibm-cloud) to see whether other users experienced the same problem. When you ask a question, tag the question with ibm-cloud, so that it's seen by the IBM Cloud development teams.



If you still can't resolve the problem, you can open a support case. For more information, see [Creating support cases](https://cloud.ibm.com/docs/get-support?topic=get-support-open-case). And, if you're looking to provide feedback, see [Submitting feedback](https://cloud.ibm.com/docs/overview?topic=overview-feedback).
Getting help and support 

If you have problems or questions when using the IBM Cloud Metrics Routing, you can get help by searching for information or by asking questions through a forum. You can also open a support ticket.



*  You can check whether the IBM Cloud is available by going to the [IBM Cloud status page](https://cloud.ibm.com/status?selected=status).
*  You can review the forums to see whether other users ran into the same problem. When using the forums to ask a question, tag your question so that it is seen by the IBM Cloud development teams.
*  If you still can't resolve the problem, you can open an IBM support ticket. For information about opening an IBM support ticket, or about support levels and ticket severities, see [Getting support](https://cloud.ibm.com/docs/get-support).
Getting help and support 

If you have problems or questions when using the IBM Cloud Activity Tracker, you can get help by searching for information or by asking questions through a forum. You can also open a support ticket.



*  You can check whether the IBM Cloud is available by going to the [IBM Cloud status page](https://cloud.ibm.com/status?selected=status).
*  You can review the forums to see whether other users ran into the same problem. When using the forums to ask a question, tag your question so that it is seen by the IBM Cloud development teams.
*  If you have technical questions about the IBM Cloud Activity Tracker service, post your question on [Stack Overflow](https://stackoverflow.com/search?q=ibm-cloud+log-analysis) and tag your question with ibm-cloud, and activity-tracker.
*  If you still can't resolve the problem, you can open an IBM support ticket. For information about opening an IBM support ticket, or about support levels and ticket severities, see [Getting support](https://cloud.ibm.com/docs/get-support).
Getting help and support 

If you have problems or questions when using the IBM Cloud Activity Tracker Event Routing, you can get help by searching for information or by asking questions through a forum. You can also open a support ticket.



*  You can check whether the IBM Cloud is available by going to the [IBM Cloud status page](https://cloud.ibm.com/status?selected=status).
*  You can review the forums to see whether other users ran into the same problem. When using the forums to ask a question, tag your question so that it is seen by the IBM Cloud development teams.
*  If you have technical questions about the IBM Cloud Activity Tracker service, post your question on [Stack Overflow](https://stackoverflow.com/search?q=ibm-cloud+log-analysis) and tag your question with ibm-cloud, and activity-tracker.
*  If you still can't resolve the problem, you can open an IBM support ticket. For information about opening an IBM support ticket, or about support levels and ticket severities, see [Getting support](https://cloud.ibm.com/docs/get-support).
Getting help and support 

If you have problems or questions when using the IBM Log Analysis, you can get help by searching for information or by asking questions through a forum. You can also open a support ticket.



*  You can check whether the IBM Cloud is available by going to the [IBM Cloud status page](https://cloud.ibm.com/status?selected=status).
*  You can review the forums to see whether other users ran into the same problem. When using the forums to ask a question, tag your question so that it is seen by the IBM Cloud development teams.
*  If you have technical questions about the IBM Log Analysis service, post your question on [Stack Overflow](https://stackoverflow.com/search?q=log-analysis+ibm-cloud) and tag your question with ibm-cloud and loganalysis.
*  If you still can't resolve the problem, you can open an IBM support ticket. For information about opening an IBM support ticket, or about support levels and ticket severities, see [Getting support](https://cloud.ibm.com/docs/get-support).
Getting help and support for DNS Services 

If you experience an issue or have questions when using IBM Cloud® DNS Services, you can use the following resources before you open a support case.



* Review [FAQs](https://cloud.ibm.com/docs/dns-svcs?topic=dns-svcs-frequently-asked-questions) in the product documentation.
* Review [Troubleshooting](https://cloud.ibm.com/docs/dns-svcs?topic=dns-svcs-troubleshoot-nxdomain) to diagnose and resolve common issues.
* Check the status of the IBM Cloud platform and resources by going to the [Status page](https://cloud.ibm.com/status).
* Review [Stack Overflow](https://stackoverflow.com/search?q=dns-svcs+ibm-cloud) to see whether other users ran into the same problem. If you're using the forum to ask a question, tag your question with ibm-cloud and dns-svcs so that it is seen by the IBM Cloud development teams.



If you still can't resolve the problem, you can open a support case. For more information, see [Creating support cases](https://cloud.ibm.com/docs/get-support?topic=get-support-open-case).



 Providing support case details for DNS Services 

To ensure that the support team has all of the details for investigating your issue to provide a timely resolution, you must provide detailed information about your issue. Review the following tips about the type of information to include in your support case for issues with DNS Services.

Provide the following details:



1. The specific IDs of affected VPCs.
2. The IDs of the DNS Services private resource records (if any).
3. The IDs of zones that have affected private resource records (if any).
4. The DNS queries made. If possible, give the details on DNS queries related to the issue, including DNS message ID and timestamp for each.
5.
Getting help and support 

For information about opening an IBM support cases, or about support levels and case severities, see [Contacting support](https://cloud.ibm.com/docs/get-support?topic=get-support-using-avatar).

If you need to open a support case, collect as much information as possible to help Support analyze and diagnose your problem.
Getting help and support 

If you have problems or questions when you use IBM Cloud® IaaS VPN, you can search for information or ask questions by using a forum. You can also open an IBM Support case in the [IBM Cloud console](https://cloud.ibm.com/unifiedsupport/cases/add).

If you have technical questions about IaaS VPN, post your question on [Stack Overflow](https://stackoverflow.com/search?q=dl+ibm-cloud) and tag your question with vpn and ibm-cloud.

For more information about opening an IBM Support case, or about support levels and case severities, see [Contacting support](https://cloud.ibm.com/docs/get-support?topic=get-support-using-avatar).
Getting help and support 

If you have problems or questions when you are using IBM Cloud®, you can get help by searching for information or by asking questions through one of the forums listed in the following section. You can also create a support case in the [IBM Cloud console](https://cloud.ibm.com/unifiedsupport/cases/add).

When you use the forums to ask a question, tag your question so that it is seen by the IBM Cloud development teams.



*  If you have technical questions about Bare Metal Servers, post your question on [Stack Overflow](http://stackoverflow.com/search?q=bare-metal+ibm-cloud) and tag your question with ibm-cloud and bare-metal.
*  For questions about the service and getting started instructions, use the [IBM Support forum](https://www.ibm.com/mysupport/s/forumshome) forum. Include the ibm cloud tag.



For more information about opening an IBM support case, see [Contacting support](https://cloud.ibm.com/docs/get-support?topic=get-support-using-avatar).
Getting help and support 

If you have problems or questions when you use bandwidth metering, you can search for information or post your question on [Stack Overflow](https://stackoverflow.com/search?q=dl+ibm-cloud) and tag your question with bandwidth-services.

You can also open an IBM Support case in the [IBM Cloud console](https://cloud.ibm.com/unifiedsupport/cases/add). For more information about opening an IBM Support case, or about support levels and case severities, see [Contacting support](https://cloud.ibm.com/docs/get-support).