vania-janet/multiturn-rag-retrieval-data huggingface dataset:
* Modify the parameters in the Schematics interface.







 Catalog tile deployment 

When you use the catalog tile for deployment, you:



* Select the SAP S/4HANA High Availability on Single Zone tile from the catalog
* Enter information for your workspace. The catalog tile creates a Schematics workspace for you.
* Modify the parameters for your bastion server, personal credential information, and other parameters specific to your solution.







 SAP Kits 

For each IBM Cloud region, IBM allocates temporary storage on a dedicated Jump host. It is your responsibility to download the necessary SAP and DB kits to your Deployment Server. All files archives are decompressed by Ansible during the automation deployment process. For more information, see the readme file.





 Support - Terraform and Schematics 

There are no warranties of any kind, and there is no service or technical support available for these materials from IBM. As a recommended practice, review carefully any materials that you download from this site before using them on a live system.

Though the materials provided herein are not supported by the IBM Service organization, your comments are welcomed by the developers, who reserve the right to revise, readapt or remove the materials at any time. To report a problem, or provide suggestions or comments, open a GitHub issue.





 Support - catalog tile 

The catalog tile offering is IBM Cloud supported. For more information, see [Getting help and support from IBM Cloud or SAP](https://cloud.ibm.com/docs/sap?topic=sap-help-support&interface=ui).

If client issues are identified with SAP software, then SAP Support assists the client. Follow the recommendations of SAP Note 90835, which describes the SAP Incident Escalation Procedure. This SAP Note (and others) is found at [https://support.sap.com/en/index.html](https://support.sap.com/en/index.html)





 Before you begin 

Before you deploy SAP S/4HANA High Availability on Single Zone:



* The automation for this deployment requires IBM Cloud File Storage for VPC to complete successfully.
![sup-draft-prod-list.png](https://cloud.ibm.com/docs-content/v1/content/78bb71851d95d7580503eb9ba10cf3ae31490ade/apiconnect/tutorials/images/sup-draft-prod-list.png)
11. Change the Version to 3.0.0. Click the disk icon to save the changes. Click the Stage icon.
![sup-change-prod-vers-3.png](https://cloud.ibm.com/docs-content/v1/content/78bb71851d95d7580503eb9ba10cf3ae31490ade/apiconnect/tutorials/images/sup-change-prod-vers-3.png)
12. Click >> to open the navigation pane, then select Dashboard.
![rep-dashboard.png](https://cloud.ibm.com/docs-content/v1/content/78bb71851d95d7580503eb9ba10cf3ae31490ade/apiconnect/tutorials/images/rep-dashboard.png)
13. Click Sandbox.
14. Click Community.
![sup-sand-dash.png](https://cloud.ibm.com/docs-content/v1/content/78bb71851d95d7580503eb9ba10cf3ae31490ade/apiconnect/tutorials/images/sup-sand-dash.png)
15. Click Subscriptions.
![sup-comm-orgs.png](https://cloud.ibm.com/docs-content/v1/content/78bb71851d95d7580503eb9ba10cf3ae31490ade/apiconnect/tutorials/images/sup-comm-orgs.png)
16.
See the best practice [Use only services that are IBM Cloud for Financial Services Validated](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-best-practicesbest-practices-financial-services-validated-services) for more details and potential exceptions.





 What if I don't want to use managed services, but I want to install and manage my own software? 

Self-installed (or "bring your own") software from third parties is permitted without special approval. Examples include databases, logging stacks, web application firewalls, and so on. But just like first-party software you might develop and deploy, self-installed third-party software must comply with all of the requirements of the IBM Cloud Framework for Financial Services. And, it is your responsibility to provide appropriate supporting evidence.

For more information, see [Ensure all usage of software meets IBM Cloud Framework for Financial Services controls](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-best-practicesbest-practices-self-installed-software).
Welcome to Gradle 5.2.1!

Here are the highlights of this release:
- Define sets of dependencies that work together with Java Platform plugin
- New C++ plugins with dependency management built-in
- New C++ project types for gradle init
- Service injection into plugins and project extensions

For more details see https://docs.gradle.org/5.2.1/release-notes.html

------------------------------------------------------------
Gradle 5.2.1
------------------------------------------------------------

Build time: 2019-02-08 19:00:10 UTC
Revision: f02764e074c32ee8851a4e1877dd1fea8ffb7183

Kotlin DSL: 1.1.3
Kotlin: 1.3.20
Groovy: 2.5.4
Ant: Apache Ant(TM) version 1.9.13 compiled on July 10 2018
JVM: 1.8.0_191 (Oracle Corporation 25.191-b12)
OS: Linux 4.4.0-141-generic amd64
Show more







 Configuring the image for a specific pipeline job 

In general, it is not recommended to configure the image to use for individual pipeline jobs. This method increases the effort to upgrade to a new image version since you must update each pipeline job. However, there might be circumstances in which you are required to configure the image for a specific pipeline job.



1. On the stage, click the Stage Configuration icon, and then click Configure Stage.
2.
For information about how to convert your trial account to a pay account, see [How do I upgrade or change my account?](https://cloud.ibm.com/docs/account?topic=account-accountfaqschangeacct). To reduce the memory that your apps use, use either the IBM Cloud console or the cf command line interface.

If you use the IBM Cloud console, complete the following steps:



1. In the Apps Dashboard, select your app. The app details page opens.
2. In the runtime pane, you can reduce the maximum memory limit or the numbers of app instances, or both, for your app.



If you use the cf command line interface, complete the following steps:



1. Check how much memory is being used for your apps. The cf apps command lists all the apps that you deployed in your current space. The status of each app is also displayed.

cf apps
2. To reduce the amount of memory that is used by your app, reduce the number of app instances or the maximum memory limit, or both:

cf push appname -p app_path -i instance_number -m memory_limit
3. Restart your app for the changes to take effect.



* Can I use sample scripts to build and deploy my application?

The [open-toolchain/commons](https://github.com/open-toolchain/commons) GitHub repo contains a collection of common scripts that you can use in toolchains and pipelines. For example, you can use one of the shell scripts that is contained in this repo within your own toolchains in various ways.
* How do I bring my own code and deploy it by using Continuous Delivery

You can choose any of the following options to deploy your own code to Continuous Delivery:



* Create a toolchain by using one of the available templates (dependent on the deployment target and tool integrations). On the Create a Toolchain page, select the appropriate provider for your source repository, and then specify the link to your source code repo. After you create your toolchain, you might need to adjust the pipeline scripts for your deployment goals.
For each of the domains highlighted in the solution architecture heat map you will document the architecture decision needs.

Zoom

![Example heat map](https://cloud.ibm.com/docs-content/v1/content/c4eda16af9bf94195f92755cfc75c78861e5505c/architecture-framework/images/example-heatmap.svg)

Figure 1. Example heat map



 Using the heat map template 



1. Download the template from [https://github.com/ibm-cloud-docs/architecture-framework/blob/master/templates/heat-map-template.drawio](https://github.com/ibm-cloud-docs/architecture-framework/blob/master/templates/heat-map-template.drawio).
2. Open the template in draw.io.
3. Apply the "included" styling for all components that are part of your architecture. In the template, the Mobile box has the styling of an included component.



1. Select the Mobile box.
2. Go to the Style tab and select Copy Style.
3. Select the component box that's included in your architecture.
4. Go to the Style tab and select Paste Style.
5. If Mobile is not part of your architecture, copy the style from an unselected box and paste it into the mobile box.



4. Save and export the image as an SVG file.
For your application and SDK to continue operations during the unlikely scenario of an App Configuration service downtime, across your application restarts, you can configure the SDK to work by using a persistent cache. The SDK uses the persistent cache to store the App Configuration data that is available across your application restarts.

// 1. default (without persistent cache)
appConfigClient.setContext(collectionId, environmentId);

// 2. optional (with persistent cache)
ConfigurationOptions configOptions = new ConfigurationOptions();
configOptions.setPersistentCacheDirectory("/var/lib/docker/volumes/");
appConfigClient.setContext(collectionId, environmentId, configOptions);

Where:



* persistentCacheDirectory: Absolute path to a directory that has read and write permission for the user. The SDK creates a file - appconfiguration.json in the specified directory, and it is used as the persistent cache to store the App Configuration service information.



When persistent cache is enabled, the SDK keeps the last known good configuration at the persistent cache. If the App Configuration server being unreachable, the latest configurations at the persistent cache are loaded to the application to continue working.

Ensure that the cache file is not lost or deleted in any case. For example, consider the case when a kubernetes pod is restarted and the cache file (appconfiguration.json) was stored in ephemeral volume of the pod. As pod gets restarted, kubernetes destroys the ephermal volume in the pod, as a result the cache file gets deleted. So, make sure that the cache file created by the SDK is always stored in persistent volume by providing the correct absolute path of the persistent directory.





 Offline options 

The SDK is also designed to serve configurations, and perform feature flag and property evaluations without being connected to App Configuration service.

ConfigurationOptions configOptions = new ConfigurationOptions();
configOptions.setBootstrapFile("saflights/flights.json");
Working with App Configuration 

App Configuration enables app developers to quickly build mobile and web apps. With feature management of App Configuration, you can embark on a truly agile development methodology by separating feature roll outs from release cycles. Reduce risk by controlling the release of features and rolling back as needed. Create user groups (segments) and target features to selected user groups based on different criteria.



 Before you begin 

You need an IBM Cloud® account. If you don't have an account, [create one](https://cloud.ibm.com/registration/). Log in to your IBM Cloud® account.





 Step 1: Create an App Configuration service instance 

The App Configuration service provides a unified application development capability. Using these capabilities, you can quickly build mobile and web apps and roll out to targeted audience.

To create an App Configuration service instance, see [Create an App Configuration service instance](https://cloud.ibm.com/docs/app-configuration?topic=app-configuration-ac-create-an-instance).





 Step 2: Create collections 

You can create a collection and enable App Service capabilities like feature flags, and segmentation.

To create a collection, see [Create a collection](https://cloud.ibm.com/docs/app-configuration?topic=app-configuration-ac-collectionsac-create-a-collection).





 Step 3: Create Environment, Feature flags, and Properties 

Create and manage environments, feature flags, and properties for collections across platforms. Using Feature flags you, as an app owner, can control the applicability of a feature by enabling or disabling it at run time. You can also manage the properties for distributed applications centrally.



* To create an environment, see [Create an environment](https://cloud.ibm.com/docs/app-configuration?topic=app-configuration-ac-environmentsac-create-environment).
* To create a feature flag, see [Create a feature flag](https://cloud.ibm.com/docs/app-configuration?topic=app-configuration-ac-feature-flagsac-create-feature-flag).
* Bucket configuration for key (error document)



cosClient.setBucketWebsiteConfiguration("<bucket_name>", new BucketWebsiteConfiguration("index.html", "error.html"));







 Next Steps 

For more information, [see the Javadoc](https://ibm.github.io/ibm-cos-sdk-java/). The source code for the project can be found in the [GitHub repository](https://github.com/ibm/ibm-cos-sdk-java).
FAQs: Software 



  Can the Operating System (OS) be changed on the device? 

You can change your OS and the software that you installed by reloading an OS. After you select OS Reload on the device, the system displays a link to update the software on your system. You can update the OS, control panel, antivirus packages, and database software.





  Do you provide complimentary OS Reloads? 

Automated OS reloads are free, including customized OS reloads such as changing operating systems, addition or removal of control panels, partition editing, and other options. Open the Customer Portal for more information.





  How can I track the status of the OS reload? 

Under Hardware, you see a Notes section for each of your servers. The Notes includes links to information about the current step of the reload and the estimated time to finish that portion of the reload.





  Can an OS reload erase secondary disks? 

An OS reload formats only the primary disk on the system. All other disks are left alone. Formatting works the same way when you reload from an image template. If the template contains more than one disk, only the primary disk is formatted. No changes are made to the other disks.





  Why did my cpsrvd email fail? 

In most cases, when you get an email that states cpsrvd failed, it is sent immediately after a restart. This error occurs when chkservd attempts to validate the cpsrvd process. The validation fails because the process did not start.

If you receive an email from the chkservd service, stating that cpsrvd failed, you can ignore the message in most cases. However, if you receive 5 or more of these messages in a row or if you receive more than 4 in a day that follows restarts, open a support ticket





  Can I purchase extra Terminal Service Licenses? 

Extra licenses are available in 5-packs. If you want to purchase extra licenses, open a support ticket.

You have a maximum of two RDP connections to your server. If you add the 5-pack of terminal services, the two original connections are removed giving you a total of five licenses.
If you see this message again, go to the [IBM Cloud status page](https://cloud.ibm.com/status?selected=status) to check whether a service or component has an issue. If the problem continues, go to [IBM Cloud Support](https://cloud.ibm.com/unifiedsupport/supportcenter).





 BXNUI0073E 

Message: Information about the uploaded certificates might not be retrieved.

Try again later. If the problem continues, go to [IBM Cloud Support](https://cloud.ibm.com/unifiedsupport/supportcenter).





 BXNUI0076E 

Message: The '{0}' service is already connected to all apps in the '{1}' space.

To use a different plan for this service, you must delete the service and connect it again.





 BXNUI0077E 

Message: The '{0}' service exists in the '{1}' space.

Choose another space, if needed.





 BXNUI0078E 

Message: The '{1}' app already uses the '{0}' service.

Select a different service.





 BXNUI0079E 

Message: The '{1}' app already uses the '{2}' service. The '{0}' service and the '{2}' service cannot be used together.

Select a different service.





 BXNUI0080E 

Message: Before you can add the '{0}' service to the '{1}' app, the app must use the prerequisite service, '{2}'.

Add the prerequisite service first, and then try again.





 BXNUI0081E 

Message: You uploaded {0} certificates, which is the maximum number that your organization can use.

Lite account users must upgrade to use SSL Certificates. For other account types, remove a certificate if you reach the limit. If the problem continues, go to [IBM Cloud Support](https://cloud.ibm.com/unifiedsupport/supportcenter).
If you can't run normal Vyatta commands, such as configure, to enter Configure mode, try running the bash command to access a usable shell.

The following example illustrates problems when updating from 1801ze to 1912f. Notice that the find command pulled 4 config.boot files that were archived in the file system even after the upgrade. To use the find command, use the su command to change your user to the root user.

vyatta@gateway02 find / -name config.boot 2>/dev/null | grep 1801ze
/lib/live/mount/persistence/sda2/boot/1801ze.01142008/persistence/rw/mnt/config/config.boot
/lib/live/mount/persistence/sda2/boot/1801ze.01142008/persistence/rw/mnt/config/archive/config.boot
/run/live/persistence/sda2/boot/1801ze.01142008/persistence/rw/mnt/config/config.boot
/run/live/persistence/sda2/boot/1801ze.01142008/persistence/rw/mnt/config/archive/config.boot

vyatta@gateway02 merge /lib/live/mount/persistence/sda2/boot/1801ze.01142008/persistence/rw/mnt/config/config.boot

Using Configure mode, run the merge or load command, specifying one of the latest config.boot files from the preceding example, then commit. The errors will show the cause of the problem, so you should delete any invalid configurations and add valid ones as necessary. Repeat this process and resolve all issues until the commit succeeds and the Vyatta returns to its previously working state.

You can upgrade your other VRAs without having to repeat this process by making the same changes on those devices before you attempt an update. Fixing these issues before running the upgrade allows subsequent updates to work.
Older firmware and application/OS version are not explicitly supported as using them runs the risk of having issues if Key Protect adds features that depend on later hardware or software versions. For this reason, make sure to keep your firmware and software versions as up to date as possible.

Depending on the version of the software application and supported FIPS 140-2 Level 3 firmware, the upgrade path through prior versions may be required. The Thales HSM documentation prescribes the correct upgrade path. As of this writing, the path to 7.3.1 is through 7.3.0. In other words, update to version 7.3.0 before updating to version 7.3.1.



* For more information about Thales SafeNet Luna Network HSMs releases, check out [Thales SafeNet Luna Network HSMs Available Documentation Releases](https://thalesdocs.com/gphsm/Content/luna/network/luna_network_releases.htm).
* For details about the certifications, check out [FIPS 140-2 Certificate](https://csrc.nist.gov/Projects/Cryptographic-Module-Validation-Program/Certificate/3205).



For security best practice, your HSMs should run in FIPS mode. This allows your HSM to create FIPS-compliant keys. To learn how check the current policy setting, check out [hsm showpolicies](https://thalesdocs.com/gphsm/luna/7/docs/network/Content/lunash/commands/hsm/hsm_showpolicies.htm). Enable non-FIPS algorithms should be Disallowed.

The brochure for Thales Luna HSMs can be found [here](https://cpl.thalesgroup.com/encryption/hardware-security-modules/network-hsms).



 Network connectivity between Key Protect and HSM (recommended) 

The best practice network configuration is to use 10Gb links for cryptographic traffic between Key Protect and your HSMs and a bond of 2Gb links for management and administration traffic. Key Protect requires TCP connectivity to HSM on port 1792 for NTLS protocol.
- Added a pluggable system for Java toolchains provisioning.

For more details see https://docs.gradle.org/7.6/release-notes.html

------------------------------------------------------------
Gradle 7.6
------------------------------------------------------------

Build time: 2022-11-25 13:35:10 UTC
Revision: daece9dbc5b79370cc8e4fd6fe4b2cd400e150a8

Kotlin: 1.7.10
Groovy: 3.0.13
Ant: Apache Ant(TM) version 1.10.11 compiled on July 10 2021
JVM: 11.0.17 (Eclipse OpenJ9 openj9-0.35.0)
OS: Linux 5.15.49-linuxkit amd64

 oc version
Client Version: 4.12.0
Kustomize Version: v4.5.7

 zip
Copyright (c) 1990-2008 Info-ZIP - Type 'zip "-L"' for software license.
This is Zip 3.0 (July 5th 2008), by Info-ZIP.

 unzip
UnZip 6.00 of 20 April 2009, by Debian. Original by Info-ZIP.

 git --version
git version 2.39.1

 curl
If the service does not have any backing resources, or if troubleshooting the pods does not resolve the issue, remove the mutating or validating webhook configuration identified earlier.

oc delete validatingwebhookconfiguration NAME

oc delete mutatingwebhookconfiguration NAME



6. Retry the cluster master operation, such as updating the cluster.
7. If you still see the error, you might have worker node or network connectivity issues.



* [Worker node troubleshooting](https://cloud.ibm.com/docs/openshift?topic=openshift-debug_worker_nodes).
* Make sure that the webhook can connect to the Kubernetes API server in the cluster master. For example, if you use Calico network policies, security groups, or some other type of firewall, set up your [classic](https://cloud.ibm.com/docs/openshift?topic=openshift-firewall) or [VPC](https://cloud.ibm.com/docs/openshift?topic=openshift-vpc-firewall) cluster with the appropriate access.
* If the webhook is managed by an add-on that you installed, uninstall the add-on. Common add-ons that cause webhook issues include the following:



* [Portieris](https://cloud.ibm.com/docs/openshift?topic=openshift-imagesportieris-image-sec)





8. Re-create the webhook or reinstall the add-on.
Why does pod not build with a permission denied error because of security context constraint (SCC)? 

Virtual Private Cloud

Classic infrastructure

 What’s happening 

A system pod or other pod that uses a security context constraint (SCC) has an operation that keeps retrying but fails with a permission denied error. For example, you might log in to the internal image-registry pod and try to run docker push.

Example error message when pushing an image to the internal registry:

error: build error: Failed to push image: error copying layers and metadata

 Why it’s happening 

The pod might use an SCC or belong to a system group that uses an SCC without the correct permission. You might have added a system group to an SCC by running oc adm policy add-scc-to-group <scc> system:<group>.

If the pod mounts a volume, the pod's permissions that are authorized by the SCC might no longer allow the pod to read or write data to the volume.

For example, the internal registry mounts a volume to read and write image data to a file storage instance. If the system:authenticated group that the internal registry belongs to changes the SCC from restricted to anyuid, then the pod runs with a different UID. The different UID prevents the internal registry pod from pushing or pulling images from the storage device.

 How to fix it 

Change the pod's SCC permissions.



1. Describe the pod and check the openshift.io/scc: <scc> security context constraint in the Annotations section.

oc describe pod -n <project> <pod>

Example output

NAME: image-registry-1234567
Namespace: openshift-image-registry
Priority: 2000000000
PriorityClassName: system-cluster-critical
Node: 10.xxx.xx.xxx/10.xxx.xx.xxx
Start Time: Wed, 19 Feb 2020 15:38:53 -0500
Labels: docker-registry=default
Annotations: openshift.io/scc: anyuid
2.