vania-janet/multiturn-rag-retrieval-data huggingface dataset:
For an architectural overview for the classic infrastructure provider, see [Classic cluster service architecture](https://cloud.ibm.com/docs/openshift?topic=openshift-service-architectureservice-architecture).

Review the architecture diagrams and then scroll through the following table for a description of master and worker node components in Red Hat OpenShift on IBM Cloud clusters that run version 4 on virtual private cloud (VPC) compute infrastructure.



 Cluster with public and private cloud service endpoints 

The following diagram shows the components of your cluster and how they interact when both the [public and private cloud service endpoints are enabled](https://cloud.ibm.com/docs/openshift?topic=openshift-plan_vpc_basicsvpc-workeruser-master). Because both service endpoints are enabled, your VPC creates a public load balancer for each service for inbound traffic.

Zoom

![Red Hat OpenShift on IBM Cloud on VPC cluster architecture with public and private cloud service endpoints](https://cloud.ibm.com/docs-content/v1/content/bce0f0917a9eea684d1b4b704ac6343a1f65f446/openshift//images/arch_roks_vpc.svg)

Figure 1. Red Hat OpenShift on VPC cluster architecture with public and private cloud service endpoints





 Cluster with private cloud service endpoint only 

The following diagram shows the components of your cluster and how they interact when only the [private cloud service endpoint is enabled](https://cloud.ibm.com/docs/openshift?topic=openshift-plan_vpc_basicsvpc-workeruser-master). Because only the private cloud service endpoint is enabled, your VPC creates a private load balancer for each service for inbound traffic.

Zoom

!
Red Hat OpenShift 4.6.23 4.6.25 See the [Red Hat OpenShift release notes](https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.htmlocp-4-6-25). Configured worker nodes to integrate with a newer version of the NVIDIA GPU operator. Now when you create an instance of the ClusterPolicy for the GPU operator, you must enter 450.80.02 for the Driver Config version. 
 RHEL 7 Packages N/A N/A Updated worker node images with package updates for [CVE-2021-20305](https://nvd.nist.gov/vuln/detail/CVE-2021-20305). 







 Change log for worker node fix pack 4.6.23_1539_openshift, released 12 April 2021 

The following table shows the changes that are in the worker node fix pack 4.6.23_1539_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 4.6.22_1536_openshift

 Component Previous Current Description 

 HA proxy 9b2dca a3b1ff The update addresses [CVE-2021-3449](https://nvd.nist.gov/vuln/detail/CVE-2021-3449) and [CVE-2021-3450](https://nvd.nist.gov/vuln/detail/CVE-2021-3450). 
 Red Hat OpenShift 4.6.22 4.6.23 See the [Red Hat OpenShift release notes](https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.htmlocp-4-6-23).
If you are running your applications within Red Hat OpenShift on IBM Cloud, you can configure the monitoring stack to monitor your user-defined project.



1. [Create a ServiceMonitor](https://docs.openshift.com/container-platform/4.6/monitoring/managing-metrics.htmlspecifying-how-a-service-is-monitored_managing-metrics) for each of your projects where you want to collect metrics.

If you do not have an application available, you can use the [sample service](https://docs.openshift.com/container-platform/4.6/monitoring/managing-metrics.htmldeploying-a-sample-service_managing-metrics) to test and verify.
2. [Create and manage alerts](https://docs.openshift.com/container-platform/4.6/monitoring/managing-alerts.htmlmanaging-alerts) for your project.







 Step 5: Configure monitoring for a virtual server instance 

You can use the Red Hat OpenShift on IBM Cloud monitoring stack to gather metrics for your virtual server instances in your VPC. Complete the following steps to set up monitoring for virtual server instances.



 Linux 



1. To monitor Linux host metrics, you can install [Prometheus Node Exporter](https://github.com/prometheus/node_exporter) on the virtual server to expose a wide range of metrics.



1. Log in to your virtual server instance by using SSH.
2. Issue the following commands:



cd /tmp
curl -LO https://github.com/prometheus/node_exporter/releases/download/v1.1.2/node_exporter-1.1.2.linux-amd64.tar.gz
tar -xvf node_exporter-1.1.2.linux-amd64.tar.gz
mv node_exporter-1.1.2.linux-amd64/node_exporter /usr/local/bin/



1.
Red Hat OpenShift on IBM Cloud. 4.10.54 4.10.55 For more information, see the [change log](https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.htmlocp-4-10-55). 
 Haproxy 8398d1 8895ad [CVE-2023-0361](https://nvd.nist.gov/vuln/detail/CVE-2023-0361). 







 Change log for master fix pack 4.10.53_1561_openshift, released 28 March 2023 

The following table shows the changes that are in the master fix pack 4.10.53_1561_openshift. Master patch updates are applied automatically.



Changes since version 4.10.52_1558_openshift

 Component Previous Current Description 

 Cluster health image v1.3.16 v1.3.17 Updated Go to version 1.19.7 and updated dependencies. 
 etcd v3.4.23 v3.4.24 See the [etcd release notes](https://github.com/etcd-io/etcd/releases/v3.4.24). 
 IBM Calico extension 1308-amd64 1366-amd64 Updated to resolve [CVE-2023-23916](https://nvd.nist.gov/vuln/detail/CVE-2023-23916). 
 IBM Cloud Block Storage driver and plug-in v2.3.7 v2.4.0 Removed ExpandInUsePersistentVolumes feature gate. 
 IBM Cloud Controller Manager v1.23.16-11 v1.23.17-5 Updated to support the Kubernetes 1.23.17 release. 
 IBM Cloud File Storage for Classic plug-in and monitor 427 429 Updated universal base image (UBI) to resolve CVEs. Updated Go to version 1.19.6 and updated dependencies.
The policies that you define determine when virtual server instances are added or removed from your instance group.







 Containers 



 Red Hat OpenShift on IBM Cloud 

In addition to Virtual Servers for VPC, you can use [Red Hat OpenShift on IBM Cloud](https://cloud.ibm.com/docs/openshift?topic=openshift-roks-overview) if you want to run containers. {{site.data.content.openshift-service-description}}

In practice, when you choose Red Hat OpenShift on IBM Cloud for your primary compute, you might also need one or more instances of Virtual Servers for VPC for other parts of the reference architecture.





 IBM Cloud Container Registry 

Use [Container Registry](https://cloud.ibm.com/docs/Registry?topic=Registry-registry_overview) to store and access private container images. Container Registry provides a multi-tenant, highly available, scalable, and encrypted private image registry that is hosted and managed by IBM®. You can use Container Registry by setting up your own image namespace and pushing container images to your namespace. This service is required if using Red Hat OpenShift on IBM Cloud.







 Networking - VPC infrastructure 



 IBM Cloud Application Load Balancer for VPC 

Use [Application Load Balancer for VPC (ALB)](https://cloud.ibm.com/docs/vpc?topic=vpc-load-balancers) to distribute traffic among multiple server instances within the same region of your VPC. You can create a public or private ALB.

[IBM Cloud® Network Load Balancer for VPC (NLB)](https://cloud.ibm.com/docs/vpc?topic=vpc-network-load-balancers) is also IBM Cloud for Financial Services Validated, but does not span zones. So, NLBs are not typically used in applications where high availability is needed.





 IBM Cloud Virtual Private Network (VPN) for VPC 

You can use the [VPN for VPC](https://cloud.ibm.com/docs/vpc?topic=vpc-using-vpn) service to securely connect your VPC to another private network.
Container-native virtualization The Red Hat OpenShift [container-native virtualization add-on](https://docs.openshift.com/container-platform/4.11/virt/about-virt.html) to run VM workloads alongside container workloads is not supported by IBM. If you choose to install the add-on yourself, you must use bare metal machines, not virtual machines. You are responsible for resolving any issues and impact to your workloads from using container-native virtualization. 
 Calico network plug-in Changing the Calico plug-in, components, or default Calico settings is not supported. For example, don't deploy a new Calico plug-in version, or modify the daemon sets or deployments for the Calico components, default IPPool resources, or Calico nodes. Instead, you can follow the documentation to [create a Calico NetworkPolicy or GlobalNetworkPolicy](https://cloud.ibm.com/docs/openshift?topic=openshift-network_policies), to [change the Calico MTU](https://cloud.ibm.com/docs/openshift?topic=openshift-kernelcalico-mtu), or to [disable the port map plug-in for the Calico CNI](https://cloud.ibm.com/docs/openshift?topic=openshift-kernelcalico-portmap). 
 Cluster quota You can't exceed 100 clusters per region and per [infrastructure provider](https://cloud.ibm.com/docs/openshift?topic=openshift-infrastructure_providers). If you need more of the resource, [contact IBM Support](https://cloud.ibm.com/docs/get-support?topic=get-support-using-avatar). In the support case, include the new quota limit for the region and infrastructure provider that you want. 
 IAM access groups You can't scope IBM Cloud IAM service access roles to an IAM access group because the roles are not synced to the RBAC roles within the cluster.
Overview of VMware Solutions 

The IBM Cloud® for VMware Solutions offerings help you extend your existing VMware® virtualized datacenter into the IBM Cloud, or to house cloud native applications.

The solution supports use cases, such as capacity expansion into the cloud (and contraction when not needed), migration to the cloud, disaster recovery to the cloud, and backup into the cloud. With the solution, you can create a dedicated cloud environment for development, testing, training, lab, or production.

Review this information for the design of the IBM Cloud for VMware Solutions vCenter Server, whose target workloads require high levels of availability and scalability.

This design serves as a baseline architecture that provides the foundation for other internal or vendor-specific components to be added for specific use cases.

Zoom

![Overview of VMware on IBM Cloud](https://cloud.ibm.com/docs-content/v1/content/5bdb37c0149145723c5437e8176651928565e722/vmwaresolutions/images/vcsv4radiagrams-ra-variationsonatheme.svg)

Figure 1. Overview of VMware on IBM Cloud



 Key benefits of VMware Solutions 

VMware vCenter Server® provides the fundamental building blocks, which include VMware vSphere®, vCenter Server, VMware NSX®, and shared storage options, such as vSAN™. These components are needed to flexibly design a VMware software-defined data center solution that best fits your workloads.

By applying advanced automation and single-tenant bare metal infrastructure, you can quickly deploy the entire VMware environment to the IBM Cloud in hours. Then, you can access and manage the IBM-hosted environment through the native VMware clients, command-line interface (CLI), existing scripts, or other familiar vSphere API-compatible tools.

Post deployment, you can add to (and remove from) VMware ESXi™ servers for an instance, add and remove clusters, join additional vCenter Server instances to an existing instance, and add products and services by using the VMware Solutions console.
What is the IBM Cloud platform? 

The IBM Cloud® platform combines platform as a service (PaaS) with infrastructure as a service (IaaS) to provide an integrated experience. The platform scales and supports both small development teams and organizations, and large enterprise businesses. Globally deployed across data centers around the world, the solution you build on IBM Cloud® spins up fast and performs reliably in a tested and supported environment you can trust!

IBM Cloud provides solutions that enable higher levels of compliance, security, and management, with proven architecture patterns and methods for rapid delivery for running mission-critical workloads. Available in data centers worldwide, with multizone regions in North and South America, Europe, Asia, and Australia, you are enabled to deploy locally with global scalability.

IBM Cloud offers the most open and secure public cloud for business with a next-generation hybrid cloud platform, advanced data and AI capabilities, and deep enterprise expertise across 20 industries. Solutions are available depending on your needs for working in the public cloud, on-premises, or a combination:



* With public cloud, the resources are made available to you over the public internet. It is a multi-tenant environment, and resources like hardware and infrastructure are managed by IBM®.
* A [hybrid cloud solution](https://www.ibm.com/cloud/hybrid) is a combination of public and private, giving you the flexibility to move workloads between the two based on your business and technological needs. IBM uses Red Hat OpenShift on IBM Cloud, the market-leading hybrid cloud container platform for hybrid solutions that enables you to build once and deploy anywhere. With IBM Cloud Satellite, you can create a hybrid environment that brings the scalability and on-demand flexibility of public cloud services to the applications and data that runs in your secure private cloud.
* Support for [multicloud](https://www.ibm.com/cloud/learn/multicloud) and hybrid multicloud solutions is also available, which makes it easy for you to work with different vendors. [IBM Cloud Paks](https://www.ibm.com/cloud/paks) are software products for hybrid clouds that enable you to develop apps once and deploy them anywhere.
Discover all that IBM Cloud has to offer. From services, software, and

deployable architecturesranging from containers, compute, security, data, AI, and more, find what you need to transform your business.

The available services include options for compute, storage, networking, end-to-end developer solutions for app development, testing and deployment, security management services, traditional and open source databases, and cloud-native services. The lifecycle and operations of services are the responsibility of IBM.

You can also find a number of software products, including [Cloud Paks](https://www.youtube.com/watch?v=DzFhhSR8SSs), Terraform-based templates, Helm charts, and Operators. The preconfigured software solutions help you build faster. And, with a simplified installation process, you can get started quickly. You manage the deployment and configuration of the software on your own compute resources.

If you're looking for more robust solutions for your enterprise business goals, IBM Cloud offers deployable architectures that use cloud automation for deploying common architectural patterns that combine one or more cloud resources that are designed for easy deployment, scalability, and modularity.

And, if you're looking for help in your journey to cloud, check out our professional services. Browse your options for scheduling a consultation with technical experts depending on your needs, such as cloud migration, creating business solutions with IBM Garage, or developing a container security solution that works for you.

The catalog supports command-line interfaces (CLIs) and a RESTful API for you to use to retrieve information about existing products.



 Searching the catalog for services 

All products that are available in IBM Cloud are displayed by default in the catalog. You can filter the catalog by type to view a specific type of product, for example, only services, software, or deployable architectures. Enter keywords or set additional filters to further scope your view of the catalog. For example, if you want to deploy an analytics instance to Red Hat® OpenShift® on IBM Cloud®, you can select the Analytics category, and filter the results by selecting Red Hat OpenShift as the deployment target.

See the following table for the list of filters that you can use to search the catalog.

Category

Compliance
* Accelerated cloud adoption for successful implementation of SAP workloads on the cloud.
* Prescriptive best practices for solution implementation by using IBM Cloud Services products and features.
* Rapid learning and risk mitigation through access to IBM Cloud experts.







 Procedure to request IBM Security Services for SAP 



1. In the IBM Cloud for VMware Solutions console, scroll down to the services section and click IBM Security Services for SAP in the Featured workload solutions category.
2. On the IBM Security Services for SAP page, in the Engage IBM Security Services box, provide the requested details, and click Request a consultation.

An IBM Cloud for VMware Solutions representative contacts you by using your IBM Cloud contact information to help you with the solution that you need.







 Related links 



* [Contacting IBM Support](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-trbl_support)
VMware Solutions docs 

VMware Solutions is a group of IBM Cloud offerings that provide deployment and management of VMware virtualized environments. Learn how to make the most of your VMware Solutions experience by using the user documentation, REST API documentation reference, solution architectures, and solution guides.

 Developer tools 

[API & SDK reference](https://cloud.ibm.com/docs?tab=api-docs&category=compute&subCategory=vmwaresolutions)

 Recommended content 

[Getting started with VMware Solutions Get familiar with the process of ordering an instance and some services for it.](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-getting-started)[Signing up for required accounts Sign up for an IBM Cloud account and an IBM Cloud infrastructure account.](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-signing_required_accounts)[Accessing the VMware Solutions console Review the entry points into the IBM Cloud for VMware Solutions console.](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-loginmethod)[Setting up your environment for your first order Ensure that your environment is ready for your order.](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-completing_checklist)

 Video library 

[!
[HCX™](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-hcx_considerationshcx_considerations) This service can extend the networks of on-premises data centers into IBM Cloud, which allows VMs to be migrated to and from the IBM Cloud without any conversion or change. 
 [PrimaryIO HDM](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-managing_pio) This service decouples VMs and storage (VMDKs) to seamlessly move workloads to and from IBM Cloud faster and efficiently. 
 [Veeam®](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-veeamvm_overview) This service integrates directly with your VMware hypervisors to help your enterprise achieve high availability. You can control both the backup and restore of all VMs for your infrastructure from the Veeam console. 
 [Zerto](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-addingzertodr) This service provides replication and disaster recovery capabilities, which can be integrated into the deployment offerings to protect and recover data in your VMware virtual environment on IBM Cloud. 
 [Managed Disaster Recovery Services by Kyndryl](https://www.kyndryl.com/us/en/services/cyber-resilience) Our partner Kyndryl offers fully managed disaster recovery (DR) environment services with or without orchestration. 







 Featured workload solutions 

The following table describes the featured workload solutions services that are available.



Table 5. Featured workload solutions

 Service name Description 

 [Dizzion](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-dizzion-overview) This service provides more service-level choices, multicloud integration, compliance, protection, and simplified management for the teams that are in charge with environment optimization.
With IBM Cloud Satellite, you can create a hybrid environment that brings the scalability and on-demand flexibility of public cloud services to the applications and data that runs in your secure private cloud.
* Support for [multicloud](https://www.ibm.com/cloud/learn/multicloud) and hybrid multicloud solutions is also available, which makes it easy for you to work with different vendors. [IBM Cloud Paks](https://www.ibm.com/cloud/paks) are software products for hybrid clouds that enable you to develop apps once and deploy them anywhere.
* [Virtual Private Cloud (VPC)](https://cloud.ibm.com/docs/vpc?topic=vpc-getting-started) is available as a public cloud service that lets you establish your own private cloud-like computing environment on shared public cloud infrastructure. With VPC, enterprises can define and control a virtual network that is logically isolated from all other public cloud tenants, creating a private, secure place on the public cloud.



With our open source technologies, such as Kubernetes, Red Hat OpenShift, and a full range of compute options, including virtual machines, containers, bare metal, and serverless, you have the control and flexibility that's required to support workloads in your hybrid environment. You can deploy cloud-native apps while also ensuring workload portability.

Whether you need to migrate apps to the cloud, modernize your existing apps by using cloud services, ensure data resiliency against regional failure, or use new paradigms and deployment topologies to innovate and build your cloud-native apps, the platform's open architecture is built to accommodate your use case.



 What's built into the platform? 

As the following diagram illustrates, the IBM Cloud platform is composed of multiple components that work together to provide a consistent and dependable cloud experience.



* A robust console that serves as the front end for creating, viewing, managing your cloud resources
* An identity and access management component that securely authenticates users for both platform services and controls access to resources consistently across IBM Cloud
* A catalog that consists of hundreds of supported products
* A search and tagging mechanism for filtering and identifying your resources
The following table describes the featured workload solutions services that are available.



Table 5. Featured workload solutions

 Service name Description 

 [Dizzion](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-dizzion-overview) This service provides more service-level choices, multicloud integration, compliance, protection, and simplified management for the teams that are in charge with environment optimization. 
 [IBM Security Services for SAP®](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-managing-ss-sap) This service offers a cybersecurity solution to automate the monitoring and protection of SAP applications on IBM Cloud, and to keep workloads compliant and secure from inside and outside threats. 







 Other services 

The following table describes other services that are available.



Table 6. Other services

 Service category Service name Description 

 Transformation and modernization [Red Hat® OpenShift® for VMware](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-ocp_overview) This service brings together the power of the Red Hat OpenShift Container Platform and the VMware software-defined data center stack. 
 Management tools [VMware Aria Operations and VMware Aria Operations for Logs](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-vrops_overview) This service deploys the tools of VMware Aria® Operations™ and VMware Aria Operations™ for Logs, which help you operate and monitor the performance, health, and capacity of your IBM-hosted, dedicated VMware environment. 











 Step 1: Accessing the VMware Solutions console 

The VMware Solutions console is the user interface where you order and manage your deployments. Each deployment is managed as an instance in the console. The console is a stand-alone user interface that is separate from the IBM Cloud infrastructure customer portal.

To access the IBM Cloud for VMware Solutions console:



1.