vania-janet/multiturn-rag-retrieval-data huggingface dataset:
Red Hat OpenShift on IBM Cloud integrates popular open source integrations by using [managed add-ons](https://cloud.ibm.com/docs/openshift?topic=openshift-managed-addons). Managed add-ons are an easy way to install an open source tool in your cluster that is tested by IBM and approved to be used in Red Hat OpenShift on IBM Cloud.

Managed add-ons are fully integrated into the IBM Cloud support organization. If you have a question or an issue with using the managed add-ons, you can use one of the Red Hat OpenShift on IBM Cloud support channels. For more information, see [Getting help and support](https://cloud.ibm.com/docs/openshift?topic=openshift-get-help).

If the tool that you add to your cluster incurs costs, these costs are automatically integrated and listed as part of your monthly IBM Cloud billing. The billing cycle is determined by IBM Cloud depending on when you enabled the add-on in your cluster.





 Other third-party integrations 

You can install any third-party open source tool that integrates with Kubernetes. For example, the Kubernetes community designates certain Helm charts stable or incubator. Note that these charts or tools are not verified to work in Red Hat OpenShift on IBM Cloud. If the tool requires a license, you must purchase a license before you use the tool. For an overview of available Helm charts from the Kubernetes community, see the kubernetes and kubernetes-incubator repositories in the [Helm charts](https://cloud.ibm.com/kubernetes/helm) catalog.

Any costs that incur by using a third-party open source integration are not included in your monthly IBM Cloud bill.

Installing third-party open source integrations or Helm charts from the Kubernetes community might change the default cluster configuration and can bring your cluster into an unsupported state. If you run into an issue with using any of these tools, consult the Kubernetes community or the service provider directly.





 Extending Red Hat OpenShift API and software with CRDs and Operators
Users with a service access role to Red Hat OpenShift on IBM Cloud in IAM are given [corresponding user roles in RBAC](https://cloud.ibm.com/docs/openshift?topic=openshift-iam-service-access-rolesrbac_ref). The RBAC user details include a unique issuer ID, subject identifier claim, and Red Hat OpenShift username. These details vary with the Red Hat OpenShift version of the cluster. When you update a cluster from a previous version, the details are automatically updated. RBAC usernames are prefixed by IAM, such as in the output of oc get users. For more information about how OpenID authentication works, see the [Red Hat OpenShift documentation](https://docs.openshift.com/container-platform/4.11/authentication/identity_providers/configuring-oidc-identity-provider.html).

You might use this information if you build automation tooling within the cluster that relies on the user details to authenticate with the Red Hat OpenShift API server.



IBM Cloud IAM issuer details for RBAC users

 Version Issuer Claim Casing* 

 3.11 or later https://iam.cloud.ibm.com/identity sub_<account_ID> lowercase 



: An example of lowercase is user.name@company.com. An example of camel case is User.Name@company.com.
Red Hat OpenShift Control Plane Operator v4.4.0-20200821 v4.4.0-20201110 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.4.0+20201110). 
 Red Hat OpenShift 4.4.27 4.4.29 See the [Red Hat OpenShift release notes](https://docs.openshift.com/container-platform/4.4/release_notes/ocp-4-4-release-notes.htmlocp-4-4-29). 
 OpenVPN Operator image v1.0.9 v1.0.10 Updated image for [CVE-2019-20454](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20454), [CVE-2020-10029](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10029), [CVE-2020-1751](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1751), [CVE-2020-1752](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1752), [CVE-2019-20807](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20807), [CVE-2019-16935](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16935), [CVE-2019-20907](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20907), [CVE-2020
Accessing Red Hat OpenShift clusters 

After your Red Hat® OpenShift® on IBM Cloud® cluster is created, you can begin working with your cluster by accessing the cluster.



 Prerequisites 



1. [Install the required CLI tools](https://cloud.ibm.com/docs/openshift?topic=openshift-cli-install). For quick access to test features in your cluster, you can also use the [IBM Cloud Shell](https://cloud.ibm.com/docs/cloud-shell?topic=cloud-shell-shell-ui).
2. [Create your Red Hat OpenShift cluster](https://cloud.ibm.com/docs/openshift?topic=openshift-clusters).
3. If your network is protected by a company firewall, [allow access](https://cloud.ibm.com/docs/openshift?topic=openshift-firewallcorporate) to the IBM Cloud and Red Hat OpenShift on IBM Cloud API endpoints and ports. For VPC clusters with only the private cloud service endpoint enabled, you can't test the connection to your cluster until you [configure a VPC VPN with the cloud service endpoint subnet](https://cloud.ibm.com/docs/openshift?topic=openshift-access_clustervpc_private_se).
4. Check that your cluster is in a healthy state by running ibmcloud oc cluster get -c <cluster_name_or_ID>. If your cluster is not in a healthy state, review the [Debugging clusters](https://cloud.ibm.com/docs/openshift?topic=openshift-debug_clusters) guide for help. For example, if your cluster is provisioned in an account that is protected by a firewall gateway appliance, you must [configure your firewall settings to allow outgoing traffic to the appropriate ports and IP addresses](https://cloud.ibm.com/docs/openshift?topic=openshift-firewall).
5.
[Creating a Red Hat OpenShift cluster in your Virtual Private Cloud (VPC)](https://cloud.ibm.com/docs/openshift?topic=openshift-vpc_rh_tutorial)Creating a Red Hat OpenShift cluster in your Virtual Private Cloud (VPC)

Create an Red Hat® OpenShift® on IBM Cloud® cluster in your Virtual Private Cloud (VPC).

Red Hat OpenShift on IBM Cloud Virtual Private Cloud (VPC)



* 45 minutes
* 2023-07-07



[Deploying OpenShift Data Foundation on Satellite clusters with Azure worker nodes](https://cloud.ibm.com/docs/satellite?topic=satellite-odf-tutorial)Deploying OpenShift Data Foundation on Satellite clusters with Azure worker nodes

In this tutorial, you complete the following tasks to set up OpenShift Data Foundation.

Satellite Kubernetes service

+1

Virtual Private Cloud (VPC)



* 2 hours
* 2023-06-02



[Onboarding a virtual server image with Terraform to a private catalog](https://cloud.ibm.com/docs/sell?topic=sell-vsimage-onboard)Onboarding a virtual server image with Terraform to a private catalog

This tutorial walks you through how to onboard a virtual server image with Terraform to a private catalog. By completing this tutorial, you learn how to import the virtual server image from a GitHub repository, configure the deployment and other details, and validate that you can deploy the image to a target IBM Cloud® Virtual Private Cloud (VPC).

Object Storage Virtual Private Cloud (VPC)

+1

Selling on IBM Cloud



* 45 minutes
* 2022-08-02



[Onboarding a virtual server image for Power Systems to a private catalog](https://cloud.ibm.com/docs/sell?topic=sell-vsipower-onboard)Onboarding a virtual server image for Power Systems to a private catalog

This tutorial walks you through how to onboard a public virtual server image for Power Systems Virtual Server to a private catalog.
: Red Hat OpenShift [4.4.16_1513_openshift](https://cloud.ibm.com/docs/openshift?topic=openshift-changelog_archive4416_1513_master), [4.3.31_1534_openshift](https://cloud.ibm.com/docs/openshift?topic=openshift-changelog_archive4331_1534_master), and [3.11.248_1564_openshift](https://cloud.ibm.com/docs/openshift?topic=openshift-openshift_changelog_311311248_1564_master).





 17 August 2020 

Locations
: You can create [clusters on VPC infrastructure](https://cloud.ibm.com/docs/openshift?topic=openshift-regions-and-zoneszones-vpc) in the Tokyo multizone region.

Versions
: Worker node fix pack update change log documentation is available.
: Red Hat OpenShift [4.4.16_1513_openshift](https://cloud.ibm.com/docs/openshift?topic=openshift-changelog_archive4416_1513), [4.3.31_1534_openshift](https://cloud.ibm.com/docs/openshift?topic=openshift-changelog_archive4331_1534), and [3.11.248_1564_openshift](https://cloud.ibm.com/docs/openshift?topic=openshift-openshift_changelog_311311248_1564)..





 6 August 2020 

CLI change log
: Updated the Red Hat OpenShift on IBM Cloud CLI plug-in change log page for the [release of version 1.0.143](https://cloud.ibm.com/docs/openshift?topic=openshift-cs_cli_changelog10).





 5 August 2020 

Ingress ALB change log
Red Hat OpenShift 4.3.31 4.3.35 See the [Red Hat OpenShift release notes](https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.htmlocp-4-3-35). 
 OpenVPN Operator image v1.0.7 v1.0.8 Updated image for [CVE-2020-14352](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14352). 
 Red Hat OpenShift on IBM Cloud toolkit 4.3.0+20200709 4.3.0+20200821 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.3.0+20200821). 







 Change log for worker node fix pack 4.3.35_1538_openshift, released 14 September 2020 

The following table shows the changes that are in the worker node fix pack update 4.3.35_1538_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 4.3.33_1537_openshift

 Component Previous Current Description 

 Red Hat OpenShift 4.3.33 4.3.35 See the [Red Hat OpenShift release notes](https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.htmlocp-4-3-35). 
 RHEL 7 packages N/A N/A Updated worker node image with package updates. 







 Change log for worker node fix pack 4.3.33_1537_openshift, released 31 August 2020 

The following table shows the changes that are in the worker node fix pack update 4.3.33_1537_openshift.
[Enhance security of your deployed application](https://cloud.ibm.com/docs/solution-tutorials?topic=solution-tutorials-extended-app-security)Enhance security of your deployed application

You already developed and deployed an application on IBM Cloud. You already followed the introductory tutorial on how to apply end to end security to an application. Following "security by design", you now start to look into the design of a new application, or you need to adapt an older application to new security requirements. This tutorial walks you through options for applications with advanced security requirements. It looks into enhanced data encryption, isolation of compute runtimes and network traffic, and by using activity logs to look for suspicious activities.

Red Hat OpenShift on IBM Cloud Kubernetes service



* 1 hour
* 2023-05-05



[Deploy microservices with Red Hat OpenShift on IBM Cloud](https://cloud.ibm.com/docs/solution-tutorials?topic=solution-tutorials-openshift-microservices)Deploy microservices with Red Hat OpenShift on IBM Cloud

This tutorial demonstrates how to deploy applications to Red Hat OpenShift on IBM Cloud. Red Hat OpenShift on IBM Cloud provides a great experience for developers to deploy software applications and for System Administrators to scale and observe the applications in production.

Red Hat OpenShift on IBM Cloud Log Analysis

+3

Monitoring,Kubernetes service,Cloudant



* 3 hours
* 2023-05-18



[Service Mesh on Red Hat OpenShift on IBM Cloud](https://cloud.ibm.com/docs/solution-tutorials?topic=solution-tutorials-openshift-service-mesh)Service Mesh on Red Hat OpenShift on IBM Cloud

This tutorial walks you through how to install Red Hat OpenShift Service Mesh alongside microservices for a sample app called BookInfo in a Red Hat OpenShift on IBM Cloud cluster.
Red Hat OpenShift 4.4.20 4.5.13 See the [Red Hat OpenShift release notes](https://docs.openshift.com/container-platform/4.5/release_notes/ocp-4-5-release-notes.htmlocp-4-5-13). 
 Red Hat OpenShift configuration N/A N/A New version 4.5 clusters that run on the VPC infrastructure provider and use IBM Cloud Object Storage now proxy container image traffic through the internal registry pods directly to the Object Storage endpoints. To configure this proxy for version 4.5 clusters that were updated from a previous version, see [the troubleshooting topic](https://cloud.ibm.com/docs/openshift?topic=openshift-ts-app-ocr-vpc-push). 
 OpenVPN Operator image v1.0.8 v1.0.9 Updated to improve OpenVPN availability. 
 Red Hat OpenShift on IBM Cloud Metrics Server N/A v4.5.0-20201009 New!: Red Hat OpenShift on IBM Cloud now provides custom cluster metrics. See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.5.0+20201009). 
 Red Hat OpenShift on IBM Cloud toolkit 4.4.0+20200821 4.5.0+20201009 See the [Red Hat OpenShift on IBM Cloud release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.5.0+20201009). 









 Version 4.4 change log (unsupported as of 31 May 2021) 

Version 4.4 is unsupported. You can review the following archive of the 4.4 change logs.



 Change log for worker node fix pack 4.4.33_1544_openshift, released 24 May 2021 

The following table shows the changes that are in the worker node fix pack 4.4.33_1544_openshift.
Ordering Red Hat OpenShift for VMware 

You can include the Red Hat® OpenShift® for VMware® service with a new VMware vCenter Server® instance or add the service to your existing instance.



 Ordering Red Hat OpenShift for VMware for a new instance 



1. When you [order the instance](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-vc_orderinginstance-procedure), scroll down to the Add-on services section. Red Hat OpenShift for VMware is in the Transformation and modernization of VMware applications category.
2. Open the category, locate Red Hat OpenShift for VMware, and toggle its switch on.
3. Click Edit to review and specify [the configuration information](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-ocp_orderingocp_ordering-config), then click Save.







 Ordering Red Hat OpenShift for VMware for an existing instance 



1. On the instance details page, click the Services tab.
2. Click Add to add the service.
3. On the Add services page, locate the Red Hat OpenShift for VMware service in the Transformation and modernization of VMware applications section and toggle its switch on.
4. Click Edit to review and specify [the configuration information](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-ocp_orderingocp_ordering-config), then click Save.







 Red Hat OpenShift for VMware configuration 

When you order the service, you must provide a Red Hat® pull secret. This pull secret is used to associate the new Red Hat OpenShift cluster with your existing Red Hat account. You can obtain a copy of your pull secret by [logging in to your Red Hat account](https://cloud.redhat.com/openshift/install/vsphere/user-provisioned) and clicking Copy Pull Secret.
1.2.13 Red Hat OpenShift on IBM Cloud supports [pod security context constraints](https://cloud.ibm.com/docs/openshift?topic=openshift-openshift_scc) which are similar to Kubernetes pod security policies. 
 1.2.16 Red Hat OpenShift on IBM Cloud supports [pod security context constraints](https://cloud.ibm.com/docs/openshift?topic=openshift-openshift_scc) which are similar to Kubernetes pod security policies. 
 1.2.22 Red Hat OpenShift on IBM Cloud can optionally [enable Kubernetes API server auditing](https://cloud.ibm.com/docs/openshift?topic=openshift-health-audit). 
 1.2.23 Red Hat OpenShift on IBM Cloud can optionally [enable Kubernetes API server auditing](https://cloud.ibm.com/docs/openshift?topic=openshift-health-audit). 
 1.2.24 Red Hat OpenShift on IBM Cloud can optionally [enable Kubernetes API server auditing](https://cloud.ibm.com/docs/openshift?topic=openshift-health-audit). 
 1.2.25 Red Hat OpenShift on IBM Cloud can optionally [enable Kubernetes API server auditing](https://cloud.ibm.com/docs/openshift?topic=openshift-health-audit). 
 1.2.33 Red Hat OpenShift on IBM Cloud can optionally [enable a Kubernetes Key Management Service (KMS) provider](https://cloud.ibm.com/docs/openshift?topic=openshift-encryptionkms). 
 1.2.34 Red Hat OpenShift on IBM Cloud can optionally [enable a Kubernetes Key Management Service (KMS) provider](https://cloud.ibm.com/docs/openshift?topic=openshift-encryptionkms).
Key Management Service provider v2.0.4 v2.0.5 Updated image for [DLA-2424-1](https://www.debian.org/lts/security/2020/dla-2424). 
 Red Hat OpenShift Control Plane Operator v4.4.0-20200821 v4.4.0-20201110 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.4.0+20201110). 
 Red Hat OpenShift 4.4.27 4.4.29 See the [Red Hat OpenShift release notes](https://docs.openshift.com/container-platform/4.4/release_notes/ocp-4-4-release-notes.htmlocp-4-4-29).
Updated to use Go version 1.12.12 and calicoctl version v3.8.4. 
 Key Management Service provider 237 254 Updated to use Go version 1.12.13. 
 Red Hat OpenShift 3.11.153 3.11.154 See the [Red Hat OpenShift release notes](https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.htmlocp-3-11-154). Update resolves [CVE-2019-11253](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11253) (see the [IBM security bulletin](https://www.ibm.com/support/pages/node/1126071)). 







 Change log for worker node fix pack 3.11.153_1530_openshift, released 11 November 2019 

The following table shows the changes that are in the worker node fix pack 3.11.153_1530_openshift.



Changes since version 3.11.146_1529

 Component Previous Current Description 

 RHEL 7 packages N/A N/A Updated worker node images with package updates. 







 Change log for worker node fix pack 3.11.153_1529_openshift, released 28 October 2019 

The following table shows the changes that are in the worker node fix pack 3.11.153_1529_openshift.



Changes since version 3.11.146_1528

 Component Previous Current Description 

 Red Hat OpenShift node 3.11.146 3.11.153 See the [Red Hat OpenShift release notes](https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.htmlocp-3-11-153).
Red Hat OpenShift on IBM Cloud 

IBM® Cloud Foundry is deprecated and no longer supported as of 1 June 2023. For more information, see the [deprecation details](https://cloud.ibm.com/docs/cloud-foundry-public?topic=cloud-foundry-public-deprecationdep_details).

Red Hat® OpenShift® on IBM Cloud® is a managed offering to create your own OpenShift cluster of compute hosts to deploy and manage containerized apps on IBM Cloud. The managed OpenShift offering combines the built-in industry leading OpenShift capabilities including RHEL-based infrastructure, enterprise hardened Kubernetes, validated integrations, integrated container registry, developer workflow tools, and easy access to services through service brokers with the operational cluster lifecycle excellence from IBM Cloud SRE.

As a managed offering, IBM deploys the compute, networks, and storage based on the customer's requirements through the UI, CLI, API, or automation through IBM Cloud Schematics. Additionally, IBM provides the tooling for updates including OS patches, vulnerability remediation, and updates to any component in the stack with the customer determining when they should upgrade. Red Hat OpenShift on IBM Cloud supports HA masters, multi-zone clusters, compute isolation choices including bare metal worker nodes, customer managed keys using IBM Key Protect or industry leading HyperProtect Crypto Services using FIPS 140-2 Level 4 encryption, and secure access to IBM Cloud services to enhance your application's capabilities including Watson, IoT, and Analytics.



 Resources 

The following resources are available to help you learn more about the OpenShift on IBM Cloud:



* [IBM information page](https://www.ibm.com/cloud/openshift)
* [Overview](https://cloud.ibm.com/docs/openshift?topic=openshift-roks-overview)
* [IBM Cloud service creation](https://cloud.ibm.com/kubernetes/overview?platformType=openshift)
* [Documentation](https://cloud.ibm.com/docs/openshift)
Key Management Service Provider v2.5.8 v2.5.9 Updated Go dependencies and to Go version 1.18.6. 
 Red Hat OpenShift on IBM Cloud 4.9.46 4.9.48 See the [Red Hat OpenShift on IBM Cloud Release Notes](https://docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-release-notes.htmlocp-4-9-48). 
 OpenVPN Operator image v1.4.8 v1.4.9 Updated ansible operator base image to v1.23.0 to resolve CVEs. 
 Red Hat OpenShift on IBM Cloud Control Plane Operator v4.9.0-20220816 v4.9.0-20220920 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.9.0+20220920). 
 Red Hat OpenShift on IBM Cloud Metrics Server v4.9.0-20220816 v4.9.0-20220920 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.9.0+20220920). 
 Red Hat OpenShift on IBM Cloud toolkit 4.9.0+20220816 4.9.0+20220920 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.9.0+20220920). 







 Change log for worker node fix pack 4.9.48_1557_openshift, released 26 September 2022 

The following table shows the changes that are in the worker node fix pack 4.9.48_1557_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
* Log in with an API key: See [Using an API key to log in to Red Hat OpenShift](https://cloud.ibm.com/docs/openshift?topic=openshift-access_clusteraccess_api_key).







 Accessing clusters from within the IBM Cloud private network 

If you are connected to the IBM Cloud private network, you can use the Satellite Link endpoint that is automatically generated for your cluster. This endpoint allows you to connect through the secured Link tunnel server to the cluster's master in your location control plane. The endpoint consists of the Link tunnel server hostname and a node port, which is formatted such as c-02.<region>.link.satellite.cloud.ibm.com:<port>.

To connect to your Satellite cluster by using the Link endpoint, for example --endpoint link in the CLI, you must follow the steps to set up a Source in your Location. This source allows access to your cluster APIs through the Link endpoint. For more information, see [Accessing your Red Hat OpenShift API Satellite link endpoints](https://cloud.ibm.com/docs/satellite?topic=satellite-link-endpoint-secure).



1. Make sure that you have the [Administrator IAM platform access role for the cluster](https://cloud.ibm.com/docs/openshift?topic=openshift-usersadd_users).
2. Set your command line context for the cluster by using the Link endpoint and download the TLS certificates and permission files for the administrator. For more information, see the [CLI documentation](https://cloud.ibm.com/docs/openshift?topic=openshift-kubernetes-service-clics_cluster_config).

ibmcloud oc cluster config -c <cluster_name_or_ID> --endpoint link --admin







 Accessing clusters from the public network