vania-janet/multiturn-rag-retrieval-data huggingface dataset:
keys = [data.ibm_is_ssh_key.ssh_key_id.id]
image = data.ibm_is_image.ubuntu.id
profile = "cc1-2x4"

primary_network_interface {
subnet = ibm_is_subnet.subnet1.id
security_groups = [ibm_is_security_group.sg1.id]
}
}
Show more









 Managing resources in other account 

You can create workspaces in the IBM Cloud source account and execute Terraform providing resources in the target account. You can provision a resource in the target account only through command-line and API calls by using the target account's service ID with authentication, appropriate cross account authorization, or API key. To provision in the target account, you need to have a right permission of the source account.

Whereas in UI, workspaces use a user who are logged in identity for executing operations. Hence, you cannot provision the Terraform providing resources in the target account.





 Using variable blocks to customize resources 

You can use variable blocks to create template for your infrastructure code. For example, instead of creating multiple Terraform configuration files for a resource that you want to deploy in multiple data centers. You simply reuse the same configuration with an input variable to define the data center.

Where do I store my variable declarations?

You can decide to declare your variables within the same Terraform configuration file where you specify the resources that you want to provision, or to create a separate variables.tf file that includes all your variable declarations. When you create a workspace, IBM Cloud Schematics automatically parses through your Terraform configuration files to find variable declarations.

What information do I need to include in my variable declaration?

When you declare an input variable, you must provide a name for your variable and the data type according to the Terraform version. You can optionally provide default value for your variable. When input variables are imported into Schematics and a default value is specified, you can choose to overwrite the default value.
Then, you need to determine the location of the events based on scope.

For Activity Tracker hosted event search, global events are available through the Activity Tracker instance in Frankfurt. Therefore, to view global events, you must provision an instance of the IBM Cloud Activity Tracker service in Frankfurt.

For Activity Tracker Event Routing, global events are collected in the region that you configure. Therefore, to find those events, you must find the route that is configured in 1 region of your account to collect global events.

For location-based events, you need to check the following scenarios to determine the Activity Tracker Event Routing instance where the events are available for analysis:



* Scenario 1: The service is provisioned in a location where the Activity Tracker Event Routing service is available.



1. Identify the location where your Cloud service is provisioned.
2. Check whether the Activity Tracker Event Routing service is available in that region. See [Locations](https://cloud.ibm.com/docs/atracker?topic=atracker-regions).
3. For Activity Tracker hosted event search, check that you have an Activity Tracker Event Routing instance provisioned in the same location where your service is provisioned. For Activity Tracker Event Routing, check that you have a targets and routes defined correctly.



* Scenario 2: The Cloud service is provisioned in a location where the IBM Cloud Activity Tracker service is not available.



1. Identify the location where your Cloud service is provisioned.
2. Check the [Cloud services locations](https://cloud.ibm.com/docs/activity-tracker?topic=activity-tracker-regions) to identify the Activity Tracker instance where events are available.





* How do I access and query data that has been archived for long term storage in COS?

To access data, you can download the archived file locally.

To query the data, you can also use a service like SQL Query to query your COS archives and get information based on queries that you define. [Learn more](https://cloud.ibm.com/docs/activity-tracker?topic=activity-tracker-sqlquery).
* How do I configure archiving for my instance?
Until the reclamation process is complete, it is possible to restore the instance, along with the buckets and objects. After reclamation is complete, all buckets and objects will be irrevocably deleted and can not be restored, although the bucket names will be made available for new buckets to reuse.





 Why do CredentialRetrievalError occur while uploading data to Object Storage or while retrieving credentials? 

CredentialRetrievalError can occur due to the following reasons:



* The API key is not valid.
* The IAM endpoint is incorrect.



However, if the issue persists, contact IBM customer support.





 How do I ensure communication with Object Storage? 

You can check the communication with Object Storage by using one of the following:



* Use a COS API HEAD call to a bucket that will return the headers for that bucket. See [api-head-bucket](https://cloud.ibm.com/docs/cloud-object-storage/api-reference?topic=cloud-object-storage-compatibility-api-bucket-operationscompatibility-api-head-bucket).
* Use SDK : See [headbucket property](https://ibm.github.io/ibm-cos-sdk-js/AWS/S3.htmlheadBucket-property).







 Can I migrate a bucket from one COS instance to another? 

Yes, You can achieve the same by creating a bucket in the target Object Storage instance and perform a sync. For details see [cloud-object-storage-region-copy](https://cloud.ibm.com/docs/cloud-object-storage?topic=cloud-object-storage-region-copy).





 My COS service is locked. How do I reactivate the COS service? 

Exceeding the data limit for the Lite account is one of the reasons why your account is locked or deactived. The [COS support](https://cloud.ibm.com/unifiedsupport/cases/form) team can help to unlock your account.
So, if your app needs a persistent connection, create a new connection before the timeout value is reached.
* How can I review the Code Engine service terms?

For the latest service level agreement terms, see the [terms of service](https://cloud.ibm.com/docs/overview/terms-of-use?topic=overview-terms).
* How can I give feedback?

Your feedback on Code Engine is important to us and helps us improve. You can provide feedback in multiple ways:



* Click Feedback from any page on the [Code Engine console](https://cloud.ibm.com/codeengine/overview) or in the product documentation to provide your comments.
* Share feedback through Slack. You can [register](https://cloud.ibm.com/kubernetes/slack) and join the discussion in the

[#code-engine channel](https://ibm-cloud-success.slack.com).





Functions



* What language runtimes are supported in Cloud Functions?

Cloud Functions supports many different language runtimes, including Node.js, Python, and PHP. Languages without specific support in Cloud Functions are supported by using Docker actions. For a complete list of supported language runtimes, see [Runtimes](https://cloud.ibm.com/docs/openwhisk?topic=openwhisk-runtimes).
* What's the maximum time or maximum memory that my function can run?

The maximum timeout is 10 minutes and you can use up to 2048 MB of memory for each function. Find more details about these limits and others in [System details and limits](https://cloud.ibm.com/docs/openwhisk?topic=openwhisk-limits).
* What's the difference between an action and a web action?
Depending on how traffic is actually routed, what protocols the queries use, and other factors, the actual rate limit might vary around this number. After a DNS query rate exceeds this rate limit, DNS Services resolvers no longer respond to the excess DNS queries.



Direct Link



* How does the new Direct Link differ from Direct Link on Classic?

The Direct Link offering differs from Direct Link on Classic in that Direct Link is decoupled from classic IaaS, and exists only in the local cross-connect router (XCR). This design enables native connectivity to VPC and future capabilities without being forced into the classic IaaS network.

Direct Link allows connectivity to both classic IaaS as well as VPCs, whereas IBM Cloud Direct Link on Classic always connects to the IaaS network and a global VRF first. IBM Cloud Direct Link on Classic can only reach the VPC on a limited basis using a feature named Classic Access and by adding global routing to the direct link. See [Setting up access to your Classic Infrastructure from VPC](https://cloud.ibm.com/docs/vpc?topic=vpc-setting-up-access-to-classic-infrastructure) for more information.

For more information about the differences between the new Direct Link offering and the classic version (Direct Link on Classic), see [How do I know which Direct Link solution to order?](https://cloud.ibm.com/docs/direct-link?topic=direct-link-get-started-with-ibm-cloud-direct-linkget-started-solution-to-order).
* Where can I find Direct Link pricing and what do I pay for?

See the following FAQs for details.



 Where do I find cost estimates for Direct Link offerings? 

You can estimate the cost of a service using the cost estimator on the provisioning pages for Direct Link offerings. For example, log in to the [IBM Cloud Direct Link console](https://cloud.ibm.com/interconnectivity/direct-link) and click Order Direct Link. Then, choose to order Direct Link Connect or Direct Link Dedicated. As you complete the ordering form, cost estimates appear in the Summary side panel.
Currently the cloud host migration is not mandatory and there is not an exact date about when the old domain will be out of support, but once this is settled, the customer who are still using the old domain name will be notified.

For gateway authentication endpoint, currently bluemix.net has been deprecated, if you are using REST API or SDK, please ensure you are connecting to [new endpoints](https://cloud.ibm.com/apidocs/secure-gatewayintro) instead of bluemix.net. For Secure Gateway Client, please ensure your Secure Gateway Client does not fall more than 3 versions behind.





 Why am I getting error when connect to bluemix.net endpoints 

After 2018 December maintenance, the bluemix.net endpoints are deprecated and replaced by securegateway.cloud.ibm.com, the bluemix.net endpoints had still been being maintained for 1 year after the deprecation. After 2022 Nov maintenance, the bluemix.net endpoints are removed, Secure Gateway client version v180fp9 and former is not be able to connect to Secure Gateway server after the maintenance, REST API or SDK which connect to bluemix.net endpoints gets 404 error.

If you are using REST API or SDK, please confirm your application is connecting to API endpoints sgmanager.REGION.securegateway.cloud.ibm.com instead of sgmanager.REGION.bluemix.net. For details, please refer to [API document](https://cloud.ibm.com/apidocs/secure-gatewayintro)

For Secure Gateway client, if you are using version v180fp9 or former, please upgrade the Secure Gateway client and ensure your Secure Gateway client does not fall more than 3 versions behind.





 Where can I receive Secure Gateway notifications, especially for disruptive maintenance? 

You can get notifications via our [status page](https://cloud.ibm.com/status?selected=maintenance).



* To get the notifications about completed disruptive maintenance, please search Secure Gateway in the tab [History](https://cloud.ibm.com/status?query=Secure+Gateway&selected=history).
ACME Bank maintenance usually takes place in one region at a time.

ACME Bank wants to register each of their customer's android and iOS devices under region-specific tags.



1. To achieve this the bank can use Event Notifications Android Client SDK and iOS Client SDK to subscribe to Asia Pacific customers' android and iOS devices under the AP tag.



Follow the below links on how to subscribe tag to push devices by using Event Notifications client SDKs:



* [Android Push Notifications (FCM)](https://cloud.ibm.com/docs/event-notifications?topic=event-notifications-en-push-fcm)
* [iOS Push Notifications (APNs)](https://cloud.ibm.com/docs/event-notifications?topic=event-notifications-en-push-apns)
* [Chrome Push Notifications](https://cloud.ibm.com/docs/event-notifications?topic=event-notifications-en-push-chrome)
* [Firefox Push Notifications](https://cloud.ibm.com/docs/event-notifications?topic=event-notifications-en-push-firefox)
* [Safari Push Notifications](https://cloud.ibm.com/docs/event-notifications?topic=event-notifications-en-push-safari)





1. Next, the bank sends a notification with payload containing attribute "notification-type":"maintenance"and "ibmenpushto": "{"tags":["AP""]]}", notification-type attributes is added so that it matches against the topic condition and ibmenpushto as the message is for targeting push customers with android and iOS devices in Asia Pacific region AP.









 Why don't I see Email or SMS notifications that I have sent after configuring Event Notifications for Email and SMS? 

Email and SMS are supported only for IBM Managed Sources (IBM Cloud services). You can send a notification from API source to all other destinations, except Email and SMS.





 Where do I specify the Slack channel name in the Slack Destination configuration?
SL02SEVC307608_74 2022-06-13 14:59:17 90



* Where can I find more information about Portable Storage?

Portable storage volumes (PSVs) are an auxiliary storage solution exclusively for Virtual Servers. You can detach PSV from one Virtual Server and attach it to another. You can connect a portable storage disk to one Virtual Server at a time while all information that is stored on the disk is retained for transfer between devices. For more information, see [Portable SAN storage](https://cloud.ibm.com/docs/virtual-servers?topic=virtual-servers-storage-optionsportable-san-storage).

--------------------





1. Dependent duplicates can be refreshed immediately after creation. [↩︎](https://cloud.ibm.com/docs/faqsfnref1)
2. Independent duplicates can be refreshed after the separation process completes. [↩︎](https://cloud.ibm.com/docs/faqsfnref2)







File Storage - Classic



* How can I tell which of my File Storage for Classic volumes are encrypted?

Look at your list of File Storage for Classic in the customer portal. You can see a lock icon next to the volume name for the volumes that are encrypted.
* If I purchased nonencrypted File Storage for Classic in a data center that was upgraded for encryption, can I encrypt my File Storage for Classic?

File Storage for Classic that was provisioned before a data center upgrade can't be encrypted. New File Storage for Classic that was provisioned in upgraded data centers is automatically encrypted. It's automatic, not a provisioning setting that can be selected or left out. Data on nonencrypted storage can be encrypted by creating a new volume, then copying the data to the new encrypted volume with host-based migration.
SL02SEVC307608_74 2022-06-13 14:59:17 90



* Where can I find more information about Portable Storage?

Portable storage volumes (PSVs) are an auxiliary storage solution exclusively for Virtual Servers. You can detach PSV from one Virtual Server and attach it to another. You can connect a portable storage disk to one Virtual Server at a time while all information that is stored on the disk is retained for transfer between devices. For more information, see [Portable SAN storage](https://cloud.ibm.com/docs/virtual-servers?topic=virtual-servers-storage-optionsportable-san-storage).

--------------------





1. Dependent duplicates can be refreshed immediately after creation. [↩︎](https://cloud.ibm.com/docs?tab=faqsfnref1)
2. Independent duplicates can be refreshed after the separation process completes. [↩︎](https://cloud.ibm.com/docs?tab=faqsfnref2)







File Storage - Classic



* How can I tell which of my File Storage for Classic volumes are encrypted?

Look at your list of File Storage for Classic in the customer portal. You can see a lock icon next to the volume name for the volumes that are encrypted.
* If I purchased nonencrypted File Storage for Classic in a data center that was upgraded for encryption, can I encrypt my File Storage for Classic?

File Storage for Classic that was provisioned before a data center upgrade can't be encrypted. New File Storage for Classic that was provisioned in upgraded data centers is automatically encrypted. It's automatic, not a provisioning setting that can be selected or left out. Data on nonencrypted storage can be encrypted by creating a new volume, then copying the data to the new encrypted volume with host-based migration.
* region: Region name where the service instance is created. Use AppConfiguration.REGION_US_SOUTH for Dallas, AppConfiguration.REGION_US_EAST for Washington DC, AppConfiguration.REGION_EU_GB for London, and AppConfiguration.REGION_AU_SYD for Sydney.
* guid: Instance ID of the App Configuration service. Get it from the service credentials section of the App Configuration service dashboard.
* apiKey: ApiKey of the App Configuration service. Get it from the service credentials section of the App Configuration service dashboard.
* collectionId: ID of the collection created in App Configuration service instance.
* environmentId: ID of the environment created in App Configuration service instance under the Environments section.



The init() and setContext() are the initialization methods and need to be started only once by using appConfigClient. The appConfigClient, after initialized, can be obtained across modules by using AppConfiguration.GetInstance().





 Using private endpoints 

Set the SDK to connect to App Configuration service by using a private endpoint that is accessible only through the IBM Cloud private network.

appConfigClient.UsePrivateEndpoint(true)

This must be done before calling the Init function on the SDK.





 Option to use a persistent cache for configuration 

For your application and SDK to continue operations even during the unlikely scenario of an App Configuration service downtime, across your application restarts, you can configure the SDK to work by using a persistent cache. The SDK uses the persistent cache to store the App Configuration data that is available across your application restarts.

// 1. default (without persistent cache)
appConfiguration.SetContext(collectionId, environmentId)
// 2. with persistent cache
appConfiguration.SetContext(collectionId, environmentId, AppConfiguration.ContextOptions{
PersistentCacheDirectory: "/var/lib/docker/volumes/",
})
Be careful when you are working with secure properties and log files since only exact matches are masked.





 How do I find information about the environment variables that are used in pipeline jobs? 

For information about the environment properties and resources that are available by default in pipeline environments, see [Environment properties and resources](https://cloud.ibm.com/docs/ContinuousDelivery?topic=ContinuousDelivery-deliverypipeline_environmentdeliverypipeline_environment).





 Can I use the IBM Cloud CLI to run a pipeline stage? 

You can use the IBM Cloud developer tools CLI plug-in to run a pipeline stage.



1. [Install the IBM Cloud developer tools CLI plug-in](https://cloud.ibm.com/docs/cli?topic=cli-install-devtools-manually).
2. From the command line, run the following command to manually start your pipeline:

ibmcloud dev pipeline-run pipelineID --stage-id stageID



For more information about the pipeline-run command, see [pipeline-run](https://cloud.ibm.com/docs/cli?topic=cli-idt-clipipeline-run).





 Can I download the yaml file for a delivery pipeline? 

You can export the definition for an entire pipeline by appending /yaml to the pipeline URL. For more information about exporting the definition for an entire pipeline, see [Modifying, exporting, and deleting Continuous Delivery pipeline data](https://cloud.ibm.com/docs/ContinuousDelivery?topic=ContinuousDelivery-cd_personal_datamanaging_pipeline_data).





 Can I manage delivery pipelines by using Terraform? 

You can use Terraform to provision, update, and de-provision Tekton pipelines, definitions, properties, triggers, and trigger properties.
Resources 



  Blogs and other resources 



*  [Securing Destinations with TLS in IBM Cloud Secure Gateway](https://www.ibm.com/blogs/cloud-archive/2015/04/17/securing-destinations-tls-bluemix-secure-gateway/)
*  [IBM Cloud Secure Gateway - Yes I Can Get It](https://www.ibm.com/cloud/blog/bluemix-secure-gateway-yes-can-get)
*  [Reaching the Enterprise Backend using IBM Cloud Secure Gateway via SDK API](https://www.ibm.com/blogs/cloud-archive/2015/04/07/reaching-enterprise-backend-bluemix-secure-gateway-via-sdk-api/)
*  [Reaching enterprise backend with IBM Cloud Secure Gateway via console](https://www.ibm.com/blogs/cloud-archive/2015/04/01/reaching-enterprise-backend-bluemix-secure-gateway/)
*  [Real-life production experience with Secure Gateway](https://www.ibm.com/blogs/cloud-archive/2015/11/secure-gateway-in-production-part1/)
*  [REST API](https://cloud.ibm.com/apidocs/secure-gateway)







  Using the IBM Secure Gateway SDK for IBM Cloud 

If you want to manage your Secure Gateway from a node.js app, you can use the JavaScript SDK. So if you work in JavaScript and want to interact with the Secure Gateway REST interface, there is no need for you to make the REST calls. The JavaScript SDK sets up the HTTP calls and puts them into easy to use functions. It is available as an NPM project here:



*  [IBM Secure Gateway SDK for IBM Cloud NPM Project](https://www.npmjs.com/package/bluemix-secure-gateway)
You can access more information about the logs that each Cloud service generates from the following documentation topic: [Cloud services](https://cloud.ibm.com/docs/log-analysis?topic=log-analysis-cloud_services). For each Cloud service, you can link to the logging topic specific to a Cloud service where you can get more information.
* Where can I find the logs that a Cloud service generates?

First, you must [check whether you have enabled Platform logs in the location where your Cloud service is available](https://cloud.ibm.com/docs/log-analysis?topic=log-analysis-config_svc_logs).

Then, check the [Cloud services by location](https://cloud.ibm.com/docs/log-analysis?topic=log-analysis-cloud_services_locations) documentation to find out the location where the logs are available for analysis.
* How do I configure archiving for my instance?

To configure archiving see [Archiving events to IBM Cloud Object Storage](https://cloud.ibm.com/docs/log-analysis?topic=log-analysis-archiving).
* How do I access the logging web UI? I cannot see the logging instance in the Observability page.

To lauch the logging web UI, complete the following steps:



1. Check that you have IAM permissions to view the logging instances through the Logging dashboard. You must have viewer platform role permissions for the IBM Log Analysis service. [Learn more about managing IAM policies and access groups](https://cloud.ibm.com/docs/log-analysis?topic=log-analysis-work_iam).
2. [Launch the logging web UI](https://cloud.ibm.com/docs/log-analysis?topic=log-analysis-launch).



* How do I reset an ingestion key?

An ingestion key can be reset or new ones created in the logging web UI or using the API. You can have a maximum of 10 ingestion keys active at the same time in a logging instance.