vania-janet/multiturn-rag-retrieval-data huggingface dataset:
If the instance contains more than 200 keys, you need to use the [offset and limit parameters](https://cloud.ibm.com/docs/key-protect?topic=key-protect-view-keysretrieve-subset-keys-api) to list another subset of keys.

For example, if you want to list keys 201 - 210 that are available in a service instance, you use ../keys?offset=200&limit=10 to skip the first 200 keys.





 Unable to view or list specific keys 

When you call the Key Protect API, you're unable to list specific keys that you have access to.

 What’s happening 

You call GET api/v2/keys to list the keys that are available in your service instance.

You can see a list of keys, but you can't find a specific key that's stored in the instance. You verify with your administrator that you're assigned the applicable [level of access to the keys](https://cloud.ibm.com/docs/key-protect?topic=key-protect-grant-access-keys) that you're unable to view. You also verify with your admin that the key belongs to the Key Protect instance that you're targeting.

 Why it’s happening 

The Key Protect instance contains a large number of keys, and the specific keys that you're looking for aren't returned by default when you call GET api/v2/keys to list keys.

 How to fix it 

Check with an admin to understand the total number of keys that are stored in the instance. By default, GET api/v2/keys returns the first 200 keys. If the Key Protect instance contains more than 200 keys, you need to use the [offset and limit parameters](https://cloud.ibm.com/docs/key-protect?topic=key-protect-view-keysretrieve-subset-keys-api) to list another subset of keys.

For example, if you want to list keys 201 - 210 that are available in a service instance, you use ../keys?offset=200&limit=10 to skip the first 200 keys.





 Unable to delete keys
Why am I not authorized to make key management service API request? 

When you call the Hyper Protect Crypto Services key management service API, the system returns a 401 Unauthorized error, and you're unable to make the API request.

  What’s happening 

You call any Hyper Protect Crypto Services key management service API method. You see an error response similar to the following JSON object:

{
"metadata":
{
"collectionType":"application/vnd.ibm.kms.error+json",
"collectionTotal":1
},
"resources":[
{
"errorMsg":"Unauthorized: The user does not have access to the specified resource"
}
]
}

  Why it’s happening 

You do not have the correct authorization to perform Hyper Protect Crypto Services actions in the specified service instance.

  How to fix it 

Verify with an administrator that you are assigned the correct platform and service access roles in the applicable service instance. For more information about roles, see [Roles and permissions](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-manage-accessroles).
* [As the account admin](https://cloud.ibm.com/docs/openshift?topic=openshift-ts-app-svc-bind-not-foundservice-bind-account-admin)



[Why does binding a service to a cluster results in service does not support service keys error?](https://cloud.ibm.com/docs/openshift?topic=openshift-ts-app-svc-keyts-app-svc-key)

[Why can't I install a Helm chart with updated configuration values?](https://cloud.ibm.com/docs/openshift?topic=openshift-ts-app-helm-installts-app-helm-install)

[Why does the oc debug command fail with a container is unable to start error?](https://cloud.ibm.com/docs/openshift?topic=openshift-ts-app-oc-debugts-app-oc-debug)





 Managed add-ons 

[Debugging cluster add-ons](https://cloud.ibm.com/docs/openshift?topic=openshift-debug_addonsdebug_addons)





 Load balancers 

[Why can't my app connect via a network load balancer (NLB) service?](https://cloud.ibm.com/docs/openshift?topic=openshift-cs_loadbalancer_failscs_loadbalancer_fails)

[Classic clusters: Why can't I deploy a load balancer?](https://cloud.ibm.com/docs/openshift?topic=openshift-cs_subnet_limit_lbcs_subnet_limit_lb)

[Classic clusters: Why does the master status have an ingress IP address for NLB error?]
kubectl get replicaset -n kube-system | grep alb

For example, you will see multiple replica sets listed as follows:

$ kubectl get rs -n kube-system | grep alb
NAME DESIRED CURRENT READY AGE
public-x-alb1-59db7dbfb4 2 0 0 6d4h
public-x-alb1-6486c45c96 2 2 0 3d17h
public-x-alb1-d856b94c4 0 0 0 17d
2. Delete all the replica sets except for the latest one.

kubectl delete replicaset -n kube-system <replicaset-name>

Based on the example shown, you need to delete the extra replica sets as follows:

kubectl delete replicaset -n kube-system public-x-alb1-59db7dbfb4
kubectl delete replicaset -n kube-system public-x-alb1-d856b94c4
3. Get the list of replica set again to ensure that there is only one remaining.

kubectl get replicaset -n kube-system | grep <ALB-name>

Referring to the example, the result will display as follows:

public-x-alb1-6486c45c96 2 2 2 3d17h







 Why are my console actions failing in my Chrome browser Version 77.0.3865.90 (Official Build) (64-bit)? 

 What’s happening 

The console has been working successfully, but requests have started to fail. For example, after I create an ordering service and open it I see the error: Unable to get system channel. If you associated an identity without administrative privilege on the ordering service node, you will not be able to view or manage ordering service details.

 Why it’s happening
Why can't I create or delete clusters or worker nodes? 

You can't perform infrastructure-related commands on your cluster, such as:



* Adding worker nodes in an existing cluster or when creating a new cluster.
* Removing worker nodes.
* Reloading or rebooting worker nodes.
* Resizing worker pools.
* Updating your cluster.
* Deleting your cluster.



Review the error messages in the following sections to troubleshoot infrastructure-related issues that are caused by [incorrect cluster permissions](https://cloud.ibm.com/docs/containers?topic=containers-cluster_infra_errorscs_credentials), [orphaned clusters in other infrastructure accounts](https://cloud.ibm.com/docs/containers?topic=containers-cluster_infra_errorsorphaned), or [a time-based one-time passcode (TOTP) on the account](https://cloud.ibm.com/docs/containers?topic=containers-cluster_infra_errorscs_totp).



 Unable to create or delete worker nodes due to permission errors 

 What’s happening 

You can't manage worker nodes for your cluster, and you receive an error message similar to one of the following examples.

We were unable to connect to your Softlayer account.
Creating a standard cluster requires that you have either a
Pay-As-You-Go account that is linked to an IBM Cloud infrastructure
account term or that you have used the Kubernetes service
CLI to set your Infrastructure API keys.

'Item' must be ordered with permission.

The worker node instance '<ID>' can't be found. Review '<provider>' infrastructure user permissions.

The worker node instance can't be found. Review '<provider>' infrastructure user permissions.

The worker node instance can't be identified. Review '<provider>' infrastructure user permissions.

The IAM token exchange request failed with the message: <message>
IAM token exchange request failed: <message>

The cluster could not be configured with the registry. Make sure that you have the Administrator role for Container Registry.

 Why it’s happening
Troubleshooting 

General problems with using IBM® Key Protect for IBM Cloud® might include providing the correct headers or credentials when you interact with the API. In many cases, you can recover from these problems by following a few easy steps.



 Unable to create keys 

When you access the Key Protect user interface, the option to add a key to the Key Protect instance is disabled.

 What’s happening 

From the IBM Cloud dashboard, you select your instance of the Key Protect service.

You can see a list of keys, but you're unable to select the option to add a key.

 Why it’s happening 

You do not have the correct authorization to perform Key Protect actions.

 How to fix it 

Verify with an administrator that you are assigned the correct role in the applicable Key Protect instance. For more information about roles, see [Roles and permissions](https://cloud.ibm.com/docs/key-protect?topic=key-protect-manage-accessmanage-access-roles).





 Unable to authenticate through the API 

When you call the Key Protect API, the system returns a 401 Unauthorized error, and you're unable to make the API request.

 What’s happening 

You call any Key Protect API method. You see an error response similar to the following JSON object:

{
"metadata": {
"collectionType": "application/vnd.ibm.kms.error+json",
"collectionTotal": 1
},
"resources": [
{
"errorMsg": "Unauthorized: The user does not have access to the specified resource"
}
]
}

 Why it’s happening 

You do not have the correct authorization to perform Key Protect actions in the specified service instance.

 How to fix it 

Verify with an administrator that you are assigned the correct platform and service access roles in the applicable Key Protect instance. For more information about roles, see [Roles and permissions](https://cloud.ibm.com/docs/key-protect?topic=key-protect-manage-accessmanage-access-roles).





 Unable to view or list keys
Why am I not seeing any network traffic? 

  What’s happening 

You don't see any network traffic.

  Why it’s happening 

There might be a redirect that is routing the traffic to the root domain.

  How to fix it 

If you’re not seeing traffic, and you’re using a CNAME, make sure that there are no redirects in place that are routing the traffic to the root domain.

Remember that some DNS propagations can take up to 48 hours to complete.
* [Location error messages](https://cloud.ibm.com/docs/satellite?topic=satellite-ts-locations-debug)
* Locations



* [Debugging the health of the location control plane](https://cloud.ibm.com/docs/satellite?topic=satellite-ts-locations-control-plane)
* [Why does the location subdomain not route traffic to control plane hosts?](https://cloud.ibm.com/docs/satellite?topic=satellite-ts-location-subdomain)
* [Why do I get an R0043 error after setting up Direct Link?](https://cloud.ibm.com/docs/satellite?topic=satellite-ts-dl-r0043)
* [Why is IBM Cloud unable to check my location's health?](https://cloud.ibm.com/docs/satellite?topic=satellite-ts-location-healthcheck)
* [Why can't I see a location that another user gave me access to?](https://cloud.ibm.com/docs/satellite?topic=satellite-ts-location-missing-location)



* Hosts



* [Debugging host health](https://cloud.ibm.com/docs/satellite?topic=satellite-ts-hosts-debug)
* [Logging in to a RHEL host machine to debug](https://cloud.ibm.com/docs/satellite?topic=satellite-ts-hosts-login)
* [Logging in to a RHCOS host machine to debug](https://cloud.ibm.com/docs/satellite?topic=satellite-ts-hosts-login-rhcos)
* [Why can't I SSH into my host machines?](https://cloud.ibm.com/docs/satellite?topic=satellite-ssh-login-denied)
* [Why aren't my hosts attaching to my location?](https://cloud.ibm.com/docs/satellite?topic=satellite-host-not-attaching)
Why am I getting an error “all SubConns are in TransientFailure” on the console? 

 What’s happening 

The following error is shown on the console: "All SubConns are in TransientFailutre."

 Why it’s happening 

An Out of Memory (OOM) situation can cause this error.

 How to fix it 

To resolve this problem, you need to resize the peers and CouchDB containers to add more memory, such as 2000 MB memory each. After resizing the memory, [delete the peer pods](https://cloud.ibm.com/docs/blockchain?topic=blockchain-ibp-v2-troubleshootingibp-troubleshooting-delete-peer) so they will be re-created. Then try the scenario again. See [Considerations when reallocating resources](https://cloud.ibm.com/docs/blockchain?topic=blockchain-ibp-console-govern-componentsibp-console-govern-components-reallocate-resources) for more information.





 Why is my first invoke of a smart contract returns the following error: no suitable peers available to initialize from? 

 What’s happening 

When I try to invoke a smart contract from the Fabric SDK, the transaction fails and returns the following error:

error: [Network]: _initializeInternalChannel: no suitable peers available to initialize from Failed to submit transaction: Error: no suitable peers available to initialize from

 Why it’s happening 

This error occurs if you have not configured an anchor peer on your channel. Unless you have manually updated your connection profile, your application needs to use the [Service Discovery](https://hyperledger-fabric.readthedocs.io/en/release-2.2/discovery-overview.html) feature to learn about the peers it needs to submit the transaction to.

 How to fix it 

Use the following steps to [configure anchor peers on your channel](https://cloud.ibm.com/docs/blockchain?topic=blockchain-ibp-console-governibp-console-govern-channels-anchor-peers).
* [R0059: Outbound traffic to IBM Cloud Container Registry is failing.](https://cloud.ibm.com/docs/satellite?topic=satellite-ts-locations-debugR0059)
* [R0060: Outbound traffic to LaunchDarkly is failing.](https://cloud.ibm.com/docs/satellite?topic=satellite-ts-locations-debugR0060)





 Locations 

[Debugging the health of the location control plane](https://cloud.ibm.com/docs/satellite?topic=satellite-ts-locations-control-planets-locations-control-plane)

[Why does the location subdomain not route traffic to control plane hosts?](https://cloud.ibm.com/docs/satellite?topic=satellite-ts-location-subdomaints-location-subdomain)

[Why do I get an R0043 error after setting up Direct Link?](https://cloud.ibm.com/docs/satellite?topic=satellite-ts-dl-r0043ts-dl-r0043)

[Why is IBM Cloud unable to check my location's health?](https://cloud.ibm.com/docs/satellite?topic=satellite-ts-location-healthcheckts-location-healthcheck)

[Why can't I see a location that another user gave me access to?](https://cloud.ibm.com/docs/satellite?topic=satellite-ts-location-missing-locationts-location-missing-location)



* [Target the regional endpoint](https://cloud.ibm.com/docs/satellite?topic=satellite-ts-location-missing-locationts-location-missing-location-target)
* [Ask the location owner to update your permissions](https://cloud.ibm.com/docs/satellite?topic=satellite-ts-location-missing-locationts-location-missing-location-perms)







 Hosts
With Spectrum Scale, trusted profiles are used to set up granular authorization for applications that are running in compute resources; therefore, you are not required to create or use service IDs or API keys for the creation of compute resources.

The required set of permissions to create the compute resources are already added as part of the automation code. For more information, see [Creating trusted profiles](https://cloud.ibm.com/docs/account?topic=account-create-trusted-profile).





 Why did the destroy process fail to remove resources? 

There are a few potential reasons why the destroy process failed to remove resources:



* The input parameter from the deployment value might have been changed for some reason and Schematics is looking for the existing value. Mismatch of values might cause the destroy action to fail.
* If other resources are manually created after deployment of the VPC and subnets through the offering and those resources are associated with the same VPC, the destroy action would fail.
* There might be issues on the IBM Cloud infrastructure side that cause the destroy action to fail.







 Why am I not able to see my data on the shared file system storage after stopping the storage nodes? 

The IBM Spectrum Scale file system data resides on instance storage. In general, data that is stored on instance storage is ephemeral so stopping the storage node results in data loss. However, instance storage data is not lost when an instance is rebooted. For more information, see [Lifecycle of instance storage](https://cloud.ibm.com/docs/vpc?topic=vpc-instance-storageinstance-storage-lifecycle).





 Why do I see xxxhiddenxxx in the deployment output log instead of a variable name that I provided? 

The solution provides useful information in the Terraform output log regarding the cluster and how to access cluster nodes (for example, SSH command, region, trusted profile ID, and so on).

The solution is integrated with the IBM Cloud catalog tile, and input that's provided there triggers Schematics to deploy the VPC resources that form the cluster.
Why am I receiving an error when I apply a change to my workspace? 

 What’s happening 

You are receiving the following error when you try to apply a change to your workspace: Apply failed due to "Error: Error Deleting Volume : The volume is still attached to an instance."

 Why it’s happening 

After reconfiguring the volume profile, capacity, or IOPS, your workspace needs to be cleaned up before you apply the change.

 How to fix it 

You need to destroy your existing resources and try applying the change again. Your data on the storage node will be deleted if you destroy your existing resources.





 Why do I get a node status of "Critical" after I attempt to create a cluster? 

You enter valid parameters and attempt to create a cluster. When you navigate to the [Red Hat® OpenShift® URL](https://cloud.ibm.com/kubernetes/clusters?platformType=openshift), you see the following status:

 What’s happening 



* Node status: Critical
* Add-on status: Warning
* Master status: Error



 Why it’s happening 

There might be multiple reasons for the status not being "Normal" for the cluster and its components, especially if you create a large cluster (for example, a cluster with greater than 50 worker nodes).

 How to fix it 

For more information on resolving this issue, see the Red Hat OpenShift on IBM Cloud troubleshooting information on [Debugging clusters](https://cloud.ibm.com/docs/openshift?topic=openshift-debug_clusters).
Why am I receiving a 401 Unauthorized Error code? 

Use the information in this topic to troubleshoot 401 error codes.

  What’s happening 

You receive a 401 error code for your load balancer.

  Why it’s happening 

HTTP 401 codes indicate that a client request has not been completed because it lacks valid authentication credentials for the requested resource.

  How to fix it 

Check the following access policies for your user:



*  The access policy for the load balancer resource type.
*  The access policy for the resource group.
Why can't I cancel the VLAN billing items? 

You receive an error message when you attempt to cancel a VLAN.

  What’s happening 

You attempt to cancel VLAN billing items by completing the steps in [Cancelling your billing items](https://cloud.ibm.com/docs/billing-usage?topic=billing-usage-cancel-billing-items). However, an error message displays that contains the following text:

Unable to cancel VLAN

  Why it’s happening 

This error message occurs when the VLAN is still associated with resources.

  How to fix it 

You must cancel the associated resources prior to attempting to cancel the associated VLANs. You can cancel premium VLANs when there are no references to the VLAN.
oc get pv

Example output:

local-pv-180cfc58 139Gi RWO Delete Available localfile 11m
local-pv-67f21982 139Gi RWO Delete Available localfile 12m
local-pv-80c5166 100Gi RWO Delete Available localblock 12m
local-pv-9b049705 139Gi RWO Delete Available localfile 12m
local-pv-b09e0279 100Gi RWO Delete Available localblock 12m
local-pv-f798e570 100Gi RWO Delete Available localblock 12m
5. Delete the local PVs.

oc delete pv <pv_name> <pv_name> <pv_name>
6. After deleting your PVCs and PVs, you also need to delete the storage volumes from your account. To locate and remove unused storage volumes in your account, see [Why am I still seeing charges for block storage devices after deleting my cluster?](https://cloud.ibm.com/docs/containers?topic=containers-ts_storage_clean_volume).







 Uninstalling the OpenShift Data Foundation add-on from the console 

To remove the OpenShift Data Foundation add-on from your cluster, complete the following steps.

If you want to remove all ODF resources and data from your cluster, [remove the CRDs](https://cloud.ibm.com/docs/openshift?topic=openshift-ocs-manage-deploymentocs-rm-crd) before uninstalling the add-on.



1. From the [Red Hat OpenShift clusters console](https://cloud.ibm.com/kubernetes/clusters?platformType=openshift), select the cluster for which you want to remove the OpenShift Data Foundation add-on.
2. On the cluster Overview page, scroll to your installed add-ons.
3. On the OpenShift Data Foundation card, click the Actions icon and then Uninstall.
Why can't I create email (SMTP_IBM) and SMS (SMS_IBM) destinations? 

Email (SMTP_IBM) and SMS (SMS_IBM) destinations are not seen as destination options.

  What’s happening 

While creating destinations, you are unable to see email (SMTP_IBM) and SMS (SMS_IBM) destination categories.

  Why it’s happening 

Destinations SMTP_IBM and SMS_IBM are provided out of the box by Event Notifications, and do need not be created.

  How to fix it 

These `out of the box' destinations are readily available to create subscriptions.
Why am I receiving a CKR_IBM_WK_NOT_INITIALIZED error when I use CLI or API? 

When you use CLI or API, you receive a CKR_IBM_WK_NOT_INITIALIZED error message.

  What’s happening 

You might got an error message similar to the following message:

> ibmcloud kp -i <service_instance_id> wrap <key_id> Wrapping key... FAILED Bad Request: rpc error: code = Unknown desc = GRPC Return Code: [0X434B525F484F53545F4D454D4F5259] GRPC Message: [Got error CKR_IBM_WK_NOT_INITIALIZED, from libep11.so in m_UnwrapKey]

  Why it’s happening 

When you ran the ibmcloud tke cryptounit-compare command, you didn't get a Valid confirmation on the CURRENT MASTER KEY REGISTER.

  How to fix it 

Make sure that the HSM

master keyis properly set.
Why did I get an error when adding a permitted network to a VPC? 

You tried to add a permitted network, but got an error that the VPC does not have Cloud Service Endpoint (CSE) enabled.

  What’s happening 

You are unable to add a permitted network to a VPC.

  Why it’s happening 

By default, only VPCs created on or after 10/09/2019 are enabled to use DNS Services.

  How to fix it 

For VPCs created as a permitted network before that date, review [Enabling Cloud Service Endpoints](https://cloud.ibm.com/support/pages/node/1086243) to contact IBM Support and get the VPC CSE enabled. You are then able to add this VPC for your DNS zone.