vania-janet/multiturn-rag-retrieval-data huggingface dataset:
Reference 18.9df02817.1600156471.bf3f7f1
</BODY>
</HTML>
* Where I can find the Akamai CNAME?

 Where I can find the Akamai CNAME? 

You can find the Akamai CNAME in the following ways:



* From the console, you can click into the CDN domain, and view the Akamai CNAME in Overview > Details.
* From the API, use the [list domain mapping by uniqueid](https://cloud.ibm.com/docs/CDN?topic=CDN-cdn-api-referencelistdomainmappingbyuniqueid) or the [list all domain mapping](https://cloud.ibm.com/docs/CDN?topic=CDN-cdn-api-referencelistdomainmappings) commands to get the Akamai CNAME.



* Why is the Akamai CNAME empty or shown as -?

 Why is the Akamai CNAME empty or shown as -? 

If you are using wildcard CDN mapping, there's no Akamai CNAME associated. If you just created the SAN HTTPS mapping, the Akamai CNAME can only be generated when the mapping is in the Domain validation required status. That's because Akamai can only generate the Akamai CNAME when the certificate is selected. Before the Domain validation required status is active, the - character is shown as the Akamai CNAME value.



DNS Services



* How do I create my own private DNS zone using DNS Services?

To create your own private DNS zone using DNS Services, take the following steps.



1. Create a VPC instance.
2. Create a DNS Services instance.
3. Add a DNS zone to the DNS Services instance.
4. Designate the VPC instance as a permitted network for the DNS zone.
5. Add a DNS Resource Record to the DNS zone.
6. Verify name resolution of the DNS Resource Record works from within the VPC.
Then, compare the claims of the user with the conditions set for the trusted profile. If the claims and the rules match, the user can apply the profile.





 How do I establish trust with the Kubernetes service in a trusted profile? 

In Kubernetes, a service account provides an identity for processes that run in a Pod, and namespaces provide a mechanism for isolating groups of resources within a single cluster. All Kubernetes clusters have a default namespace, and each namespace has a default account.

When you establish trust with the Kubernetes service in a trusted profile, you are required to enter information in the namespace and service account fields. You can enter default for both.

For more information, see [Using Trusted Profiles in your Kubernetes and OpenShift Clusters](https://www.ibm.com/cloud/blog/using-trusted-profiles-in-your-kubernetes-and-openshift-clusters) and [Kubernetes namespace](https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/).





 How can I view dynamic members of access groups? 

To view a list of dynamic members in an access group, go to Manage > Access (IAM) > Access groups in the IBM Cloud console. Select an access group and click Users. Dynamically added users are indicated by the type Dynamic. For more information, see [Viewing dynamic members of access groups](https://cloud.ibm.com/docs/account?topic=account-rules&interface=uiview-dynamic-users)





 How do I find inactive users, service IDs, trusted profiles, and API keys in my account? 

To view a list of the inactive identities in your account, go to Manage > Access (IAM) > Inactive identities. You might want to remove inactive identities if they are no longer needed. For more information, see [Identifying inactive identities](https://cloud.ibm.com/docs/account?topic=account-id-inactive-identities).
* Is there a way to specify which subnet I want to use for my device when I order it?

Yes, you can specify a certain subnet during the ordering process. When ordering a device, this option is available at the end of the order form. After selection of a private VLAN, a list of primary subnets that are routed to that VLAN is presented. You can select a subnet. The same process can be repeated for the public VLAN and subnet.

It is important to note that submission of the order does not guarantee that an IP address is available in the requested subnet. If no addresses are available, you are contacted to determine a course of action. For the best IBM Cloud experience, selection of a subnet is discouraged for typical uses.
* I ran out of IP addresses, now what?

We automatically assign primary subnets to make more IP addresses available to fulfill your compute purchases. If you are out of primary subnet space, more primary subnet space is added automatically for you when you order more devices without specifying a specific subnet.

If you are out of secondary subnet space, such as for local virtual machines, you can order more secondary subnets.
* How do I assign more IP addresses to a compute resource?

Purchase a secondary subnet. After you have a subnet that is routed to the IP address or VLAN you want, you'll want to refer to the specific compute documentation for how to set up your new IP addresses:



* [Bare Metal Server IP address assignment](https://cloud.ibm.com/docs/bare-metal?topic=bare-metal-bm-assigning-and-binding-ip-addressesbm-assign-ip-address)
* [Virtual Server Instance IP address assignment](https://cloud.ibm.com/docs/virtual-servers?topic=virtual-servers-assigning-server-ip-addressesassigning-server-ip-addresses)



* What does "Reserved for HSRP" when I look at a subnet's IP addresses mean?

In some locations, IBM Cloud has routers using a technique that is known as Hot Router Standby Protocol (HSRP).
What do I need to know to deploy an app in Code Engine? 

If you know how to deploy an app with Cloud Foundry, find what you need to know to deploy an app in Code Engine.



 Push code 

With Code Engine, you can build your code that is sourced in a Git repository or from a local system (CLI-only). Additionally, as with Cloud Foundry (cf push), you can build and deploy your app in a single step with both the CLI and the Code Engine console. For more information, see [How do I make my code run as a Code Engine application component?](https://cloud.ibm.com/docs/codeengine?topic=codeengine-application-workloadsdeploy-app-containerimage).





 Deployment context 

Cloud Foundry requires an Org and a Space to push your code into an application. All Cloud Foundry users, by default receive an Org and Space that are created for them. However, to add new ones, you must set up an Org and Space target similar to the following example.

ibmcloud cf create-org MyOrg
ibmcloud target -o <ORGNAME>
ibmcloud target -s dev

When you then deploy an app with Cloud Foundry, that Org and Space is targeted for the deployment.

Code Engine uses the concept of an IBM Cloud resource group and a Code Engine project.

ibmcloud target -g <RESOURCE-GROUP>
ibmcloud ce project create --name <PROJECTNAME>

These commands not only create a project, but "targets" it as well. All subsequent Code Engine commands run in the context of this project until a different project is targeted by using the project select command. For more information, see [Managing projects](https://cloud.ibm.com/docs/codeengine?topic=codeengine-manage-project).





 Logs 

Code Engine provides logs for apps, jobs, and builds to help you determine what happened when deployments do not run properly. You can find logs by running commands similar to the following examples.

ibmcloud ce app logs -n <APPNAME>
ibmcloud ce jobrun logs -n <JOBRUN-NAME>
You can view the key from the Azure Key Vault instance UI. Don't delete this key. Otherwise, you will not be able to create and assign managed keys to the Azure Key Vault instance. For more information, see [Why can't I assign keys in Azure Key Vault](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-troubleshoot-import-azure-key).





 What's next 



* To watch a use case video on using Unified Key Orchestrator to manage Azure Key Vault, see [Managing compliance of a Microsoft Office 365 environment using Hyper Protect Crypto Services with Unified Key Orchestrator](https://mediacenter.ibm.com/media/1_1pzzhrb8).
* To watch a use case video on using Unified Key Orchestrator to manage AWS Key Management Service, see [Securely managing AWS S3 encryption keys using Hyper Protect Crypto Services with Unified Key Orchestrator](https://mediacenter.ibm.com/media/1_1a6c6vub).
* To find out how to update the connection to an external keystore, check out [Editing connection to external keystores](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-edit-external-keystore-connection).
* To find out how to disconnect from an external keystore, check out [Disconnecting from external keystores](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-disconnect-external-keystores).
Where can I find them? 

In IBM Cloud, auditing events are generated automatically with the exception of some services that require additional configuration or a specific service plan. For more information about these services, see [Enabling Activity Tracker events](https://cloud.ibm.com/docs/atracker?topic=atracker-events-opt-in).

There are 2 ways by which you can access the auditing events in your account. For more information see [Collecting events.](https://cloud.ibm.com/docs/atracker?topic=atracker-events_collect)
Migration will not automatically de-provision your existing environment. If you do not want to maintain both accounts, you can de-provision it from IBM Cloud.
* Can I access my current IBM Cloud classic environment if I migrate to VPC?

Yes, you can establish a link to your existing IBM Cloud classic infrastructure when you migrate to VPC. The migration will not disrupt anything from your existing environment.
* Why is my migration process taking so long?

Migration can take a significant amount of time depending on the number of instances you are migrating, the size of your images, network performance, and the source location (data center) and the destination region (MZR). Wait until the process is complete and keep the VPC+ Cloud Migration tab open. When the migration process is complete, you will see a success message.



Networking Bandwidth Metering for Classic



* How is bandwidth metering priced?



* Public bandwidth egress (or bandwidth allocation) pricing depends on regions. To learn more, visit [Bandwidth packages from IBM Cloud](https://www.ibm.com/cloud/bandwidth) and contact a specialist.
* Public bandwidth usage over GB allocation is charged per GB.



* What IMS permissions do I need to view and change bandwidth allocations (or add and remove devices to and from bandwidth pools)?

The BANDWIDTH_MANAGE IMS infrastructure classic permission is the only required permission for bandwidth metering. After you allow this permission, you can complete the following actions:



* Create a bandwidth pool
* Move a device into or out of a pool
* Void a device’s move into a pool
* Cancel a pool



Certain actions pertaining to bandwidth pools, including visibility, might be constrained based on device-level permission. Reconcile your device-level permissions on specific devices to manage their bandwidth and membership in pools.
* Why don't I see the same number of devices as displayed on the devices count?

This issue might be due to permission restrictions because some users do not have permission to view specific devices. This issue might also be the result of devices that were reclaimed in the middle of the billing cycle, but are still contributing to the cost of the pool.
* What kind of devices generate bandwidth?

Compute devices use bandwidth.
For example, platform management roles and actions for account management services, see [Platform roles table](https://cloud.ibm.com/docs/account?topic=account-userrolesplatformroles).





 Who can remove users? 

The account owner can remove any users from the account, and any user with the following access can remove users from an account:



* An IAM policy for the User management account management service with the Administrator role assigned.
* If you have classic infrastructure in your account, then a user must have an IAM policy for the User management account management service with the Administrator role assigned, and be an ancestor of the user in the classic infrastructure user hierarchy with the Manage user classic infrastructure permission assigned.







 How do I require multifactor authentication for my account? 



1. In the IBM Cloud console, go to Manage > Access (IAM), and select Settings.
2. From the Authentication section, click Edit to select MFA for all users or non-federated users only.



For more information, see [Requiring MFA for users in your account](https://cloud.ibm.com/docs/account?topic=account-enablemfa).





 What is the difference between service and platform roles? 

Service and platform roles are two different types of roles:



* Platform roles are how you work with a service within an account such as creating instances, binding instances, and managing user's access to the service. For platform services these roles enable users to create resource groups and manage service IDs, for example. Platform roles are: administrator, editor, operator, and viewer.
* Service roles define the ability to perform actions on a service and are specific to every service such as performing API calls or accessing the UI. Service roles are: manager, writer, and reader. For more information about how these roles apply, refer to the specific service's documentation.







 How do I assign a user full access as an account administrator? 

To assign a user in your account full administrator access, go to Manage > Access (IAM) in the console, select the user's name, and assign the following access:
What if I see an infrastructure permission that I can't find in the console or [Infrastructure roles](https://cloud.ibm.com/docs/openshift?topic=openshift-classic-roles) table?
: Support Case permissions are managed in a different part of the console than infrastructure permissions. See step 8 of [Customizing infrastructure permissions](https://cloud.ibm.com/docs/openshift?topic=openshift-access-credsinfra_access).

Which infrastructure permissions do I assign?
: If your company's policies for permissions are strict, you might need to limit the suggested permissions for your cluster's use case. Otherwise, make sure that your infrastructure credentials for the region and resource group include all the required and suggested permissions.

For most use cases, [set up the API key](https://cloud.ibm.com/docs/openshift?topic=openshift-access-creds) for the region and resource group with the appropriate infrastructure permissions. If you need to use another infrastructure account that differs from your current account, [set up manual credentials](https://cloud.ibm.com/docs/openshift?topic=openshift-access-credscredentials).

How do I control what actions the users can perform?
: After infrastructure credentials are set up, you can control what actions your users can perform by assigning them [IBM Cloud IAM platform access roles](https://cloud.ibm.com/docs/openshift?topic=openshift-iam-platform-access-roles).

ibmcloud oc infra-permissions get --region REGION [--output json] [-q]

Minimum required permissions
: Viewer platform access role for the cluster in IBM Cloud Kubernetes Service

Command options:

--region REGION
: Required: Specify a region in Red Hat OpenShift on IBM Cloud: jp-osa, jp-tok, au-syd, eu-de, eu-gb, us-east, or us-south.

--output json
We reserve the right to block or otherwise make unusable any IP address on a primary subnet, which is not assigned during fulfillment of other products. It is recommended you use secondary subnets for all additional IP (application/service) address needs. Secondary subnets are much more flexible and are maintained on your account for as long as you own them.





 Is there a way to specify which subnet I want to use for my device when I order it? 

Yes, you can specify a certain subnet during the ordering process. When ordering a device, this option is available at the end of the order form. After selection of a private VLAN, a list of primary subnets that are routed to that VLAN is presented. You can select a subnet. The same process can be repeated for the public VLAN and subnet.

It is important to note that submission of the order does not guarantee that an IP address is available in the requested subnet. If no addresses are available, you are contacted to determine a course of action. For the best IBM Cloud experience, selection of a subnet is discouraged for typical uses.





 I ran out of IP addresses, now what? 

We automatically assign primary subnets to make more IP addresses available to fulfill your compute purchases. If you are out of primary subnet space, more primary subnet space is added automatically for you when you order more devices without specifying a specific subnet.

If you are out of secondary subnet space, such as for local virtual machines, you can order more secondary subnets.





 How do I assign more IP addresses to a compute resource? 

Purchase a secondary subnet. After you have a subnet that is routed to the IP address or VLAN you want, you'll want to refer to the specific compute documentation for how to set up your new IP addresses:



* [Bare Metal Server IP address assignment](https://cloud.ibm.com/docs/bare-metal?topic=bare-metal-bm-assigning-and-binding-ip-addressesbm-assign-ip-address)
* [Setting up the control plane from the CLI](https://cloud.ibm.com/docs/satellite?topic=satellite-setup-control-planecontrol-plane-cli)
* [I created a Satellite location, what's next?](https://cloud.ibm.com/docs/satellite?topic=satellite-setup-control-planelocation-control-plane-next)



[Sizing your Satellite location](https://cloud.ibm.com/docs/satellite?topic=satellite-location-sizinglocation-sizing)



* [Location size for non Red Hat CoreOS enabled location](https://cloud.ibm.com/docs/satellite?topic=satellite-location-sizingcontrol-plane-how-many-clusters-rhel)
* [Location size for Red Hat CoreOS (RHCOS) enabled location](https://cloud.ibm.com/docs/satellite?topic=satellite-location-sizingcontrol-plane-how-many-clusters-rhcos)
* [Location size for testing](https://cloud.ibm.com/docs/satellite?topic=satellite-location-sizingcontrol-plane-how-many-clusters-test)
* [FAQs about location sizing](https://cloud.ibm.com/docs/satellite?topic=satellite-location-sizinglocation-sizing-faq)



* [How do I know what size and number of hosts to attach to my cluster?](https://cloud.ibm.com/docs/satellite?topic=satellite-location-sizingcluster-size-number)
* [How do I know when to attach capacity to the Satellite location control plane?](https://cloud.ibm.com/docs/satellite?topic=satellite-location-sizingcontrol-plane-attach-capacity)
* [How do I scale up my Satellite location control plane to be highly available?](https://cloud.ibm.com/docs/satellite?topic=satellite-location-sizingcontrol-plane-scale-up)
For example, platform management roles and actions for account management services, see [Platform roles table](https://cloud.ibm.com/docs/account?topic=account-userrolesplatformroles).
* Who can remove users?

The account owner can remove any users from the account, and any user with the following access can remove users from an account:



* An IAM policy for the User management account management service with the Administrator role assigned.
* If you have classic infrastructure in your account, then a user must have an IAM policy for the User management account management service with the Administrator role assigned, and be an ancestor of the user in the classic infrastructure user hierarchy with the Manage user classic infrastructure permission assigned.



* How do I require multifactor authentication for my account?



1. In the IBM Cloud console, go to Manage > Access (IAM), and select Settings.
2. From the Authentication section, click Edit to select MFA for all users or non-federated users only.



For more information, see [Requiring MFA for users in your account](https://cloud.ibm.com/docs/account?topic=account-enablemfa).
* What is the difference between service and platform roles?

Service and platform roles are two different types of roles:



* Platform roles are how you work with a service within an account such as creating instances, binding instances, and managing user's access to the service. For platform services these roles enable users to create resource groups and manage service IDs, for example. Platform roles are: administrator, editor, operator, and viewer.
* Service roles define the ability to perform actions on a service and are specific to every service such as performing API calls or accessing the UI. Service roles are: manager, writer, and reader. For more information about how these roles apply, refer to the specific service's documentation.



* How do I assign a user full access as an account administrator?

To assign a user in your account full administrator access, go to Manage > Access (IAM) in the console, select the user's name, and assign the following access:
You must purchase licenses from IBM for any new combination of the four VMware components. The IBM Cloud for VMware Solutions console makes it straightforward for you to select the licensing option when you order your instance. Select I will provide, and enter your own license key only if you are performing an upgrade or migration of an existing BYOL cluster.
* For a specific VMware component, can you use BYOL for some licenses and buy the rest of licenses from IBM?

Yes. If you selected BYOL for a specific VMware component when you created a cluster, you have the following options:



* Continue to use an existing BYOL key.
* Purchase IBM-provided licensing for any new clusters.



Currently, only VMware vSphere Enterprise and VMware vSAN can be licensed per cluster.

You cannot mix and match BYOL and IBM-provided licensing for any VMware component within a cluster.
* Can you use BYOL when you create a cluster?

No. BYOL is no longer supported except for migrations or upgrades of existing BYOL clusters. Select I will provide, and enter your own license key only if you are performing an upgrade or migration of an existing BYOL cluster.
* How do you manage BYOL licenses?

You can manage your BYOL licenses by using the VMware vSphere Web Client.
* Does IBM provide support if you select the BYOL licensing option?

IBM Support continues to be your point of contact for any instance configuration concern. However, if the reported concern is determined to be for a BYOL VMware component, you are directed to VMware Support.
* How many ESXi servers can I add to my instance?

Your VMware vCenter Server® instance allows you to expand the default cluster to have up to 51 ESXi servers. Each of the non-default clusters can be expanded to have up to 59 ESXi servers. Since you can add up to 10 clusters to an instance, each deployed instance can have a maximum of 51 + 9x59 = 582 ESXi servers across all clusters.
* How many ESXi servers can I add to a cluster?

You can add a maximum of 51 ESXi servers to an initial cluster and a maximum of 59 ESXi servers to the added clusters.