vania-janet/multiturn-rag-retrieval-data huggingface dataset:
See [IBM Cloudant backup and recovery](https://cloud.ibm.com/docs/Cloudant?topic=Cloudant-ibm-cloudant-backup-and-recovery) documentation for recommended tooling. 







 Change management 

Change management includes tasks such as deployment, configuration, upgrades, patching, configuration changes, and deletion.



Table 2. Responsibilities for change management
The first column describes the task that the customer or IBM might be responsible for. The second column describes IBM responsibilities for that task. The third column describes your responsibilities as the customer for that task.

 Task IBM Responsibilities Your Responsibilities 

 Scaling IBM scales infrastructure to meet capacity selected by the customer. Customer chooses the provisioned throughput capacity for their IBM Cloudant instances. 
 Upgrades IBM handles all upgrades and patches of the IBM Cloudant service for the customer. 







 Security and regulation compliance 

Security and regulation compliance includes tasks such as security controls implementation and compliance certification.



Table 3. Responsibilities for security and regulation compliance
The first column describes the task that the customer or IBM might be responsible for. The second column describes IBM responsibilities for that task. The third column describes your responsibilities as the customer for that task.

 Task IBM Responsibilities Your Responsibilities 

 At-rest encryption By default, IBM encrypts all disks by using IBM Cloudant-managed encryption keys. If the customer wants bring-your-own-key (BYOK) encryption, then the customer is required to use Key Protect to store the customer-managed encryption key. The customer must select an appropriate key management service instance, and select a disk encryption key option during provisioning of an IBM Cloudant Dedicated Hardware plan instance. 
 Make data unreadable to IBM Cloudant Operators None, IBM does not render data unreadable to IBM Cloudant Operators. If you intend to store sensitive information in an IBM Cloudant database, you must use client-side encryption to render data unreadable to IBM Cloudant operators. For example, for PCI DSS compliance, you must encrypt the Primary Account Number (PAN) before sending a document that contains it to the database. 







 Disaster recovery 

Disaster recovery includes the following tasks:



* Provide dependencies on disaster recovery sites.
* Provision disaster recovery environments.
Revoking a credential that is tied to your instance URL 

In IBM Cloud®, you create a new service credential by using the IBM Cloud Dashboard or the IBM Cloud CLI. This step always produces a new username and password combination as your IBM® Cloudant® for IBM Cloud® legacy credentials. As expected, deleting the service credential effectively revokes access for any applications that use those credentials.

Revoking a credential that is tied to your instance only works if the instance is in a resource group. This tutorial is not for instances in Cloud Foundry. If you want to revoke a credential that is tied to your instance, you must first migrate the instance to a resource group. For more information, see [Migrating Cloud Foundry service instances and apps to a resource group](https://cloud.ibm.com/docs/account?topic=account-migrate) or [Resource Groups FAQ](https://cloud.ibm.com/docs/Cloudant?topic=Cloudant-faq-ibm-cloud-resource-groups).

Service credentials were not always handled like this though. Before 15 January 2021, creating a new service credential would always produce the same IBM Cloudant legacy credential username and password combination. Deleting the service credential did not revoke its access either. This practice was required to prevent breaking legacy applications that expected this behavior.

This tutorial is only applicable to IBM Cloudant instances provisioned before 15 January 2021 with IBM Cloudant legacy credentials enabled. Instances provisioned after this date already use the new format of legacy credentials.

You can inspect the username of your IBM Cloudant legacy credentials to verify which type you are currently using. The old style credential uses the format <RANDOM_ID>-bluemix for username, which matches your IBM Cloudant instance URL. The new style credentials use apikey-v2-<RANDOM_ID>.



 Objectives 



1. Update your applications to use the new style credentials in place of the instance URL style credentials.
2. Revoke access to the old style IBM Cloudant legacy credential.







 Step 1: Generating new IBM Cloudant legacy credentials
More Attributes 

The following attributes are available for segmenting one or more attributes as described in the previous reference. See the individual metrics for segmentation options in the following table:



Table 5. More attributes

 Attribute Name Description 

 Cloudant operation type ibm_cloudant_operation_type The Cloudant billable operation type. 
 Service instance ibm_service_instance The service instance segment identifies the instance that the metric is associated with. 
 Service instance name ibm_service_instance_name The service instance name provides the user-provided name of the service instance, which isn't necessarily a unique value that depends on the name that is provided by the user. 
 Resource group name ibm_resource_group_name The resource group name provides the user-provided name of the resource group where the service instance was created. 
 Resource group ibm_resource_group_id The unique ID of the resource group where the service instance was created. 









 IBM Cloudant Dashboard's dictionary 

The following table outlines the pre-defined dashboards that you can use to monitor IBM Cloudant metrics:



Table 6. Pre-defined dashboard

 Dashboard name Description 

 IBM Cloudant The default dashboard that opens when you launch IBM Cloud Monitoring web UI from your service instance UI. 



The Default dashboard cannot be changed.
* [Firing a trigger on a time-based schedule by using cron](https://cloud.ibm.com/docs/openwhisk?topic=openwhisk-pkg_alarmspkg_alarms_cron)



[Cloudant](https://cloud.ibm.com/docs/openwhisk?topic=openwhisk-pkg_cloudantpkg_cloudant)



* [Available entities for Cloudant](https://cloud.ibm.com/docs/openwhisk?topic=openwhisk-pkg_cloudantcloudant_available)
* [Binding the /whisk.system/cloudant package to your IBM Cloudant database.](https://cloud.ibm.com/docs/openwhisk?topic=openwhisk-pkg_cloudantcloudant_bind)
* [Working with documents in an IBM Cloudant database](https://cloud.ibm.com/docs/openwhisk?topic=openwhisk-pkg_cloudantcloudant_read)



* [Reading a document](https://cloud.ibm.com/docs/openwhisk?topic=openwhisk-pkg_cloudantcloudant_read_doc)
* [Writing a document to an IBM Cloudant database](https://cloud.ibm.com/docs/openwhisk?topic=openwhisk-pkg_cloudantcloudant_write)
* [Updating a document](https://cloud.ibm.com/docs/openwhisk?topic=openwhisk-pkg_cloudantcloudant_update)



* [Create a trigger by using the filter function](https://cloud.ibm.com/docs/openwhisk?topic=openwhisk-pkg_cloudantcloudant_trigger)
If you want to include a secondary network interface as part of an instance provisioned by auto scale, you must create that resource separately and attach it to the instances after they are provisioned.





 Why isn't my instance group scaling? 

Instance groups can fail to create instances for various reasons. You can use Activity Tracker to find specific details related to instance group events. For more information, see [Instance group events](https://cloud.ibm.com/docs/vpc?topic=vpc-at-eventsevents-compute-instance-group).





 How does the application port function if I set a port range for the network load balancer listener instead of a single port? 

If you set a port range for the network load balancer listener, then the instance group's application port will only be used for checking the health status of back-end members if you did not set a health check port for the pool.





 How do I know which load balancer offerings support auto scaling? 

Not all network load balancer offerings support integration with instance groups. Load balancers support auto scaling if the instance_groups_supported property of the [load balancer detail](https://cloud.ibm.com/apidocs/vpcget-load-balancer) is true.
* [Creating an IBM Cloud Network Load Balancer for VPC](https://cloud.ibm.com/docs/vpc?topic=vpc-nlb-ui-creating-network-load-balancer)
* [Creating an IBM Cloud Private Network Load Balancer with routing mode for VPC](https://cloud.ibm.com/docs/vpc?topic=vpc-nlb-vnf)
* [Integrating a load balancer with instance groups](https://cloud.ibm.com/docs/vpc?topic=vpc-lbaas-integration-with-instance-groups)
* [Working with health checks](https://cloud.ibm.com/docs/vpc?topic=vpc-alb-health-checks)



* Do I need to pre-provision resources for auto scaling?

During an auto-scaling event, auto scale dynamically allocates instances according to the instance template defined in the instance group. Instance templates do not support a secondary network interface. If you want to include a secondary network interface as part of an instance provisioned by auto scale, you must create that resource separately and attach it to the instances after they are provisioned.
* Why isn't my instance group scaling?

Instance groups can fail to create instances for various reasons. You can use Activity Tracker to find specific details related to instance group events. For more information, see [Instance group events](https://cloud.ibm.com/docs/vpc?topic=vpc-at-eventsevents-compute-instance-group).
* How does the application port function if I set a port range for the network load balancer listener instead of a single port?

If you set a port range for the network load balancer listener, then the instance group's application port will only be used for checking the health status of back-end members if you did not set a health check port for the pool.
* How do I know which load balancer offerings support auto scaling?

Not all network load balancer offerings support integration with instance groups.
IBM CIS supports a feature called "CNAME Flattening" which allows our users to add a CNAME as a root record. Our authoritative DNS servers enumerate the CNAME target's records and respond with those records instead of the CNAME itself, effectively hiding the fact that the user configured a CNAME at the root of the domain.
* What is the default health check timeout?

The default health check timeout for the Free Trial and Standard plans is 60 seconds.
* Can health checks be configured for non-HTTP/HTTPS traffic?

No, health checks can only be configured with HTTP/HTTPS.
* Can global load balancers be configured for non-HTTP/HTTPS traffic?

No, global load balancers can only be configured with HTTP/HTTPS.
* Does disabling all of my origins in an origin pool disable the entire pool itself?

Yes, if the origin pool is being used in a load balancer, the traffic is routed to the next highest priority pool or the fallback pool.
* I have an error in my Kubernetes Ingress, what do I do?

The hostname in a Kubernetes ingress must consist of lower case alphanumeric characters, - or ., and must start and end with an alphanumeric character. Using _ in the load balancer name, though permitted, can cause an ingress error in Kubernetes clusters. We recommend that you not use - in the load balancer name to avoid issues with Kubernetes clusters.
* I got a 502 error attempting to save an Edge Functions Action, what do I do?

Contact [IBM support](https://cloud.ibm.com/docs/cis?topic=cis-gettinghelp) and provide the script that you were attempting to save.
* How do I find my service instance ID?

To find your service instance ID, copy the CRN on the overview page. For example:
Troubleshooting for DevOps Insights 

General problems with using DevOps Insights might include toolchains, toolchain templates, or tool integration configuration issues. In many cases, you can recover from these problems by following a few easy steps.



  How do I find toolchains that support DevOps Insights? 

  What’s happening 

You can't find any toolchain templates that support DevOps Insights.

  Why it’s happening 

Toolchains with DevOps Insights appear in the catalog when the correct locations are selected.

Update your current location by completing the following steps:

  How to fix it 



1.  From the IBM Cloud console, click the menu icon ![hamburger icon](https://cloud.ibm.com/docs-content/v1/content/562806c0b18119f4d21cb66f5ae6d051634b4a16/ContinuousDelivery/images/icon_hamburger.svg) and select DevOps.
2.  From the Location menu, select your location.
3.  Click Create a Toolchain to return to the toolchain templates page.
For more information, see [provider version](https://cloud.ibm.com/docs/ibm-cloud-provider-for-terraform?topic=ibm-cloud-provider-for-terraform-setup_cliinstall_provider).





 How do I generate IAM access token, if client ID bx is used? 

To create IAM access token, use export IBMCLOUD_API_KEY=<ibmcloud_api_key> and run the command.

curl -X POST "https://iam.cloud.ibm.com/identity/token" -H "Content-Type: application/x-www-form-urlencoded" -d "grant_type=urn:ibm:params:oauth:grant-type:apikey&apikey=$IBMCLOUD_API_KEY" -u bx:bx.

For more information, see [IAM access token](https://cloud.ibm.com/apidocs/iam-identity-token-apigettoken-password) and [Create API key](https://cloud.ibm.com/apidocs/iam-identity-token-apicreate-api-key). You can set the environment values export ACCESS_TOKEN=<access_token>, and export REFRESH_TOKEN=<refresh_token>.





 How do I rectify 'Failed to clone Git repository, might not find remote ref refs/heads/master (most likely invalid branch name is passed)'? 

Usage of the branch https://github.com/guruprasad0110/tf_cloudless_sleepy_13/ repository, after 1st October 2020, can see this error message.

If the repository is created after 1 October 2020, the main branch syntax needs to be https://github.com/username/reponame/tree/main. For example, https://github.com/guruprasad0110/tf_cloudless_sleepy_13/tree/main





 Can I increase the timeout for null-exec and remote-exec resource?
FAQs 



 How do I find the flavor and parameters to configure a virtual service instance in IBM Cloud? 

The Terraform on IBM Cloud ibm_compute_vm_instance resource includes optional and mandatory configuration parameters. To find an overview of how you can configure your virtual server, use the IBM Cloud CLI.



1. Install the [IBM Cloud CLI](https://cloud.ibm.com/docs/cli?topic=cli-install-ibmcloud-cli).
2. List supported configuration options for virtual servers in IBM Cloud. The listed options include available data centers, machine flavors, CPU, memory, operating systems, local disk and SAN disk sizes, and network interface controllers (NIC). IBM Cloud offers multiple virtual server offerings that each come with a specific configuration. The configuration of an offering is optimized for a specific workload need, such as high performance, or real-time analytics. For more information, see [Public Virtual Servers](https://cloud.ibm.com/docs/virtual-servers?topic=virtual-servers-about-public-virtual-servers).

ibmcloud sl vs options







 How long does it take for my resources to provision and delete? 

Most IBM Cloud platform resources provision within a few seconds. Infrastructure resources, including Bare Metal servers, virtual servers, and IBM Cloud Load Balancers can take longer. When you run the terraform apply or terraform destroy command, the command might take a few minutes to complete and you are not able to enter a different command during that time. The terraform apply command returns when your resources are fully provisioned, whereas the terraform destroy command might return before your resources are deleted from your IBM Cloud platform or infrastructure portfolio.

Use the terraform apply and terraform destroy times in the following table as a reference for when you can expect your commands to complete.

If the Terraform on IBM Cloud operation does not complete due to a timeout, wait for the resource state change to complete and retry the operation.



Overview of Terraform apply and destroy command completion times

 Resource terraform apply return time terraform destroy return time 

 IBM Cloud platform resources A few seconds A few seconds 
 Virtual servers A few seconds A few seconds
For more information, see [provider version](https://cloud.ibm.com/docs/ibm-cloud-provider-for-terraform?topic=ibm-cloud-provider-for-terraform-setup_cliinstall_provider).
* How do I generate IAM access token, if client ID bx is used?

To create IAM access token, use export IBMCLOUD_API_KEY=<ibmcloud_api_key> and run the command.

curl -X POST "https://iam.cloud.ibm.com/identity/token" -H "Content-Type: application/x-www-form-urlencoded" -d "grant_type=urn:ibm:params:oauth:grant-type:apikey&apikey=$IBMCLOUD_API_KEY" -u bx:bx.

For more information, see [IAM access token](https://cloud.ibm.com/apidocs/iam-identity-token-apigettoken-password) and [Create API key](https://cloud.ibm.com/apidocs/iam-identity-token-apicreate-api-key). You can set the environment values export ACCESS_TOKEN=<access_token>, and export REFRESH_TOKEN=<refresh_token>.
* How do I rectify 'Failed to clone Git repository, might not find remote ref refs/heads/master (most likely invalid branch name is passed)'?

Usage of the branch https://github.com/guruprasad0110/tf_cloudless_sleepy_13/ repository, after 1st October 2020, can see this error message.

If the repository is created after 1 October 2020, the main branch syntax needs to be https://github.com/username/reponame/tree/main. For example, https://github.com/guruprasad0110/tf_cloudless_sleepy_13/tree/main
* Can I increase the timeout for null-exec and remote-exec resource?
OIDC discovery document 

OpenID Connect supports a discovery protocol that contains information that you can use to configure your apps and authenticate users such as tokens and public keys.



 Calling the endpoint 

You can obtain the discovery document and the information that it contains by calling the .well-known endpoint.



 Where can I find the endpoint? 

You can find the endpoint at the following URL:

https://<region>.appid.cloud.ibm.com/oauth/v4/<tenantID>/.well-known/openid-configuration

Learn more about the [available regions](https://cloud.ibm.com/docs/appid?topic=appid-regions-endpoints).





 How do I call the endpoint? 

To call the endpoint, you must have a valid tenant ID and you must hardcode the discovery document URI into your application code.

Check out the following sample cURL request:

curl -X GET "https://<region>.appid.cloud.ibm.com/oauth/v4/<tenantID>/.well-known/openid-configuration" -H "accept: application/json"





 What can I expect the call to return? 

The response that is returned looks similar to the following example:

{
"issuer": "https://us-south.appid.cloud.ibm.com/oauth/v4/39a37f57-a227-4bfe-a044-93b6e6060b61",
"authorization_endpoint": "https://us-south.appid.cloud.ibm.com/oauth/v4/39a37f57-a227-4bfe-a044-93b6e6060b61/authorization",
"token_endpoint": "https://us-south.appid.cloud.ibm.com/oauth/v4/39a37f57-a227-4bfe-a044-93b6e6060b61/token",
(https://cloud.ibm.com/docs/schematics?topic=schematics-workspaces-faqworkspace-import-ibmcli)
* [How can I download Job files?](https://cloud.ibm.com/docs/schematics?topic=schematics-workspaces-faqdownload-jobfile)
* [How do I set the TF_CLI_ARGS environment variable?](https://cloud.ibm.com/docs/schematics?topic=schematics-workspaces-faqterraformcli-arguments-faq)
* [Can I use private Git repositories?](https://cloud.ibm.com/docs/schematics?topic=schematics-workspaces-faqdownload-module-netrc-faq)
* [Can I edit all the variables in a workspace?](https://cloud.ibm.com/docs/schematics?topic=schematics-workspaces-faqedit-variables-faq)
* [How do I import keys when importing KMS resources?](https://cloud.ibm.com/docs/schematics?topic=schematics-workspaces-faqkmskey-value-faq)
* [Can you enable the TRACE to help DEBUG Schematics API while running workspace list command?](https://cloud.ibm.com/docs/schematics?topic=schematics-workspaces-faqtraces-api-faq)
* [How do I resolve errors listing workspaces](https://cloud.ibm.com/docs/schematics?topic=schematics-workspaces-faqbadstatus-workspace-faq)
* [How can I use (IBM) GitLab repositories?](https://cloud.ibm.com/docs/schematics?topic=schematics-workspaces-faqgitlab-workspace-faq)
FAQs 



  Where can I find a list of my apps? 

The [Resource list](https://cloud.ibm.com/resources) in the [IBM Cloud console](https://cloud.ibm.com) provides summary information for the apps that you created. The Apps section in the Resource list contains all apps that you created.





  How do I delete apps? 

To delete an app that you created, complete these steps:



1.  From the [IBM Cloud console](https://cloud.ibm.com), click the Menu icon ![Menu icon](https://cloud.ibm.com/docs-content/v1/content/efbf7b33e3aca029f69f9244bced9dd4d8acb848/icons/icon_hamburger.svg), and select Resource list.
2.  Click the Actions icon ![Actions icon](https://cloud.ibm.com/docs-content/v1/content/efbf7b33e3aca029f69f9244bced9dd4d8acb848/icons/action-menu-icon.svg) for the app that you want to delete, and click Delete.







  What are toolchains? 

A toolchain is a set of tool integrations that support continuous development, deployment, monitoring, operations, and more. For more information about toolchains, see [Creating toolchains](https://cloud.ibm.com/docs/ContinuousDelivery?topic=ContinuousDelivery-toolchains_getting_started).





  How do I extract a toolchain template from an existing toolchain? 

You can run the [toolchain-to-template script](https://github.com/open-toolchain/toolchain-to-templatesetup) to extract a toolchain template from an existing toolchain. This script uses a toolchain URL and generates an open toolchain (OTC) template in the current folder. When the script runs, it creates a clone of your original toolchain.
[Setting up API key credentials so the service can access the infrastructure and other cloud services](https://cloud.ibm.com/docs/openshift?topic=openshift-access-credsaccess-creds)



* [Setting up the API key for most use cases](https://cloud.ibm.com/docs/openshift?topic=openshift-access-credsapi_key_most_cases)
* [Understanding other options than the API key](https://cloud.ibm.com/docs/openshift?topic=openshift-access-credsapi_key_other)
* [Understanding how the API key works](https://cloud.ibm.com/docs/openshift?topic=openshift-access-credsapi_key_about)



* [What is the API key used for?](https://cloud.ibm.com/docs/openshift?topic=openshift-access-credsapi-key-uses)
* [How many API keys do I need?](https://cloud.ibm.com/docs/openshift?topic=openshift-access-credshow-many-apikeys)
* [How do I set up the API key?](https://cloud.ibm.com/docs/openshift?topic=openshift-access-credshowto-api-key-setup)
* [What permissions does the user who sets the API key need? How do I give the user these permissions?](https://cloud.ibm.com/docs/openshift?topic=openshift-access-credswhat-perms-api-key)
* [How do I limit which commands a user can run?](https://cloud.ibm.com/docs/openshift?topic=openshift-access-credslimit-apikey-scopes)
* [What if I don't want to assign the API key owner or credentials owner the Super User infrastructure role?]
How can I view classic infrastructure permissions for other users? 

You need specific access to view the classic infrastructure permissions for another user.

Account owners have full access to the IBM Cloud® account, so they do not see the permissions for themselves. Individual users can't edit their own permissions, so they see permissions on their classic infrastructure page, but can't edit them. You must have specific access to view and edit permissions for another user in the account.

  What’s happening 

You see a message that states that you can't view another user's classic infrastructure permissions.

  Why it’s happening 

You might not be assigned the correct access.

  How to fix it 

You must ask the account owner to be assigned the permission to manage users, but you must also be an ancestor of the user within the classic infrastructure user hierarchy to view and manage another user's permissions.