vania-janet/multiturn-rag-retrieval-data huggingface dataset:
FAQs for flow log collectors 

You might encounter the following questions when you use IBM Cloud Flow Logs for VPC.



 Why don't I see any IBM Cloud Object Storage buckets as options when I create a flow log collector? 

The most likely reasons why you might not see your Object Storage buckets when you order a flow log collector:



* an IBM Cloud® Object Storage service instance isn't provisioned or a destination bucket to collect flow logs.
* An IAM authorization that grants the flow logs service permission to write flow logs to their bucket isn't configured. In this case, you receive prompts to create an Object Storage service instance and bucket, and add the required Identity and Access Management (IAM) authorization when you are creating a flow log collector. See [Creating flow log collectors](https://cloud.ibm.com/docs/vpc?topic=vpc-ordering-flow-log-collector) for information on how to remedy this issue.







 Why am I getting a 403 error when I provision a flow log collector? 

Likely causes of this error include:



* Your user is not authorized to access the specified target of the flow log collector.
* Your IBM Cloud® Object Storage bucket is missing the Identity Authorization Management (IAM) authorization to allow the flow logs service to write flow logs to your bucket.







 Can I create multiple flow log collectors? 

You can create multiple flow log collectors on the condition that they are on different targets. Keep in mind that flow log collectors with different target scopes might overlap. You cannot create multiple flow log collectors on one single target.





 Can I modify the IBM Cloud Object Storage location for a flow log collector? 

You cannot change the Object Storage bucket location for an existing flow log collector. You can delete the existing collector and create a new one with the Object Storage bucket location that you want to use.





 Are virtual appliances (IKS workers, ROKS, LBaaS, VPN gateway) included in the flow log collector data output? 

Flow Logs for VPC supports:



* IBM Cloud Kubernetes Service (IKS) workers
* RedHat OpenShift Kubernetes Service (ROKS)
* Load Balancer as a Service (LBaaS)
(https://cloud.ibm.com/docs/blockchain?topic=blockchain-ibp-v2-troubleshootingibp-v2-troubleshooting-unbound-persistent-volume-claim)
* [After I deploy a node, I'm seeing a message in my Kubernetes cluster on IBM Cloud reporting that the pod has hit a crash loop backoff. Is this an error?](https://cloud.ibm.com/docs/blockchain?topic=blockchain-ibp-v2-troubleshootingibp-v2-troubleshooting-crash-loop-backoff)





 Why is my IBM Blockchain Platform user interface unable to connect to cluster after deployment (Ingress issue)? 

 What’s happening 

When deploying a new IBM Cloud Kubernetes Service cluster and a new IBM Blockchain Platform environment, the IBM Blockchain Platform user interface is unable to connect to the provision components. The component status does not turn green even when the pod shows it is running fine from the IBM Cloud Kubernetes Service user interface or the command line interface (CLI).

You may also see errors connecting to the proxy URL such as the following reported by the IBM Blockchain Platform console:

"stitch_msg": "unable to get block: grpc web proxy's message: "Response closed without headers". This can happen when encountering CORS or untrusted TLS issues with the grpc web proxy.",

 Why it’s happening 

This problem can occur when the cluster is created after 01 December 2020 with version 1.18 or higher. Or, after you finish deploying the IBM Blockchain Platform while the Kubernetes user interface or CLI still displays the pod as running, but the orderer or the peer user interface does not appear online.

Before resolving this problem, you can check the application load balancer (ALB) replica set by running kubectl get replicasets -n kube-system and look for result similar to public-crbpt86avw0kfob73dpb3g-alb1-875bc4d57 2 2 2 24h.
(https://cloud.ibm.com/docs/containers?topic=containers-ts-ca-resizets-ca-resize)

[Why are my autoscaled worker pools unbalanced?](https://cloud.ibm.com/docs/containers?topic=containers-ts-ca-unbalancedts-ca-unbalanced)





 Cluster network 

[Why does DNS resolution fail when CoreDNS pods are restarted?](https://cloud.ibm.com/docs/containers?topic=containers-coredns_lameduckcoredns_lameduck)

[Why can't I establish VPN connectivity with the strongSwan Helm chart?](https://cloud.ibm.com/docs/containers?topic=containers-cs_vpn_failscs_vpn_fails)

[Why does my worker node show a NetworkUnavailable error?](https://cloud.ibm.com/docs/containers?topic=containers-ts-network-calico-nodets-network-calico-node)



* [Workarounds for calico-node](https://cloud.ibm.com/docs/containers?topic=containers-ts-network-calico-nodets-network-calico-node-work)



[I deleted a portable subnet and now my Classic cluster my Load Balancers are failing. How do I recover?](https://cloud.ibm.com/docs/containers?topic=containers-ts-network-subnet-recoverts-network-subnet-recover)

[Why am I running out of SNAT ports for egress connections from pods in my cluster?](https://cloud.ibm.com/docs/containers?topic=containers-ts-network-snat-125ts-network-snat-125)

[Why am I seeing egress connection failures from pods?](https://cloud.ibm.com/docs/containers?topic=containers-ts-network-egress-124ts-network-egress-124)
(https://cloud.ibm.com/docs/satellite?topic=satellite-ts-cluster-ocdebug)
* [Why can't I connect to my Red Hat OpenShift API Satellite link endpoint?](https://cloud.ibm.com/docs/satellite?topic=satellite-ts-link-endpoint-secure)



* Storage



* [Debugging storage](https://cloud.ibm.com/docs/satellite?topic=satellite-storage-must-gather)
* [Storage error messages](https://cloud.ibm.com/docs/satellite?topic=satellite-debug-storage)
* [Why is the namespace where my storage operator was deployed stuck in Terminating status?](https://cloud.ibm.com/docs/satellite?topic=satellite-storage-namespace-terminating)
* [Why am I getting an authentication failure when logging in to my Azure Disk or Azure File Satellite configuration?](https://cloud.ibm.com/docs/satellite?topic=satellite-ts-authentication-failure)
* [Why are my nodes failing to register using Azure File or Azure Disk storage templates?](https://cloud.ibm.com/docs/satellite?topic=satellite-ts-node-register-failure)





* [Site map](https://cloud.ibm.com/docs/satellite?topic=satellite-sitemap)



* [Go to product UI](https://cloud.ibm.com/satellite) [About this product](https://www.ibm.com/cloud/satellite)



Expand all | Collapse all

Collapse



1. [IBM Cloud Docs](https://cloud.ibm.com/docs)
2. [Satellite](https://cloud.ibm.com/docs/satellite)
3.



Search in collection

Search in collection





LangSwitcher dropdown

English

Close menu

DeutschEnglish
During cluster provisioning, all resource names are stored in a backend database. If a cluster provisioning attempt fails and you try to clean up resources from this failed attempt, it can take a while for the resource names to be cleaned up from the backend database. If during a subsequent reprovisioning attempt the same cluster prefix is used, it's possible that the new resources' names collide with the stale entries from the previous attempt.

 How to fix it 

After a failed deployment, clean up all resources. During a subsequent attempt, use a new cluster prefix to avoid any name collisions with resources from the previous failed attempt.





 Why does my cluster fail with an "API Marketplace" check error? 

During cluster provisioning, the deployment fails with the following errors:

 What’s happening 



* ERROR - IBM Marketplace API error: An error occurred processing the request
* ERROR - IBM Marketplace API error: Internal Server Error



The Spectrum Scale solution is based on a "Bring Your Own License" model. During cluster provisioning, there is a check to ensure that you are entitled to use the Spectrum Scale software.

 Why it’s happening 

To validate the software entitlement, the automation code uses a Marketplace API URL to check whether the provided IBM Customer Number (ICN) has entitlement to the Spectrum Scale software part numbers. It's possible that the Marketplace API service is experiencing a temporary issue and is not able to service the request.

 How to fix it 

Open an issue with IBM Cloud Support. This needs to be reported to the specific API team that provides this capability. Ask the IBM customer support team to pass this issue to the Marketplace API team.





 Why am I getting errors when I try to delete resources after a bare metal server fails to provision? 

 What’s happening 

After a bare metal server fails to provision and you try to delete resources from the bootstrap node, you are receiving the following error after you apply the mmcloudworkflows cluster destroy ibmcloud command: [ERROR] Error deleting security group target binding while deleting security group : The specified network interface is not attached to any other security groups..
Why am I denied permission to integrate an Event Notifications instance? 

You are denied permission while integrating an Event Notifications service instance with an IBM Cloud Service.

  What’s happening 

You get a 'Permission denied' message, while integrating Event Notifications service instance with IBM Cloud service.

  Why it’s happening 

Event Notifications integration APIs use Service to Service [authorization](https://cloud.ibm.com/docs/get-coding?topic=get-coding-grant-access).

  How to fix it 

Grant authorization between the IBM Cloud Service (for example: Security and Compliance Center) and Event Notifications service instance.

Manage --> Access (IAM) --> Authorization --> Create

Zoom

![Create authorization](https://cloud.ibm.com/docs-content/v1/content/4c9a07fe500838e5e55e71e73131ef20b44a6c66/event-notifications/images/en-ts-authorize.png)

Figure 1. Grant authorization
Why can't I migrate a Cloud Foundry service instance to a resource group? 

As a user in the IBM Cloud® account, you're having trouble when you try migrate a service instance to a resource group.

  What’s happening 

You can't migrate an eligible Cloud Foundry instance.

  Why it’s happening 

If you're unable to migrate an eligible instance, you might not have the correct access.

  How to fix it 

You must have specific access to migrate an instance. To check out what access you have, click Manage > Access (IAM) from the IBM Cloud console menu bar, and then click Users. Click your name and review your access policies for assigned IAM roles and Cloud Foundry access to view which orgs you have access to and your assigned Cloud Foundry roles.
Why am I receiving a no smart card readers found error when I use the Management Utilities? 

You get an error when you start the Smart Card Utility Program or the Trusted Key Entry application. The error can occur even when two Identiv SPR332 V2 smart card readers are attached to USB ports on your workstation.

  What’s happening 

You might receive the following error message:

Zoom

![No smart card readers found when you start the application](https://cloud.ibm.com/docs-content/v1/content/217f108cc44e2ce15fb692d4b57b4c628464e908/hs-crypto//images/no-smart-card-readers.gif)

Figure 2. No smart card readers found when you start the application.

  Why it’s happening 

The Identiv SPR332 smart card readers are not attached to your workstation, or the device driver for the smart card reader is not correctly installed on your workstation.

  How to fix it 

Attach two Identiv SPR332 smart card readers to the USB ports of your workstation. If you attach two Identiv SPR332 smart card readers to your workstation and still get this error, [install the device driver](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-prepare-management-utilitiesinstall-smart-card-reader-driver).
Why are all of my OSCO results labeled unable to perform? 

  What’s happening 

You created a connection between the OpenShift Compliance Operator and Security and Compliance Center but all of your returned results say Unable to perform.

  Why it’s happening 

This can happen when the OSCO is not properly installed or the cluster or workernode are not in a healthy state.

  How to fix it 

To resolve the issue, verify that the OSCO is properly installed and active.
Why can't I create or import keys? 

When you access the Hyper Protect Crypto Services user interface, you do not see the options to add keys or import keys.

  What’s happening 

From the IBM Cloud dashboard, you select your instance of the Hyper Protect Crypto Services service. You can see a list of keys, but you do not see options to add keys or import keys.

  Why it’s happening 

You do not have the correct authorization to perform Hyper Protect Crypto Services actions.

  How to fix it 

Verify with your administrator that you're assigned the correct role in the applicable resource group or service instance. For more information about roles, see [Roles and permissions](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-manage-accessroles).
[Debugging app deployments](https://cloud.ibm.com/docs/openshift?topic=openshift-debug_appsdebug_apps)

[Why does my build error due to image pull authentication?](https://cloud.ibm.com/docs/openshift?topic=openshift-ts-app-build-img-pullts-app-build-img-pull)

[Why can't I push or pull images from my local machine to the Docker registry?](https://cloud.ibm.com/docs/openshift?topic=openshift-ts-app-docker-localts-app-docker-local)

[Why does pushing to the internal registry time out?](https://cloud.ibm.com/docs/openshift?topic=openshift-ts-app-timeoutts-app-timeout)

[Why can't I push images to the internal registry from outside the VPC network?](https://cloud.ibm.com/docs/openshift?topic=openshift-ts-app-ocr-vpc-pushts-app-ocr-vpc-push)

[Why does pod not build with a permission denied error because of security context constraint (SCC)?](https://cloud.ibm.com/docs/openshift?topic=openshift-ts-app-sccts-app-scc)

[Why do images fail to pull from registry with ImagePullBackOff or authorization errors?](https://cloud.ibm.com/docs/openshift?topic=openshift-ts-app-image-pullts-app-image-pull)



* [Troubleshooting image pull secrets that use API keys](https://cloud.ibm.com/docs/openshift?topic=openshift-ts-app-image-pullimg-pull-api-key)



[Why don't my containers start?]
* [Why do my unassigned hosts have an Unresponsive status?](https://cloud.ibm.com/docs/satellite?topic=satellite-ts-host-unassigned-unknown)
* [Why is my host attach script triggering a state change in Terraform?](https://cloud.ibm.com/docs/satellite?topic=satellite-ts-host-terraform)



* Connectors



* [Debugging Connectors](https://cloud.ibm.com/docs/satellite?topic=satellite-debug-connector)
* [Why can't I reach my endpoint from IBM Cloud?](https://cloud.ibm.com/docs/satellite?topic=satellite-ts-connector-cannot-reach)
* [Why is my agent not showing up in the list of Active Agents?](https://cloud.ibm.com/docs/satellite?topic=satellite-ts-connector-not-in-list)
* [Why isn't my API key working?](https://cloud.ibm.com/docs/satellite?topic=satellite-ts-connector-api)
* [Why can't I see Connector logs?](https://cloud.ibm.com/docs/satellite?topic=satellite-ts-connector-delete-apikey)
* [Why is my Connector Agent unable to establish the tunnel with IBM Cloud?](https://cloud.ibm.com/docs/satellite?topic=satellite-ts-connector-tunnel)



* Clusters



* [Debugging clusters](https://cloud.ibm.com/docs/satellite?topic=satellite-ts-clusters-debug)
* [Why does the list of Kubernetes resources not show up or update after registering my cluster with Satellite Config?](https://cloud.ibm.com/docs/satellite?topic=satellite-satconfig-cluster-access-error)
* [Why can't I access the Red Hat OpenShift console without a VPN on the VPC?]
* [Tunnel cannot be established - Agent does not show up on list of Active Agents](https://cloud.ibm.com/docs/satellite?topic=satellite-debug-connectoragent-not-listed)
* [Tunnel is established - Agent container is listed in the Active Agents tab on the console](https://cloud.ibm.com/docs/satellite?topic=satellite-debug-connectoragent-listed)



[Why can't I reach my endpoint from IBM Cloud?](https://cloud.ibm.com/docs/satellite?topic=satellite-ts-connector-cannot-reachts-connector-cannot-reach)

[Why is my agent not showing up in the list of Active Agents?](https://cloud.ibm.com/docs/satellite?topic=satellite-ts-connector-not-in-listts-connector-not-in-list)

[Why isn't my API key working?](https://cloud.ibm.com/docs/satellite?topic=satellite-ts-connector-apits-connector-api)

[Why can't I see Connector logs?](https://cloud.ibm.com/docs/satellite?topic=satellite-ts-connector-delete-apikeyts-connector-delete-apikey)

[Why is my Connector Agent unable to establish the tunnel with IBM Cloud?](https://cloud.ibm.com/docs/satellite?topic=satellite-ts-connector-tunnelts-connector-tunnel)





 Clusters 

[Debugging clusters](https://cloud.ibm.com/docs/satellite?topic=satellite-ts-clusters-debugts-clusters-debug)

[Why does the list of Kubernetes resources not show up or update after registering my cluster with Satellite Config?](https://cloud.ibm.com/docs/satellite?topic=satellite-satconfig-cluster-access-errorsatconfig-cluster-access-error)

[Why can't I access the Red Hat OpenShift console without a VPN on the VPC?]
On the Toolchain's Overview page, on the Repositories card, locate the Git tool integration.
3. Click the menu to access the configuration options, select the authorized Git account for the Git integration owner, and click Save Integration.
4. Run your pipeline again.







 I tried to deploy to Kubernetes by using the Delivery Pipeline, why am I getting an error about an invalid object? 

The 1.0 pipeline base image includes kubectl v1.14.2. You might receive an error if the Kubernetes cluster that you are connecting to is running a more recent version of Kubernetes.

 What’s happening 

When I attempt to deploy to Kubernetes by using the Delivery Pipeline, I receive the following error message:

error:SchemaeError(io.k8s.api.core.v1.SecretProjection): invalid object doesn't have additional properties

 Why it’s happening 

Typically, this issue is caused when the version of the kubectl command in your pipeline base image is incompatible with the version of Kubernetes that is running in the cluster.

 How to fix it 

You can use any of the following methods to resolve this problem:



* Use a more recent pipeline base image version, which when created includes the currently released version of kubectl. For information about how to specify the latest image version, see [Specifying the image version](https://cloud.ibm.com/docs/ContinuousDelivery?topic=ContinuousDelivery-pipeline_versioned_base_imagesspecify_base_image_version).
* Make sure that your pipeline job is running the correct version of kubectl. For example, add the following lines to the beginning of your pipeline job to run kubectl v1.14.2:



curl -LO https://storage.googleapis.com/kubernetes-release/release/v1.14.2/bin/linux/amd64/kubectl
chmod +x ./kubectl
sudo mv ./kubectl /usr/local/bin/kubectl
Why are my resources tainted? 

When you view your resource list, there are resources with a tainted status.

  What’s happening 

A resource that you deployed is marked as tainted.

  Why it’s happening 

Terraform marks a resource that isn't fully functional as tainted. This might be due to a provisioning error, or because Terraform is unable to determine if the resources were successfully or partially created.

Terraform will delete and re-create the resource at the start of the next deployment. You can manually remove the taint status by deleting the resource and re-creating it.

  How to fix it 

For more information, see [Managing resources with Schematics](https://cloud.ibm.com/docs/schematics?topic=schematics-manage-lifecycle&interface=uiupdate-resources).
* What's the difference between the default local routing and global routing for Direct Link?

The local routing option is the default routing option. If your Direct Link is connected at the local PoP, it provides access to all data centers within that same market. In some markets, local routing is applicable for stand-alone PoP locations and direct links that are terminated at the data center.

With our standard Direct Link offering, you can send traffic between the data centers in your selected region. If you need access to other data centers outside the specified region, you must use global routing. For example, you might use global routing to share workloads between dispersed IBM Cloud resources, such Dallas to Ashburn, or Dallas to Frankfurt.
* Why does global routing exist for Direct Link?

Global routing prevents you from experiencing unexpected data costs when traversing outside of your data center's local market. It lowers costs, and, if you have a global presence, allows you to reach all regions easily. However, usually you require only a local bandwidth package.
* If I am connected to a Direct Link in a region, such as Dallas, can I access other regions in the US through Direct Link?

Yes, you are able to gain access to areas outside of your local market if you choose global routing. If this option is not selected, your Direct Link traffic is limited to the local market for the PoP or data center location you selected.
* Can I connect to any available region from a given Direct Link location?

Yes, if you order Direct Link with global routing.
* Can I restrict the regions that my Direct Link can reach?

No. IBM Cloud offers two options: (1) A local market only, or (2) all regions with global routing.
* Does IBM Support IPv6 over Direct Link?

Not for the BGP session. We must assign our /30 from IPv4, and we need the same in return from you.
* Does IBM do IPV6 on the private network?

No. IPv6 is public only.
* Does Direct Link support any type of Quality of Service (QoS)?

We are unable to support any QoS guarantees. QoS requires MPLS mapping between each of our service suppliers and IBM Cloud.
* [ST0046 error message](https://cloud.ibm.com/docs/satellite?topic=satellite-debug-storagest0046)
* [ST0047 error message](https://cloud.ibm.com/docs/satellite?topic=satellite-debug-storagest0047)
* [ST0048 error message](https://cloud.ibm.com/docs/satellite?topic=satellite-debug-storagest0048)
* [ST0049 error message](https://cloud.ibm.com/docs/satellite?topic=satellite-debug-storagest0049)
* [ST0050 error message](https://cloud.ibm.com/docs/satellite?topic=satellite-debug-storagest0050)
* [ST0051 error message](https://cloud.ibm.com/docs/satellite?topic=satellite-debug-storagest0051)
* [ST0052 error message](https://cloud.ibm.com/docs/satellite?topic=satellite-debug-storagest0052)





[Why is the namespace where my storage operator was deployed stuck in Terminating status?](https://cloud.ibm.com/docs/satellite?topic=satellite-storage-namespace-terminatingstorage-namespace-terminating)

[Why am I getting an authentication failure when logging in to my Azure Disk or Azure File Satellite configuration?](https://cloud.ibm.com/docs/satellite?topic=satellite-ts-authentication-failurets-authentication-failure)

[Why are my nodes failing to register using Azure File or Azure Disk storage templates?](https://cloud.ibm.com/docs/satellite?topic=satellite-ts-node-register-failurets-node-register-failure)
If you need more help, you can open a [support case](https://cloud.ibm.com/docs/get-support?topic=get-support-using-avatar).

For troubleshooting information about z/OS virtual server instances, see [IBM Wazi as a Service documentation](https://www.ibm.com/docs/en/wazi-aas/1.0.0?topic=vpc-troubleshooting-zos-virtual-server-instances).





 Why am I getting an error when I attempt to add more than 5 network interfaces for an existing virtual server instance? 

If the [x86 instance profile](https://cloud.ibm.com/docs/vpc?topic=vpc-profiles) that you used to provision your virtual server includes 17 or more vCPUs, you can now add more than 5 network interfaces. To take advantage of the ability to add more network interfaces to a virtual server that existed before the network interface limit increased, you must first stop a running virtual server and then start it again. For more information about multiple network interfaces, see [Managing network interfaces](https://cloud.ibm.com/docs/vpc?topic=vpc-using-instance-vnics).