vania-janet/multiturn-rag-retrieval-data huggingface dataset:
For more information about types of access policies, see [Pick the correct access policy and role for your users](https://cloud.ibm.com/docs/openshift?topic=openshift-access-overviewaccess_roles).

The access policies that you assign users vary depending on what you want your users to be able to do. You can find more information about what roles authorize which types of actions on the [User access reference page](https://cloud.ibm.com/docs/openshift?topic=openshift-access_reference) or in the following table's links. For steps to assign policies, see [Granting users access to your cluster through IBM Cloud IAM](https://cloud.ibm.com/docs/openshift?topic=openshift-userschecking-perms).



Types of roles you might assign to meet different use cases.

 Use case Example roles and scope 

 App auditor [Viewer platform access role for a cluster, region, or resource group](https://cloud.ibm.com/docs/openshift?topic=openshift-iam-platform-access-roles), [Reader service access role for a cluster, region, or resource group](https://cloud.ibm.com/docs/openshift?topic=openshift-iam-service-access-roles). 
 App developers [Editor platform access role for a cluster](https://cloud.ibm.com/docs/openshift?topic=openshift-iam-platform-access-roles), [Writer service access role scoped to a namespace](https://cloud.ibm.com/docs/openshift?topic=openshift-iam-service-access-roles), [Cloud Foundry developer space role](https://cloud.ibm.com/docs/openshift?topic=openshift-cloud-foundry-roles). 
 Billing [Viewer platform access role for a cluster, region, or resource group](https://cloud.ibm.com/docs/openshift?topic=openshift-iam-platform-access-roles).
[EP11 HSM](https://cloud.ibm.com/docs-content/v1/content/217f108cc44e2ce15fb692d4b57b4c628464e908/hs-crypto//images/PKCS11.svg)

Figure 8. Cryptographic operations with Enterprise PKCS #11





 What's next 



* You can use Hyper Protect Crypto Services as the root key provider for other IBM Cloud services. For more information about integrating Hyper Protect Crypto Services, check out [Integrating services](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-integrate-services).
* Use Hyper Protect Crypto Services to provide multicloud key orchestration capability for your encryption keys. To find out more about programmatically managing your keys, check out the [Unified Key Orchestrator API reference doc](https://cloud.ibm.com/apidocs/uko).
* To find out more about programmatically managing your KMS keys, check out the [Hyper Protect Crypto Services key management service API reference doc](https://cloud.ibm.com/apidocs/hs-crypto).
* To find out more about encrypting your data by using the cloud HSM function of Hyper Protect Crypto Services, check out the

[PKCS #11 API reference](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-pkcs11-api-ref) and [GREP11 API reference doc](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-grep11-api-ref).
* [Step five: Log in to the console](https://cloud.ibm.com/docs/blockchain?topic=blockchain-deploy-ocp-rhmdeploy-ocp-rhm-log-in)
* [Removing your deployment](https://cloud.ibm.com/docs/blockchain?topic=blockchain-deploy-ocp-rhmconsole-deploy-ocp-rhm-remove-deployment)
* [Next steps](https://cloud.ibm.com/docs/blockchain?topic=blockchain-deploy-ocp-rhmconsole-deploy-ocp-rhm-next-steps)
* [Support](https://cloud.ibm.com/docs/blockchain?topic=blockchain-deploy-ocp-rhmdeploy-ocp-rhm-support)
* [Create a project for your IBM Blockchain Platform deployment](https://cloud.ibm.com/docs/blockchain?topic=blockchain-deploy-ocp-rhmdeploy-ocp-rhm-project)









 About IBM Blockchain Platform for IBM Cloud 

[About IBM Blockchain Platform for IBM Cloud](https://cloud.ibm.com/docs/blockchain?topic=blockchain-ibp-console-overviewibp-console-overview)



* [What IBM Blockchain Platform offers](https://cloud.ibm.com/docs/blockchain?topic=blockchain-ibp-console-overviewibp-console-overview-capabilities)
* [Supported IBM Cloud configuration](https://cloud.ibm.com/docs/blockchain?topic=blockchain-ibp-console-overviewibp-console-overview-supported-cfg)



* [Fabric Component Support](https://cloud.ibm.com/docs/blockchain?topic=blockchain-ibp-console-overviewfabric-component-support)
* [What is the expected behavior when loading the CNAME or hostname on your browser for the supported protocols?](https://cloud.ibm.com/docs/CDN?topic=CDN-troubleshoot-cdn-loading-cname-hostname)



* [Getting help and support for CDN](https://cloud.ibm.com/docs/CDN?topic=CDN-gettinghelp)



* [Go to product UI](https://cloud.ibm.com/cdn) [About this product](https://www.ibm.com/cloud/cdn)



Expand all | Collapse all

Collapse



1. [IBM Cloud Docs](https://cloud.ibm.com/docs)
2. [Content Delivery Network (CDN)](https://cloud.ibm.com/docs/CDN)
3.



Search in collection

Search in collection





LangSwitcher dropdown

English

Close menu

DeutschEnglish

EspañolFrançaisItaliano日本語한국어Português/Brasil简体中文繁體中文





 FAQs for HTTPS * Last updated 2020-04-13 

Have a question about CDN and HTTPS? Review these frequently asked questions, which provide answers to common inquiries.



 For my CDN, what is the difference between HTTPS with a Wildcard certificate and HTTPS with SAN certificate? 

With Wildcard certificates, all customers use the same certificate that is deployed on the vendor's CDN networks. The CNAME, including the IBM suffix .cdn.appdomain.cloud., must be used for access to the service. For example, https://www.example-cname.cdn.appdomain.cloud

In the case of SAN certificate, multiple customer domains share a single SAN certificate by adding their domain names into the SAN entries. The service can then be accesses using the hostname, for instance https://www.example.com





 How is Domain Validation with redirect accomplished? 

It depends on your server.
As the issue gets resolved, the content team provides status updates as a comment on the issue.





 Submitting a comment by using the feedback form 



 Leaving feedback in the docs 

When you are reading docs, you can also leave a comment through our feedback form.



1. Click the Feedback button.
2. Enter a description about what you want to share with the IBM Cloud docs team.
3. Rate your experience on a scale from one to five stars, with five stars representing a great experience.
4. Click Submit.







 Leaving feedback in the console 

When you are completing a task within the console, you can find a feedback form from the console menu bar to submit a rave review, a suggestion, or identify an error.



1. Click the Help icon ![Help icon](https://cloud.ibm.com/docs-content/v1/content/adcecdbe4e86955f88aac7f3c1e7ec3ff44992ef/icons/help.svg) > Send feedback from the console menu bar.
2. Enter a description about what you want to share with the IBM Cloud team.
3. Rate your experience on a scale from one to five stars, with five stars representing a great experience.
4. Click Submit.









 Submitting ideas for product improvements 

To submit ideas for IBM Cloud and services improvements, go to [IBM Cloud Ideas](https://ibmcloud.ideas.ibm.com/). For more information on how to use the idea portal, see [Think, write, submit: New ideas portal for IBM Cloud](https://www.ibm.com/blogs/bluemix/2016/10/think-write-submit/).
* [Integrations operated in partnership](https://cloud.ibm.com/docs/containers?topic=containers-ibm-3rd-party-integrationsopen-source-partners)
* [Managed add-ons](https://cloud.ibm.com/docs/containers?topic=containers-ibm-3rd-party-integrationscluster-add-ons)
* [Other third-party integrations](https://cloud.ibm.com/docs/containers?topic=containers-ibm-3rd-party-integrationskube-community-helm)
* [Extending Kubernetes API and software with CRDs and Operators](https://cloud.ibm.com/docs/containers?topic=containers-ibm-3rd-party-integrationskube-crd-operators)





[Adding services by using managed add-ons](https://cloud.ibm.com/docs/containers?topic=containers-managed-addonsmanaged-addons)



* [Adding managed add-ons](https://cloud.ibm.com/docs/containers?topic=containers-managed-addonsadding-managed-add-ons)
* [Updating managed add-ons](https://cloud.ibm.com/docs/containers?topic=containers-managed-addonsupdating-managed-add-ons)
* [Reviewing add-on states and statuses](https://cloud.ibm.com/docs/containers?topic=containers-managed-addonsdebug_addons_review)



[Adding services by using Helm charts](https://cloud.ibm.com/docs/containers?topic=containers-helmhelm)



* [About Helm in IBM Cloud Kubernetes Service](https://cloud.ibm.com/docs/containers?topic=containers-helmabout-helm)



* [What is Helm and how do I use it?](https://cloud.ibm.com/docs/containers?topic=containers-helmwhat-is-helm)
* [What Helm charts are supported in IBM Cloud Kubernetes Service?]
What's new in Terraform on IBM Cloud? 

Learn about the latest changes to the Terraform on IBM Cloud service that are grouped by month.

For the information about releases that occurred after 28 September 2021, see [Release notes](https://cloud.ibm.com/docs/ibm-cloud-provider-for-terraform?topic=ibm-cloud-provider-for-terraform-release-notes).



 September 2021 



What's new in September

 Date Description 

 28 September 2021 <br><br> * For the latest Resources, Data sources, Enhancements, and Bug fixes. see [Updates and fixes in v1.33.0](https://github.com/IBM-Cloud/terraform-provider-ibm/releases/tag/v1.33.0)<br><br><br> 
 20 September 2021 <br><br> * For the latest Resources, Data sources, Enhancements, and Bug fixes. see [Updates and fixes in v1.32.1](https://github.com/IBM-Cloud/terraform-provider-ibm/releases/tag/v1.32.1)<br><br><br> 
 14 September 2021 <br><br> * For the latest Resources, Data sources, Enhancements, and Bug fixes. see [Updates and fixes in v1.32.1](https://github.com/IBM-Cloud/terraform-provider-ibm/releases/tag/v1.32.0)<br><br><br> 
 7 September 2021 <br><br> * For the latest Resources, Data sources, Enhancements, and Bug fixes. see [Updates and fixes in v1.32.1](https://github.com/IBM-Cloud/terraform-provider-ibm/releases/tag/v1.31.0)<br><br><br> 
 1 September 2021 <br><br> * For the latest Resources, Data sources, Enhancements, and Bug fixes.
You can find more parameters for this command in the [Key Protect CLI reference](https://cloud.ibm.com/docs/key-protect?topic=key-protect-cli-plugin-key-protect-cli-referencekp-import-token-show).







 What's next 



* To find out more about using an import token to securely bring encryption keys to IBM Cloud, check out [Importing root keys](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-import-root-keys).
* For a guided tutorial on using import tokens in Hyper Protect Crypto Services, see [Tutorial: Creating and importing encryption keys](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-tutorial-import-keys).
Secrets Manager docs 

Explore recommended content and resources to help you get started with IBM Cloud&reg; Secrets Manager.

 Developer tools 

[API & SDK reference](https://cloud.ibm.com/apidocs/secrets-manager)[CLI reference](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-cli-plugin-secrets-manager-cli)

 Recommended content 

[What is a secret? Learn about secret types that you can create and manage with the service.](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-what-is-secret)[Creating secrets Try out the service by storing your first secret.](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-arbitrary-secrets)[Best practices for organizing your secrets and assigning access Review suggested guidelines for organizing your secrets.](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-best-practices-organize-secrets)

 Video library 

[![carousel thumbnail](https://cloud.ibm.com/docs-content/v1/content/secrets-manager-cli-plugin//images/what-is-secrets-mgmt-video-thumbnail.png)<br><br>What is secrets management?](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-what-is-secret)[![carousel thumbnail](https://cloud.ibm.com/docs-content/v1/content/secrets-manager-cli-plugin//images/secure-manage-secrets-video-thumbnail.png)<br><br>Securely managing your cloud secrets with Secrets Manager](https://www.youtube.com/watch?v=rOp7aGyavnk)

 Latest updates
calicoctl delete GlobalNetworkPolicy blocklist
* Windows and OS X:

calicoctl delete GlobalNetworkPolicy blocklist --config=filepath/calicoctl.cfg



2. Clean up the log policy.



* Linux:

calicoctl delete GlobalNetworkPolicy log-denied-packets
* Windows and OS X:

calicoctl delete GlobalNetworkPolicy log-denied-packets --config=filepath/calicoctl.cfg









 What's next? 



* Read more about [controlling traffic with network policies](https://cloud.ibm.com/docs/openshift?topic=openshift-network_policies).
* For more example Calico network policies that control traffic to and from your cluster, you can check out the [Calico tutorials](https://www.tigera.io/tutorials/).
Configuring IPsec site-to-site VPN in Citrix Netscaler VPX with IBM Virtual Router Appliance 

This guide provides step-by-step instructions to configure an IPsec VPN site-to-site connection in the Citrix Netscaler VPX. An IBM Virtual Router Appliance (VRA) is used as a VPN peer.

Zoom

![IPsec VPN Connection](https://cloud.ibm.com/docs-content/v1/content/e8ff9d475c01bcec23b567bb9ca41b247bc46dbb/citrix-netscaler-vpx/images/ipsec1.png)

IPsec VPN connection



 About the deployment 

This deployment was built and tested with the following component specifications:



Component specifications

 NetScaler VPX Version & Build VRA Version & Description 

 NS12.1: Build 48.13.nc AT&T vRouter 5600 1801q 



You need a VPX Platinum license to configure IPsec VPN.





 Before you begin 

This guide assumes ownership of both devices. Visit the following links for instructions on ordering.



* [Getting started with Citrix Netscaler VPX Software Appliance](https://cloud.ibm.com/docs/citrix-netscaler-vpx?topic=citrix-netscaler-vpx-getting-started)
* [Getting Started with IBM Virtual Router Appliance](https://cloud.ibm.com/docs/virtual-router-appliance?topic=virtual-router-appliance-getting-started)







 What you'll accomplish 

In this guide you will learn how to configure an IPsec VPN in the Citrix VPX device.



What you'll accomplish

 Task Description
To view the URL encoded values, click the URL encoded tab.

Original

URL encoded



Table 9. CRN query examples.

 Value 

 crn:v1:bluemix:public:databases-for-redis:us-south:a/274074dce64e9c423ffc238516c755e1:29caf0e7-120f-4da8-9551-3abf57ebcfc7:: 
 crn:v1:bluemix:public:cloud-object-storage:global:a/e1bb63d6a20dc57c87501ac4c4c99dcb::bucket:prod 
 crn:v1:bluemix:public:cloudantnosqldb:us-south:a/f586c28d154d4c65a4a4a34cf75f55d0:94255ea3-af1c-41b7-9805-61f775e20702::prod. 









 What's next 

To find out more about viewing registrations, [check out the Key Protect API reference doc](https://cloud.ibm.com/apidocs/key-protect).
Secrets Manager docs 

Explore recommended content and resources to help you get started with IBM Cloud Secrets Manager.

 Developer tools 

[API & SDK reference](https://cloud.ibm.com/apidocs/secrets-manager/secrets-manager-v2)[CLI reference](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-cli-plugin-secrets-manager-cli)[Terraform reference](https://registry.terraform.io/providers/IBM-Cloud/ibm/latest/docs/data-sources/secrets_manager_secret)

 Recommended content 

[What is a secret? Learn about secret types that you can create and manage with the service.](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-what-is-secret)[Creating secrets Try out the service by storing your first secret.](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-arbitrary-secrets)[Best practices for organizing your secrets and assigning access Review suggested guidelines for organizing your secrets.](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-best-practices-organize-secrets)

 Video library 

[![carousel thumbnail](https://cloud.ibm.com/docs-content/v1/content/secrets-manager//images/what-is-secrets-mgmt-video-thumbnail.png)<br><br>What is secrets management?](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-what-is-secret)[![carousel thumbnail](https://cloud.ibm.com/docs-content/v1/content/secrets-manager//images/secure-manage-secrets-video-thumbnail.png)<br><br>Securely managing your cloud secrets with Secrets Manager](https://www.youtube.com/watch?v=rOp7aGyavnk)

 Latest updates
* List objects in a given bucket through the IBM Cloud UI.





 List objects in a given bucket through the IBM Cloud UI 

Complete the following steps to list the objects in a bucket through the IBM Cloud UI:



1. From the Navigation menu, select Resource List.
2. Select the IBM Cloud Object Storage instance where the bucket is available.
3. Select Buckets.
4. Select a bucket. The list of objects is displayed.









 Managing access to a bucket 

Access to work with the Object Storage service is controlled by IBM Cloud Identity and Access Management (IAM).

Every user or service ID that accesses the Object Storage service in your account must be assigned an access policy with an IAM role defined. That policy determines what actions the user or service ID can perform within the context of the service or instance you select. The allowable actions are customized and defined by the IBM Cloud service as operations that are allowed to be performed on the service. The actions are then mapped to IAM roles.

To define a policy, first you must set the scope. You can define a policy to grant access in any of the following contexts:



* Across all instances of the service in your account
* For an individual service instance in your account
* For a specific bucket within an instance
* For all IAM-enabled services in your account



After you define the scope of the access policy, you must assign a role.



* For more information about what actions are allowed per role within the Object Storage service, see [COS Identity and Access Management roles](https://cloud.ibm.com/docs/cloud-object-storage?topic=cloud-object-storage-iamiam-roles).
* For more information about bucket permissions per role, see [Bucket permissions](https://cloud.ibm.com/docs/cloud-object-storage?topic=cloud-object-storage-iam-bucket-permissions).
* For information about assigning roles, see [Managing IAM access](https://cloud.ibm.com/docs/account?topic=account-assign-access-resources).
1. Go to the Integrations page.



1. Select your project from the [Projects page in the Code Engine console](https://cloud.ibm.com/codeengine/projects).
2. Click Project settings > Integrations.



2. Click Configure in the Service bindings tile to configure service binding operations for all users of this project.
3. From the "Configure service binding operations" page, specify the resource group that you want to use for service binding operations. You can choose an IBM Cloud® resource group that contains the Code Engine project and let Code Engine create the necessary credentials. Or, you can choose to use a [custom service ID](https://cloud.ibm.com/docs/codeengine?topic=codeengine-project-integrationsprojectintegration-sb-customserviceid) that uses your service ID credentials.
4. (optional) Expand the What Code Engine does for you section to view information about what Code Engine automatically creates for you when you configure service binding operations. View information about the service ID and the access policies that are assigned to this service ID, the API key that Code Engine automatically generates for the service ID, and the operator secret that is used for service bindings.
5. Click Configure.
6. (optional) Click View details to view details of the service binding operations configuration. From this page, you can view information about the service ID, API key, and operator secret that is used for service binding operations.



Now that you configured service binding operations for the specified resource group, every user with writer or manager access to this Code Engine project can create and delete service bindings. See [Working with service bindings to integrate IBM Cloud services with Code Engine](https://cloud.ibm.com/docs/codeengine?topic=codeengine-service-binding).

When you configure service binding operations with a Code Engine autogenerated (and managed) service ID, do not manually update or remove the service ID or API key that is created as part of the configuration of service binding operations.
[Shows the Watson Assistant navigation panel](https://cloud.ibm.com/docs-content/v1/content/f16b1f78a92498247223b337bd9303c2758b9ba8/discovery-data/images/tut-convo-action-0.png)

Figure 6. Actions menu

The Actions page is displayed.

Zoom

![Shows the actions introduction page.](https://cloud.ibm.com/docs-content/v1/content/f16b1f78a92498247223b337bd9303c2758b9ba8/discovery-data/images/tut-convo-action-1.png)

Figure 7. Actions page
2. Click Create action, and then choose to start from scratch.

Zoom

![Shows the action creation method options.](https://cloud.ibm.com/docs-content/v1/content/f16b1f78a92498247223b337bd9303c2758b9ba8/discovery-data/images/tut-convo-action-2.png)

Figure 8. Action creation method options
3. Because you want the assistant to recognize when customers ask about economic research, add the following sample user question, and then click Save:

What are the latest working papers about?

Zoom

![Shows the example user question.](https://cloud.ibm.com/docs-content/v1/content/f16b1f78a92498247223b337bd9303c2758b9ba8/discovery-data/images/tut-convo-action-3.png)

Figure 9. First example user question

The editor closes. We want to add a few more examples.
4. Click the Customer starts with tile to continue adding examples.

Zoom

!
This documentation is for the classic Watson Assistant experience. To see the documentation for the new Watson Assistant, please go [here](https://cloud.ibm.com/docs/watson-assistant).



  Accessibility 

IBM strives to provide products with usable access for everyone, regardless of age or ability.

IBM Watson® Assistant uses standard Windows navigation keys.



  Accessibility features in the product documentation 

Accessibility features help people with a physical disability, such as restricted mobility or limited vision, or with other special needs, use information technology products successfully.

The accessibility features in this product documentation allow users to do the following:



*  Use screen-reader software and digital speech synthesizers to hear what is displayed on the screen. Consult the product documentation of the assistive technology for details on using assistive technologies with HTML-based information.
*  Use screen magnifiers to magnify what is displayed on the screen.
*  Operate specific or equivalent features by using only the keyboard.



The documentation content is published in the IBM Cloud Docs site. For information about the accessibility of the site, see [Accessibility features for IBM Cloud](https://cloud.ibm.com/docs/overview/accessibility?topic=overview-accessibility-platform).
4. Optional: Copy existing backups to the new storage. You can use rsync.

rsync -avz /var/lib/psa/dumps /backup/psa/dumps

This command compresses and transmits your data, and preserves as much as possible, except for hard links. It provides information about what files are being transferred plus a brief summary at the end.
5. Edit /etc/psa/psa.conf to point the DUMP_D value at the new target.



* It appears as: DUMP_D /backup/psa/dumps.



6. Optional: As dictated by your particular use case and business needs, remove the old storage from the server and cancel from the account.