vania-janet/multiturn-rag-retrieval-data huggingface dataset:
You need to update or increase the timeout value by 5 minutes or 10 minutes depending upon the service as shown in the Terraform block. Or you need to send null value to use the default values.

variable "create_timeout"
{
type = String
description = "Timeout duration to create LogDNA instance in Schematics."
default = "15m"
}





 How do I set the TF_CLI_ARGS environment variable? 

No, you cannot set an environment variable value in the Schematics Workspaces console directly. Instead, you can use a CURL by using the [Schematics API](https://cloud.ibm.com/apidocs/schematics/schematicscreate-workspace), or [Schematics command line](https://cloud.ibm.com/docs/schematics?topic=schematics-schematics-cli-referenceschematics-workspace-new).

"env_values": [
{
"TF_LOG": "debug"
},
]





 Can I use private Git repositories? 

Yes, Schematics supports to download the Terraform modules template from the private repository. For more information, see [Supporting to download modules from private remote host](https://cloud.ibm.com/docs/schematics?topic=schematics-download-modules-pvt-git).





 Can I edit all the variables in a workspace? 

You can edit only one variable at a time from Schematics console. From the command line you can edit all the variables of the workspace in the JSON format by using [ibmcloud schematics workspace update](https://cloud.ibm.com/docs/schematics?topic=schematics-schematics-cli-referenceschematics-workspace-update) command.





 How do I import keys when importing KMS resources? 

Yes, you can set or manage the keys by using ibm_kms_key as shown in the sample code block.
Date: Thu, 16 Jan 2020 15:45:26 GMT
Content-Type: application/json
Content-Length: 11
Connection: keep-alive
[]





 Schema Registry REST endpoints 

The REST API offers four main capabilities:



1. Creating, reading, and deleting schemas.
2. Creating, reading, and deleting individual versions of a schema.
3. Reading and updating the global compatibility rule for the registry.
4. Creating, reading, updating, and deleting compatibility rules that apply to individual schemas.



For actions that alter the schema version, such as create, update, or delete artifact, artifact versions and rules, an activity tracker event is generated to report the action. For more information, see [Activity Tracker events](https://cloud.ibm.com/docs/EventStreams?topic=EventStreams-at_eventsevents).



 Authentication 

As already described, you can authenticate to the Schema Registry by using an API key. This is supplied as the password portion of an HTTP basic authentication header. Set the username portion of this header to the word “token”. It is also possible to grant a bearer token for a system ID or user and supply this as a credential. To do this, specify an HTTP header in the format: “Authorization: Bearer $TOKEN” (where $TOKEN is the bearer token), as in the following example.

curl -H "Authorization: Bearer $TOKEN" ...





 Errors 

If an error condition is encountered, the Schema Registry returns a non-2XX range HTTP status code. The body of the response contains a JSON object in the following form:

{
"error_code":404,
"message":"No artifact with id 'my-schema' might be found."
}

The properties of the error JSON object are as follows:



 Property name Description 

 Error_code The HTTP status code of the response. 
 Message A description of the cause of the problem. 
 Incident This field is only included if the error is a result of a problem with the Schema Registry.
Setting Kubernetes API priority and fairness 

Your Red Hat® OpenShift® on IBM Cloud® clusters have default settings in place to process simultaneous requests to the API server and prevent traffic overload. You can configure your own flow schema and priority levels for requests that are made to the API server of your clusters. For more information, see [API priority and fairness](https://kubernetes.io/docs/concepts/cluster-administration/flow-control/) in the Kubernetes documentation.

For example, you might have a user or namespace that runs your critical apps in prod. You can create a flow schema and priority so that your critical apps have a higher priority for the API server to fulfill their requests than other apps in the cluster.



 Reviewing default flow schema and priority levels 

Red Hat OpenShift on IBM Cloud sets certain default flow schema and priority levels in addition to the default settings from Kubernetes.



Default flow schema and priority levels

 Flow schema Resources that requests come from Priority level 

 apiserver-health Kubernetes API server health resources [Custom priority level](https://cloud.ibm.com/docs/openshift?topic=openshift-kubeapi-prioritykube-api-prioritylevelconfig) for these resources. 
 calico-system-service-accounts Resources in the calico-system namespace that use a service account in the namespace Same priority as kube-system namespace service accounts 
 ibm-admin Resources from IBM cluster administrators Exempts requests by cluster administrators from priority restrictions. This schema is available for Red Hat OpenShift version 4.9 and later. 
 ibm-system-service-accounts Resources in the ibm-system namespace that use a service account in the namespace Same priority as kube-system namespace service accounts 
 tigera-operator-service-accounts Resources in the tigera-operator namespace that use a service account in the namespace Same priority as kube-system namespace service accounts 



You can create your own flow schema and priorities, but don't modify the default settings. Unexpected results might occur in your cluster when you modify API request priorities.
When you import an image, a specific file (either VHD or ISO) is sourced from a specified [Object Storage] Account's Container and is converted into an image template. The image template can then be used to start or load a device. When you export an image, the image template is converted into a file (or several files if the template has multiple disks). The image template is then stored in a specified location on an Object Storage Account's Container.





 How do I create an image template for my entire server and not just my primary drive? 

To create an image template for your entire server, see the instructions in [Creating an image template](https://cloud.ibm.com/docs/image-templates?topic=image-templates-creating-an-image-templatecreating-an-image-template).

If you choose to export an image template to IBM Cloud Object Storage, each block device (or disk) has its own associated file. For example, if your image file is named image.vhd, the first block device is exported as image-0.vhd. The second block device is exported as image-1.vhd, and so on.





 How do I boot my virtual server instance from an image? 

Go to the Device List. Click the virtual server that you want to start from an ISO template. On the Device Details page, select Actions > Boot from Image. For complete steps, refer to [Booting a virtual server instance from an image](https://cloud.ibm.com/docs/image-templates?topic=image-templates-booting-a-vsi-from-an-image).
About routing tables and routes 

IBM Cloud® Virtual Private Cloud (VPC) automatically generates a default routing table for the VPC to manage traffic in the zone. By default, this routing table is empty. You can add routes to the default routing table, or create one or more custom routing tables and then add routes. For example, if you want a specialized routing policy for a specific subnet, you can create a routing table and associate it with one or more subnets. However, if you want to change the default routing policy that affects all subnets using the default routing table, then you should add routes to the default routing table.

The default routing table functions the same as other routing tables, except that it is created automatically, and is used when you create a subnet without specifying a routing table.

You can define routes within any routing table to shape traffic the way that you want. Each subnet has one routing table assigned to it, which is responsible for managing the subnet's traffic. You can change the routing table that a subnet uses to manage its egress traffic at any time.

This service also allows the use of Network Functions Virtualization (NFV) for advanced networking services, such as third-party routing, firewalls, local/global load balancing, web application firewalls, and more. Custom routing tables are also currently being integrated in IBM Cloud services.



 Egress and ingress routing 

When you create a routing table, you can select one of the following traffic types:



* Egress routes control traffic, which originates within a subnet and travels towards the public internet, or to another VM in same or different zone.
* Ingress routes enable you to customize routes on incoming traffic to a VPC from traffic sources external to the VPC's availability zone (IBM Cloud Direct Link, IBM Cloud Transit Gateway, another availability zone in the same VPC, or the public internet). You must choose at least one traffic source to enable ingress routing.

Only one custom routing table can be associated with a particular ingress traffic source. However, you can use different routing tables for different traffic sources. For example, routing table A might use Transit Gateway and VPC Zone, while routing table B uses Direct Link.







 Defining the system-implicit routing table
* How do I find and manage API Keys for a user or myself?

In the IBM Cloud console, go to Manage > Access (IAM) > API keys to view and manage API keys that you have access to.



* For information about how to manage IBM Cloud API keys that are associated with user identities, see [Managing user API keys](https://cloud.ibm.com/docs/account?topic=account-userapikey).
* For information about how to manage API keys that are associated with a service ID, see [Managing service ID API keys](https://cloud.ibm.com/docs/account?topic=account-serviceidapikeys).
* For information about how to manage classic infrastructure API keys, see [Managing classic infrastructure API keys](https://cloud.ibm.com/docs/account?topic=account-classic_keys).



* Where do I find or add service credentials?

To view an existing service credential for a service or to add a new credential, go to your resource list by clicking the Navigation Menu icon ![Navigation Menu icon](https://cloud.ibm.com/icons/icon_hamburger.svg) > Resource list, then select the name of the service to open its details. Click Service credentials to view the details or to select New Credential.

To save a copy of the service credentials, most services provide a download option or the option to copy to your clipboard.
* Why use resource groups and access groups?

A resource group is a logical container for resources. When a resource is created, you assign it to a resource group and the resource can't be moved.

An access group is used to easily organize a set of users, service IDs, and trusted profiles into a single entity to make access assignments easy. You can assign a single policy to an access group to grant all members those permissions. If you have more than one user or service ID that needs the same access, create an access group instead of assigning the same access multiple times per individual user, service ID, or trusted profile.

By using both resource groups and access groups, you can streamline the access assignment policy by assigning a limited number of policies.
Can I interrupt or terminate running jobs? 

Yes, you can interrupt, force-stop, or terminate the provisioning resources or a running job in Schematics by using the job types. For more information, see [stopping the job types](https://cloud.ibm.com/docs/schematics?topic=schematics-interrupt-jobinterrupt-types).





 How do I correct an Incorrect Location Input error? 

Error

{
"requestid": "3f59c342-cd2c-4703-aa10-9e8e7072a3ac",
"timestamp": "2022-06-28T20:02:58.529765308Z",
"messageid": "M1097",
"message": "Incorrect Location Input.",
"statuscode": 400
}

The Schematics global endpoint is defaulted to us environment. Therefore, you need to use [regional endpoints](https://cloud.ibm.com/apidocs/schematics/schematicsapi-endpoints) to point your location to a eu-de region.





 How can I view workspace resources? 

Use the [state list](https://cloud.ibm.com/docs/schematics?topic=schematics-schematics-cli-referencestate-list) CLI command to view the same resources as in IBM Cloud Schematics UI.





 How do I fix the CreateworkspaceWithContext failed Bad request error? 

Error

CreateWorkspaceWithContext failed Bad request. Check that the information you entered in the payload is complete and formatted correctly in JSON.

The Schematics public or private endpoint global URL by default points to us region. As a workaround you can set the [environment variable key](https://cloud.ibm.com/docs/ibm-cloud-provider-for-terraform?topic=ibm-cloud-provider-for-terraform-provider-referenceconfig-provider) before the Terraform commands.
* [Unable to create or delete worker nodes due to endpoints error](https://cloud.ibm.com/docs/openshift?topic=openshift-cluster_infra_errorsvpe-ts)
* [Unable to create or delete worker nodes due to paid account or one time password error](https://cloud.ibm.com/docs/openshift?topic=openshift-cluster_infra_errorscs_totp)



* [Disabling TOTP MFA for the account](https://cloud.ibm.com/docs/openshift?topic=openshift-cluster_infra_errorsdisable-totp-mfa-account)
* [Using TOTP MFA to create an infrastructure API key for IBM Cloud Kubernetes Service](https://cloud.ibm.com/docs/openshift?topic=openshift-cluster_infra_errorscreate-api-key-totp-mfa)





[Why do I get an error about a cloud object storage bucket when I create a cluster?](https://cloud.ibm.com/docs/openshift?topic=openshift-ts_cos_bucket_cluster_createts_cos_bucket_cluster_create)

[After logging in to my cluster, why do I see a no resources found message?](https://cloud.ibm.com/docs/openshift?topic=openshift-rhoks_ts_not_foundrhoks_ts_not_found)

[Why do I get an error that my PodSecurityConfiguration is not valid?](https://cloud.ibm.com/docs/openshift?topic=openshift-ts-pod-security-resetts-pod-security-reset)

[Why does the cluster master return a VPN server error?](https://cloud.ibm.com/docs/openshift?topic=openshift-rhoks_ts_openvpn_loginrhoks_ts_openvpn_login)
Select your name or another user's name from the list.
3. Click Access to view the permissions that are associated with the user.



The owner tag is listed for the owner of the account. This user is assigned the administrator role on the service or service instance.





 How do I find and manage API Keys for a user or myself? 

In the IBM Cloud console, go to Manage > Access (IAM) > API keys to view and manage API keys that you have access to.



* For information about how to manage IBM Cloud API keys that are associated with user identities, see [Managing user API keys](https://cloud.ibm.com/docs/account?topic=account-userapikey).
* For information about how to manage API keys that are associated with a service ID, see [Managing service ID API keys](https://cloud.ibm.com/docs/account?topic=account-serviceidapikeys).
* For information about how to manage classic infrastructure API keys, see [Managing classic infrastructure API keys](https://cloud.ibm.com/docs/account?topic=account-classic_keys).







 Where do I find or add service credentials? 

To view an existing service credential for a service or to add a new credential, go to your resource list by clicking the Navigation Menu icon ![Navigation Menu icon](https://cloud.ibm.com/docs-content/v1/content/4d8c6eec891cff72b666dc24bd3211810c77fb42/icons/icon_hamburger.svg) > Resource list, then select the name of the service to open its details. Click Service credentials to view the details or to select New Credential.

To save a copy of the service credentials, most services provide a download option or the option to copy to your clipboard.





 Why use resource groups and access groups? 

A resource group is a logical container for resources. When a resource is created, you assign it to a resource group and the resource can't be moved.
ibmcloud watson-query virtualized-table-role-revoke --role ROLE --table-name TABLE-NAME --table-schema TABLE-SCHEMA



 Command options 

--role (string)
: The watson query role type. Values can be DV_ADMIN, DV_ENGINEER, DV_STEWARD, or DV_WORKER, which correspond to MANAGER, ENGINEER, STEWARD, and USER roles in the user interface. Required.

--table-name (string)
: The virtualized table's name. Required.

--table-schema (string)
: The virtualized table's schema name. Required.





 Examples 

Revoke roles access to a virtualized table

ibmcloud watson-query virtualized-table-role-revoke --table-name TABLE1 --table-schema DV_IBMID_270001PD8Q --role DV_ENGINEER







 ibmcloud watson-query tables-for-role 

Retrieves the list of virtualized tables that have a specific role.

ibmcloud watson-query tables-for-role --role ROLE



 Command options 

--role (string)
: Watson Query has four roles: MANAGER, STEWARD, ENGINEER and USER The value of rolename should be one of them. Required.





 Examples 

Get virtualized tables by role

ibmcloud watson-query tables-for-role --role DV_ENGINEER





 Example output 

{
"objects" : [ {
"table_name" : "TEST_TABLE",
"table_schema" : "ADMIN"
} ]
}









 Securities 

Manage Wason Knowledge Catalog(WKC) policy enforcement status.



 ibmcloud watson-query policy-status-update 

Turn on WKC policy enforcement status.

ibmcloud watson-query policy-status-update --status STATUS



 Command options 

--status (string)
: Set the status of WKC policy - can be 'enable' or 'disable'. Required.





 Examples 

Turn on or off WKC policy enforcement status
For more information, see the list of [tools and utilities](https://cloud.ibm.com/docs/schematics?topic=schematics-sch-utilities) used in Schematics runtime.





 How can I fix Git token issues when creating workspaces using the CLI 

Using schematics workspace new --file schematic-file.json -g xxxx command throws an Access token creation failed status, as the token is not specified in the command.

You need to check your [authentication](https://cloud.ibm.com/docs/schematics?topic=schematics-setup-apics_api) before performing the operation through command-line. Then, create a workspace by using schematics workspace new --file schematic-file.json --github-token xxxx command. For more information, see [ibmcloud schematics workspace new](https://cloud.ibm.com/docs/schematics?topic=schematics-schematics-cli-referenceschematics-workspace-new) command.





 How do I fix authorization issues when creating or updating a workspace? 

You see authorization issues when the roles and permission access is insufficient while updating workspace. For more information, see [Managing user access](https://cloud.ibm.com/docs/schematics?topic=schematics-access).





 How can I use Schematics services with a test ID? 

The test IDs are considered as a valid IBM ID to set the global catalog or resource controller-related API calls. If you are unable to access, do [Contact support service](https://cloud.ibm.com/docs/schematics?topic=schematics-schematics-help).





 How to limit Git repo folder cloning 

By default when creating a workspace via the UI, Schematics default to cloning the full Git repository and all subfolders. De-select the 'Use full repository' flag to limit the folders cloned and improve download performace.
If a message is sent by using a schema that isn’t in the registry, the SerDes attempts to create the new schema, or version of the schema, in the registry. If this behavior is not required, it can be disabled by removing the writer permission for schema resources from the application. See [Managing access to the Schema Registry](https://cloud.ibm.com/docs/EventStreams?topic=EventStreams-securitymanaging_access_schemas).

The normalize option for schema lookups and registration is not supported.





 Using the Schema Registry with tools that use the Confluent registry API 

The Schema Registry supports a subset of the API provided by version 7.2 of the Confluent Schema Registry. This is intended to provide limited compatibility with tooling that has been designed to work with the Confluent Schema Registry. Only the HTTP REST endpoint with the following paths are implemented:



* compatibility
* config
* schemas
* subjects



To configure an application to use this compatibility API, specify the Schema Registry endpoint in the following format:

https://token:{$APIKEY}@{$HOST}/{confluent}

where:



* $APIKEY is the API key to use from the Service Credentials tab
* $HOST is the host from the kafka_http_url field in the Service Credentials tab







 Using the Schema Registry with third-party tools 

The Schema Registry can be tested with third-party tools, such as the kafka-avro-console-producer.sh and kafka-avro-console-consumer.sh, which allow testing of conformance to schema using the Confluent SerDes.

To run either the producer or the consumer tool, a common property is required with the connection options for the Event Streams Enterprise instance.

sasl.jaas.config=org.apache.kafka.common.security.plain.PlainLoginModule required username="token" password="apikey";
security.protocol=SASL_SSL
sasl.mechanism=PLAIN
* When you create a listener for a network load balancer, you can specify a protocol of tcp or udp. However, each listener in the network load balancer must have a unique port.
* For Private NLB, the NLB service might add rules to custom routing tables to ensure service availability for some failure conditions. As a result, if the client is outside the zone and/or VPC of the NLB, you must add an ingress custom routing table to the VPC where the NLB resides with the proper traffic source selected.

For Private NLB, depending on the location of the clients, you must ensure that ingress routing tables exist (as described in Table 1).





Table 1: Traffic sources that require ingress custom routing tables

 Client location Routing table type Traffic source 

 On-prem Ingress Direct link 
 Another VPC or classic infrastructure Ingress Transit gateway 
 Another availability zone of the same VPC Ingress VPC zone 



For more information, see [About routing tables and routes](https://cloud.ibm.com/docs/vpc?topic=vpc-about-custom-routes).
For more information, see [Download Schematics Job files](https://cloud.ibm.com/docs/schematics?topic=schematics-job-download).
* How can I resolve Terraform resource timeout failures?

You need to update or increase the timeout value by 5 minutes or 10 minutes depending upon the service as shown in the Terraform block. Or you need to send null value to use the default values.

variable "create_timeout"
{
type = String
description = "Timeout duration to create LogDNA instance in Schematics."
default = "15m"
}
* How do I set the TF_CLI_ARGS environment variable?

No, you cannot set an environment variable value in the Schematics Workspaces console directly. Instead, you can use a CURL by using the [Schematics API](https://cloud.ibm.com/apidocs/schematics/schematicscreate-workspace), or [Schematics command line](https://cloud.ibm.com/docs/schematics?topic=schematics-schematics-cli-referenceschematics-workspace-new).

"env_values": [
{
"TF_LOG": "debug"
},
]
* Can I use private Git repositories?

Yes, Schematics supports to download the Terraform modules template from the private repository. For more information, see [Supporting to download modules from private remote host](https://cloud.ibm.com/docs/schematics?topic=schematics-download-modules-pvt-git).
* Can I edit all the variables in a workspace?

You can edit only one variable at a time from Schematics console.