vania-janet/multiturn-rag-retrieval-data huggingface dataset:
3.2 Logging 



Section 3.2 Logging benchmark results

 Section Recommendation Scored/Not Scored Level Result Responsibility 

 3.2.1 Ensure that a minimal audit policy is created. Scored 1 [Fail](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-119cis-benchmark-remediations-119) Shared 
 3.2.2 Ensure that the audit policy covers key security concerns. Not Scored 2 [Fail](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-119cis-benchmark-remediations-119) Shared 









 4 Worker node security configuration 

Review the Worker Node Security Configuration results of the version 1.5 CIS Kubernetes benchmark.



 4.1 Worker node configuration files 



Section 4.1 Worker Node Configuration benchmark results

 Section Recommendation Scored/Not Scored Level Result Responsibility 

 4.1.1 Ensure that the kubelet service file permissions are set to 644 or more restrictive. Scored 1 Pass IBM 
 4.1.2 Ensure that the kubelet service file ownership is set to root:root. Scored 1 Pass IBM 
 4.1.3 Ensure that the proxy kubeconfig file permissions are set to 644 or more restrictive. Scored 1 Pass IBM 
 4.1.4 Ensure that the proxy kubeconfig file ownership is set to root:root. Scored 1 Pass IBM 
 4.1.5 Ensure that the kubelet.conf file permissions are set to 644 or more restrictive. Scored 1 Pass IBM 
 4.1.6 Ensure that the kubelet.conf file ownership is set to root:root. Scored 1 Pass IBM 
 4.1.7 Ensure that the certificate authorities file permissions are set to 644 or more restrictive. Scored 1 Pass IBM 
 4.1.8 Ensure that the client certificate authorities file ownership is set to root:root. Scored 1 Pass IBM 
 4.1.9 Ensure that the kubelet configuration file has permissions set to 644 or more restrictive. Scored 1 Pass IBM
3.2 Logging 



Section 3.2 Logging benchmark results

 Section Recommendation Scored/Not Scored Level Result Responsibility 

 3.2.1 Ensure that a minimal audit policy is created. Scored 1 [Fail](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-121cis-benchmark-remediations-121) Shared 
 3.2.2 Ensure that the audit policy covers key security concerns. Not Scored 2 [Fail](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-121cis-benchmark-remediations-121) Shared 









 4 Worker node security configuration 

Review the Worker Node Security Configuration results of the version 1.5 CIS Kubernetes benchmark.



 4.1 Worker node configuration files 



Section 4.1 Worker Node Configuration benchmark results

 Section Recommendation Scored/Not Scored Level Result Responsibility 

 4.1.1 Ensure that the kubelet service file permissions are set to 644 or more restrictive. Scored 1 Pass IBM 
 4.1.2 Ensure that the kubelet service file ownership is set to root:root. Scored 1 Pass IBM 
 4.1.3 Ensure that the proxy kubeconfig file permissions are set to 644 or more restrictive. Scored 1 Pass IBM 
 4.1.4 Ensure that the proxy kubeconfig file ownership is set to root:root. Scored 1 Pass IBM 
 4.1.5 Ensure that the kubelet.conf file permissions are set to 644 or more restrictive. Scored 1 Pass IBM 
 4.1.6 Ensure that the kubelet.conf file ownership is set to root:root. Scored 1 Pass IBM 
 4.1.7 Ensure that the certificate authorities file permissions are set to 644 or more restrictive. Scored 1 Pass IBM 
 4.1.8 Ensure that the client certificate authorities file ownership is set to root:root. Scored 1 Pass IBM 
 4.1.9 Ensure that the kubelet configuration file has permissions set to 644 or more restrictive. Scored 1 Pass IBM
VRVDR-55024 9.8 DLA-2647-1 CVE-2021-25214, CVE-2021-25215, CVE-2021-25216: Debian DLA-2647-1 : bind9 security update 
 VRVDR-54850 7.8 DLA-2610-1 Debian DLA-2610-1 : linux-4.19 security update 









 1912n 



 Issues Resolved 



Issues resolved for 1912n

 Issue Number Priority Summary 

 VRVDR-54900 Major Constant attempts to revive old duplicate CHILD_SA are causing rekey flood and occasional traffic drop. 
 VRVDR-54765 Major ALG session may cause dataplane crash when cleared 







 Security Vulnerabilities Resolved 



Security vulnerabilities resolved for 1912n

 Issue Number CVSS score Advisory Summary 

 VRVDR-54926 6.1 DLA-2628-1 CVE-2019-16935, CVE-2021-23336: Debian DLA-2628-1 : python2.7 security update 
 VRVDR-54858 9.8 DLA-2619-1 CVE-2021-23336, CVE-2021-3177, CVE-2021-3426:Debian DLA-2619-1 : python3.5 security update 
 VRVDR-54849 7.5 DLA-2614-1 CVE-2021-28831: Debian DLA-2614-1 : busybox security update 
 VRVDR-54848 N/A DLA-2611-1 CVE-2020-27840, CVE-2021-20277: Debian DLA-2611-1 : ldb security update 
 VRVDR-54712 8.1 DLA-2588-1 CVE-2021-20234, CVE-2021-20235: Debian DLA-2588-1 : zeromq3 security update 









 1912m 



 Issues Resolved 



Issues resolved for 1912m

 Issue Number Priority Summary 

 VRVDR-54586 Major Dataplane crash in connection sync on closing tcp session
1.1.19 Ensure that the Kubernetes PKI directory and file ownership is set to root:root. Scored 1 Pass IBM 
 1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive. Scored 1 Pass IBM 
 1.1.21 Ensure that the Kubernetes PKI key file permissions are set to 600. Scored 1 Pass IBM 







 1.2 API server 



Section 1.2 API server benchmark results

 Section Recommendation Scored/Not Scored Level Result Responsibility 

 1.2.1 Ensure that the --anonymous-auth option is set to false. Not Scored 1 [Fail](https://cloud.ibm.com/docs/openshift?topic=openshift-cis-benchmark-410ibm-remediations-and-explanations-410) IBM 
 1.2.2 Ensure that the --basic-auth-file option is not set. Scored 1 Pass IBM 
 1.2.3 Ensure that the --token-auth-file parameter is not set. Scored 1 Pass IBM 
 1.2.4 Ensure that the --kubelet-https option is set to true. Scored 1 Pass IBM 
 1.2.5 Ensure that the --kubelet-client-certificate and --kubelet-client-key options are set as appropriate. Scored 1 Pass IBM 
 1.2.6 Ensure that the --kubelet-certificate-authority option is set as appropriate. Scored 1 Pass IBM 
 1.2.7 Ensure that the --authorization-mode option is not set to AlwaysAllow. Scored 1 Pass IBM 
 1.2.8 Ensure that the --authorization-mode option includes Node. Scored 1 Pass IBM 
 1.2.9 Ensure that the --authorization-mode option includes RBAC. Scored 1 Pass IBM 
 1.2.10 Ensure that the admission control plug-in EventRateLimit is set.
For more information about service availability, see [Service Level Agreements (SLAs)](https://cloud.ibm.com/docs/overview?topic=overview-slas).

The following table lists the high-availability (HA) status for the regions (locations) where the IBM Cloud Activity Tracker service is available:



Table 1. List of locations where the service is available.

 Geography Region EU-Supported HA Status 

 North America Dallas (us-south) N/A MZR 
 North America Washington DC (us-east) N/A MZR 
 Europe Frankfurt (eu-de) ![Checkmark icon](https://cloud.ibm.com/docs-content/v1/content/dad8f28785f0dc036aaae4b777787e73db9ff0d4/metrics-router/images/checkmark-icon.svg) MZR 
 Europe London (eu-gb) N/A MZR 
 Asia Pacific Sydney (au-syd) N/A MZR 



Where



* A geography is a geographic area or larger political body that contains one or more regions.
* A region is a defined geographic territory.

A region could be a specific postal code area, a town, a city, a state, a group of states, or even a group of countries.

A region contains [multiple availability zones](https://www.ibm.com/cloud/data-centers/) to meet local access, low latency, and security requirements for the region.
* N/A means feature that is not applicable to that geography.
* MZR means multi-zone region. [Learn more](https://cloud.ibm.com/docs/overview?topic=overview-locationsmzr-table).







 Data availability 

The data that is managed by IBM Cloud Metrics Routing in a region is kept in the data centers near that region.

A multizone region (MZR) consists of 3 or more availability zones that are independent from each other to ensure that single failure metrics affect only a single zone.

By default, IBM Cloud Metrics Routing is deployed across 3 zones.
VRVDR-44517 Minor Dataplane crashes with panic in rte_ipv6_fragment_packet 
 VRVDR-44282 Major Issue deleting /32 mask when both address with /32 mask and without are present together in address group 
 VRVDR-44278 Minor "show address-group all ipv4 optimal" not producing any output 
 VRVDR-44239 Major Request to enhance Web GUI verbiage for protocol drop-down when 'all' protocols are required 
 VRVDR-44076 Major memory-leak in flow-monitoring leading to dataplane seg-fault and outage 
 VRVDR-44007 Critical Dataplane segmentation fault at npf_dataplane_session_establish 
 VRVDR-43909 Minor Connsync causes interfaces to go down after "restart vrrp" 
 VRVDR-42679 Major syslog - crash in zactor_is 
 VRVDR-42020 Major RIB stuck adding same route over and over again 
 VRVDR-18095 Minor Flow monitoring stats is not captured as part of 'show tech-support' 







 Security Vulnerabilities Resolved 



Security vulnerabilities resolved for 1801v

 Issue Number CVSS score Advisory Summary 

 VRVDR-45148 N/A DSA-4371-1 CVE-2019-3462: Debian DSA-4371-1 – apt security update 
 VRVDR-45043 8.8 DSA-4369-1 CVE-2018-19961, CVE-2018-19962, CVE-2018- 19965, CVE-2018-19966, CVE-2018-19967: DSA 4369-1 - Xen security update 
 VRVDR-45042 N/A DSA-4368-1 CVE-2019-6250: Debian DSA-4368-1 : zeromq3 - security update 
 VRVDR-45035 N/A DSA-4367-1 CVE-2018-16864, CVE-2018-16865, CVE-2018- 16866: Debian DSA-4367-1 : systemd - security update
1.1.19 Ensure that the Kubernetes PKI directory and file ownership is set to root:root. Scored 1 Pass IBM 
 1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive. Scored 1 Pass IBM 
 1.1.21 Ensure that the Kubernetes PKI key file permissions are set to 600. Scored 1 Pass IBM 







 1.2 API server 



Section 1.2 API server benchmark results

 Section Recommendation Scored/Not Scored Level Result Responsibility 

 1.2.1 Ensure that the --anonymous-auth option is set to false. Not Scored 1 [Fail](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-120cis-benchmark-remediations-120) IBM 
 1.2.2 Ensure that the --basic-auth-file option is not set. Scored 1 Pass IBM 
 1.2.3 Ensure that the --token-auth-file parameter is not set. Scored 1 Pass IBM 
 1.2.4 Ensure that the --kubelet-https option is set to true. Scored 1 Pass IBM 
 1.2.5 Ensure that the --kubelet-client-certificate and --kubelet-client-key options are set as appropriate. Scored 1 Pass IBM 
 1.2.6 Ensure that the --kubelet-certificate-authority option is set as appropriate. Scored 1 Pass IBM 
 1.2.7 Ensure that the --authorization-mode option is not set to AlwaysAllow. Scored 1 Pass IBM 
 1.2.8 Ensure that the --authorization-mode option includes Node. Scored 1 Pass IBM 
 1.2.9 Ensure that the --authorization-mode option includes RBAC. Scored 1 Pass IBM 
 1.2.10 Ensure that the admission control plug-in EventRateLimit is set. Not Scored 1 [Fail](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-120cis-benchmark-remediations-120) IBM
1.1.19 Ensure that the Kubernetes PKI directory and file ownership is set to root:root. Scored 1 Pass IBM 
 1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive. Scored 1 Pass IBM 
 1.1.21 Ensure that the Kubernetes PKI key file permissions are set to 600. Scored 1 Pass IBM 







 1.2 API server 



Section 1.2 API server benchmark results

 Section Recommendation Scored/Not Scored Level Result Responsibility 

 1.2.1 Ensure that the --anonymous-auth option is set to false. Not Scored 1 [Fail](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-119cis-benchmark-remediations-119) IBM 
 1.2.2 Ensure that the --basic-auth-file option is not set. Scored 1 Pass IBM 
 1.2.3 Ensure that the --token-auth-file parameter is not set. Scored 1 Pass IBM 
 1.2.4 Ensure that the --kubelet-https option is set to true. Scored 1 Pass IBM 
 1.2.5 Ensure that the --kubelet-client-certificate and --kubelet-client-key options are set as appropriate. Scored 1 Pass IBM 
 1.2.6 Ensure that the --kubelet-certificate-authority option is set as appropriate. Scored 1 Pass IBM 
 1.2.7 Ensure that the --authorization-mode option is not set to AlwaysAllow. Scored 1 Pass IBM 
 1.2.8 Ensure that the --authorization-mode option includes Node. Scored 1 Pass IBM 
 1.2.9 Ensure that the --authorization-mode option includes RBAC. Scored 1 Pass IBM 
 1.2.10 Ensure that the admission control plug-in EventRateLimit is set. Not Scored 1 [Fail](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-119cis-benchmark-remediations-119) IBM
1.1.7 Ensure that the etcd pod specification file permissions are set to 644 or more restrictive Scored 1 Pass IBM 
 1.1.8 Ensure that the etcd pod specification file ownership is set to root:root Scored 1 Pass IBM 
 1.1.9 Ensure that the Container Network Interface file permissions are set to 644 or more restrictive Not Scored 1 Pass IBM 
 1.1.10 Ensure that the Container Network Interface file ownership is set to root:root Not Scored 1 Pass IBM 
 1.1.11 Ensure that the etcd data directory permissions are set to 700 or more restrictive Scored 1 Pass IBM 
 1.1.12 Ensure that the etcd data directory ownership is set to etcd:etcd Scored 1 Pass IBM 
 1.1.13 Ensure that the admin.conf file permissions are set to 644 or more restrictive Scored 1 Pass IBM 
 1.1.14 Ensure that the admin.conf file ownership is set to root:root Scored 1 Pass IBM 
 1.1.15 Ensure that the scheduler.conf file permissions are set to 644 or more restrictive Scored 1 Pass IBM 
 1.1.16 Ensure that the scheduler.conf file ownership is set to root:root Scored 1 Pass IBM 
 1.1.17 Ensure that the controller-manager.conf file permissions are set to 644 or more restrictive Scored 1 Pass IBM 
 1.1.18 Ensure that the controller-manager.conf file ownership is set to root:root Scored 1 Pass IBM 
 1.1.19 Ensure that the Kubernetes PKI directory and file ownership is set to root:root Scored 1 Pass IBM 
 1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive Scored 1 Pass IBM 
 1.1.21 Ensure that the Kubernetes PKI key file permissions are set to 600 Scored 1 Pass IBM 







 1.2 API server 



Section 1.2 API server benchmark results

 Section Recommendation Scored? Level Result Responsibility
4.1.6 Ensure that the kubelet.conf file ownership is set to root:root. Scored 1 Pass IBM 
 4.1.7 Ensure that the certificate authorities file permissions are set to 644 or more restrictive. Scored 1 Pass IBM 
 4.1.8 Ensure that the client certificate authorities file ownership is set to root:root. Scored 1 Pass IBM 
 4.1.9 Ensure that the kubelet configuration file has permissions set to 644 or more restrictive. Scored 1 Pass IBM 
 4.1.10 Ensure that the kubelet configuration file ownership is set to root:root. Scored 1 Pass IBM 







 4.2 Kubelet 



Section 4.2 Kubelet benchmark results

 Section Recommendation Scored? Level Result Responsibility 

 4.2.1 Ensure that the --anonymous-auth option is set to false. Scored 1 Pass IBM 
 4.2.2 Ensure that the --authorization-mode option is not set to AlwaysAllow. Scored 1 Pass IBM 
 4.2.3 Ensure that the --client-ca-file option is set as appropriate. Scored 1 Pass IBM 
 4.2.4 Ensure that the --read-only-port option is set to 0. Scored 1 Pass IBM 
 4.2.5 Ensure that the --streaming-connection-idle-timeout option is not set to 0. Scored 1 Pass IBM 
 4.2.6 Ensure that the --protect-kernel-defaults option is set to true. Scored 1 [Fail](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-125cis-benchmark-remediations-125) IBM 
 4.2.7 Ensure that the --make-iptables-util-chains option is set to true. Scored 1 Pass IBM 
 4.2.8 Ensure that the --hostname-override option is not set. Not Scored 1 [Fail](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-125cis-benchmark-remediations-125) IBM
1.1.19 Ensure that the Kubernetes PKI directory and file ownership is set to root:root. Scored 1 Pass IBM 
 1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive. Scored 1 Pass IBM 
 1.1.21 Ensure that the Kubernetes PKI key file permissions are set to 600. Scored 1 Pass IBM 







 1.2 API server 



Section 1.2 API server benchmark results

 Section Recommendation Scored/Not Scored Level Result Responsibility 

 1.2.1 Ensure that the --anonymous-auth option is set to false. Not Scored 1 [Fail](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-123cis-benchmark-remediations-123) IBM 
 1.2.2 Ensure that the --basic-auth-file option is not set. Scored 1 Pass IBM 
 1.2.3 Ensure that the --token-auth-file parameter is not set. Scored 1 Pass IBM 
 1.2.4 Ensure that the --kubelet-https option is set to true. Scored 1 Pass IBM 
 1.2.5 Ensure that the --kubelet-client-certificate and --kubelet-client-key options are set as appropriate. Scored 1 Pass IBM 
 1.2.6 Ensure that the --kubelet-certificate-authority option is set as appropriate. Scored 1 Pass IBM 
 1.2.7 Ensure that the --authorization-mode option is not set to AlwaysAllow. Scored 1 Pass IBM 
 1.2.8 Ensure that the --authorization-mode option includes Node. Scored 1 Pass IBM 
 1.2.9 Ensure that the --authorization-mode option includes RBAC. Scored 1 Pass IBM 
 1.2.10 Ensure that the admission control plug-in EventRateLimit is set. Not Scored 1 [Fail](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-123cis-benchmark-remediations-123) IBM
Working in books and views 

Books contain related data in the form of views, websheets, scorecards, visualizations, graphics, videos, and embedded web pages. Views are defined selections of a cube that are used for analysis, exploration, and data entry.



* [Books](https://www.ibm.com/docs/planning-analytics/2.0.0?topic=wibv-books)

Books can contain cube views, charts, scorecards, dimension selectors, graphics, videos, and embedded links to web pages.
* [Views](https://www.ibm.com/docs/planning-analytics/2.0.0?topic=wibv-views)

A view is a defined selection of a cube and its data that can be used for analysis, exploration, and data entry. You can also have views that are used as data sources.
* [Visualizations in IBM Planning Analytics with Watson for IBM Cloud®](https://www.ibm.com/docs/planning-analytics/2.0.0?topic=wibv-visualizations-in-planning-analytics-workspace)

You can use any of the visualizations that are described here to present data in Planning Analytics with Watson.
* [Forecasting](https://www.ibm.com/docs/planning-analytics/2.0.0?topic=wibv-forecasting)

Use forecasting in Planning Analytics with Watson to discover and model trend, seasonality, and time dependence in data.
* [Synchronize objects in a book or sheet](https://www.ibm.com/docs/planning-analytics/2.0.0?topic=wibv-synchronize-objects-in-book-sheet)

You can set the level of synchronization that you want between views, visualizations, and other widgets either at sheet level, or at book level. You can set synchronization for dimensions and for sandboxes.
* [Data entry](https://www.ibm.com/docs/planning-analytics/2.0.0?topic=wibv-data-entry)
1.1.19 Ensure that the Kubernetes PKI directory and file ownership is set to root:root. Scored 1 Pass IBM 
 1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive. Scored 1 Pass IBM 
 1.1.21 Ensure that the Kubernetes PKI key file permissions are set to 600. Scored 1 Pass IBM 







 1.2 API server 



Section 1.2 API server benchmark results

 Section Recommendation Scored/Not Scored Level Result Responsibility 

 1.2.1 Ensure that the --anonymous-auth option is set to false. Not Scored 1 [Fail](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-122cis-benchmark-remediations-122) IBM 
 1.2.2 Ensure that the --basic-auth-file option is not set. Scored 1 Pass IBM 
 1.2.3 Ensure that the --token-auth-file parameter is not set. Scored 1 Pass IBM 
 1.2.4 Ensure that the --kubelet-https option is set to true. Scored 1 Pass IBM 
 1.2.5 Ensure that the --kubelet-client-certificate and --kubelet-client-key options are set as appropriate. Scored 1 Pass IBM 
 1.2.6 Ensure that the --kubelet-certificate-authority option is set as appropriate. Scored 1 Pass IBM 
 1.2.7 Ensure that the --authorization-mode option is not set to AlwaysAllow. Scored 1 Pass IBM 
 1.2.8 Ensure that the --authorization-mode option includes Node. Scored 1 Pass IBM 
 1.2.9 Ensure that the --authorization-mode option includes RBAC. Scored 1 Pass IBM 
 1.2.10 Ensure that the admission control plug-in EventRateLimit is set. Not Scored 1 [Fail](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-122cis-benchmark-remediations-122) IBM
3.2.2 Ensure that the audit policy covers key security concerns. Not Scored 2 [Fail](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-124cis-benchmark-remediations-124) Shared 









 4 Worker node security configuration 

Review the Worker Node Security Configuration results of the version 1.5 CIS Kubernetes benchmark.



 4.1 Worker node configuration files 



Section 4.1 Worker Node Configuration benchmark results

 Section Recommendation Scored? Level Result Responsibility 

 4.1.1 Ensure that the kubelet service file permissions are set to 644 or more restrictive. Scored 1 Pass IBM 
 4.1.2 Ensure that the kubelet service file ownership is set to root:root. Scored 1 Pass IBM 
 4.1.3 Ensure that the proxy kubeconfig file permissions are set to 644 or more restrictive. Scored 1 Pass IBM 
 4.1.4 Ensure that the proxy kubeconfig file ownership is set to root:root. Scored 1 Pass IBM 
 4.1.5 Ensure that the kubelet.conf file permissions are set to 644 or more restrictive. Scored 1 Pass IBM 
 4.1.6 Ensure that the kubelet.conf file ownership is set to root:root. Scored 1 Pass IBM 
 4.1.7 Ensure that the certificate authorities file permissions are set to 644 or more restrictive. Scored 1 Pass IBM 
 4.1.8 Ensure that the client certificate authorities file ownership is set to root:root. Scored 1 Pass IBM 
 4.1.9 Ensure that the kubelet configuration file has permissions set to 644 or more restrictive. Scored 1 Pass IBM 
 4.1.10 Ensure that the kubelet configuration file ownership is set to root:root. Scored 1 Pass IBM 







 4.2 Kubelet 



Section 4.2 Kubelet benchmark results

 Section Recommendation Scored? Level Result Responsibility 

 4.2.1 Ensure that the --anonymous-auth option is set to false. Scored 1 Pass IBM
estimator.run(circuits=circuits, observables=observables, shots=100)

For more information about the primitive options, refer to the [Options class API reference](https://qiskit.org/documentation/partners/qiskit_ibm_runtime/stubs/qiskit_ibm_runtime.options.Options.htmlqiskit_ibm_runtime.options.Options).





 Transpilation 

By default, the Qiskit Runtime primitives perform circuit transpilation. There are several optimization levels you can choose from. These levels affect the transpilation strategy and might include additional error suppression mechanisms. Level 0 only involves basic transpilation. To learn about each optimization level, view the Optimization level table in the [Error suppression topic](https://qiskit.org/documentation/partners/qiskit_ibm_runtime/locale/es_UN/how_to/error-suppression.htmlsetting-the-optimization-level).

The optimization level option is a first level option, and can be set as follows:

from qiskit_ibm_runtime import Estimator, Options

options = Options(optimization_level=2)

 or..
options = Options()
options.optimization_level = 2

estimator = Estimator(session=session, options=options)

You might want to configure your transpilation strategy further, and for this, there are advanced transpilation options you can set up. These are second level options, and can be set as follows:

from qiskit_ibm_runtime import Estimator, Options

options = Options()
options.transpilation.initial_layout = ...
options.transpilation.routing_method = ...

estimator = Estimator(session=session, options=options)