vania-janet/multiturn-rag-retrieval-data huggingface dataset:
The <VCAP_SERVICES> environment variable contains the data that is required for the app to communicate with the service instance. Because IBM Cloud hosts several apps on the same virtual machine, multiple apps cannot use the same HTTP port number to receive incoming requests. To avoid conflicts, each app is given a unique port number. This port number is available in the <VCAP_APP_PORT> variable.

Follow these steps to see the list of <VCAP_SERVICES> values associated with your app in the console.



1. Click the menu in the IBM Cloud toolbar.
2. Click Dashboard.
3. Click your app.
4. Click Runtimes and select the Environment Variables tab.



This environment variable is the serialization of a JSON object with one entry for each service instance that the app is bound to. The amount and type of data that each service instance provides are service-specific. When your app does not use a service, <VCAP_SERVICES> is an empty JSON object. This environment variable is used only when you add a service to your app.







 Building your app by using the Cloud Foundry CLI 

IBM Cloud provides several tools for you to start coding your app, for example, the ibmcloud cf command line interface and Eclipse tools. In this example you will use the ibmcloud cf command line interface to start coding your app.



1. First, download and develop your app code.



1. Click Getting started in your app dashboard.
2. Click the Download the sample code link to download your app code.
3. Extract the downloaded file to a directory.
4. Develop the code with your locally integrated development environment.



2. Install the ibmcloud cf command line interface (CLI).



1. Download the ibmcloud cf command line tool installation program for your operating system.
2. Follow the tool wizard to complete the installation.
3. Use the ibmcloud cf -v command to verify the version of the ibmcloud cf command line interface.



Make sure that you always use the latest version of the ibmcloud cf command line tool.
3.
For a more detailed example, see [Update workspace input variables](https://cloud.ibm.com/apidocs/schematics/schematicsreplace-workspace-inputs) API.

"env_values": [
{
"name": "TF_CLI_ARGS_plan",
"value": "-parallelism=20",
"secure": false,
"hidden": false
},
{
"name": "TF_CLI_ARGS_apply",
"value": "-parallelism=20",
"secure": false,
"hidden": false
}
]





 Setting parallelism for Catalog deployments 

Environment variables can only be set at content onboarding time. Refer to the Catalog documentation to set the TF_CLI_ARGS environment variables as shown above.









 List of Terraform environment variables 

IBM Cloud Schematics supports following environment variables for debugging purpose. For more information about special environment variables, see [Environment variables](https://developer.hashicorp.com/terraform/cli/config/environment-variables).



Supported environment variables

 Variable Description Usage 

 TF_LOG The detailed logs that appear on standard error. Support values are TRACE, DEBUG, INFO, WARN, or ERROR "TF_LOG": "TRACE" 
 TF_LOG_PROVIDER For debugging Terraform provider issues, see [Managing Log Output](https://developer.hashicorp.com/terraform/plugin/log/managing). "TF_LOG_PROVIDER": "TRACE" 
 TF_INPUT Command to disable prompts for entering the input value. The default value is false or 0. "TF_INPUT": "0" 
 TF_CLI_ARGS and TF_CLI_ARGS_name The TF_CLI_ARGS specify additional arguments to the command-line. This allows easier automation in cloud infrastructure environments. Also to modify the default behavior of the Terraform on your own system.
To connect your workspace to a GitHub repository later, you must use the ibmcloud schematics workspace update command. If you plan to provide your Terraform template by uploading a tape archive file (.tar), leave the URL empty, and use the [ibmcloud schematics workspace upload](https://cloud.ibm.com/docs/schematics?topic=schematics-schematics-cli-referenceschematics-workspace-upload) command after you created the workspace. If you want to clone from the Git repository see the [allowed and blocked file extensions](https://cloud.ibm.com/docs/schematics?topic=schematics-workspaces-faqclone-file-extension) for cloning. 
 env_values Optional A list of environment variables that you want to apply during the execution of a bash script or Terraform action. This field must be provided as a list of key-value pairs. Each entry will be a map with one entry where key = variable name and value = value. You can define environment variables for IBM Cloud catalog offerings that are provisioned by using a bash script files. 
 variable_name Optional Enter the name for the input variable that you declared in your Terraform configuration files. 
 variable_type Optional Terraform v0.12 supports string, list, map, bool, number and complex data types such as list(type), map(type), object({attribute name=type,..}), set(type), tuple([type]). 
 variable_value Optional Enter the value as a string for the primitive types such as bool, number, string, and HCL format for the complex variables, as you provide in a .tfvars file. You need to enter escaped string of HCL format for the value, as shown in the example. For more information about how to declare variables in a Terraform configuration file and provide value to schematics, see [Using input variables to customize resources](https://cloud.ibm.com/docs/schematics?topic=schematics-create-tf-configdeclare-variable).
After the application is deployed in Green, Green becomes the production environment and Blue becomes idle. See also [red-black deployment](https://cloud.ibm.com/docs/overview?topic=overview-glossaryx8439181).





 boilerplate 

A template that includes one application and its associated runtime environment and predefined services for a particular domain.





 borderless 

Pertaining to an open, non-proprietary development platform that includes public cloud, dedicated cloud, and local cloud deployment models. See also [public cloud](https://cloud.ibm.com/docs/overview?topic=overview-glossaryx4585370), [local cloud](https://cloud.ibm.com/docs/overview?topic=overview-glossaryx8439194), [dedicated cloud](https://cloud.ibm.com/docs/overview?topic=overview-glossaryx8439199).





 bucket 

A container for storing unstructured data.





 buildpack 

A collection of scripts that provide framework and runtime support for apps.





 business continuity 

The capability of a business to withstand outages and to operate mission-critical services normally and without interruption in accordance with predefined service-level agreements.







 C 



 CA 

See [certificate authority](https://cloud.ibm.com/docs/overview?topic=overview-glossaryx2016383).





 certificate authority (CA) 

A trusted third-party organization or company that issues the digital certificates. The certificate authority typically verifies the identity of the individuals who are granted the unique certificate. See also [Secure Sockets Layer](https://cloud.ibm.com/docs/overview?topic=overview-glossaryx2038004), [intermediate certificate](https://cloud.ibm.com/docs/overview?topic=overview-glossaryx3753781), [trusted root](https://cloud.ibm.com/docs/overview?topic=overview-glossaryx2042234).





 certificate signing request (CSR)
Configuring VRA backup jobs 

After the VMware® vSphere environment is added in the Cloud Backup Portal, you can create a backup job. The backup job specifies the virtual machines (VMs) to be backed up, and where to save the backup data. You can run the backup job manually or schedule the backup job to run at specific times and intervals.

You must configure vault settings and vCenter information before you can add a backup job.



 Starting Cloud Backup Portal 

You need to be connected to the IBM Cloud® private network to be able to start the Portal.



1. Log in to the [IBM Cloud console](https://cloud.ibm.com/login). From the menu ![Menu icon](https://cloud.ibm.com/docs-content/v1/content/921d024aca5ff45536208840a52f864567eb4068/icons/icon_hamburger.svg), select Classic Infrastructure![Classic icon](https://cloud.ibm.com/docs-content/v1/content/921d024aca5ff45536208840a52f864567eb4068/icons/classic.svg).
2. Click Storage > Cloud Backup to display the backup services.
3. Select the instance name of the IBM Cloud Account.
4. Click View backup portal to start the portal in your browser.

If the Portal doesn't start, you might have a problem with your VPN connection. You might also see a message that says that the form you’re sending isn’t secure. It is expected - proceed by sending the form.







 Adding a vSphere backup job 



1. On the navigation, click Computers. The computers page shows the registered computers and environments.
2. Click Jobs.
3. In the Select job Task menu, click Create New VMware® vCenter Job.
4. Specify the following information.



* In the Name field, type a name for the backup job.
* [Rack Mount Server SR630_1100W](https://cloud.ibm.com/media/docs/downloads/environment-info-datasheets/SR630_1100W.pdf)
* [Rack Mount Server SR630_750W](https://cloud.ibm.com/media/docs/downloads/environment-info-datasheets/SR630_750W.pdf)
* [Rack Mount Server SR650](https://cloud.ibm.com/media/docs/downloads/environment-info-datasheets/SR650.pdf)
* [Rack Mount Server 2U_H11DSU](https://cloud.ibm.com/media/docs/downloads/environment-info-datasheets/2U_H11DSU.pdf)







 IBM Cloud Security and Compliance Center 

For highly regulated industries, such as financial services, achieving continuous security within a cloud environment is an important first step toward protecting customer and application data. Historically, that process has been difficult and manual, which placed your organization at risk. But, with the IBM Cloud® Security and Compliance Center you can integrate automatic security checks into every day workflows that are designed to minimize risk. By monitoring for risks, you can identify security vulnerabilities and quickly work to mitigate the impact and fix the issue.

You can acheive continuous security and compliance within the IBM Cloud platform with the Security and Compliance Center. You can view your security and compliance postures from a unified dashboard. Learn more about [Getting started with Security and Compliance Center](https://cloud.ibm.com/docs/security-compliance?topic=security-compliance-getting-started).





 IBM Cloud Framework for Financial Services 

IBM Cloud Framework for Financial Services is designed to build trust and enable a transparent public cloud ecosystem with the specific features for security, compliance, and resiliency that financial institutions require. The IBM Cloud Framework for Financial Services is a standard set of controls, controls guidance, and architectures informed by global regulatory requirements for cybersecurity, data security, and risk management, with ongoing governance by an industry council and promontory to ensure currency with new and changed regulations.
You can set an environment variable instead of specifying -i with the following command: $ export KP_INSTANCE_ID=<INSTANCE_ID>.







 Optional parameters 



* -o, --output

Set the CLI output format. By default, all commands print in table format. To change the output format to JSON, use --output json.
* --key-ring

A unique, human readable name for the key-ring. Required if the user doesn't have permissions on the default key ring.









 kp key update 

[Update a key](https://cloud.ibm.com/docs/key-protect?topic=key-protect-grouping-keys) with an existing key ring or a new key ring in your Key Protect instance.

ibmcloud kp key update KEY_ID_OR_ALIAS
-i, --instance-id INSTANCE_ID
-r, --new-key-ring KEY_RING_ID
[-o, --output OUTPUT]



 Required parameters 



* KEY_ID_OR_ALIAS

The v4 UUID or alias of the root key that you want to show.
* -i, --instance-id

The IBM Cloud instance ID that identifies your Key Protect instance.

You can set an environment variable instead of specifying -i with the following command: $ export KP_INSTANCE_ID=<INSTANCE_ID>.
* -r, --new-key-ring

A unique, human readable name for the key-ring. Required if the user doesn't have permissions on the default key ring.







 Optional parameters 



* -o, --output

Set the CLI output format. By default, all commands print in table format. To change the output format to JSON, use --output json.







 Examples 

Note that the key ring must already be created, either as part of creating a key, or by itself.

This is an example of kp key update.

ic kp key update 5f2cc155-fe16-492c-845c-4d1f0688c7ba -r TestRing
cloud-internet-services[cis] 1.15.2 true
code-engine[ce] 1.43.7 true
container-registry[cr] 1.0.11 true
container-service[kubernetes-service/ks] 1.0.523 false
cra 1.3.6 false
doi 0.4.2 false
schematics[sch] 1.12.10 true
secrets-manager[sm] 2.0.1 true

 ibmcloud dev
3.0.0

 java
openjdk version "11.0.19" 2023-04-18
OpenJDK Runtime Environment (build 11.0.19+7-post-Ubuntu-0ubuntu120.04.1)
OpenJDK 64-Bit Server VM (build 11.0.19+7-post-Ubuntu-0ubuntu120.04.1, mixed mode, sharing)

 ant
Apache Ant(TM) version 1.10.13 compiled on January 4 2023

 mvn
Apache Maven 3.9.2 (c9616018c7a021c1c39be70fb2843d6f5f9b8a1c)
Maven home: /opt/IBM/maven
Java version: 11.0.19, vendor: IBM Corporation, runtime: /usr/local/jdk11
Default locale: en_US, platform encoding: UTF-8
OS name: "linux", version: "6.3.6-200.fc38.aarch64", arch: "amd64", family: "unix"

 gradle

Welcome to Gradle 8.1.1!

Here are the highlights of this release:
- Stable configuration cache
- Experimental Kotlin DSL assignment syntax
- Building with Java 20

For more details see https://docs.gradle.org/8.1.1/release-notes.html
Understanding Satellite location and hosts 

An IBM Cloud Satellite® location is a representation of an environment in your infrastructure provider, such as an on-prem data center or cloud. Locations are made up of compute sources, called hosts, that resides in your infrastructure provider or even locally. After you attach your hosts to a Satellite location, assign the hosts to the location control plane or use them to power your service workloads.

Locations can be made of hosts of any size, including as small as a local desktop computer or as large as hundreds of computers in a central office. Because locations are made up of your infrastructure, you can create a Satellite location anywhere that your infrastructure is located.



 Satellite location overview 

To set up a Satellite location, you must first create the location, add hosts to it, and then create the location control plane. If you use a quick start template (Schematics template), some of these steps are done for you automatically.

Zoom

![High level process overview.](https://cloud.ibm.com/docs-content/v1/content/c8335d66af691d19e837116fd633481c477061eb/satellite//images/sat_location_overview.svg)

Figure 1. High-level overview of a Satellite location



1. [Plan your environment](https://cloud.ibm.com/docs/satellite?topic=satellite-infrastructure-plan) for Satellite by choosing your infrastructure, thinking about the services that you want to use, and setting up the hosts that you want to use. Make sure your hosts meet the [minimum requirement](https://cloud.ibm.com/docs/satellite?topic=satellite-host-reqs) and that you consider the [size of your location](https://cloud.ibm.com/docs/satellite?topic=satellite-location-sizing).

Zoom

![Plan for your Satellite location.]
For [Liberty for Java](https://cloud.ibm.com/docs/cloud-foundry-public?topic=cloud-foundry-public-liberty_runtime) and the [java_buildpack](https://cloud.ibm.com/docs/cloud-foundry-public?topic=cloud-foundry-public-getting-started-tomcat) apps, the proxy settings can be passed to the runtime via the JAVA_OPTS environment variable. For example you can issue the command and then restage your app:

ibmcloud app env-set myApp JAVA_OPTS "-Dhttp.proxyHost=yourProxyURL -Dhttp.proxyPort=yourProxyPort"

Your app then uses the specified proxy settings at runtime. See [Java Networking and Proxies](https://docs.oracle.com/javase/8/docs/technotes/guides/net/proxies.html) for more information about the Java proxy options.
All updates and changes to environments during these lifecycle stages are performed in a controlled sequence of steps:



* Creating or updating the blueprint configuration with changes to the inputs, template or module versions
* Planning the change to identify resource changes, additions or deletions
* Running the plan to apply the changes to create, modify or delete resources







 Working with environments and the blueprint lifecycle 

Explore the following sections to get into the details of working with blueprints and environments over their lifecycle.



 Defining blueprints 

[Defining blueprints](https://cloud.ibm.com/docs/schematics?topic=schematics-define-blueprints): The infrastructure architecture for an environment is defined as a reusable blueprint template. Reusable modules implement the layers and components of the architecture from Terraform code.





 Deploying blueprints 

[Deploying blueprints](https://cloud.ibm.com/docs/schematics?topic=schematics-deploy-blueprints): A blueprint configuration defines the environment to be deployed. In cookie cutter fashion, several environments can be created from the same blueprint template to deploy a range of environments such as dev, stage, and production.





 Maintaining blueprints 

[Maintaining blueprints](https://cloud.ibm.com/docs/schematics?topic=schematics-update-op-blueprints): During the operational life of a deployed environment, the templates, and inputs may be versioned and updated many times to satisfy changing application requirements. Changes will be applied to the environment to maintain platform currency and compliance as security policies evolve. Scheduled operations are run for compliance checks and drift detection.





 Deleting blueprints 

[Deleting blueprints](https://cloud.ibm.com/docs/schematics?topic=schematics-delete-blueprints): Finally the application or service that is hosted in the environment gets retired or rehost into a new environment. The environment is removed by destroying the deployed resources, stopping billing for any chargeable resources and deleting the blueprint configuration from Schematics.







 Next steps
2 terraform basic-cos-storage INACTIVE

Do you really want to delete the Blueprint ? [y/N]> y
Job : us-east.JOB.Blueprint_Basic.cbe0591e Created
Job Type: BLUEPRINT DELETE
OK







 Next steps 

By completing this tutorial, you learned to deploy a cloud environment using Schematics blueprints.



* Looking for blueprint samples? Check out the [IBM Cloud Schematics GitHub repository](https://github.com/orgs/Cloud-Schematics/repositories/?q=topic:blueprint). Check the example Readme files for further blueprint customization and usage scenarios for each sample.
* Looking for blueprint template and input file configuration Check out the [Understanding blueprint templates and configuration](https://cloud.ibm.com/docs/schematics?topic=schematics-blueprint-templates).
* [SAP NetWeaver High Availability and Business Continuity in Virtual Environments with VMware and Hyper-V on Microsoft Windows](https://archive.sap.com/documents/docs/DOC-44415) covers the virtualization aspects if you’re planning to implement HA on virtualized servers.



For more high-availability products certified by SAP partners for high-availability scenarios, see [High Availability Partner Information](https://wiki.scn.sap.com/wiki/display/SI/High+Availability+Partner+Information).

For non-HANA SAP databases, more information on HA fail-over and DR configurations, is available in your database documentation.

Supporting HA system failover usually requires shared access to either:



* Network File System (NFS) protocol and filesystem; in on-premises deployments may also use Common Internet File System (CIFS) storage
* iSCSI-based logical unique number storage (LUNS)



Supporting DR system failover usually requires Local storage that is combined with a replication method.

As with on-premises installations, check the performance and latency requirements of the database product when you plan your deployment.





 Configure high availability in Classic Infrastructure 

The IBM Cloud® environment does not support any pre-configured high-availability (HA) scenarios for SAP. However, you can configure HA scenarios based on the HA extension for the operating system you choose.

[HA and storage fencing considerations](https://cloud.ibm.com/docs/sap?topic=sap-netweaver-design-considerationsnetweaver-ha-storage-fencing) and [HA and network considerations](https://cloud.ibm.com/docs/sap?topic=sap-netweaver-design-considerationsnetweaver-ha-network) provide lists of things that you need to consider during your deployment. Apart from the considerations outlined here, installing SAP NetWeaver and its database system in an HA environment doesn’t differ from other on-premises installations.



 HA and storage fencing (that is, Quorum-based) considerations 

Cluster environments typically use IPMI-based components for the “fencing of cluster nodes” to ensure a quorum.
SSO configuration is optional but is included as part of the IBM on Cloud subscription.





 Compliance - IBM Cloud (Infrastructure) 

All IBM Maximo Application Suite Dedicated customer environments are managed to IBM IT Security Standards (ITSS) defined by IBM’s Chief Information Security Officer (CISO). This includes vulnerability scanning and subsequent remediation.

IBM Cloud holds ISO-27001 certification and can provide SOC 1, 2 and 3 reports to customers

IBM Cloud (IaaS) ISO certificates:



* ISO-27001:2013 - [https://www.ibm.com/downloads/cas/KDMPXMKA](https://www.ibm.com/downloads/cas/KDMPXMKA)
* ISO-27017:2015 - [https://www.ibm.com/downloads/cas/GLL9ZBZX](https://www.ibm.com/downloads/cas/GLL9ZBZX)
* ISO-27018:2019 - [https://www.ibm.com/downloads/cas/DNM7GMKY](https://www.ibm.com/downloads/cas/DNM7GMKY)



IBM Enterprise & Technology Security ISO certificates:



* ISO 27017: 2015 - [https://www.ibm.com/downloads/cas/QV8Q6ZVY](https://www.ibm.com/downloads/cas/QV8Q6ZVY)
* ISO 27018: 2019 - [https://www.ibm.com/downloads/cas/BKGPEYLQ](https://www.ibm.com/downloads/cas/BKGPEYLQ)
* ISO 27701: 2019 - [https://www.ibm.com/downloads/cas/X42E0VBD](https://www.ibm.com/downloads/cas/X42E0VBD)



There are 3 different SOC reports prepared by external auditors that attest that IBM Cloud has the appropriate security and compliance, financial, and operational controls and procedures in place: