vania-janet/multiturn-rag-retrieval-data huggingface dataset:
If for some crypto units the new master key value is moved to the current master key register, clear those crypto units by using the ibmcloud tke cryptounit-rm command. And then, run the ibmcloud tke cryptounit-mk-setimm command to finish the master key rotation.

In both cases, it is safe to continue past the warning on the ibmcloud tke cryptounit-mk-setimm command. Key storage is prepared to accept the new master key value.
ibmcloud oc ingress domain update --cluster CLUSTER --domain DOMAIN [--hostname HOSTNAME] [--ip IP] [--ip IP] [-q]

Note that when you add IP addresses or hostnames, you must include any IPs or hostnames that are currently registered to the domain. The domain updates with the exact values specified, so any current IP addresses or hostnames are overwritten if they are not included. For example, if 52.137.182.166 is currently registered to your domain and you want to add 52.137.182.270, you must specify --ip 52.137.182.166 --ip 52.137.182.270 in the command.

Minimum required permissions
: Editor platform access role for the cluster in IBM Cloud Kubernetes Service

Command options:

-c, --cluster CLUSTER
: Required: The name or ID of the cluster where the domain is applied.

--domain DOMAIN
: Required. The domain you want to update.

--hostname HOSTNAME
: For VPC clusters. The hostname to register for the domain.

--ip IP
: The IP addresses to register for the domain. The IP addresses passed in fully replace those that are currently associated with the domain. If you want to keep the current IP addresses, you must include them. Specifying this flag with no values unregisters the current IP addresses from the domain.

-q
: Optional: Do not show the message of the day or update reminders.



 Example ingress domain update command 

ibmcloud oc ingress domain update --cluster CLUSTER --domain DOMAIN [--hostname HOSTNAME] [--ip IP] [-q]







 ibmcloud oc ingress instance default set 

Virtual Private Cloud

Classic infrastructure

Set a registered an IBM Cloud Secrets Manager instance to default. If an existing default instance exists, it will be unset from default.

When you set a new default Secrets Manager instance, any existing secrets that are not managed by IBM Cloud must have their certificate CRN manually updated to match the CRN of the new default instance.
* [Preparing to update](https://cloud.ibm.com/docs/containers?topic=containers-cs_versions_123prep-up-123)



* [Update before master](https://cloud.ibm.com/docs/containers?topic=containers-cs_versions_123123_before_123)
* [Update after master](https://cloud.ibm.com/docs/containers?topic=containers-cs_versions_123123_after_123)





[Kubernetes version 1.23 change log](https://cloud.ibm.com/docs/containers?topic=containers-changelog_123changelog_123)



* [Overview](https://cloud.ibm.com/docs/containers?topic=containers-changelog_123changelog_overview_123)
* [Version 1.23 change log](https://cloud.ibm.com/docs/containers?topic=containers-changelog_123123_changelog)



* [Change log for master fix pack 1.23.17_1576, released 27 April 2023](https://cloud.ibm.com/docs/containers?topic=containers-changelog_12312317_1576M)
* [Change log for worker node fix pack 1.23.17_1576, released 24 April 2023](https://cloud.ibm.com/docs/containers?topic=containers-changelog_12312317_1576)
* [Change log for worker node fix pack 1.23.17_1574, released 11 April 2023](https://cloud.ibm.com/docs/containers?topic=containers-changelog_12312317_1574)
* [Change log for worker node fix pack 1.23.17_1572, released 29 March 2023](https://cloud.ibm.com/docs/containers?topic=containers-changelog_12312317_1572)
* Autoscaling: [Automatically increase or decrease the number of worker nodes](https://cloud.ibm.com/docs/openshift?topic=openshift-cluster-scaling-classic-vpc) based on the sizing needs of your scheduled workloads.
* Updating: Keep your environment up-to-date by frequently [updating clusters, worker nodes, and cluster components](https://cloud.ibm.com/docs/containers?topic=containers-update). While you update, refer to these version reference pages:



* [Version information and update actions](https://cloud.ibm.com/docs/openshift?topic=openshift-openshift_versions)
* [Version change log](https://cloud.ibm.com/docs/openshift?topic=openshift-openshift_versions)
* [Fluentd and Ingress ALB change log](https://cloud.ibm.com/docs/containers?topic=containers-cluster-add-ons-changelog)



* Removing: [Remove clusters and clean up related resources](https://cloud.ibm.com/docs/openshift?topic=openshift-remove).



Need help? Check out troubleshooting [clusters and masters](https://cloud.ibm.com/docs/openshift?topic=openshift-debug_clusters), [worker nodes](https://cloud.ibm.com/docs/openshift?topic=openshift-debug_worker_nodes), or the [cluster autoscaler](https://cloud.ibm.com/docs/openshift?topic=openshift-debug_cluster_autoscaler).
* [ibmcloud ks cluster master private-service-endpoint allowlist disable](https://cloud.ibm.com/docs/containers?topic=containers-kubernetes-service-clics_master_pse_allowlist_disable)
* [ibmcloud ks cluster master private-service-endpoint allowlist enable](https://cloud.ibm.com/docs/containers?topic=containers-kubernetes-service-clics_master_pse_allowlist_enable)
* [ibmcloud ks cluster master private-service-endpoint allowlist get](https://cloud.ibm.com/docs/containers?topic=containers-kubernetes-service-clics_master_pse_allowlist_get)
* [ibmcloud ks cluster master private-service-endpoint allowlist remove](https://cloud.ibm.com/docs/containers?topic=containers-kubernetes-service-clics_master_pse_allowlist_rm)



* [ibmcloud ks cluster master private-service-endpoint enable](https://cloud.ibm.com/docs/containers?topic=containers-kubernetes-service-clics_cluster_master_pse_enable)



* cluster master public-service-endpoint: Manage the public service endpoint of a cluster.



* [ibmcloud ks cluster master public-service-endpoint disable](https://cloud.ibm.com/docs/containers?topic=containers-kubernetes-service-clics_cluster_master_pub_se_disable)
* [ibmcloud ks cluster master public-service-endpoint enable](https://cloud.ibm.com/docs/containers?topic=containers-kubernetes-service-clics_cluster_master_pub_se_enable)



* [ibmcloud ks cluster master refresh](https://cloud.ibm.com/docs/containers?topic=containers-kubernetes-service-clics_apiserver_refresh)
* [Adding services by using IBM Cloud service binding](https://cloud.ibm.com/docs/containers?topic=containers-service-binding)





Need help? Check out [Troubleshooting apps and integrations](https://cloud.ibm.com/docs/containers?topic=containers-debug_worker_nodes).





 Manage the lifecycle 

Manage your cluster and worker nodes through each phase of the cluster lifecycle.



* Autoscaling: [Automatically increase or decrease the number of worker nodes](https://cloud.ibm.com/docs/containers?topic=containers-cluster-scaling-classic-vpc) based on the sizing needs of your scheduled workloads.
* Updating: Keep your environment up-to-date by frequently [updating clusters, worker nodes, and cluster components](https://cloud.ibm.com/docs/containers?topic=containers-update). While you update, refer to these version reference pages:



* [Version information and update actions](https://cloud.ibm.com/docs/containers?topic=containers-cs_versions)
* [Version change log](https://cloud.ibm.com/docs/containers?topic=containers-changelog)
* [Fluentd and Ingress ALB change log](https://cloud.ibm.com/docs/containers?topic=containers-cluster-add-ons-changelog)



* Removing: [Remove clusters and clean up related resources](https://cloud.ibm.com/docs/containers?topic=containers-remove).



Need help? Check out troubleshooting [clusters and masters](https://cloud.ibm.com/docs/containers?topic=containers-debug_clusters), [worker nodes](https://cloud.ibm.com/docs/containers?topic=containers-debug_worker_nodes), or the [cluster autoscaler](https://cloud.ibm.com/docs/containers?topic=containers-debug_cluster_autoscaler).
(https://cloud.ibm.com/docs/containers?topic=containers-strategysizing_manage) FAQ.
: sticky-cookie-services annotation.
: Added the secure and httponly parameters to the [sticky-cookie-services annotation](https://cloud.ibm.com/docs/containers?topic=containers-comm-ingress-annotationssession-affinity-cookies).

Version change logs
: Master and worker node patch updates are available.
: Kubernetes [1.17.4_1519](https://cloud.ibm.com/docs/containers?topic=containers-117_changelog1174_1519), [1.16.8_1526](https://cloud.ibm.com/docs/containers?topic=containers-116_changelog1168_1526), [1.15.11_1533](https://cloud.ibm.com/docs/containers?topic=containers-115_changelog11511_1533), and [1.14.10_1549](https://cloud.ibm.com/docs/containers?topic=containers-114_changelog11410_1549).





 12 March 2020 

Version update policy
: Now, you can update your cluster master version only to the next version (n+1). For example, if your cluster runs Kubernetes version 1.15 and you want to update to the latest version, 1.17, you must first update to 1.16.





 10 March 2020 

Istio add-on
: [Version 1.4.6 of the Istio managed add-on](https://cloud.ibm.com/docs/containers?topic=containers-istio-changelog146) is released.





 9 March 2020 

Managing Ingress ALBs
: Added a page for [managing the life cycle of your ALBs](https://cloud.ibm.com/docs/containers?topic=containers-managed-ingress-about), including information about creating, updating, and moving ALBs.

Add-on troubleshooting
ibmcloud ks cluster master audit-webhook get --cluster mycluster







 ibmcloud ks cluster master audit-webhook set 

Classic infrastructure

Set the webhook back end for the API server configuration. The webhook back end forwards API server audit logs to a remote server. After you set the webhook, you must run the ibmcloud ks cluster master refresh command to apply the changes to the Kubernetes master.

ibmcloud ks cluster master audit-webhook set --cluster CLUSTER [--remote-server SERVER_URL_OR_IP] [--ca-cert CA_CERT_PATH] [--client-cert CLIENT_CERT_PATH] [--client-key CLIENT_KEY_PATH] [--policy POLICY] [-q]

Minimum required permissions
: Editor platform access role for the cluster in IBM Cloud Kubernetes Service

Command options:

-c, --cluster CLUSTER
: Required: The name or ID of the cluster.

--remote-server SERVER_URL
: Optional: The URL or IP address for the remote logging service you want to send audit logs to. If you provide an insecure server URL, any certificates are ignored. If you provide an IP address, add the http:// prefix to the IP.

--ca-cert CA_CERT_PATH
: Optional: The file path for the CA certificate that is used to verify the remote logging service.

--client-cert CLIENT_CERT_PATH
: Optional: The file path for the client certificate that is used to authenticate against the remote logging service.

--client-key CLIENT_KEY_PATH
: Optional: The file path for the corresponding client key that is used to connect to the remote logging service.

--policy POLICY
: Optional: The type of policy that is used for auditing. Use default or verbose. Note that the verbose policy type audits a larger number of API transactions, which may impact cluster performance, and is only recommended for occasional use.

-q
: Optional: Do not show the message of the day or update reminders.
rc == 1: waiting for force takeover
conn = dbapi.connect(userkey=myKey, address='localhost', port=myPort)
self.tracer.info("%s: Connect using userkey %s - %s" % (self.__class__.__name__, myKey, conn.isconnected()))
cursor = conn.cursor()
rc1 = cursor.execute(stmnt1)
self.tracer.info("%s: (%s) - %s" % (self.__class__.__name__, stmnt1, rc1))
rc2 = cursor.execute(stmnt2)
self.tracer.info("%s: (%s) - %s" % (self.__class__.__name__, stmnt2, rc2))
return 0
elif rc == 2:
 rc == 2: error, something went wrong
return 0
Show more





 Activating the cost optimized hook 

Use the following steps to activate the cost optimized hook.



1. Stop the cluster.

On any cluster node, run the following command.

pcs cluster stop --all
2. Set the file ownership of the hook script.

On NODE2, run the following command.

chown -R ${sid}adm:sapsys /hana/shared/myHooks
3. Update the global.ini configuration file on NODE2 to enable the hook script.

On NODE2, run the following command to add the required parameters to the global.ini file.

sudo -i -u ${sid}adm -- <<EOT
HA proxy aae810 68e6b3 Updated image with fixes for [CVE-2021-33910](https://nvd.nist.gov/vuln/detail/CVE-2021-33910). 
 Registry endpoints N/A N/A Added zonal public registry endpoints for clusters with both private and public service endpoints enabled. 
 Read only disk self healing N/A N/A For VPC Gen2 workers. Added automation to recover from disks going read only. 
 Containerd v1.5.2 v1.5.4 See [change logs](https://github.com/containerd/containerd/releases/tag/v1.5.4). The update resolves CVE-2021-32760 (see the [IBM security bulletin](https://www.ibm.com/support/pages/node/6478995)). 
 Kubernetes v1.21.2 v1.21.3 See the [Kubernetes release notes](https://github.com/kubernetes/kubernetes/releases/tag/v1.21.3). 







 Change log for master fix pack 1.21.3_1525, released 27 July 2021 

The following table shows the changes that are in the master fix pack patch update 1.21.3_1525. Master patch updates are applied automatically.



Changes since version 1.21.2_1522

 Component Previous Current Description 

 Cluster health image v1.2.13 v1.2.14 Updated universal base image (UBI) to the latest version to resolve CVEs. 
 etcd v3.4.14 v3.4.16 See the [etcd release notes](https://github.com/etcd-io/etcd/releases/v3.4.16).
* [Change log for worker node fix pack 1.25.2_1519, released 25 October 2022](https://cloud.ibm.com/docs/containers?topic=containers-changelog_1251252_1519)
* [Change log for master fix pack 1.25.2_1517 and worker node fix pack 1.25.2_1516, released 6 October 2022](https://cloud.ibm.com/docs/containers?topic=containers-changelog_1251252_1517_and_1252_1516)





[Version 1.25 CIS Kubernetes benchmark](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-125cis-benchmark-125)



* [1 Master node security configuration](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-125cis-section-1-125)



* [1.1 Master node configuration files](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-125cis-benchmark-11-125)
* [1.2 API server](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-125cis-benchmark-12-125)
* [1.3 Controller manager](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-125cis-benchmark-13-125)
* [1.4 Scheduler](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-125cis-benchmark-14-125)



* [2 Etcd node configuration](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-125cis-section-2-125)
* [3 Control plane configuration](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-125cis-section-3-125)
* [Change log for worker node fix pack 1.27.2_1528, released 19 June 2023](https://cloud.ibm.com/docs/containers?topic=containers-changelog_1271272_1528_W)
* [Change log for worker node fix pack 1.27.2_1527, released 5 June 2023](https://cloud.ibm.com/docs/containers?topic=containers-changelog_1271272_1527_W)
* [Change log for master fix pack 1.27.2_1524 and worker node fix pack 1.27.2_1526, released 24 May 2023](https://cloud.ibm.com/docs/containers?topic=containers-changelog_1271.27.2_1524M_and_1.27.2_1526W)





[Kubernetes version 1.27 CIS Kubernetes Benchmark](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-127cis-benchmark-127)



* [1 Master node security configuration](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-127cis-section-1-127)



* [1.1 Master node configuration files](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-127cis-benchmark-11-127)
* [1.2 API server](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-127cis-benchmark-12-127)
* [1.3 Controller manager](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-127cis-benchmark-13-127)
* [1.4 Scheduler](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-127cis-benchmark-14-127)
* [Change log for worker node fix pack 4.7.13_1521_openshift, released 9 June 2021](https://cloud.ibm.com/docs/openshift?topic=openshift-openshift_changelog_474713_1521)
* [Change log for master fix pack 4.7.12_1520_openshift, released 9 June 2021](https://cloud.ibm.com/docs/openshift?topic=openshift-openshift_changelog_474712_1520)





[Red Hat OpenShift on IBM Cloud version 4.7 CIS Kubernetes Benchmark](https://cloud.ibm.com/docs/openshift?topic=openshift-cis-benchmark-47cis-benchmark-47)



* [1 Master node security configuration](https://cloud.ibm.com/docs/openshift?topic=openshift-cis-benchmark-47cis-section-1-47)



* [1.1 Master node configuration files](https://cloud.ibm.com/docs/openshift?topic=openshift-cis-benchmark-47cis-benchmark-11-47)
* [1.2 API server](https://cloud.ibm.com/docs/openshift?topic=openshift-cis-benchmark-47cis-benchmark-12-47)
* [1.3 Controller manager](https://cloud.ibm.com/docs/openshift?topic=openshift-cis-benchmark-47cis-benchmark-13-47)
* [1.4 Scheduler](https://cloud.ibm.com/docs/openshift?topic=openshift-cis-benchmark-47cis-benchmark-14-47)



* [2 Etcd node configuration](https://cloud.ibm.com/docs/openshift?topic=openshift-cis-benchmark-47cis-section-2-47)
* [Change log for master fix pack 1.22.2_1526, released 29 October 2021](https://cloud.ibm.com/docs/containers?topic=containers-changelog_1221222_1526)
* [Change log for worker node fix pack 1.22.2_1527, released 25 October 2021](https://cloud.ibm.com/docs/containers?topic=containers-changelog_1221222_1527)
* [Change log for worker node fix pack 1.22.2_1524, released 11 October 2021](https://cloud.ibm.com/docs/containers?topic=containers-changelog_1221222_1524)
* [Change log for master fix pack 1.22.2_1522 and worker node fix pack 1.22.2_1523, released 29 September 2021](https://cloud.ibm.com/docs/containers?topic=containers-changelog_1221222_1522_and_1222_1523)





[Version 1.22 CIS Kubernetes benchmark](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-122cis-benchmark-122)



* [1 Master node security configuration](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-122cis-section-1-122)



* [1.1 Master node configuration files](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-122cis-benchmark-11-122)
* [1.2 API server](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-122cis-benchmark-12-122)
* [1.3 Controller manager](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-122cis-benchmark-13-122)
* [Change log for worker node fix pack 4.9.19_1526_openshift, released 14 February 2022](https://cloud.ibm.com/docs/openshift?topic=openshift-openshift_changelog_494919_1526)
* [Change log for master fix pack 4.9.17_1525_openshift and worker node fix pack 4.9.17_1523_openshift, released 9 February 2022](https://cloud.ibm.com/docs/openshift?topic=openshift-openshift_changelog_494917_1525)





[Red Hat OpenShift on IBM Cloud version 4.9 CIS Kubernetes Benchmark](https://cloud.ibm.com/docs/openshift?topic=openshift-cis-benchmark-49cis-benchmark-49)



* [1 Master node security configuration](https://cloud.ibm.com/docs/openshift?topic=openshift-cis-benchmark-49cis-section-1-49)



* [1.1 Master node configuration files](https://cloud.ibm.com/docs/openshift?topic=openshift-cis-benchmark-49cis-benchmark-11-49)
* [1.2 API server](https://cloud.ibm.com/docs/openshift?topic=openshift-cis-benchmark-49cis-benchmark-12-49)
* [1.3 Controller manager](https://cloud.ibm.com/docs/openshift?topic=openshift-cis-benchmark-49cis-benchmark-13-49)
* [1.4 Scheduler](https://cloud.ibm.com/docs/openshift?topic=openshift-cis-benchmark-49cis-benchmark-14-49)



* [2 Etcd node configuration](https://cloud.ibm.com/docs/openshift?topic=openshift-cis-benchmark-49cis-section-2-49)
* [Change log for worker node fix pack 1.21.2_1523, released 6 July 2021](https://cloud.ibm.com/docs/containers?topic=containers-changelog_1211212_1523)
* [Change log for master fix pack 1.21.2_1522, released 28 June 2021](https://cloud.ibm.com/docs/containers?topic=containers-changelog_1211212_1522)
* [Change log for worker node fix pack 1.21.1_1521, released 22 June 2021](https://cloud.ibm.com/docs/containers?topic=containers-changelog_1211211_1521)
* [Change log for worker node fix pack 1.21.1_1520, released 9 June 2021](https://cloud.ibm.com/docs/containers?topic=containers-changelog_1211211_1520)
* [Change log for master fix pack 1.21.1_1519 released 9 June 2021](https://cloud.ibm.com/docs/containers?topic=containers-changelog_1211211_1519_new)





[Version 1.21 CIS Kubernetes benchmark](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-121cis-benchmark-121)



* [1 Master node security configuration](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-121cis-section-1-121)



* [1.1 Master node configuration files](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-121cis-benchmark-11-121)
* [1.2 API server](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-121cis-benchmark-12-121)
* [1.3 Controller manager](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-121cis-benchmark-13-121)
* [Change log for master fix pack 4.11.4_1523_openshift, released 26 September 2022](https://cloud.ibm.com/docs/openshift?topic=openshift-openshift_changelog_4114114_1523_openshift)
* [Change log for master fix pack 4.11.0_1521_openshift, released 1 September 2022](https://cloud.ibm.com/docs/openshift?topic=openshift-openshift_changelog_4114.11.0_1521_openshift)
* [Change log for master fix pack 4.11.0_1519_openshift and worker node fix pack 4.11.1_1520_openshift, released 31 August 2022](https://cloud.ibm.com/docs/openshift?topic=openshift-openshift_changelog_4114.11.0_1519_openshift-and-4.11.1_1520_openshift)





[Red Hat OpenShift on IBM Cloud version 4.11 CIS Kubernetes Benchmark](https://cloud.ibm.com/docs/openshift?topic=openshift-cis-benchmark-411cis-benchmark-411)



* [1 Master node security configuration](https://cloud.ibm.com/docs/openshift?topic=openshift-cis-benchmark-411cis-benchmark-1-411)



* [1.1 Master node configuration files](https://cloud.ibm.com/docs/openshift?topic=openshift-cis-benchmark-411cis-benchmark-11-411)
* [1.2 API server](https://cloud.ibm.com/docs/openshift?topic=openshift-cis-benchmark-411cis-benchmark-12-411)
* [1.3 Controller manager](https://cloud.ibm.com/docs/openshift?topic=openshift-cis-benchmark-411cis-benchmark-13-411)
* [Change log for worker node fix pack 1.23.5_1524, released 28 March 2022](https://cloud.ibm.com/docs/containers?topic=containers-changelog_1231235_1524)
* [Change log for worker node fix pack 1.23.4_1522, released 14 March 2022](https://cloud.ibm.com/docs/containers?topic=containers-changelog_1231234_1522)
* [Change log for master fix pack 1.23.4_1520, released 3 March 2022](https://cloud.ibm.com/docs/containers?topic=containers-changelog_1231234_1520)
* [Change log for worker node fix pack 1.23.4_1521, released 28 February 2022](https://cloud.ibm.com/docs/containers?topic=containers-changelog_1231234_1521)
* [Change log for worker node fix pack 1.23.3_1519, released 14 February 2022](https://cloud.ibm.com/docs/containers?topic=containers-changelog_1231233_1519)
* [Change log for master fix pack 1.23.3_1518 and worker node fix pack 1.23.2_1517, released 9 February 2022](https://cloud.ibm.com/docs/containers?topic=containers-changelog_1231233_1518_and_1232_1517)





[Version 1.23 CIS Kubernetes benchmark](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-123cis-benchmark-123)



* [1 Master node security configuration](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-123cis-section-1-123)



* [1.1 Master node configuration files](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-123cis-benchmark-11-123)