vania-janet/multiturn-rag-retrieval-data huggingface dataset:
* Supported operating systems: RHEL 8 (REDHAT_8_64), RHEL 7 (REDHAT_7_64) (default)
* [Version information and update actions](https://cloud.ibm.com/docs/openshift?topic=openshift-cs_versions_49)
* [Change log](https://cloud.ibm.com/docs/openshift?topic=openshift-openshift_changelog_49)



Unsupported versions:
: For information about unsupported versions, see the [archive](https://cloud.ibm.com/docs/openshift?topic=openshift-openshift_versionsversion-archive).







 Checking a cluster's Kubernetes server version 

To check the Kubernetes server version of a cluster, log in to the cluster and run the following command.

oc version

Example output

Client Version: 4.11.3
Server Version: 4.11.12
Kubernetes Version: v1.25.2





 Release lifecycle 

Each supported version of Red Hat OpenShift on IBM Cloud goes through a lifecycle of testing, development, general release, support, deprecation, and becoming unsupported. Review the descriptions of each phase of a version's lifecycle.

Estimated days and versions are provided for general understanding. Actual availability and release dates are subject to change and depend on various factors, such as community updates, security patches, and technology changes between versions.



1. Community release: The community releases the new version. IBM engineers begin testing and hardening the community version in preparation to release a supported Red Hat OpenShift on IBM Cloud version.
2. Supported version lifecycle:

Development release
: Release is under development and might be available as a Beta to select customers. IBM provides best effort support for the release.

General availability
: Release is generally available (GA). IBM provides full support for the release. IBM provides a tentative target date for the release to be unsupported.
Log in by running Red Hat OpenShift API requests directly against your cluster: Log in to your cluster with the API such as via a curl request.



1. Get the Master URL of your cluster.

ibmcloud oc cluster get -c <cluster_name_or_ID>

Example output

NAME: mycluster
ID: 1234567
State: normal
Created: 2020-01-22T19:22:16+0000
Location: dal10
Master URL: https://c100-e.<region>.containers.cloud.ibm.com:<port>
...
2. Red Hat OpenShift version 4 only: Get the token endpoint of the Red Hat OpenShift oauth server.

curl <master_URL>/.well-known/oauth-authorization-server | jq -r .token_endpoint

Example output

<token_endpoint>/oauth/token

: screen}
3. Log in to the cluster with the endpoint that you previously retrieved. Replace <URL> with the <token_endpoint> of the oauth server.

Example curl request:

curl -u 'apikey:<API_key>' -H "X-CSRF-Token: a" '<URL>/oauth/authorize?client_id=openshift-challenging-client&response_type=token' -vvv
4. In the Location response, find the access_token, such as in the following example.

< HTTP/1.1 302 Found
< Cache-Control: no-cache, no-store, max-age=0, must-revalidate
< Cache-Control: no-cache, no-store, max-age=0, must-revalidate
< Expires: 0
< Expires: Fri, 01 Jan 1990 00:00:00 GMT
[Taint the worker pool](https://cloud.ibm.com/docs/openshift?topic=openshift-kubernetes-service-cliworker_pool_taint) so that other workloads can't run on the worker pool.



2. [Access your Red Hat OpenShift cluster](https://cloud.ibm.com/docs/openshift?topic=openshift-access_cluster).
3. From the Red Hat OpenShift web console Administrator perspective, click Operators > Installed Operators.
4. Click Cluster Logging.
5. In the Provided APIs section, Cluster Logging tile, click Create Instance.
6. Modify the configuration YAML to change the storage class for the ElasticSearch log storage from gp2 to one of the following storage classes that vary with your cluster infrastructure provider.



* Classic clusters: ibmc-block-gold
* VPC clusters: ibmc-vpc-block-10iops-tier



...
elasticsearch:
nodeCount: 3
redundancyPolicy: SingleRedundancy
storage:
storageClassName: ibmc-block-gold or ibmc-vpc-block-10iops-tier for VPC clusters
size: 200G
...
7. Modify the configuration YAML to include the node selector and toleration for the worker pool label and taint that you previously created. For more information and examples, see the following Red Hat OpenShift documents. The examples use a label and toleration of logging: clo-efk.



* [Node selector](https://docs.openshift.com/container-platform/4.11/logging/config/cluster-logging-moving-nodes.html). Add the node selector to the Elasticsearch (logstore)and Kibana (visualization), and Fluentd (collector.logs) pods.

spec:
logStore:
elasticsearch:
nodeSelector:
logging: clo-efk
...
visualization:
kibana:
* [3 September 2019](https://cloud.ibm.com/docs/openshift?topic=openshift-openshift-relnotesopenshift-sept0319)



* New! Red Hat OpenShift on IBM Cloud plug-in version 0.4
* Version change log





* [August 2019](https://cloud.ibm.com/docs/openshift?topic=openshift-openshift-relnotesopenshift-aug19)



* [30 August 2019](https://cloud.ibm.com/docs/openshift?topic=openshift-openshift-relnotesopenshift-aug3019)



* New! Paris, France par01 single zone location for Red Hat OpenShift clusters



* [29 August 2019](https://cloud.ibm.com/docs/openshift?topic=openshift-openshift-relnotesopenshift-aug2919)



* Forwarding Kubernetes API audit logs to IBM Log Analysis



* [28 August 2019](https://cloud.ibm.com/docs/openshift?topic=openshift-openshift-relnotesopenshift-aug2819)



* CLI change log
* Version change log



* [26 August 2019](https://cloud.ibm.com/docs/openshift?topic=openshift-openshift-relnotesopenshift-aug2619)



* Cluster autoscaler
* Ingress ALB change log
* New! Seoul, Korea seo01 single zone location for Red Hat OpenShift clusters



* [23 August 2019](https://cloud.ibm.com/docs/openshift?topic=openshift-openshift-relnotesopenshift-aug2319)



* New! Single zone locations for Red Hat OpenShift clusters
[Red Hat OpenShift on IBM Cloud on VPC multiple regions](https://cloud.ibm.com/docs-content/v1/content/9ac5c38b41e0aa1cb4ccc6cc7f547751ec805221/framework-financial-services/vpc/images/roks-multi-region/roks-multi-region-consumer-intranet.svg)

Figure 2. Red Hat OpenShift on IBM Cloud on VPC multiple regions

See the following tutorials for more information:



* [Strategies for resilient applications](https://cloud.ibm.com/docs/solution-tutorials?topic=solution-tutorials-strategies-for-resilient-applications)
* [Deploy isolated workloads across multiple locations and zones](https://cloud.ibm.com/docs/solution-tutorials?topic=solution-tutorials-vpc-multi-region)









 HA for IBM Cloud services 

Your high availability strategy needs to consider all of the IBM Cloud services in your deployment. See [High availabiltty for IBM Cloud services](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-high-availabilityibm-cloud-services) for more information.





 Related controls in IBM Cloud Framework for Financial Services 

See [related controls for high availability](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-high-availabilityrelated-controls).





 Next steps 



* [Development processes and software integrity](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-development-processes)
Load balancer and load balancer monitor for IBM Cloud Provider 1998 2058 Updated image for [CVE-2022-2097](https://nvd.nist.gov/vuln/detail/CVE-2022-2097). 
 Red Hat OpenShift on IBM Cloud. 4.8.42 4.8.46 See the [Red Hat OpenShift on IBM Cloud release notes](https://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.htmlocp-4-8-46). 
 OpenVPN client 2.5.6-r0-IKS-592 2.5.6-r1-IKS-629 Updated Alpine base image to version 3.16 to resolve CVEs. Updated OpenVPN to version 2.5.6-r1. 
 OpenVPN Operator image v1.4.6 v1.4.7 Updated Ansible operator base image to version v1.22.1 to resolve CVEs. 
 OpenVPN server 2.5.6-r0-IKS-591 2.5.6-r1-IKS-628 Updated Alpine base image to version 3.16 to resolve CVEs. Updated OpenVPN to version 2.5.6-r1. 
 Portieris admission controller v0.12.4 v0.12.5 See the [Portieris admission controller release notes](https://github.com/IBM/portieris/releases/tag/v0.12.5). 
 Red Hat OpenShift on IBM Cloud Control Plane Operator v4.8.0-20220614 v4.8.0-20220712 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.8.0+20220712).
Component Previous Current Description 

 RHEL 7 Packages N/A N/A Worker node package updates for [CVE-2023-0286](https://nvd.nist.gov/vuln/detail/CVE-2023-0286), [CVE-2023-0767](https://nvd.nist.gov/vuln/detail/CVE-2023-0767). 
 RHEL 8 Packages 4.18.0-425.13.1 4.18.0-425.19.2 Worker node kernel & package updates for [CVE-2022-4269](https://nvd.nist.gov/vuln/detail/CVE-2022-4269), [CVE-2022-4304](https://nvd.nist.gov/vuln/detail/CVE-2022-4304), [CVE-2022-4378](https://nvd.nist.gov/vuln/detail/CVE-2022-4378), [CVE-2022-4450](https://nvd.nist.gov/vuln/detail/CVE-2022-4450), [CVE-2023-0215](https://nvd.nist.gov/vuln/detail/CVE-2023-0215), [CVE-2023-0266](https://nvd.nist.gov/vuln/detail/CVE-2023-0266), [CVE-2023-0286](https://nvd.nist.gov/vuln/detail/CVE-2023-0286), [CVE-2023-0361](https://nvd.nist.gov/vuln/detail/CVE-2023-0361), [CVE-2023-0386](https://nvd.nist.gov/vuln/detail/CVE-2023-0386). 
 Red Hat OpenShift on IBM Cloud.
[Configuring VPC subnets](https://cloud.ibm.com/docs/openshift?topic=openshift-vpc-subnetsvpc-subnets)



* [Overview of VPC networking in Red Hat OpenShift on IBM Cloud](https://cloud.ibm.com/docs/openshift?topic=openshift-vpc-subnetsvpc_basics)



* [Subnets](https://cloud.ibm.com/docs/openshift?topic=openshift-vpc-subnetsvpc_basics_subnets)
* [Public gateways](https://cloud.ibm.com/docs/openshift?topic=openshift-vpc-subnetsvpc_basics_pgw)
* [Virtual private endpoints (VPE)](https://cloud.ibm.com/docs/openshift?topic=openshift-vpc-subnetsvpc_basics_vpe)
* [Network segmentation](https://cloud.ibm.com/docs/openshift?topic=openshift-vpc-subnetsvpc_basics_segmentation)
* [VPC networking limitations](https://cloud.ibm.com/docs/openshift?topic=openshift-vpc-subnetsvpc_basics_limitations)



* [Creating a VPC subnet and attaching a public gateway](https://cloud.ibm.com/docs/openshift?topic=openshift-vpc-subnetscreate_vpc_subnet)



* [Creating a VPC subnet in the console](https://cloud.ibm.com/docs/openshift?topic=openshift-vpc-subnetscreate_vpc_subnet_ui)
* [Creating a VPC subnet in the CLI](https://cloud.ibm.com/docs/openshift?topic=openshift-vpc-subnetscreate_vpc_subnet_cli)
* [Monitoring security and compliance posture with Red Hat OpenShift](https://cloud.ibm.com/docs/openshift?topic=openshift-manage-security-compliancemonitor-clusters)



* [Available goals for Red Hat OpenShift](https://cloud.ibm.com/docs/openshift?topic=openshift-manage-security-complianceclusters-available-goals)









 Using the compliance operator 

[Using the compliance operator](https://cloud.ibm.com/docs/openshift?topic=openshift-compliance-operatorcompliance-operator)





 Managing the cluster network 



 Classic clusters 

[Configuring classic subnets and IP addresses](https://cloud.ibm.com/docs/openshift?topic=openshift-subnetssubnets)



* [Overview of classic networking in Red Hat OpenShift on IBM Cloud](https://cloud.ibm.com/docs/openshift?topic=openshift-subnetsbasics)



* [VLANs](https://cloud.ibm.com/docs/openshift?topic=openshift-subnetsbasics_vlans)
* [Subnets and IP addresses](https://cloud.ibm.com/docs/openshift?topic=openshift-subnetsbasics_subnets)
* [Finding subnets provisioned in your account](https://cloud.ibm.com/docs/openshift?topic=openshift-subnetsfinding_subnets_account)
* [Network segmentation](https://cloud.ibm.com/docs/openshift?topic=openshift-subnetsbasics_segmentation)



* [Using existing subnets to create a cluster](https://cloud.ibm.com/docs/openshift?topic=openshift-subnetssubnets_custom)
* [Managing existing portable IP addresses](https://cloud.ibm.com/docs/openshift?topic=openshift-subnetsmanaging_ips)
About IBM Cloud Load Balancer 

The IBM Cloud® Load Balancer service offers the following features:



*  Public (internet-facing) load balancer



*  Publicly accessible service through its fully qualified domain name (FQDN)
*  Back-end server instances on private subnets



*  Internal load balancer



*  Privately accessible service through its fully qualified domain name (FQDN)
*  Client requests are routed over the private network
*  Back-end server instances on private subnets



*  Basic load balancing



*  Traffic distribution based on layer 4 application port information
*  Support for HTTP, HTTPS, and TCP-based applications
*  Variety of load-balancing methods, such as round robin, weighted round robin, and least connections
*  Load balancing among virtual server and bare metal compute instances residing locally within a data center



*  Server health checks



*  Periodic monitoring of server health to ensure that traffic is forwarded to healthy servers only
*  Layer 4 health checks for TCP ports and Layer-7 health checks for HTTP port



*  SSL offload: Termination of incoming SSL (HTTPS) traffic that uses plain-text HTTP communication with back-end servers
*  Advanced traffic management



*  Client stickiness (session persistence)
*  Maximum connections per virtual port



*  Easy management using an intuitive graphical interface and API
*  Built-in reliability
*  Usage-based pricing
*  Monitoring: Monitors the throughput, active connections and connection rate metrics for HTTP, HTTPS, and TCP protocols over user-specified time intervals.
*  Layer 7 support



*  HTTP/HTTPS traffic is routed to different back-end services based on the HTTP header, and is done by using policies and rules. Rules are used to classify the traffic and are based on the HTTP header fields. When the traffic matches all the rules, an action that is specified by the policy is taken.



*  Multi-Zone Region (MZR) support: Load balancer nodes are instantiated in different data centers of an MZR. For more information, see [Multi-Zone Region overview](https://cloud.ibm.com/docs/loadbalancer-service?topic=loadbalancer-service-multi-zone-region-mzr-overview).
*  Data Logs: With data logs enabled, load balancer logs are forwarded to the [IBM Log Analysis](https://cloud.ibm.com/catalog/services/ibm-log-analysis-with-logdna) where customers can view their data logs.
* More information on [Direct Link 1.0](https://cloud.ibm.com/docs/direct-link). To find from a specified site location to IBM Cloud and which network service providers are available, use [Cloud Pathfinder for IBM Cloud](https://ibm.find.cloud) (powered by [Cloudscene](https://cloudscene.com))





IBM Cloud® Classic Infrastructure offers firewalls that can provide your Bare Metal Servers with a layer of security that is provisioned on demand and designed to eliminate service interruptions.

Within the Classic Infrastructure network, there are many Gateway Appliance and Firewalls to help prevent unwanted traffic from hitting your server, help reduce your attack vulnerability, and let your server resource be dedicated for its use. Based on your specific performance and feature requirements, you can choose one of the following options:



* Shared firewall (multiple options, see [Getting Started Hardware Shared Firewall](https://cloud.ibm.com/docs/hardware-firewall-shared?topic=hardware-firewall-shared-getting-started)),
* Dedicated firewall (multiple options, see [Getting Started Hardware Dedicated Firewall](https://cloud.ibm.com/docs/hardware-firewall-dedicated?topic=hardware-firewall-dedicated-getting-started)),
* [Fortinet FortiGate security appliance](https://cloud.ibm.com/docs/fortigate-10g?topic=fortigate-10g-getting-started).







 Connectivity options within the IBM Cloud VPC Infrastructure network 



* Floating IP, a public internet IPv4 address, which can be configured with Security Groups to allow only certain network connection access on defined protocols and ports from specified source/target addresses. For initial tests option is often used, with more detail in the short guide on [Connecting to your Linux Virtual Server instance](https://cloud.ibm.com/docs/vpc?topic=vpc-vsi_is_connecting_linux).
* [IBM Cloud Transit Gateway CLI plug-in](https://cloud.ibm.com/docs/tg-cli-plugin?topic=tg-cli-plugin-transit-gateway-cli) (ibmcloud tg)
* [IBM Cloud® Virtual Private Cloud CLI plug-in](https://cloud.ibm.com/docs/vpc?topic=vpc-infrastructure-cli-plugin-vpc-reference) (ibmcloud is)
* [IBM Event Streams CLI plug-in](https://cloud.ibm.com/docs/EventStreams?topic=EventStreams-cli_reference) (ibmcloud es)
* [IBM Key Protect CLI plug-in](https://cloud.ibm.com/docs/key-protect?topic=key-protect-cli-plugin-key-protect-cli-reference) (ibmcloud kp)
* [IBM Power Systems™ Virtual Server CLI plug-in](https://cloud.ibm.com/docs/power-systems-vs?topic=reference-cli) (ibmcloud pi)
* [IBM Cloud VPC CLI plug-in](https://cloud.ibm.com/docs/vpc?topic=vpc-infrastructure-cli-plugin-vpc-reference) (ibmcloud vpc-infrastructure)
* [IBM Watson Query CLI plug-in](https://cloud.ibm.com/docs/watson-query-cli-plugin?topic=watson-query-cli-plugin-CLI-name) (ibmcloud watson-query)



The IBM Cloud CLI and plug-ins are regularly updated to the latest available versions. For the full list of installed plug-ins and their versions, run ibmcloud plugin list in Cloud Shell.





 Tools 



* Apache Ant (ant)
* Apache Maven (maven)
* Bazaar version control system (bzr)
* Calico CLI (calicoctl)
* cURL (curl)
* Docker (docker)
[IBM  Cloud](https://cloud.ibm.com/)

 IBM Cloud is not available 

Try again later, or check the [IBM Cloud status page](https://ibm.biz/bluemixstatus) for info.



*  [Dashboard](https://cloud.ibm.com/)
*  [Catalog](https://cloud.ibm.com/catalog)
*  [Cloud Status](https://cloud.ibm.com/status)
*  [Documentation](https://cloud.ibm.com/docs)



![503.svg](https://cloud.ibm.com/maintenance/resources/images/503.svg)
Other resources for IBM Cloud Load Balancer 

These resources are created by IBM and some of our partners and customers.



*  Blog - [Improved security and More: The latest for IBM Cloud® Load Balancer, by Jay Kidambi and Allan Hu](https://www.ibm.com/cloud/blog/updates-cloud-load-balancer?)
*  Education - [Load Balancing: How load balancing optimizes website and application performance](https://www.ibm.com/cloud/learn/load-balancing)
IBM Cloud Security and Compliance Center 99.999% [Understanding high availability and disaster recovery for Security and Compliance Center](https://cloud.ibm.com/docs/security-compliance?topic=security-compliance-ha-dr) 
 IBM Cloud Shell 99.999% [Understanding high availability and disaster recovery for Cloud Shell](https://cloud.ibm.com/docs/cloud-shell?topic=cloud-shell-ha-dr) 







 Compute services 

The following table describes the service level objectives (SLOs) for the high impact IBM Cloud compute services in a high availability configuration.



Table 8. Service level objectives (SLOs) for the IBM Cloud compute services

 Compute service Availability target High availability guidance 

 Cloud Functions 99.999% [Understanding high availability and disaster recovery for Cloud Functions](https://cloud.ibm.com/docs/openwhisk?topic=openwhisk-ha_dr) 
 IBM Cloud Satellite 99.999% [High availability and disaster recovery for Satellite](https://cloud.ibm.com/docs/satellite?topic=satellite-ha) 







 Containers services 

The following table describes the service level objectives (SLOs) for the high impact IBM Cloud containers services in a high availability configuration.



Table 9. Service level objectives (SLOs) for the IBM Cloud container services

 Containers service Availability target High availability guidance 

 IBM Cloud Container Registry 99.999% [Understanding high availability and disaster recovery for Container Registry](https://cloud.ibm.com/docs/Registry?topic=Registry-ha-dr) 
 IBM Cloud Kubernetes Service 99.999% [High availability and disaster recovery for IBM Cloud Kubernetes Service](https://cloud.ibm.com/docs/containers?topic=containers-ha) 
 Red Hat OpenShift on IBM Cloud 99.999% [Understanding high availability and disaster recovery for Red Hat OpenShift on IBM Cloud](https://cloud.ibm.com/docs/openshift?topic=openshift-ha) 
 IBM Cloud Code Engine 99.999% [High availability and disaster recovery for Code Engine](https://cloud.ibm.com/docs/codeengine?topic=codeengine-ha-dr)
* [Related controls in IBM Cloud Framework for Financial Services](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-satellite-architecture-bcdrrelated-controls)
* [Next steps](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-satellite-architecture-bcdrnext-steps)







 High availability 

[High availability overview](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-high-availabilityshared-high-availability)



* [HA for the reference architectures](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-high-availabilityha-for-the-reference-architectures)
* [HA in IBM Cloud services](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-high-availabilityibm-cloud-services)
* [Related controls in IBM Cloud Framework for Financial Services](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-high-availabilityrelated-controls)
* [Next steps](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-high-availabilitynext-steps)



[High availability for VPC reference architecture](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-vpc-architecture-high-availabilityvpc-architecture-high-availability)



* [Your workloads on VPC infrastructure](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-vpc-architecture-high-availabilityyour-workloads)
Stay up to date with the IBM Cloud CLI by subscribing to the [IBM Cloud CLI releases repository](https://github.com/IBM-Cloud/ibm-cloud-cli-release/releases/). You'll receive notifications about new IBM Cloud CLI releases.

IBM Cloud CLI supports a plug-in framework to extend its capability. [Discover and install new CLI plug-ins](https://cloud.ibm.com/docs/cli?topic=cli-plug-ins)!

Need a hand with remembering IBM Cloud CLI commands? Print the [IBM Cloud CLI quick reference](https://cloud.ibm.com/media/docs/downloads/IBM%20Cloud%20CLI%20quick%20reference.pdf) to keep commands for common tasks at your fingertips.
IBM Cloud console 
 ![Checkbox icon](https://cloud.ibm.com/docs-content/v1/content/ff5860bfede49db3197c4bbba7f7123769bdc068/icons/checkbox-icon.svg) Create and submit programmatic name Create a programmatic name for your product and submit it for review. IBM Cloud console 
 ![Checkbox icon](https://cloud.ibm.com/docs-content/v1/content/ff5860bfede49db3197c4bbba7f7123769bdc068/icons/checkbox-icon.svg) Verify your partner details Review the Company and Team information and make sure that everything is correct. IBM Cloud console 
 ![Checkbox icon](https://cloud.ibm.com/docs-content/v1/content/ff5860bfede49db3197c4bbba7f7123769bdc068/icons/checkbox-icon.svg) Define your product details Add details, such as your product logo, keywords, description, features, and documentation URL, for your product's entry and details page in the IBM Cloud catalog. IBM Cloud console 
 ![Checkbox icon](https://cloud.ibm.com/docs-content/v1/content/ff5860bfede49db3197c4bbba7f7123769bdc068/icons/checkbox-icon.svg) Define your support details Provide your support site URL, contacts, escalation process, and the locations where your support teams are based. IBM Cloud console 
 ![Checkbox icon](https://cloud.ibm.com/docs-content/v1/content/ff5860bfede49db3197c4bbba7f7123769bdc068/icons/checkbox-icon.svg) Define your pricing information Choose your pricing plan: free or BYOL. If you choose BYOL, provide details about your license. IBM Cloud console