Migrating data from a Cloud Pak for Business Automation version that does not support an upgrade requires an Administrator to uninstall the current deployment and follow the migration instructions for each component, pointing them to the existing persistent stores

When migrating data from Cloud Pak for Business Automation versions that do not support an upgrade, an Administrator must uninstall the current deployment and follow the migration instructions for each component to point to the existing persistent stores. This process involves migrating data from the existing databases and persistent volumes to the new deployment. This process may also require creating new configurations and customizing the new deployment to match the previous one.

https://www.ibm.com/docs/en/cpfs?topic=operator-architecture-audit-logging-version-370

Rsyslog is an open-source software utility for forwarding log messages in an IP network. It can act as a centralized log server and can also be used as a sidecar in a Kubernetes environment. The Rsyslog sidecar can be used to provide easier adoption of audit logging by shifting the burden of transmitting log messages to the sidecar. This allows for a more streamlined process for implementing audit logging within a Kubernetes environment.

Once a starter deployment of the Cloud Pak for Business Automation is installed, access to the different capability services and applications can be found by opening a config map which contains the route URL to access the components and a secret which contains the credentials to use with the different URLs.

References: [1] https://www.ibm.com/support/knowledgecenter/SSFTN5_2.2.2/cpd/getting_started/accessing_components.html  [2] https://www.ibm.com/support/knowledgecenter/SSFTN5_2.2.2/cpd/getting_started/overview.html

Secrets on Kubernetes master (API server) are not encrypted by default at rest, extra steps are needed to encrypt them. Kubernetes does not automatically encrypt secrets at rest, it is the responsibility of the user to ensure that the secrets are encrypted. There are several ways to encrypt secrets at rest, such as using Kubernetes native encryption, third-party encryption tools or using a cloud provider's encryption services.

To install Operational Decision Manager Standalone CNCF for production, two steps are required:

• Download the container images: The container images are necessary for the installation, and they need to be downloaded and made available to the cluster.
• Download the archive from IBM Passport Advantage (PPA) to get the Helm chart: The Helm chart contains the configuration information necessary to install and deploy the ODM. It can be downloaded from the IBM Passport Advantage website.

It's important to note that other steps such as pruning existing deployment snapshots from the database, deleting the container registry image pull secret, or adding the resAdmin user to the IBM Entitled registry are optional and not required for the installation of Operational Decision Manager Standalone CNCF for production.

When performing an air-gapped upgrade of Cloud Pak for Business Automation, the images used for the upgrade reside in a local registry. An air-gapped environment is one in which there is no external network access, so the images cannot be pulled from a remote registry such as IBM registry, RedHat quay.io registry, or Docker Hub. Instead, the images must be pre-pulled and stored in a local registry that is accessible to the OpenShift cluster.