Administering the Db2 service
The following information describes common tasks that an administrator performs to maintain a Db2 database in production.
Note: You can use the Db2 Data Management
Console to administer, monitor, manage, and optimize the performance of Db2
databases. The console is a separate service that you must install.
Service configuration
Task | Required permissions | Details |
---|---|---|
Exec into the Db2 pod | Instance administrator |
To complete common administration tasks, run the |
Cataloging the Db2 database | Instance administrator | Catalog the Db2 database by running CLP or
CLPPlus commands. |
Connecting applications to the Db2 database server | Instance administrator | Connect your applications via JDBC/ODBC to the Db2 database server. |
Connecting to Db2 with a Cloud Pak for Data user ID | Instance administrator | Authenticate with the Db2 service by using your Cloud Pak for Data user ID and password. |
User credentials and supported authentication methods in Db2 | Instance administrator | Connect to the Db2 database service using your Cloud Pak for Data credentials. |
Giving users access to the Db2 database | Instance administrator | Only Administrator can provide other users access to the database. |
Connecting to Db2 ports and services | Instance administrator | You can use the Db2 NodePort service or an external-facing Ingress Controller to connect applications to Db2 on Cloud Pak for Data. |
Connecting clients to the Db2 HADR configuration | Instance administrator | To connect to a Db2 high availability disaster recovery (HADR)
configuration on Cloud Pak for Data, external clients can
use the hostname and IP address of the master node and the NodePort service. |
Configuring TLS client connections with Db2 | Instance administrator | Use transport layer security (TLS) to create secure connections from Db2 clients to the integrated Db2 database server deployed on IBM Cloud Pak for Data. |
Database configuration
Task | Required permissions | Details |
---|---|---|
Changing Db2 configuration settings | Instance administrator | Change configuration settings for:
|
Setting a timezone for new or existing Db2 deployments | Instance administrator | Set your database instance to a specific timezone. |
Upgrading the license of a deployed Db2 service | Instance administrator | After you deploy the Db2 service, you can upgrade your license from Db2 Community Edition to Db2 Advanced Edition. |
Enabling the Db2 Spatial Extender | Instance administrator | You can enable the Db2 Spatial Extender component to store geospatial data in special data types and provide a spatial grid index to improve performance. |
Managing multiple databases on a single Db2 deployment | Instance administrator | You can add, remove, and complete other operations for your databases by using the
manage_databases tool. |
Db2 high availability disaster recovery (HADR) | Instance administrator | Db2 on Cloud Pak for Data supports Db2 high availability disaster recovery (HADR) to protect against data loss on various topologies, including primary and standby on the same or different Red Hat OpenShift clusters and within the same or different projects (namespaces). |
Security
Task | Required permissions | Details |
---|---|---|
Exporting Cloud Pak for Data audit records to a security information and event management solution | Instance administrator | Record user activities for Db2. |
Updating the Db2 password secrets | Instance administrator | Change database password secrets. |
Locating the keystore for a Db2 database | Instance administrator | Locate the keystore for your database. |
Db2 SCC capabilities | Instance administrator | When you install the Db2 service, custom security context constraints (SCC) are automatically created for the service. |
Updating the Db2 SSL certificate after the Cloud Pak for Data self-signed certificate is updated | You must update the Db2 SSL certificate when the Cloud Pak for Data self-signed certificate is updated. | |
Configuring audit logging for Db2 | Instance administrator | Configure audit logging for your database. |
Configuring log streaming for Db2 | Instance administrator | Configure log streaming for your database. |
Backup and restore
Task | Required permissions | Details |
---|---|---|
Backing up and restoring Cloud Pak for Data | Cluster administrator | Choose the correct method to back up and restore Cloud Pak for Data. |
Enabling automatic backup in Db2 | Instance administrator | Enable automatic database backup as part of your disaster recovery strategy to enable Db2 to back up your database both properly and regularly |
Backing up a Db2 database | Instance administrator | Back up your Db2 database on Cloud Pak for Data either in online or offline mode. |
Restoring a Db2 database | Instance administrator | Restore your Db2 database on Cloud Pak for Data either from an offline backup or online backup. |
Deleting a custom resource for backing up or restoring Db2 | Instance administrator | You cannot recover a custom resource that has been deleted. |
Backing up and restoring Db2 with IBM Spectrum Protect (Tivoli Storage Manager) | Instance administrator | You can back up Db2 on Cloud Pak for Data by using IBM Spectrum Protect, formerly known as Tivoli Storage Manager. |
Resource management
Task | Required permissions | Details |
---|---|---|
Manually scaling resources for services | Not supported | |
Automatically scaling resources for services | Not supported | |
Shutting down and restarting services | Instance administrator | Manually shut down Db2 to prevent it from using resources. You can restart the service when you need to use it again. |
Scaling up Db2 | Instance administrator | Add more memory and CPU resources for your database. |
Changing your deployment to use dedicated resources | Instance administrator | Allocate dedicated resources to be used exclusively for your database. |
Stopping and starting a Db2 instance | Instance administrator | Temporarily stop your Db2 database to complete maintenance tasks. |
Managing multiple databases on a single Db2 deployment | Instance administrator | Configure your Db2 to use multiple databases. |
Shutting down and restarting a Db2 instance | Instance administrator | Shut down a Db2 database to reduce resource consumption. |
Support
Task | Required permissions | Details |
---|---|---|
Using the db2support tool in Db2 | Instance administrator | Gather information about your Db2 environment. |
Viewing Db2 log files | Instance administrator | View two categories of Db2 log files, container logs and Db2 diagnostic logs. |
Using the OpenShift must-gather utility for Db2 | Instance administrator | Gather data about the Red Hat OpenShift cluster where your Db2 service runs, as well as database-specific information, by using the OpenShift must-gather utility. |
Db2 node failure behavior and expectations | Instance administrator | The Db2 service maintains high availability at the pod level. This includes automatic intra-container recovery if any components within the container fail, and automatic container recovery if the container fails. |
Managing Db2 transaction logs | Instance administrator | Remove unused log files to increase storage space for your database. |
Managing diagnostic directories for Db2 | Instance administrator | As a database administrator, you can clean up files created during various processes completed by Db2. |
Automating tasks with the Administrative Task Scheduler (ATS) for the Db2 service | Instance administrator | You can use the Db2 Administrative Task Scheduler (ATS) command-line interface to rotate SSL certificates and manage diagnostic log files. |
Monitoring the Db2 service | Instance administrator | You can monitor the data from your Db2 databases by first enabling monitoring. |
Data migration
Task | Required permissions | Details |
---|---|---|
Loading data into Db2 | Instance administrator | To load data into Db2 on Cloud Pak for Data, the data must be in a location that is visible from within the Db2 container. |