Administering Db2 Warehouse
The following information describes common tasks that an administrator performs to maintain a Db2 Warehouse database in production.
Note: You can use the Db2 Data Management
Console to administer, monitor, manage, and optimize the performance of Db2
Warehouse
databases. The console is a separate service that you must install.
Service configuration
| Task | Required permissions | Details |
|---|---|---|
| Exec into the Db2 Warehouse pod with catalog partition | Instance administrator | To complete common administration tasks, run the exec command on the Db2
Warehouse pod. |
| Cataloging the Db2 Warehouse database | Instance administrator | Catalog the Db2
Warehouse database by running CLP or
CLPPlus commands. |
| Connecting applications to the Db2 Warehouse database server | Instance administrator | Connect your applications via JDBC/ODBC to the Db2 Warehouse database server. |
| Connecting to Db2 Warehouse with a IBM Software Hub user ID | Instance administrator | Authenticate with the Db2 Warehouse service by using your IBM Software Hub user ID and password. |
| User credentials and supported authentication methods in Db2 Warehouse | Instance administrator | Connect to the Db2 Warehouse database service using your IBM Software Hub credentials. |
| Giving users access to the Db2 Warehouse database | Instance administrator | Only Administrator can provide other users access to the database. |
| Connecting to Db2 Warehouse ports and services | Instance administrator | You can use the Db2 Warehouse NodePort service or an external-facing Ingress Controller to connect applications to Db2 Warehouse on IBM Software Hub. |
| Connecting clients to the Db2 Warehouse HADR configuration | Instance administrator | To connect to a Db2
Warehouse high availability disaster recovery (HADR)
configuration on IBM Software Hub, external clients can
use the hostname and IP address of the master node and the NodePort service. |
| Configuring TLS client connections with Db2 Warehouse | Instance administrator | Use transport layer security (TLS) to create secure connections from Db2 Warehouse clients to the integrated Db2 Warehouse database server deployed on IBM Software Hub. |
Database configuration
| Task | Required permissions | Details |
|---|---|---|
| Changing Db2 Warehouse configuration settings | Instance administrator | Change configuration settings for:
|
| Setting a timezone for new or existing deployments | Instance administrator | Set your database instance to a specific timezone. |
| Q Replication for Db2 Warehouse | Instance administrator | Use Q Replication to achieve continuous availability, including disaster recovery, for business continuity. |
| Db2 Warehouse high availability disaster recovery (HADR) | Instance administrator | Configure high availability disaster recovery (HADR) for your database. |
Security
| Task | Required permissions | Details |
|---|---|---|
| Exporting IBM Software Hub audit records to a security information and event management solution | Instance administrator | Record user activities for Db2 Warehouse. |
| Updating the Db2 Warehouse password secrets | Instance administrator | Change database password secrets. |
| Locating the SSL keystore for a Db2 Warehouse database | Instance administrator | Locate the keystore for your database. |
| Db2 Warehouse SCC capabilities | Instance administrator |
When you install the Db2 Warehouse service, custom security context constraints (SCC) are automatically created for the service. |
| Roles and permissions required for Db2 Warehouse | Instance administrator | You must have certain roles and permissions on the IBM Software Hub platform to install and use the Db2 Warehouse service on IBM Software Hub. |
| Updating the Db2 Warehouse SSL certificate after the IBM Software Hub self-signed certificate is updated | Instance administrator |
When the IBM Software Hub self-signed certificate is updated, you must also update the Db2 Warehouse SSL certificate. |
| Configuring audit logging for Db2 Warehouse | Instance administrator | Configure audit logging for your database. |
| Configuring log streaming for Db2 Warehouse | Instance administrator | Configure log streaming for your database. |
Backup and restore
| Task | Required permissions | Details |
|---|---|---|
| Backing up and restoring IBM Software Hub | Cluster administrator | Choose the correct method to back up and restore IBM Software Hub. |
| Enabling automatic backup in Db2 Warehouse | Instance administrator | Enable automatic database backup as part of your disaster recovery strategy to enable Db2 Warehouse to back up your database. |
| Backing up a Db2 Warehouse database | Instance administrator | Back up your Db2 Warehouse database on IBM Software Hub either in online or offline mode |
| Restoring a Db2 Warehouse database | Instance administrator | Restore your Db2 Warehouse database on IBM Software Hub either from an offline backup or online backup. |
| Backing up and restoring Db2 Warehouse with IBM Spectrum Protect (Tivoli Storage Manager) | Instance administrator | Back up Db2 Warehouse on IBM Software Hub by using IBM Spectrum Protect. |
Resource management
| Task | Required permissions | Details |
|---|---|---|
| Manually scaling resources for services | Not supported | |
| Automatically scaling resources for services | Not supported | |
| Shutting down and restarting services | Instance administrator | Manually shut down Db2 Warehouse to prevent it from using resources. You can restart the service when you need to use it again. |
| Scaling up Db2 Warehouse | Instance administrator | Add more memory and CPU resources for your database. |
| Changing your deployment to use dedicated resources | Instance administrator | Allocate dedicated resources to be used exclusively for your database. |
| Stopping and starting a Db2 Warehouse instance | Instance administrator | Temporarily stop your Db2 Warehouse database to complete maintenance tasks. |
| Shutting down and restarting a Db2 Warehouse instance | Instance administrator | Shut down a Db2 Warehouse database to reduce resource consumption. |
Support
| Task | Required permissions | Details |
|---|---|---|
| Using the db2support tool in Db2 Warehouse | Instance administrator | Gather information about your Db2 Warehouse environment. |
| Viewing Db2 Warehouse log files | Instance administrator | View two categories of Db2 Warehouse log files, container logs and Db2 Warehouse diagnostic logs. |
| Using the OpenShift must-gather utility for Db2 Warehouse | Instance administrator | Gather data about the Red Hat OpenShift cluster where your Db2 Warehouse service runs, as well as database-specific information, by using the OpenShift must-gather utility. |
| Db2 Warehouse node failure behavior and expectations | Instance administrator | The Db2 Warehouse service maintains high availability at the pod level. This includes automatic intra-container recovery if any components within the container fail, and automatic container recovery if the container fails. |
| Managing diagnostic directories for Db2 Warehouse | Instance administrator | Remove unused log files to increase storage space for your database. |
| Managing Db2 Warehouse transaction logs | Instance administrator | Delete unneeded log files and directories manually or use the prune
history command. |
| Automating tasks with the Administrative Task Scheduler (ATS) for the Db2 Warehouse service | Instance administrator | You can use the Db2 Warehouse Administrative Task Scheduler (ATS) command-line interface to rotate SSL certificates and manage diagnostic log files. |
| Monitoring the Db2 Warehouse service | Instance administrator | You can monitor the data from your Db2 Warehouse databases by first enabling monitoring. |
Data migration
| Task | Required permissions | Details |
|---|---|---|
| Loading data into Db2 Warehouse | Instance administrator | Load data into you Db2 Warehouse database. |