Setting up the watsonx.ai Studio and watsonx.ai Runtime services

The watsonx.ai Studio and watsonx.ai Runtime services are provisioned automatically with a Lite plan when you sign up for Cloud Pak for Data as a Service. To set up watsonx.ai Studio and watsonx.ai Runtime for an organization, you upgrade the service plans. You allow the node IP addresses access through the firewall.

To set up the watsonx.ai Studio and watsonx.ai Runtime services, complete these tasks:

  1. Upgrade the services.
  2. Allow IP addresses.

Step 1: Upgrade the services to the appropriate plans

Required roles
You must be the IBM Cloud account Owner or Administrator.

To upgrade the services:

  1. Determine the watsonx.ai Studio service plan that you need. The features and compute resources of watsonx.ai Studio vary across the service plans. See watsonx.ai Studio service plans.
  2. While logged in to Cloud Pak for Data as a Service, from the main menu, click Services > Service instances.
  3. Click the menu next to the watsonx.ai Studio service and choose Upgrade service.
  4. Choose the plan you want and click Upgrade.
  5. Repeat the steps for the watsonx.ai Runtime service. The resources and number of deployment jobs vary across the watsonx.ai Runtime service plans. See watsonx.ai Runtime service plans.

Make sure that object storage is configured to allow these users to create catalogs and projects. See Setting up IBM Cloud Object Storage for use with Cloud Pak for Data as a Service.

All users in your IBM Cloud account with the Editor IAM platform access role for all IAM enabled services or for Cloud Pak for Data can now create projects and use all the watsonx.ai Studio and watsonx.ai Runtime tools.

Step 2: Allow IP addresses for watsonx.ai Studio for your region

The IP addresses for the watsonx.ai Studio nodes in each region must be configured as allowed IP addresses for the IBM Cloud account. When allowing specific IP addresses for watsonx.ai Studio, you include the CIDR ranges for the watsonx.ai Studio nodes in each region to allow a secure connection through the firewall.

Required roles
You must have the Editor or higher IBM Cloud IAM Platform role to allow IP addresses.

First look up the CIDR blocks in Cloud Pak for Data as a Service, and then enter them into the Access(IAM) > Settings screen in IBM Cloud. Follow these steps:

  1. From the Cloud Pak for Data as a Service main menu, select Administration > Cloud integrations.
  2. Click Firewall configuration to display the IP addresses for the current region.
  3. Checkmark Show IP ranges in CIDR notation.
  4. Click the icon to copy a CIDR block to the clipboard.
  5. Enter the CIDR block of IP addresses into the Access(IAM) > Settings > Restrict IP address access > Allowed IP addresses for the IBM Cloud account.
  6. Then click Save.
  7. Repeat for each CIDR block until all are entered.
  8. Repeat for each region.

For step-by-step instructions, see IBM Cloud docs: Allowing specific IP addresses.

Next steps

Finish the remaining steps for setting up the platform.

Parent topic: Setting up the platform for administrators