class0 confusion matrix-based metrics not working in tf2

trace back to tf1 vs. tf2 upgrade #48

Here is my proof that (as you sniffed out) there is a subtle issue in the 1H code only for class0, and that for class metrics 1H = non1H and therefore i can optimize by non1H iou until we fix the code:

this is where it happens in tf.keras
https://github.com/tensorflow/tensorflow/blob/e5bf8de410005de06a7ff5393fafdf832ef1d4ad/tensorflow/python/keras/utils/metrics_utils.py#L341-L343


TIKA-2393 Fix Sentiment parser model URLs

Sentiment parser test models URLs are pointed to a specific commit in git instead of HEAD of the master.

The problem of wrong urls has been fix in #330 . Maybe we can close this PR and TIKA-2393


Clean up external message protocol

Remove unused message types (which were the majority)
and related code.
Standardize all ExternalMsg protocols into the simplest one.
Add json encoders and decoders for shrink external messages.
Update ExternalMsgEncoder/Decoder to use the simple external
message protocol with json payloads for shrink messages.

Closes #2031

These changes are transparent to users of the ExternalMsgEncoder and ExternalMsgDecoder (and are related to the same unit tests), except the removed message types, which weren't being used anywhere.

I've added a DO NOT MERGE on this.  I need to make a couple changes before it's ready.

@slfritchie Currently it wouldn't because it doesn't ignore spaces, and really all the JSON decoding/encoding will need improvement.  I'll open an issue.


Update mongo adapter to latest driver

Currently on 1.8. There are several releases since then.

Done.


Add missing require to azure_activedirectory.rb

Fixes #21

This seems like a small (but important) contribution, so no Contribution License Agreement is required at this point. We will now review your pull request.
Thanks,
Microsoft Pull Request Bot

@flojon, thanks for signing the contribution license agreement. We will now validate the agreement and then the pull request.
Thanks, Microsoft Pull Request Bot

This should be merged asap as it fixes missing dependencies.

To any poor soul waiting for this to be merged, you can work around it by adding
require 'net/http' to config/initializers/omniauth.rb

To any poor soul waiting for this to be merged, you can work around it by adding
require 'net/http' to config/initializers/omniauth.rb

Read that before, but I would recommend to use this one: OmniAuth-azure-oauth2
Works perfectly.


Various tweaks

This is a small compilation of tweaks that I have come across while going through the code recently. Nothing necessarily warrants a PR by itself, but as a whole, it seemed worth while.

Apart from the failing build the changes look ok to me.


Bundle

Before CKEditor was asynchronously loading too many files to start
working. Some of those files could fail which would result in broken
editing area. If those files were cached that would result in broken text plugin
This PR bundles the files together and hashes the filename so new versions would always be cache-busted
Also it fixes a possible bug when user would override extraPlugins of ckeditor

overall looks good 👍

Coverage remained the same at 81.579% when pulling bece0c9660c4f1e74157c5247ad631b9b5a809f6 on vxsx:feature/bundle into d6f4ae754107503e9e45215bdc9306a151201ad1 on divio:master.

Coverage remained the same at 81.579% when pulling 3625ce05d0c46ef49670205c3dbcd07984f41204 on vxsx:feature/bundle into d6f4ae754107503e9e45215bdc9306a151201ad1 on divio:master.

Coverage remained the same at 81.579% when pulling 3625ce05d0c46ef49670205c3dbcd07984f41204 on vxsx:feature/bundle into d6f4ae754107503e9e45215bdc9306a151201ad1 on divio:master.

👍

Coverage remained the same at 81.579% when pulling a5accb4b49ed796eb2479f7696a1c400329a356e on vxsx:feature/bundle into 46ae0965e14268cc7006769fd912129a4e2261aa on divio:master.


feat: [CDS-78303]: update doc for encrypt terraform json output

Harness Developer Pull Request
Thanks for helping us make the Developer Hub better. The PR will be looked at
by the maintainers.
What Type of PR is This?

[ ] Issue
[ ] Feature
[ ] Maintenance/Chore

If tied to an Issue, list the Issue(s) here:

Issue(s)

House Keeping
Some items to keep track of. Screen shots of changes are optional but would help the maintainers review quicker.

[ ] Tested Locally
[ ] Optional Screen Shoot.

Please check the Execution Link of the Pipeline for the Website Draft URL. This is located in the Preview Step and also is available in #hdh_alerts. E.g Website Draft URL: https://unique-id--harness-developer.netlify.app


There is a error in output text. but output's token_ids is right.

maybe the error happend in the file detokenize_incrementally.py
the fuc is :
from vllm import LLM
model = LLM('*')
response = model.generate('xxxxx')
the result response.outputs[0].text will be truncationed. but the .tokens_ids is right.
version:
vllm: 0.3.1
torch:2.1.2
cuda:11.8

me too

vllm: 0.3.2

+1


gRPC Python 1.7.0 Library client hangs when called within a fork

Please answer these questions before submitting your issue.
Should this be an issue in the gRPC issue tracker?
Yes
What version of gRPC and what language are you using?
1.7.0 , Python
What operating system (Linux, Windows, …) and version?
macOS, Linux
What runtime / compiler are you using (e.g. python version or version of gcc)
python 2.7.13
What did you do?
I scheduled a celery task with a delay, which is a forked process, from those tasks I'm calling my grpc Ping service, the request just hangs there, timeout is not honored.
I created a sample project to reproduce the issue  https://github.com/dvaldivia/grpc-celery-fork-bug. Start a celery worker, start the grpc service, start django so we schedule some tasks, issue shows.
What did you expect to see?
I expected each celery task (fork) to be able to reach the service
What did you see instead?
Processes hang
Anything else we should know about your project / environment?
if I try to check the connectivity of the client, the task also hangs. Some tasks complete if we downgrade to grpc 1.4.0

This problem can be avoided if I have each thread create it's own stub
When all the threads hang, lsof shows multiple connections stablished, and they stay there until dropped by the grpc server
python2.7 39760 dvaldivia    3u     IPv6 0x828efb87a2868805         0t0        TCP *:50051 (LISTEN)
python2.7 39760 dvaldivia    8u     IPv6 0x828efb87a4fe9945         0t0        TCP localhost:50051->localhost:55054 (ESTABLISHED)
python2.7 39760 dvaldivia    9u     IPv6 0x828efb877cec3605         0t0        TCP localhost:50051->localhost:55079 (ESTABLISHED)
python2.7 39760 dvaldivia   10u     IPv6 0x828efb8786b3c385         0t0        TCP localhost:50051->localhost:55087 (ESTABLISHED)
python2.7 42701 dvaldivia    7u     IPv6 0x828efb87a4feb045         0t0        TCP localhost:55054->localhost:50051 (ESTABLISHED)
python2.7 42707 dvaldivia    7u     IPv6 0x828efb87a4feb045         0t0        TCP localhost:55054->localhost:50051 (ESTABLISHED)
python2.7 42708 dvaldivia    7u     IPv6 0x828efb87a4feb045         0t0        TCP localhost:55054->localhost:50051 (ESTABLISHED)
python2.7 42709 dvaldivia    7u     IPv6 0x828efb87a4feb045         0t0        TCP localhost:55054->localhost:50051 (ESTABLISHED)
python2.7 42710 dvaldivia    7u     IPv6 0x828efb87a4feb045         0t0        TCP localhost:55054->localhost:50051 (ESTABLISHED)
python2.7 42711 dvaldivia    7u     IPv6 0x828efb87a4feb045         0t0        TCP localhost:55054->localhost:50051 (ESTABLISHED)
python2.7 42712 dvaldivia    7u     IPv6 0x828efb87a4feb045         0t0        TCP localhost:55054->localhost:50051 (ESTABLISHED)
python2.7 42713 dvaldivia    7u     IPv6 0x828efb87a4feb045         0t0        TCP localhost:55054->localhost:50051 (ESTABLISHED)
python2.7 42714 dvaldivia    7u     IPv6 0x828efb87a4feb045         0t0        TCP localhost:55054->localhost:50051 (ESTABLISHED)
python2.7 42719 dvaldivia    7u     IPv6 0x828efb87751d2dc5         0t0        TCP localhost:55079->localhost:50051 (ESTABLISHED)
python2.7 42722 dvaldivia   10u     IPv6 0x828efb8786b3bdc5         0t0        TCP localhost:55087->localhost:50051 (ESTABLISHED)

here's a gdb dump of the hanged process
#0 0x00007fef66e6b70d in poll () at ../sysdeps/unix/syscall-template.S:84
#1  0x00007fef638bd6d2 in pollset_work (exec_ctx=0x7ffe82fe2750, pollset=0x7154588, worker_hdl=0x0, now=..., deadline=...)
    at src/core/lib/iomgr/ev_poll_posix.c:979
#2  0x00007fef638de16f in cq_next (cc=0x7154420, deadline=..., reserved=<optimized out>) at src/core/lib/surface/completion_queue.c:844
#3  0x00007fef638dedfe in grpc_completion_queue_next (cc=<optimized out>, deadline=..., reserved=reserved@entry=0x0)
    at src/core/lib/surface/completion_queue.c:873
#4  0x00007fef63883441 in __pyx_pf_4grpc_7_cython_6cygrpc_15CompletionQueue_2poll (__pyx_v_deadline=<optimized out>, __pyx_v_self=0x7fef2ee58e90)
    at src/python/grpcio/grpc/_cython/cygrpc.c:10553
#5  __pyx_pw_4grpc_7_cython_6cygrpc_15CompletionQueue_3poll (__pyx_v_self=0x7fef2ee58e90, __pyx_args=<optimized out>, __pyx_kwds=<optimized out>)
    at src/python/grpcio/grpc/_cython/cygrpc.c:10413
#6  0x00000000004c468a in PyEval_EvalFrameEx ()
#7  0x00000000004c9d8f in PyEval_EvalFrameEx ()
#8  0x00000000004c2765 in PyEval_EvalCodeEx ()
#9  0x00000000004de8b8 in ?? ()
#10 0x00000000004b0cb3 in PyObject_Call ()

Avoiding the reuse of the grpc channels is a workaround, but this won't be as performance
        PING_CHANNEL2 = grpc.insecure_channel("{}:{}".format(PING_HOSTNAME, PING_PORT))
        PING_STUB2 = ping_pb2_grpc.PingServiceStub(PING_CHANNEL2)

        # Do call
        response = PING_STUB2.Ping(ping_pb2.Request(message="PING"), timeout=1.0)

        del PING_CHANNEL2
        del PING_STUB2

@dvaldivia
It seems like you are trying to create the channels before the fork() call, which is known to cause issues.
Does Celery expose some kind of worker initialization hook that is called after fork()?
That would probably be the best place for any channel initialization.

@kpayson64 I tried your suggestion and that does work, creating the channel after the fork() keeps this issue from happening and also re-uses the same connection so we are back in business, should I close this issue or is there another issue to track this concurrency issue con grpc-python ?

Fork kills background threads, that's probably why channel doesn't work right when forked.

#13536  Is probably the best issue to track if you want to create channels before forking.  Its part of a more comprehensive fork support change.


Support to_date() builtin

This pull request does three things:

Adds additional support to arrow for the new date16 type
Adds support for the date16 type to DataFusion
Adds a to_date() builtin to DataFusion that converts a string to_date("YYYY-MM-DD") to a Date16

Related: #84

@DallasC this is a great PR to demo how to add a builtin function! And we also add some missing part work in #54.


Ubuntu public images have sshd_config's PermitRootLogin set to other than "no"

From configuration integration test requirement:
Ensure sshd config has sane default settings:
- PermitRootLogin no

ubuntu 1604 has it as "prohibit-password", which still allows root login through public-key, hostbased and GSSAPI authentication.
ubuntu 1404 has it as "without-password", which is just a synonym for "prohibit-password".
ubuntu 1710 and ubuntu 1804 don't set one config, so it fallbacks to default "prohibit-password" according to documentation.

Was this a false positive? Should actually my test allow "prohibit-password" or are these ubuntu images faulty?

@zmarano : ping. Is this real concern?

I don't believe so but we can bring it up with Canonical.


Publish a package based on a PR comment

Hello, loving pkg.pr.new so far! Has saved so much time fiddling already.
As discussed a bit via DM with @Aslemammad, I'm making an issue for the for-now pretty vague want I have of being able to publish a package based on my PRs, on other people's repos, even without them having pkg.pr.new installed.
Let's say I have a PR on someone else's repo that doesn't use pkg.pr.new (yet). Example: https://github.com/colinhacks/zod/pull/3646. It would be great to still be able to get an easy shareable npm install ... command so that people can kick the tires on my proposal in their downstream projects, even without any interaction from the maintainer.
Since the PR is using my fork under mmkal, rather than colinhacks, and I have the pkg.pr.new GitHub app installed, in theory it may be possible for me to have a kind of shadow repo with an action which:

Is triggered by an @ comment on GitHub
receives the pull request URL for the comment
uses the octokit API to get pull request metadata
uses a GitHub actions workflow (defined... somewhere) to clone the head ref on the pull-request-creator's fork (i.e. in the above example the owner is mmkal not colinhacks)
runs a build command specified in the comment?
runs npx pkg-pr-new publish
replies to the comment with the URL

So in the above example, all I'd need to do to get an installable version of zod with my new feature would be to leave a comment along the lines of:
@pkg-pr-new publish
build: yarn install && yarn build

Several parts of this might be tricky or impossible, including triggering via an @ comment on someone else's repo, figuring out where exactly to define this GitHub Actions workflow so that it has the necessary permissions, and also the best way to share a build command (like npm run build, but would vary by project) via a comment.
There would also be lots of repos with complex setups that this wouldn't work for, but that's probably fine to start with.
Also would need to be careful that it's only possible for mmkal to trigger an action in mmkal's GitHub org to make sure nothing unsafe happens.
But it feels like most of this should be possible? What do you think?

I think it is possible!
But the cost of installing the app and enabling workflows in the fork is way less than implementing this and the layers of abstractions it'd create!
what do you think?


Converted _initialized to BooleanProperty, changed initialized to read only AliasProperty, added lazy initialization of window

Removed side-effects during window import, added lazy initialization of window. This would also help advanced users who want to use multiprocessing with Kivy without side-effects. Removed the bug that Window.initialized was able to be changed/set by users, which should not be the case. Made ``Window.initialized` read-only property.
Reference https://github.com/kivy/kivy/issues/8340

Maintainer merge checklist

[x] Title is descriptive/clear for inclusion in release notes.
[ ] Applied a Component: xxx label.
[ ] Applied the api-deprecation or api-break label.
[ ] Applied the release-highlight label to be highlighted in release notes.
[ ] Added to the milestone version it was merged into.
[ ] Unittests are included in PR.
[x] Properly documented, including versionadded, versionchanged as needed.

Merged into a single pull request by #8376


AttributeError: 'Recognizer' object has no attribute 'recognize_google'

Traceback (most recent call last):
  File "/usr/lib/python3.8/threading.py", line 932, in _bootstrap_inner
    self.run()
  File "/usr/lib/python3.8/threading.py", line 870, in run
    self._target(*self._args, **self._kwargs)
  File "/home/jetson/.local/lib/python3.8/site-packages/speech_recognition/__init__.py", line 568, in threaded_listen
    if running[0]: callback(self, audio)
  File "/home/jetson/FYP/Main.py", line 24, in callback
    command = recognizer.recognize_google(audio).lower()
AttributeError: 'Recognizer' object has no attribute 'recognize_google'

I am using background_listening example of speech_recognition, It was working fine everytime I was using it, but after I installed deepface, its giving me above error

@RehanShk Please report according to the issue template.
It is also helpful to share the entire traceback and the whole script.


fix: Adds code to retrieve config information from policy file analyses.

Adds code that allows config file locations provided in a policy file to be read into Salsa in config.rs

Code still has dead code warnings. Someone will need to clean those up.

This is a very ugly implementation of this feature. With more time, someone (probably me) should write some helper functions in the policy module to avoid all these nasty nested if and match blocks.


Copy function key

If I create a function with auth at the function level, do I have to leave the extension to see the key? I'll need it to test with my client.

We don't have that feature, no. We do allow people to test using either "Copy Function URL" (which will have the key inside it) or "Execute Function Now" (which will use the key under the covers):

Let us know if that's sufficient and we'll close the issue, otherwise we'll keep it open as a feature request. Just because I'm curious: what do you use to test?

Please leave it open as a feature request. I use curl to test.

This issue has become stale and is at risk of being closed. The community has 60 days to upvote the issue. If it receives 5 upvotes we will keep it open and take another look. If not, we will close it. To learn more about how we handle issues, please see our documentation.
Happy Coding!


[ldd-cart] need some updates for IM 1E00 and 1F00

Issue Type
BUG
Describe the issue identified (if applicable)
Building causes a few errors I am not sure how to fix.
 ERROR Class:  - At least one value for pds:local_reference_type or pds:reference_type must be defined for geom:Body_Identification_Base/pds:Internal_Reference.
 ERROR Class:  - At least one value for pds:local_reference_type or pds:reference_type must be defined for geom:Frame_Identification_Base/pds:Internal_Reference.
 ERROR Attribute: <coordinate_space_frame_type> - The 'type' attribute must have at least one permissible value.

https://github.com/pds-data-dictionaries/ldd-cart/runs/1455829248#step:5:128
LDD Dictionary Version
v1950
PDS4 IM Version
1E00 and 1F00
Need-by Date
Dec, 5, 2020 for new release dealine.

@thareUSGS https://pds-data-dictionaries.github.io/development/ldd-how-to.html#specify-enumerated-values-for-attributes-within-inherited-classes

@thareUSGS also, this may actually be something that needs to be fixed in the GEOM dictionary. I believe Mitch was looking into it, but not sure where that is at.

@mit3ch do you have any comments for <coordinate_space_frame_type> (see above). thanks

CART is now building. Need to add CI (github actions) to create a release (although GEOM is also built here which can be removed from built directories. That might mean a manual release?


[WIP] feat: 5.x Cilium vxlan extension

Lgtm. However, since we also have Calico, is it possible to ensure user chooses 1 of the 2?

Re-implemented in #875 for simpler merge


Unicode example from readme doesn't work

error[E0432]: unresolved import `qrcode::render::unicode`
  --> src/vcards.rs:22:5
   |
22 | use qrcode::render::unicode;
   |     ^^^^^^^^^^^^^^^^^^^^^^^ no `unicode` in `render`

@Niedzwiedzw Which version are you using? I had this same issue until I updated to version 0.12

i decided I don't need the feature actually :)


On/Off Tile incorrectly showing ON most of the time

Hi - I have an issue where the on/off tile always seems to default to showing as being ON - regardless of whether it is indeed on. The attached screengrab from my phone shows what I mean (the light is physically OFF).
I can operate the light with no problem however I cannot determine what state it's in to start with. To be sure - I have to first turn it OFF with the app, just so that I actually know where I'm starting from.
Many thanks for any help anyone can offer with this,
Mark

Hi, I just installed the fibaro dimmer 2 and have the same problem as you do. my other devices respond properly in the smartthings app. Does installing the custom device handler resolve this problem, or do I have a defective dimmer 2?


documented fmriprep wf in a tutorial

Hope its helpful - let me know if there are any issues you'd rather see fixed :)

great :) Thank you so much for the contribution =)

Thanks @kel-github!


archive/tar: fails on Windows and Plan9

Commit f271f92 broke archive/tar TestHeaderRoundTrip on Windows.
--- FAIL: TestHeaderRoundTrip (0.00s)
	tar_test.go:300: i=9: Linkname: got , want file.txt
	tar_test.go:303: &tar.Header{Name:"hard.txt", Mode:33188, Uid:0, Gid:0, Size:0, ModTime:time.Time{sec:63496197716, nsec:0, loc:(*time.Location)(0x63bfe0)}, Typeflag:0x31, Linkname:"file.txt", Uname:"", Gname:"", Devmajor:0, Devminor:0, AccessTime:time.Time{sec:0, nsec:0, loc:(*time.Location)(nil)}, ChangeTime:time.Time{sec:0, nsec:0, loc:(*time.Location)(nil)}, Xattrs:map[string]string(nil)} &tar.Header{Name:"hard.txt", Mode:33188, Uid:0, Gid:0, Size:0, ModTime:time.Time{sec:63496197716, nsec:0, loc:(*time.Location)(0x63bfe0)}, Typeflag:0x31, Linkname:"file.txt", Uname:"", Gname:"", Devmajor:0, Devminor:0, AccessTime:time.Time{sec:0, nsec:0, loc:(*time.Location)(nil)}, ChangeTime:time.Time{sec:0, nsec:0, loc:(*time.Location)(nil)}, Xattrs:map[string]string(nil)}
	tar_test.go:304: i=9: Typeflag: got '0', want '1'
	tar_test.go:288: i=10: Uid: got 0, want 1000
	tar_test.go:291: i=10: Gid: got 0, want 1000
	tar_test.go:294: i=10: Uname: got "", want "slartibartfast"
	tar_test.go:297: i=10: Gname: got "", want "users"
FAIL
FAIL	archive/tar	0.085s

From http://build.golang.org/log/44c73d1d106d1d1affeeab2bca9b49d803f9bdb3
@vbatts

Disabling the test on Windows for now in https://golang.org/issue/11590
But we need to address this better for 1.5.

Also plan9.
/cc @alexbrainman @0intro

Also nacl.


pfe-nav text color

Impacted component(s)

pfe-navigation

The pfe-navigation link-list--header should use pfe-var(text) instead of pfe-var(ui-complement)

Steps to reproduce

Go to the nav demo page
Click on a main menu item to expand the menu
Inspect the header of a column in the tray
The column header text ("By Solution") is #464646

Expected behavior

The column header text should be #151515

Screenshots
current:

should be:

Related issues

https://github.com/patternfly/patternfly-elements/issues/1006

Rally: #US261998 https://rally1.rallydev.com/#/detail/userstory/399031068408


Add specification of a custom cookiecutter template for role creation

This feature has been requested in #1637
With this simple feature, now, a user can specify a cookicutter template folder, instead of using the default one. This is similar to the init template command (which I discovered after I began work on this ...). However, by using the role command, the molecule folder will also be included, meaning that an institutionnal template can be converted to use molecule instantly!
New unit tests have been added, as I've tried coding using TDD. I created a fixture in test_role.py  that creates a temporary cookicutter template folder. Not sure if this is best practice or not, so feel free to recommend another way to test this. What I didn't want was to depend on fixed files in the test folder, and this was the least clutered way I found to do this.
The option  --template or -t have been added to the command. The click framework validates the template path before sending it down to the code, but a failsafe for absent directory is also present.
If someone could recommend how to handle an absent parameter that isn't required, like with this option, I'd appreciate it. Currently, this is the code before role.execute() is called:
if template is not None:
        command_args['template'] = template

I feel this could be cleaner.
Unit tests have been run succesfully and I've tested the option by building the package. No issues were detected.
PR Type

Feature Pull Request

@lwm, What are scenarios in molecule, and how are they used? How do they relate to the template option? I can't seem to find it in the documentation. I could add it in another PR, but for now, I want to understand so I can make a proper doc for this PR.

@AlexisLessard, the documentation is not the best right now but there is a PR out (I made it) with a 'Getting Started Guide' which tries to cover an introductor explanation of what scenarios are. See https://github.com/ansible/molecule/pull/1719/files#diff-87a7eaaee165971087f4caa913a88277R35. Other than that, we currently have https://molecule.readthedocs.io/en/latest/configuration.html#scenario. Hope that is enough to get you going! Any docs PR you can add would be really appreciated.

Closinga and reopening to trigger a build

Thanks for your patience @AlexisLessard, pushing this onto the v2.21 train :rocket:

Perfect| Thank you @decentral1se! Was the documentation I wrote helpful? If so, will you approve the changes?

I don't have cycles to take another review pass just now but I will do once v2.20 drops!

I'll reopen and close this PR to trigger a build when the main build will pass. Afterwards, it should be done.

Closing and reopening to trigger a build.


Black screen!!!

Operating System: Windows 2008 R2
App Version: 2.10.5

[ yes ] I have tested with the latest version
[ yes ] I can simulate the issue easily

Description

Very often when you open the browser (chrome or firefox)
Current Behavior

Black screen!!!

Expected Behavior

This happens to Chrome itself. Issue is linked sometimes with a) old video card drivers b) automatic video drivers installation.
Solution is to install latest drivers if you dont have Windows 10, reboot PC

Check how Chrome works. If it fails, then its a chromium or vmware issue

This is a terminal server, there is no GPU acceleration.
Is it possible to do both in slack.exe --disable-gpu ??

VMWare also has settings about GPU acceleration. So its worth to play with it.

ok

Rocket.chat 2.16.2
Windows 7 x64
Intel HD 2500
Same problem
Solution - change Direct3D to software mode.
I use DirectX SDK Link

Dear Monolithys!
Can you explain more details about your solution for the problem! Thanks you so much

ok, i write how i solve it.
If you see same picture as at top. Download DirectX SDK Link You need it, be course Windows 7, 8, 8.1, 10 do not give you choices to turn on/off DirectX Acceleration, it alway on if possible.
Next use "DiretX Control Panel" - for 32 bit OS systems or "DiretX Control Panel(64-bit)" for 64 bit OS systems.

Just set "Software Only" mode and apply. (Must set in right version utility x32/x64 - or nothing changes).
Next time you run Rocket - all working fine.
Of couse you lost some performance, but i did not feel anything...


chore(e2e): add OPA remote module e2e test

Description
Now that https://github.com/defenseunicorns/lula/pull/826 is merged and we have a .rego file in the repository, we can add an e2e test that exercises the remote module import path.
Related Issue
Relates to https://github.com/defenseunicorns/lula/pull/826
Type of change

[ ] Bug fix (non-breaking change which fixes an issue)
[ ] New feature (non-breaking change which adds functionality)
[x] Other (security config, docs update, etc)

Checklist before merging

[x] Test, docs, adr added or updated as needed
[ ] Schema Updates applied
[x] Contributor Guide Steps followed

Looks like one of the unit tests for network is failing (looking for the checksum of the file changed) - should be a quick update!

Missed those. Should be ok now!


Add support to keep manual line feeds

Description
Currently there is only an on / off support for having XML attributes on new line i.e. either we can have all attributes on one line or each attribute on separate line. It will be really helpful to have an option to keep manually added line feeds between attributes, while reformatting.
This will achieve following -
<Resource name="jdbc/dt-smart" poolName="DT-Smart-Pool" auth="Container"
          factory="com.zaxxer.hikari.HikariJNDIFactory" type="javax.sql.DataSource" dataSourceClassName="org.postgresql.ds.PGSimpleDataSource"
          dataSource.ApplicationName="DT-Smart" dataSource.serverName="localhost" dataSource.portNumber="5432"
          minimumIdle="1" maximumPoolSize="25">
</Resource>

instead of this -
<Resource name="jdbc/dt-smart" poolName="DT-Smart-Pool" auth="Container" factory="com.zaxxer.hikari.HikariJNDIFactory" type="javax.sql.DataSource" dataSourceClassName="org.postgresql.ds.PGSimpleDataSource" dataSource.ApplicationName="DT-Smart" dataSource.serverName="localhost" dataSource.portNumber="5432" minimumIdle="1" maximumPoolSize="25"></Resource>

or this -
<Resource name="jdbc/dt-smart"
	poolName="DT-Smart-Pool"
	auth="Container"
	factory="com.zaxxer.hikari.HikariJNDIFactory"
	type="javax.sql.DataSource"
	dataSourceClassName="org.postgresql.ds.PGSimpleDataSource"
	dataSource.ApplicationName="DT-Smart"
	dataSource.serverName="localhost"
	dataSource.portNumber="5432"
	minimumIdle="1"
	maximumPoolSize="25"></Resource>

Current Workarounds
There are no workarounds currently other than disabling the entire formatting.

I unfortunately will not have the bandwidth to implement this in the near future. If anyone wants to try their hand at a PR, I'm happy to review and include it!

sorry - need to find another extension


Fix map comments

This grammar treats trailing text following a double quote in a map command as a comment, but Vim does not - the right hand side of the map should be treated as input to the map command. E.g.:
inoremap nac something " This is not a comment

Should map nac to the literal text something " This is not a comment, and the " This is not a comment section should not be highlighted as a comment.
This PR fixes this issue, and also adds a script that calls any-json (installed by npm as a dev dependency) to convert the CSON format to a JSON format, for editors that support JSON format, but not CSON format.

It's been a while since I've touched this repository (or Vim, for that matter). I wasn't familiar with the formal syntax of the map command(s), and after perusing Vim's :help map page, I've decided the best way to fix this would be to generate the grammar from Vim's own vim.vim source (beyond merely scraping keyword lists, that is).[^2] That's not likely to happen in the near future, though.
For now, I've pushed a hotfix that applies more sensible highlighting for map-type commands. Here's how it should look on GitHub once there's been another release of Linguist:[^1]

From my reading of :help comment, there are several other commands where " should be highlighted as part of an expression instead of a comment.
/cc @dsarajlic I pilfered your .vimrc for the <angle‑bracket> notation tests. I assume you don't mind. :wink:
[^1]: A release was cut recently as of this writing, so it may be a while since you see updates to Vim script highlighting across GitHub.com.
[^2]: That'd involve a proper conversion of Vim syntax definitions to/from TextMate-compatible grammrs (an undertaking I've been planning for years now, though my lazy arse has yet to start).

That's great, thanks for getting the mapping issue sorted - it can be a source of confusion that mappings weren't working as expected.


Diffing two dataframes

Brief Description
From a chat in the SciPy 2020 virtual slack, I would like to propose adding a df1.diff_against(df2) function.
Diffing stuff can get pretty complex, so I'd advocate to start simple and not rush to an implementation. In particular, defining the key categories of diffing, and how they would work, is probably the important piece here.
In diffing two dataframes, the function should probably report the following minimum categories of differences:

Differences in column names.
For overlapping column names, differences in dtypes
For overlapping column names, differences in values
Difference in row indices (i.e. which row indices are present in one but not the other)
For overlapping row indices, differences in values (dtypes irrelevant here)
Differences in nullity.

Example API
I think the key behaviour here is that each category of diff should be controlled by its own kwarg.
I don't know which design is better:
# The skeleton, which does not have any kwargs set, and should return a full diff.
df.diff_against(df2)

# Compare column names only:
df.diff_against(df2, diff_column_names=True)

# Compare overlapping column names' dtypes and values only:
df.diff_against(df2, diff_column_data=True)

OR:
# The skeleton, which does not have any kwargs set, and should **error out**.
df.diff_against(df2)

# Compare column names only:
df.diff_against(df2, diff_column_names=True)

# Compare overlapping column names' dtypes and values only:
df.diff_against(df2, diff_column_data=True)

# Diff everything
df.diff_against(df2, diff_all=True)

OR something else?
Also, what should the output look like?

Python warnings/logging?
Raise an error, so this can be used in tests?

I will raise this on the SciPy slack to solicit community suggestions.

Thanks @ericmjl for putting this together! Also average absolute and relative errors per some given slice defined using say groupby, as well as min and max absolute and relative error (in each grouping if desired). The stuff that https://pandera.readthedocs.io/en/latest/index.html does is also useful.

I wonder if having some real world scenarios wouldn't help to define the API and the result.

@VPerrollaz yes, it would. Haha, I also realized why I usually have to do a double-take when reading your replies, it's because of the writing style!
But in any case, because the topic came out of SciPy 2020, and in the chat someone also found the tool daff, I'm going to close this issue. It was a nice intellectual activity though.

Since english is not my mother tongue don't hesitate to point out if I say something weird.
Daff seems indeed pretty powerful and in particular does patches which seemed hard to implement.

Since english is not my mother tongue don't hesitate to point out if I say something weird.

Your English is actually impeccable! I guess I read a direct style more easily. For example, the sentence

I wonder if having some real world scenarios wouldn't help to define the API and the result.

I might have written it as:

I wonder if having some real world scenarios could help to define the API and the result.

The implied message is the same, which is an irony of the English language -- go make some examples! (haha!)
I'd say your use of the former form tells me your mastery over English is pretty awesome :). (In some corners of the English-speaking world, it'd be called "pretty badass", which is yet another ironic wart in the language!)
Anyways, this wasn't a critique of your language skills, it's really good :smile:. I just finally came to the realization that my head has been so attuned to direct style of communication. haha. :)

Thank you, I'm never completely sure of how clear I am in english. To be honest I think even in french I tend to use way too many indirection.


Section Header Error on Initalization

So I keep hitting this issue upon attempting 'bookworm init' (with and without sudo), and I'm not exactly clear on what's up (it also now appears when running the setup test as well). If it helps, I'm running a local Ubuntu 16.04 VM. Trace is below:
Traceback (most recent call last):
File "/usr/local/bin/bookworm", line 9, in
load_entry_point('bookwormDB==0.4.0', 'console_scripts', 'bookworm')()
File "/usr/local/lib/python2.7/dist-packages/bookwormDB/manager.py", line 567, in run_arguments
getattr(my_bookworm,args.action)(args)
File "/usr/local/lib/python2.7/dist-packages/bookwormDB/manager.py", line 163, in init
self.configuration(args.yes)
File "/usr/local/lib/python2.7/dist-packages/bookwormDB/manager.py", line 330, in configuration
bookwormDB.configuration.create(ask_about_defaults=askk)
File "/usr/local/lib/python2.7/dist-packages/bookwormDB/configuration.py", line 39, in create
systemConfigFile.read(["/.my.cnf",os.path.expanduser("~/my.cnf"),os.path.expanduser("~/.my.cnf"),"/etc/mysql/my.cnf","/etc/my.cnf","/root/.my.cnf","bookworm.cnf"])
File "/usr/lib/python2.7/ConfigParser.py", line 305, in read
self._read(fp, filename)
File "/usr/lib/python2.7/ConfigParser.py", line 512, in _read
raise MissingSectionHeaderError(fpname, lineno, line)
ConfigParser.MissingSectionHeaderError: File contains no section headers.
file: /etc/mysql/my.cnf, line: 20
'!includedir /etc/mysql/conf.d/\n'

Thanks for the report. ConfigParser has very strict ideas about what a configuration file should look like, and apparently the new Ubuntu is shipping with something that doesn't match it, in a default place.
I've just pushed a commit that should fix this. https://github.com/Bookworm-project/BookwormDB/commit/8b36af453722689f6d2c8010dcd00d5ee5478b46. Please reopen the issue if it persists.

Did a new clean install of bookworm/mysql and have encountered a new ConfigParser issue. See traceback below:
Traceback (most recent call last):
File "/home/adame/.local/bin/bookworm", line 9, in
load_entry_point('bookwormDB==0.4.0', 'console_scripts', 'bookworm')()
File "/home/adame/.local/lib/python2.7/site-packages/bookwormDB/manager.py", line 567, in run_arguments
getattr(my_bookworm,args.action)(args)
File "/home/adame/.local/lib/python2.7/site-packages/bookwormDB/manager.py", line 163, in init
self.configuration(args.yes)
File "/home/adame/.local/lib/python2.7/site-packages/bookwormDB/manager.py", line 330, in configuration
bookwormDB.configuration.create(ask_about_defaults=askk)
File "/home/adame/.local/lib/python2.7/site-packages/bookwormDB/configuration.py", line 61, in create
print systemConfigFile.get("mysql",field)
File "/usr/lib/python2.7/ConfigParser.py", line 607, in get
raise NoSectionError(section)
ConfigParser.NoSectionError: No section: 'mysql'

Update: I'm also getting this identical error when attempting "bookworm init" on OS X Mavericks (again, fresh install); I wondered it if might be a VM issue, but this seems to prove me wrong. So I'm 100% stumped.

Also, edited my.cnf to ensure "client" and "mysql" fields are present to be read and still getting the same error.

Meant to get this closed - solved this error awhile ago with the help of @edsu.
bookworm init was still getting hung up on the "!includedir /etc/mysql/conf.d/" and "!includedir /etc/mysql/mysql.conf.d/" in standard my.cnf, even post-commit. I ended up solving the problem by creating a dummy my.cnf at another location (etc/bookworm/) and pointing the configuration.py to look at that file.


Remove duplicated files from dv/uvm/core_ibex/common/utils

This PR currently has 2 patches, but the first is a copy of PR #1042 on which it depends. We should merge that first, and a rebase will make this a single commit. Below is the contents of that second commit message:

We now have a clock/reset interface and the dv_utils stuff vendored
from OpenTitan so can delete the duplicates and point the file list at
the vendored files.
The only difficulty is that the clock interfaces are slightly
different, so there are a couple of minor changes to the core_ibex
test lib, renaming "clk_if" to "clk_rst_if" and changing how we apply
resets.
Note that the testbench (core_ibex_tb_top.sv) starts the clock and
resets the DUT at the start of time. This is different from how other
OpenTitan VIP does things (where the reset happens in the sequence),
but this is the smallest change I could make from how it worked
before (where the reset happened in the clock interface itself).

This work is part of the tidy-up that is tracked in issue #985 (item 1 on the TODO list there)

Yep, they work (they didn't at first, because I wasn't starting the clock: it took me a good hour to work out what on earth I'd missed!)


New version does not work

Hi,
I tried to add this library in my project, but the last changes of the last commit does not appears actually if I browse in the code. Maybe, because the name of the last version (3.0.1) is the same as the previous one.
Please, fix it. Thanks

Need to wait for @jhurray to push the latest version to podspec
Before that happen you can install the master branch using pod 'ChainableAnimations', :git => 'https://github.com/jhurray/JHChainableAnimations.git'


AttributeError in plotting scattertext

Hi,
I am in learning scattertext. I have a dataset of English documents which are categorized and labeled as D1, D2, D3, etc. One category such as D1 can have multiple documents. So, following is the sketch of dataset:
Category;      Text
D1;                 abc sdf.......
D1;                  jhs dgf....

DN;                  xyz jha....
Now, I would like to plot the corpus content in terms of scattertext. But, when I run the following code, I am getting an error:
{AttributeError}("'numpy.str_' object has no attribute 'sents'", 'occurred at index 0')
import scattertext as st
import pandas as pd
import numpy as np

def readFile(filename):
   text_file = open(filename, 'r',encoding="utf8")
   data = text_file.read()
   corpuslist = data.split("\n")
   return corpuslist

category=readFile('categoryCorpus.txt')
textCorpus=readFile('textCorpus.txt')

categoryNp = np.array(category)
textCorpusNp = np.array(textCorpus)

fdf = pd.DataFrame({'category': categoryNp, 'text': textCorpusNp}, columns=['category', 'text'])

fcorpus = st.CorpusFromParsedDocuments(
   fdf, category_col='category', parsed_col='text'
).build().get_unigram_corpus().compact(st.AssociationCompactor(2000))

fhtml = st.produce_scattertext_explorer(
   fcorpus,
   minimum_term_frequency=0, pmi_threshold_coefficient=0,
   width_in_pixels=1000,
   transform=st.Scalers.dense_rank
)

open('demo_compact.html', 'w').write(html)

Please guide me how can I resolve it?

The parsed_col argument needs to be a column in the data frame which contains spaCy Doc objects or something equivalent. Please refer to the first example in the readme.


Transform input to int

Without transforming the input to an int it will never get out of the loop since it will be trying to compare a string to a number.

Another PR exists to fix this issue


refactor: refactor types

Pull Request Test Coverage Report for Build<PHONE_NUMBER>

268 of 268 (100.0%)  changed or added relevant lines in 20 files are covered.
No unchanged relevant lines lost coverage.
Overall coverage increased (+0.01%) to 98.268%

Totals

Change from base Build<PHONE_NUMBER>:
0.01%

Covered Lines:
4368

Relevant Lines:
4445

💛  - Coveralls

ref: https://github.com/hexojs/hexo/pull/5271#issuecomment-1780359462

Please submit a release PR if we need to release a new version.


questions about redisson

These are questions about redissons rather than issues.
I plan to use redisson in our company project, Use RLocalCachedMap to cache some business orders, but still have some questions about RLocalCachedMap since I can't get them from Wiki, API, Issue discussion in GitHub.

read from map of RLocalCachedMap will always return the NEWEST data in real-time.

clearLocalCache just clear the local data in JVM, it will not clear the data in Redis server, next read of clearLocalCache will sync the data from redis server to local JVM, right?

How to get a Pro version of redisson, please send a email to<EMAIL_ADDRESS>

read from map of RLocalCachedMap will always return the NEWEST data in real-time.

Yes. If you want transactional updates use RTransaction.getLocalCachedMap

clearLocalCache just clear the local data in JVM, it will not clear the data in Redis server, next read of clearLocalCache will sync the data from redis server to local JVM, right?

Right, read operation will load map entry to local cache.

How to get a Pro version of redisson, please send a email to<EMAIL_ADDRESS>

Please check your mail

@mrniko
thanks for your reply.
for now, I am using  getReadWriteLock to avoid the concurrency update, I think it should be OK.
I have received the PRO key, but there is no price in it.  I have to report it to my company, even community version is enough for earlier stage use.
I think redission is a good product, but I suggest you to make more detail documents about the APIs/Designs/Examples in order to let developers to understand it more faster, people for now are impatient and don't want to spend too much time on new things.


Communication across nodes timeouts unless BGP announces podCIDRs

Is there an existing issue for this?

[X] I have searched the existing issues

What happened?
When we disable podCIDR announcements with MetalLB, pods cannot talk to services anymore and start to crash.
Helm values (with some obfuscation):
---
k8sServiceHost: <IP_ADDRESS>
k8sServicePort: 6443
kubeProxyReplacement: strict
ipv4NativeRoutingCIDR: <IP_ADDRESS>/20
tunnel: disabled
autoDirectNodeRoutes: false
ipv6:
  enabled: false
hubble:
  enabled: true
  metrics:
    enabled:
      - dns
      - drop
      - tcp
      - flow
      - icmp
      - http
  relay:
    enabled: true
  ui:
    enabled: true
    ingress:
      annotations:
        cert-manager.io/cluster-issuer: letsencrypt-staging
        traefik.ingress.kubernetes.io/router.tls: "true"
        traefik.ingress.kubernetes.io/router.middlewares: >-
          traefik-ethz-ldap-auth@kubernetescrd
      className: traefik
      enabled: true
      hosts:
        - hubble.foo.bar.example.com
      tls:
        - secretName: hubble-foo-bar-example.com-tls
          hosts:
            - hubble.foo.bar.example.com
cluster:
  id: 29
  name: foo
upgradeCompatibility: "1.12"
extraEnv:
- name: http_proxy
  value: http://proxy.example.com:3128
- name: https_proxy
  value: http://proxy.example.com:3128
- name: no_proxy
  value: localhost,<IP_ADDRESS>,<IP_ADDRESS>/16,<IP_ADDRESS>/16,.svc,.cluster.local,.local,.cilium,<IP_ADDRESS>,<IP_ADDRESS>/27,.foo.bar.example.com
ipam:
  mode: kubernetes
bgpControlPlane:
  enabled: false
bgp:
  enabled: true
  announce:
    loadbalancerIP: true
    podCIDR: false
ingressController:
  enabled: false
monitor:
  enabled: true
debug:
  enabled: false
externalIPs:
  enabled: true
nodePort:
  enabled: true
hostPort:
  enabled: true
prometheus:
  enabled: true
operator:
  prometheus:
    enabled: true

Cilium's config:
---
apiVersion: v1
data:
  agent-not-ready-taint-key: node.cilium.io/agent-not-ready
  arping-refresh-period: 30s
  auto-direct-node-routes: "false"
  bgp-announce-lb-ip: "true"
  bpf-lb-external-clusterip: "false"
  bpf-lb-map-max: "65536"
  bpf-lb-sock: "false"
  bpf-map-dynamic-size-ratio: "0.0025"
  bpf-policy-map-max: "16384"
  bpf-root: /sys/fs/bpf
  cgroup-root: /run/cilium/cgroupv2
  cilium-endpoint-gc-interval: 5m0s
  cluster-id: "29"
  cluster-name: foo
  custom-cni-conf: "false"
  debug: "false"
  disable-cnp-status-updates: "true"
  disable-endpoint-crd: "false"
  enable-auto-protect-node-port-range: "true"
  enable-bgp-control-plane: "false"
  enable-bpf-clock-probe: "true"
  enable-endpoint-health-checking: "true"
  enable-external-ips: "true"
  enable-health-check-nodeport: "true"
  enable-health-checking: "true"
  enable-hubble: "true"
  enable-ipv4: "true"
  enable-ipv4-masquerade: "true"
  enable-ipv6: "false"
  enable-ipv6-masquerade: "true"
  enable-k8s-terminating-endpoint: "true"
  enable-l2-neigh-discovery: "true"
  enable-l7-proxy: "true"
  enable-local-redirect-policy: "false"
  enable-metrics: "true"
  enable-node-port: "true"
  enable-policy: default
  enable-remote-node-identity: "true"
  enable-svc-source-range-check: "true"
  enable-vtep: "false"
  enable-well-known-identities: "false"
  enable-xt-socket-fallback: "true"
  hubble-disable-tls: "false"
  hubble-listen-address: :4244
  hubble-metrics: dns drop tcp flow icmp http
  hubble-metrics-server: :9965
  hubble-socket-path: /var/run/cilium/hubble.sock
  hubble-tls-cert-file: /var/lib/cilium/tls/hubble/server.crt
  hubble-tls-client-ca-files: /var/lib/cilium/tls/hubble/client-ca.crt
  hubble-tls-key-file: /var/lib/cilium/tls/hubble/server.key
  identity-allocation-mode: crd
  install-iptables-rules: "true"
  install-no-conntrack-iptables-rules: "false"
  ipam: kubernetes
  ipv4-native-routing-cidr: <IP_ADDRESS>/20
  ipv4-service-range: <IP_ADDRESS>/24
  kube-proxy-replacement: strict
  kube-proxy-replacement-healthz-bind-address: ""
  monitor-aggregation: medium
  monitor-aggregation-flags: all
  monitor-aggregation-interval: 5s
  node-port-bind-protection: "true"
  nodes-gc-interval: 5m0s
  operator-api-serve-addr: <IP_ADDRESS>:9234
  operator-prometheus-serve-addr: :9963
  preallocate-bpf-maps: "false"
  procfs: /host/proc
  prometheus-serve-addr: :9962
  proxy-prometheus-port: "9964"
  remove-cilium-node-taints: "true"
  set-cilium-is-up-condition: "true"
  sidecar-istio-proxy-image: cilium/istio_proxy
  synchronize-k8s-nodes: "true"
  tofqdns-dns-reject-response-code: refused
  tofqdns-enable-dns-compression: "true"
  tofqdns-endpoint-max-ip-per-hostname: "50"
  tofqdns-idle-connection-grace-period: 0s
  tofqdns-max-deferred-connection-deletes: "10000"
  tofqdns-min-ttl: "3600"
  tofqdns-proxy-response-max-delay: 100ms
  tunnel: disabled
  unmanaged-pod-watcher-interval: "15"
  vtep-cidr: ""
  vtep-endpoint: ""
  vtep-mac: ""
  vtep-mask: ""
kind: ConfigMap
metadata:
  annotations:
    meta.helm.sh/release-name: cilium
    meta.helm.sh/release-namespace: cilium
  creationTimestamp: "2022-08-31T10:36:03Z"
  labels:
    app.kubernetes.io/managed-by: Helm
  name: cilium-config
  namespace: cilium

BGP config with some obfuscation:
---
apiVersion: v1
data:
  config.yaml: |
    peers:
      - peer-address: <IP_ADDRESS>
        peer-asn: 1234566
        my-asn: 1235629
      - peer-address: <IP_ADDRESS>
        peer-asn: 1234566
        my-asn: 1235629
    address-pools:
      - name: default
        protocol: bgp
        addresses:
          - <IP_ADDRESS>/24
          - <IP_ADDRESS>/32
kind: ConfigMap
metadata:
  annotations: {}
  creationTimestamp: "2022-09-16T14:08:43Z"
  name: bgp-config
  namespace: cilium

After setting bgp.announce.podCIDR to false, things start to break up. This is for example prometheus log:
v1.Pod: failed to list *v1.Pod: Get \"https://<IP_ADDRESS>:443/api/v1/namespaces/default/pods?resourceVersion=14886042\": dial tcp <IP_ADDRESS>:443: i/o timeout"
ts=2022-10-07T12:11:51.518Z caller=klog.go:116 level=error component=k8s_client_runtime func=ErrorDepth msg="pkg/mod/k8s.io/client-go@v0.22.4/tools/cache/reflector.go:167: Failed to watch *v1.Endpoints: failed to list *v1.Endpoints: Get \"https://<IP_ADDRESS>:443/api/v1/namespaces/default/endpoints?resourceVersion=14885330\": dial tcp <IP_ADDRESS>:443: i/o timeout"
ts=2022-10-07T12:11:51.597Z caller=klog.go:116 level=error component=k8s_client_runtime func=ErrorDepth msg="pkg/mod/k8s.io/client-go@v0.22.4/tools/cache/reflector.go:167: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://<IP_ADDRESS>:443/api/v1/namespaces/trident/services?resourceVersion=14886359\": dial tcp <IP_ADDRESS>:443: i/o timeout"
...
ts=2022-10-07T12:18:13.806Z caller=notifier.go:526 level=error component=notifier alertmanager=http://<IP_ADDRESS>:9093/api/v2/alerts count=1 msg="Error sending alert" err="Post \"http://<IP_ADDRESS>:9093/api/v2/alerts\": context deadline exceeded"

Pod to pod communication is working for pods on the same node but not across nodes.
Pod to host communication is again working only for the pods on the same host.
We don't have such issues with bgp.announce.podCIDR=true. But we would prefer not to announce podCIDRs. I'll be happy to provide more information.
Cilium Version
cilium-cli: 0.12.3 compiled with go1.18.5 on linux/amd64
cilium image (default): v1.12.1
cilium image (stable): v1.12.2
cilium image (running): v1.12.2
Kernel Version
Linux eu-k8s-dev-06 5.15.0-46-generic #49~20.04.1-Ubuntu SMP Thu Aug 4 19:15:44 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux
Kubernetes Version
v1.22.13
Sysdump
Cannot disclose publicly.
Relevant log output
No response
Anything else?
No response
Code of Conduct

[X] I agree to follow this project's Code of Conduct

this is design?

this is design?

If that were the case, why making podCIDR=false an option at all?
For us, podCIDR=true is a potential security risk as the unexposed pods can be routable from outside of k8s cluster.
On the same cluster we successfully ran kube-router configured with --advertise-pod-cidr=false alongside cilium. It worked as expected. And that's what we'd like to use with pure cilium as well.

this is design?

If that were the case, why making podCIDR=false an option at all?
For us, podCIDR=true is a potential security risk as the unexposed pods can be routable from outside of k8s cluster.
On the same cluster we successfully ran kube-router configured with --advertise-pod-cidr=false alongside cilium. It worked as expected. And that's what we'd like to use with pure cilium as well.

this is proposal feature. I also like it.


ble_ll: Add nrf52_bsim support

@andrzej-kaczmarek @jrotkiewicz

.gitignore should be added to babblesim to ignore symlinks created during build

@haukepetersen We are going to add some code that requires us to use nrfx headers in nrf52 radio driver, any idea how to make this works nicely with RIOT?


gh-359 openjdkbuild

Problems with tests resolved by making the AccumuloProperties objects in the test class non-static. I'm not sure why this behaviour would be different under JDK8, but this solves the problem on my machine.
Tested with JDK 1.7.0_111 on Arch Linux.

Can you change the pull request to go into the develop branch please.

We should add nightly builds to travis to check the different java versions. I'll close the pull request for now and reopen it when we have updated the travis configuration.


Don't fail the CI if coverage decreases

This was enabled by default, now the two codecov status checks will always succeed.
I'm also investigating the randomness in our tests, to try to make the coverage stable.

If you run the play/pause button works in player_route_test.dart alone, it works, If you run all tests in player_route_test.dart, the test fails, because the running attribute of the AudioHandler is not true, because this callback is not called:
https://github.com/nt4f04uNd/sweyer/blob/e28bd86a97dd3444cd656a6799fc382aaec7ffa9/lib/logic/player/music_player.dart#L203-L208
@nt4f04uNd do you have any idea what's going on here? I verified that the play method of the audio player was called.

It's likely because the handler is initialized only once, statically.


Flocker 1.15.0 docker plugin issue Error looking up volume plugin flocker: legacy plugin: plugin not found.

Hi ,
Trying to use flocker with docker plugin get the above error.
looking at plugin logs i see the following:
<E2><97><8F> flocker-docker-plugin.service - Flocker Docker Plugin
   Loaded: loaded (/usr/lib/systemd/system/flocker-docker-plugin.service; disabled; vendor preset: enabled)
   Active: active (running) since Sun 2016-10-23 09:06:52 UTC; 4min 39s ago
 Main PID: 48157 (flocker-docker-)d/system/flocker-docker-plugin.service; disabl    Tasks: 3reset: enabled)
   Memory: 56.2Me (running) since Sun 2016-10-23 09:06:52 UTC; 4min 39s ago
      CPU: 7.598s(flocker-docker-)
   CGroup: /system.slice/flocker-docker-plugin.service
           <E2><94><94><E2><94><80>48157 /opt/flocker/bin/python /usr/sbin/flocker-docker-plugin --journald
      CPU: 7.598s
Oct 23 09:10:00 slaveswarm1 flocker-docker-plugin[48157]: {"task_uuid": "598f688c-5a74-4a19-90df-797314d576d5", "error": false, "timestamp":<PHONE_NUMBER>.22446, "message": "Starting factory <twisted.web.client._HTTP11ClientFactory instance at 0x7faf74fc0200>", "message_type": "twisted:log", "task_level": [2, 3]}Oct 23 09:10:00 slaveswarm1 flocker-docker-plugin[48157]: {"exception": "twisted.web._newclient.ResponseNeverReceived", "task_level": [2, 4], "action_type": "flocker:apiclient:http_request", "reason": "[<twisted.python.failure.Failure OpenSSL.SSL.Error: [('SSL routines', 'ssl3**_get_server_certificate', 'certificate verify failed'**)]>]", "timestamp":<PHONE_NUMBER>.254202, "task_uuid": "598f688c-5a74-4a19-90df-797314d576d5", "action_status": "failed"}Oct 23 09:10:00 slaveswarm1 flocker-docker-plugin[48157]: {"exception": "twisted.web._newclient.ResponseNeverReceived", "task_level": [3], "action_type": "flocker:common:loop_until", "reason": "[<twisted.python.failure.Failure OpenSSL.SSL.Error: [('SSL routines', 'ssl3_get_server_certificate', 'certificate verify failed')]>]", "timestamp":<PHONE_NUMBER>.254748, "task_uuid": "598f688c-5a74-4a19-90df-797314d576d5", "action_status": "failed"}
Oct 23 09:10:00 slaveswarm1 flocker-docker-plugin[48157]: {"task_uuid": "a0272fb2-1d05-4ebe-89e6-f11bc19bafa2", "error": false, "timestamp":<PHONE_NUMBER>.255262, "message": "Stopping factory <twisted.web.client._HTTP11ClientFactory instance at 0x7faf74fc0200>", "message_type": "twisted:log", "task_level": [1]}Oct 23 09:10:45 slaveswarm1 flocker-docker-plugin[48157]: {"predicate": {"function": "<function <lambda> at 0x7faf74feb230>", "line": 897, "file": "/opt/flocker/local/lib/python2.7/site-packages/flocker/apiclient/_client.py"}, "task_level": [1], "action_type": "flocker:common:loop_until", "timestamp":<PHONE_NUMBER>.812243, "task_uuid": "3c53aeda-8e09-4fc3-a326-8ff105c324c2", "action_status": "started"}d": "598f688c-5a74-4a1Oct 23 09:10:45 slaveswarm1 flocker-docker-plugin[48157]: {"request_body": null, "url": "https://control-service:4523/v1/state/nodes/by_era/3e1498bc-c908-4374-9847-7fecd9f3d186", "timestamp":<PHONE_NUMBER>.812934, "action_status": "started", "task_uuid": "3c53aeda-8e09-4fc3-a326-8ff105c324c2", "action_type": "flocker:apiclient:http_request", "method": "GET", "task_level": [2, 1]}
Oct 23 09:10:45 slaveswarm1 flocker-docker-plugin[48157]: {"task_uuid": "3c53aeda-8e09-4fc3-a326-8ff105c324c2", "error": false, "timestamp":<PHONE_NUMBER>.824979, "message": "Starting factory <twisted.web.client._HTTP11ClientFactory instance at 0x7faf75014d88>", "message_type": "twisted:log", "task_level": [2, 3]}
Oct 23 09:10:45 slaveswarm1 flocker-docker-plugin[48157]: {"exception": "twisted.web._newclient.ResponseNeverReceived", "task_level": [2, 4], "action_type": "flocker:apiclient:http_request", "reason": "[<twisted.python.failure.Failure OpenSSL.SSL.Error: [('SSL routines', 'ssl3_get_server_certificate', 'certificate verify failed')]>]", "timestamp":<PHONE_NUMBER>.855676, "task_uuid": "3c53aeda-8e09-4fc3-a326-8ff105c324c2", "action_status": "failed"}
Oct 23 09:10:45 slaveswarm1 flocker-docker-plugin[48157]: {"exception": "twisted.web._newclient.ResponseNeverReceived", "task_level": [3], "action_type": "flocker:common:loop_until", "reason": "[<twisted.python.failure.Failure OpenSSL.SSL.Error: [('SSL **routines', 'ssl3_get_server_certificate', 'certificate verify failed')]>]"**, "timestamp":<PHONE_NUMBER>.856383, "task_uuid": "3c53aeda-8e09-4fc3-a326-8ff105c324c2", "action_status": "failed"}
Oct 23 09:10:45 slaveswarm1 flocker-docker-plugin[48157]: {"task_uuid": "0c84d616-d4c9-42d2-bb71-9e532f9d69e4", "error": false, "timestamp":<PHONE_NUMBER>.856926, "message": "Stopping factory <twisted.web.client._HTTP11ClientFactory instance at 0x7faf75014d88>", "message_type": "twisted:log", "task_level": [1]}

Am trying to use the azure flocker driver from here : https://github.com/CatalystCode/azure-flocker-driver
this is my agent.yml :
"version": 1
"control-service":
    "hostname": "control-service"
    "port": 4524

dataset:
  backend: "azure_flocker_driver"
  client_id: "f0e3b718-fb05-46a2-9f99-d2beebe72f2b"
  tenant_id: "72f988bf-86f1-41af-91ab-2d7cd011db47"
  client_secret: "********_"
  subscription_id: "928f4e7e-2c28-4063-a56e-6f1e6**_**+"
  storage_account_name: "dmine9**"
  storage_account_key: "*******hF1RjYTfjBY+jWnNBCpqXoiKIOPLV41g6igDUr5a6kQcMZA=="
  storage_account_container: "vhds"
  group_name: "mine-masterswarm-031569"
  location: "North Europe"
  async_timeout: 100000
  debug: "false"

looking on the control service cert :
Certificate:
    Data:
        Version: 1 (0x0)
        Serial Number:
            f7:cd:32:84:bc:78:08:ae:3d:70:2e:be:d8:0a:1b:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: OU=6c70e21d-65c2-4f44-bf2d-9d880c81ccfe, CN=fcluster
        Validity
            Not Before: Oct 22 17:17:39 2016 GMT
            Not After : Oct 17 17:17:39 2036 GMT
        Subject: OU=6c70e21d-65c2-4f44-bf2d-9d880c81ccfe, CN=control-service
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)

ca cert :
Certificate:
    Data:
        Version: 1 (0x0)
        Serial Number:
            d4:bf:67:b2:7d:98:a9:d7:7d:c2:40:af:64:2e:ed:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: OU=6c70e21d-65c2-4f44-bf2d-9d880c81ccfe, CN=fcluster
        Validity
            Not Before: Oct 22 17:14:21 2016 GMT
            Not After : Oct 17 17:14:21 2036 GMT
        Subject: OU=6c70e21d-65c2-4f44-bf2d-9d880c81ccfe, CN=fcluster
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)

ips : <IP_ADDRESS> control-service
<IP_ADDRESS> -node
flocker control service logs:
<E2><97><8F> flocker-control.service - Flocker Control Service
   Loaded: loaded (/usr/lib/systemd/system/flocker-control.service; enabled; vendor preset: enabled)
   Active: active (running) since Sat 2016-10-22 19:26:14 UTC; 13h ago
 Main PID: 29125 (flocker-control)
    Tasks: 2
   Memory: 44.1M
      CPU: 20min 43.835s
   CGroup: /system.slice/flocker-control.service
           <E2><94><94><E2><94><80>29125 /opt/flocker/bin/python /usr/sbin/flocker-control --port tcp:4523 --agent-port tcp:4524 --journald

Oct 23 09:24:57 masterswarm flocker-control[29125]: {"timestamp":<PHONE_NUMBER>.128875, "task_uuid": "bc905ba2-de76-4bdc-a410-02213b4fb2df", "action_type": "flocker:controlservice:send_cluster_state", "action_status": "started", "task_level": [1]}
Oct 23 09:24:57 masterswarm flocker-control[29125]: {"task_uuid": "bc905ba2-de76-4bdc-a410-02213b4fb2df", "task_level": [2], "action_type": "flocker:controlservice:send_cluster_state", "timestamp":<PHONE_NUMBER>.129518, "configuration": "null", "state": "null", "action_status": "succeeded"}
Oct 23 09:24:58 masterswarm flocker-control[29125]: {"task_uuid": "52a61b0d-a95f-4956-a944-242d47206d97", "error": false, "timestamp":<PHONE_NUMBER>.865618, "message": "ControlAMP connection established (HOST:IPv4Address(TCP, '<IP_ADDRESS>', 4524) PEER:IPv4Address(TCP, '<IP_ADDRESS>', 41514))", "message_type": "twisted:log", "task_level": [1]}
Oct 23 09:24:58 masterswarm flocker-control[29125]: {"task_uuid": "270fdba2-c185-414f-b03c-5c5e99dad085", "action_status": "started", "action_type": "flocker:controlservice:agent_connected", "timestamp":<PHONE_NUMBER>.86641, "agent": "IPv4Address(TCP, '<IP_ADDRESS>', 41514)", "task_level": [1]}
Oct 23 09:24:58 masterswarm flocker-control[29125]: {"timestamp":<PHONE_NUMBER>.866884, "task_uuid": "270fdba2-c185-414f-b03c-5c5e99dad085", "action_type": "flocker:controlservice:agent_connected", "action_status": "succeeded", "task_level": [2]}
Oct 23 09:24:58 masterswarm flocker-control[29125]: {"task_uuid": "c297635b-8015-4de0-90ce-9fe7a105e985", "error": false, "timestamp":<PHONE_NUMBER>.896355, "message": "ControlAMP connection lost (HOST:IPv4Address(TCP, '<IP_ADDRESS>', 4524) PEER:IPv4Address(TCP, '<IP_ADDRESS>', 41514))", "message_type": "twisted:log", "task_level": [1]}
Oct 23 09:24:59 masterswarm flocker-control[29125]: {"task_uuid": "4e281a23-111a-4bba-9801-eef243f52baf", "error": false, "timestamp":<PHONE_NUMBER>.032024, "message": "ControlAMP connection established (HOST:IPv4Address(TCP, '<IP_ADDRESS>', 4524) PEER:IPv4Address(TCP, '<IP_ADDRESS>', 41516))", "message_type": "twisted:log", "task_level": [1]}
Oct 23 09:24:59 masterswarm flocker-control[29125]: {"task_uuid": "7ab7962d-9817-45c1-aa2e-e7ee489bb0a6", "action_status": "started", "action_type": "flocker:controlservice:agent_connected", "timestamp":<PHONE_NUMBER>.032765, "agent": "IPv4Address(TCP, '<IP_ADDRESS>', 41516)", "task_level": [1]}
Oct 23 09:24:59 masterswarm flocker-control[29125]: {"timestamp":<PHONE_NUMBER>.033196, "task_uuid": "7ab7962d-9817-45c1-aa2e-e7ee489bb0a6", "action_type": "flocker:controlservice:agent_connected", "action_status": "succeeded", "task_level": [2]}
Oct 23 09:24:59 masterswarm flocker-control[29125]: {"task_uuid": "ef42e26d-c755-4a5c-b3f0-5694ebd2defb", "error": false, "timestamp":<PHONE_NUMBER>.059952, "message": "ControlAMP connection lost (HOST:IPv4Address(TCP, '<IP_ADDRESS>', 4524) PEER:IPv4Address(TCP, '<IP_ADDRESS>', 41516))", "message_type": "twisted:log", "task_level": [1]}

diagnostics here :
clusterhq_flocker_logs_87b1ec28-98ea-11e6-b5a5-000d3ab34f9f.zip
am missing something with the certs ? ,help appreciated

Hey @digeler
Sorry for the delayed reply.
And thanks for uploading your logs.
It looks like there's a problem with your flocker-control certificate or with the certificate verification on your system.
You're connecting to the flocker-control service using a hostname "control-service" and that seems to be the common name in your certificate, but also check the "Subject Alternative Name" of the control certificate.
Here's how it looks on one of our acceptance testing nodes:
# openssl x509  -in /etc/flocker/control-service.crt  -text | less
...
        X509v3 extensions:
            X509v3 Subject Alternative Name:
                DNS:control-service, IP Address:104.196.XXX.XXX

Also check the output of curl when connecting to the flocker-control REST API port, using the control-service hostname and by IP address. E.g.
curl --verbose --cacert cluster.crt --cert $PWD/user.crt --key $PWD/user.key https://104.196.XXX.XXX:4523/v1/configuration/datasets
...

*   CAfile: cluster.crt
  CApath: none
* NSS: client certificate from file
*       subject: CN=user-allison,OU=dddc471f-9407-4f98-0296-aaaaaaaaaaaa
*       start date: Oct 31 14:52:23 2016 GMT
*       expire date: Oct 26 14:52:23 2036 GMT
*       common name: user-allison
*       issuer: CN=acceptance-cluster,OU=dddc471f-9407-4f98-0296-aaaaaaaaaaaa
* ALPN, server accepted to use http/1.1
* SSL connection using TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
* Server certificate:
*       subject: CN=control-service,OU=dddc471f-9407-4f98-0296-aaaaaaaaaaaa
*       start date: Oct 31 14:52:22 2016 GMT
*       expire date: Oct 26 14:52:22 2036 GMT
*       common name: control-service
*       issuer: CN=acceptance-cluster,OU=dddc471f-9407-4f98-0296-aaaaaaaaaaaa
> GET /v1/configuration/datasets HTTP/1.1
> Host: <IP_ADDRESS>:4523
> User-Agent: curl/7.47.1
> Accept: */*
>
< HTTP/1.1 200 OK
< Transfer-Encoding: chunked
< Date: Mon, 31 Oct 2016 16:16:45 GMT
< X-Configuration-Tag: 44c0cc03d144555fba239aec12541c63
< Content-Type: application/json
< Server: TwistedWeb/16.4.1
<

thanks Richard i will update you soon.
On Mon, Oct 31, 2016 at 6:18 PM, Richard Wall<EMAIL_ADDRESS>wrote:

Hey @digeler https://github.com/digeler
Sorry for the delayed reply.
And thanks for uploading your logs.
It looks like there's a problem with your flocker-control certificate or
with the certificate verification on your system.
You're connecting to the flocker-control service using a hostname
"control-service" and that seems to be the common name in your certificate,
but also check the "Subject Alternative Name" of the control certificate.
Here's how it looks on one of our acceptance testing nodes:
openssl x509  -in /etc/flocker/control-service.crt  -text | less
...
X509v3 extensions:
X509v3 Subject Alternative Name:
DNS:control-service, IP Address:104.196.XXX.XXX
Also check the output of curl when connecting to the flocker-control REST
API port, using the control-service hostname and by IP address. E.g.
curl --verbose --cacert cluster.crt --cert $PWD/user.crt --key $PWD/user.key https://104.196.XXX.XXX:4523/v1/configuration/datasets
...

CAfile: cluster.crt
CApath: none
NSS: client certificate from file

  subject: CN=user-allison,OU=dddc471f-9407-4f98-0296-aaaaaaaaaaaa

  start date: Oct 31 14:52:23 2016 GMT

  expire date: Oct 26 14:52:23 2036 GMT

  common name: user-allison

  issuer: CN=acceptance-cluster,OU=dddc471f-9407-4f98-0296-aaaaaaaaaaaa

ALPN, server accepted to use http/1.1
SSL connection using TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
Server certificate:

  subject: CN=control-service,OU=dddc471f-9407-4f98-0296-aaaaaaaaaaaa

  start date: Oct 31 14:52:22 2016 GMT

  expire date: Oct 26 14:52:22 2036 GMT

  common name: control-service

  issuer: CN=acceptance-cluster,OU=dddc471f-9407-4f98-0296-aaaaaaaaaaaa

GET /v1/configuration/datasets HTTP/1.1
Host: <IP_ADDRESS>:4523
User-Agent: curl/7.47.1
Accept: /

< HTTP/1.1 200 OK
< Transfer-Encoding: chunked
< Date: Mon, 31 Oct 2016 16:16:45 GMT
< X-Configuration-Tag: 44c0cc03d144555fba239aec12541c63
< Content-Type: application/json
< Server: TwistedWeb/16.4.1
<
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
https://github.com/ClusterHQ/flocker/issues/2930#issuecomment-257340557,
or mute the thread
https://github.com/notifications/unsubscribe-auth/AEuGGSMMtuA7rHBKRffEW9ioS2TYKQqEks5q5hTpgaJpZM4KeFsH
.

Hi Richard,
here is the output :
openssl x509  -in /etc/flocker/control-service.crt  -text | less
X509v3 extensions:
X509v3 Subject Alternative Name:
DNS:control-service, DNS:controlservice
Signature Algorithm: sha256WithRSAEncryption
17:77:65:c9:94:8a:94:f9:54:ed:ee:3b:d2:26:6a:a2:06:ff:
c3:fd:e2:b2:41:48:5c:a2:1f:a0:78:54:66:3c:f7:2e:d5:a2:
7b:d8:ba:7a:84:45:51:7e:37:2a:e8:0e:2c:07:ca:bc:6a:a3:
to create the certs i used the following :
flocker-ca initialize
flocker-ca create-control-certificate
flocker-ca create-node-certificate
root@masterswarm:/etc/flocker# curl --verbose --cacert cluster.crt --cert $PWD/plugin.crt --key $PWD/plugin.key https://<IP_ADDRESS>:4523/v1/configuration/datasets

Trying <IP_ADDRESS>...
Connected to <IP_ADDRESS> (<IP_ADDRESS>) port 4523 (#0)
error reading ca cert file cluster.crt (Error in the certificate.)
Closing connection 0
curl: (77) Problem with the SSL CA cert (path? access rights?)
root@masterswarm:/etc/flocker#

do i need to use the certificates with fqdn ?
please let me know,am going to try this.

i have changed the certs name to be fqdn :
i dont see any more cert errors:
but now when i try the plugin :
i get :
red property\n\nFailed validating 'required' in schema:\n    {'$schema': 'http://json-schema.org/draft-04/schema#',\n     'properties': {'control-service': {'properties': {'hostname': {'format': 'hostname',\n                                                                    'type': 'string'},\n                                                       'port': {'type': 'integer'}},\n                                        'required': ['hostname'],\n                                        'type': 'object'},\n                    'dataset': {'properties': {'backend': {'type': 'string'}},\n                                'required': ['backend'],\n                                'type': 'object'},\n                    'logging': {'type': 'object'},\n                    'version': {'maximum': 1,\n                                'minimum': 1,\n                                'type': 'number'}},\n     'required': ['version', 'control-service', 'dataset'],\n     'type': 'object'}\n\nOn instance:\n    {'control-server': {'hostname': 'flocker.local', 'port': 4524},\n     'dataset': {'async_timeout': 100000,\n                 'backend': 'azure_flocker_driver',\n                 'client_id': 'f0e3b718-fb05-46a2-9f99-d2beebe72f2b',\n                 'client_secret': 'Clo$$$$$$q
clusterhq_flocker_logs_d779b6ca-a045-11e6-89a9-000d3ab34f9f.zip
',\n                 'debug': 'false',\n                 'group_name': 'mine-masterswarm-031569',\n                 'location': 'North Europe',\n                 'storage_account_container': 'vhds',\n                 'storage_account_key': '+jWnNBCpqXoiKIOPLV41g6igDUr5a6kQcMZA==',\n                 'storage_account_name': 'dmine9633',\n                 'subscription_id': '928f4e7e-2c28-4063-a56e-6f1e6f2bb73c',\n                 'tenant_id': '72f988bf-86f1-41af-91ab-2d7cd011db47'},\n     'version': 1}\n", "message_type": "twisted:log", "task_level": [1]}
Nov 01 15:36:14 slaveswarm1 flocker-docker-plugin[19240]: {"task_uuid": "ff215c6d-4d56-4c48-accd-ebbd9117dc79", "error": false, "timestamp":<PHONE_NUMBER>.783666, "message": "Main loop terminated.", "message_type": "twisted:log", "task_level": [1]}
Nov 01 15:36:15 slaveswarm1 systemd[1]: flocker-docker-plugin.service: Main process exited, code=exited, status=1/FAILURE

Hi @digeler
Did you follow https://flocker-docs.clusterhq.com/en/latest/docker-integration/generate-api-plugin.html  ?
Because you never speak about your plugin certificates ...

@digeler I am seeing the following error in your logs.
 File "/opt/flocker/local/lib/python2.7/site-packages/jsonschema/validators.py", line 123, in validate
            raise error
        jsonschema.exceptions.ValidationError: 'control-service' is a required property

What does your agent.yml look like?

Hi,
any feedback ?
I encounter the same issue.
I followed flocker installation documentation.
drives me crazy !!!
error reading ca cert file cluster.crt (Error in the certificate.) error
Regards


Initialisation issue

Hi, just tried to init park-ui with adonis and inertiaJS (with react adpater)
All the setup seems to be fine, but can't figured out why styles are not loaded (no layer are in the dom)

My actual repo wich is just and adonis + inertia + ark + park ui init : link to the repo

I missed the postCSS config files.
Closed the issues


[Python][CI] Failing test_dateutil_tzinfo_to_string due to new release of python-dateutil

Rationale for this change
test_dateutil_tzinfo_to_string started failing with:
         tz = dateutil.tz.gettz('Europe/Paris')
>       assert pa.lib.tzinfo_to_string(tz) == 'Europe/Paris'
E       AssertionError: assert 'Europe/Monaco' == 'Europe/Paris'
E         - Europe/Paris
E         + Europe/Monaco

and it is most probably due to new release of python-dateutil package.
What changes are included in this PR?
Currently, we are using this PR to debug the test on Windows platform.
Are these changes tested?
A tests is failing and it needs to be fixed.
Are there any user-facing changes?
No.

We have assumed correctly there is an issue in python-dateutil:
_______________________ test_dateutil_tzinfo_to_string ________________________
    def test_dateutil_tzinfo_to_string():
        pytest.importorskip("dateutil")
        import dateutil.tz

        tz = dateutil.tz.UTC
        assert pa.lib.tzinfo_to_string(tz) == 'UTC'
        tz = dateutil.tz.gettz('Europe/Paris')
        print(tz)
>       assert pa.lib.tzinfo_to_string(tz) == 'Europe/Paris'
E       AssertionError: assert 'Europe/Monaco' == 'Europe/Paris'
E         - Europe/Paris
E         + Europe/Monaco
pyarrow\tests\test_types.py:356: AssertionError
---------------------------- Captured stdout call -----------------------------
tzfile('Europe/Monaco')
============================== warnings summary ===============================
pyarrow/tests/test_pandas.py::TestConvertMetadata::test_empty_list_metadata

Will report upstream.

Upstream issue: https://github.com/dateutil/dateutil/issues/1353


Find how many numbers are smaller than any number in an array

Finding how many numbers are smaller than any number in an array
Description:
Given the array nums, for each nums[i] find out how many numbers in the array are smaller than it. That is, for each nums[i] you have to count the number of valid j's such that j != i and nums[j] < nums[i].
Return the answer in an array.
Type of Issue:

[ ] Add code

Language:

[ ] C++

Tasks:

[x] Star the repository
[ ] Fork the repository
[ ] Create a pull request once done.

Can i do this?

Yes sure. Assigned it to you.

can i do this ??

@pAnKAjDWivEdII This issue is already assigned. You can look for other issues or create your own.

May I work on this issue

@piyush9311 This issue is already assigned. You may look for some other or open your own issues here


spark-ui-service-annotations flag to add annotations to SparkUI service to support ambassador

Background
My k8s cluster uses ambassador as the primary API gateway. Ambassador uses annotations in service instead of of an ingress.
Currently, spark-on-k8s-operator only support ingress but not service annotations. This PR adds a spark-ui-service-annotations flag which takes in a JSON string which will be used to add annotations to the sparkUI service metadata.
The annotations JSON also supports the following mustache variables:

{{$appName}}
{{$serviceName}}
{{$namespace}}

Also added corresponding test to sparkui_test.go.
Example
{
  "getambassador.io/config": `|
---
apiVersion: ambassador/v1
kind:  Mapping
name:  sparkui-{{$namespace}}-{{$appName}}
prefix: /{{$appName}}/
service: {{$serviceName}}.{{$namespace}}`
}

LGTM. Can you also update the user guide on how to use this?

@liyinan926  Updated user guide and added the newline.

It also looks like you need to run go fmt ./....

@liyinan926
After writing out the deployment example, I find that it seems a bit clunky passing in the annotations as JSON. Works fine for simple key values, but ambassador annotations are yaml.
Just considering whether are there better ways to do this?
What do u think of this?
Write the annotations directly in the sparkoperator pod, and use the arg flag to tell what extract these annotations thru a prefix?
apiVersion: apps/v1
kind: Deployment
metadata:
  name: sparkoperator
spec:
  template:
    spec:
      metadata:
        annotations:
          sparkui-getambassador.io/config: |-
            ---
            apiVersion: ambassador/v1
            kind:  Mapping
            name:  sparkui-{{$namespace}}-{{$appName}}
            prefix: /{{$appName}}/
            service: {{$serviceName}}.{{$namespace}}
      containers:
      - name: sparkoperator
        image: gcr.io/spark-operator/spark-operator:v2.4.0-v1beta1-latest
        imagePullPolicy: Always
        args:
        - -spark-ui-service-annotations-prefix 'sparkui-'

@eterna2 I agree this is a bit clunky. I think we need a thorough design around how the UI service/ingress should be configured and how users define the specifics of the configuration. I'm thinking of this high level approach:

Define a CRD named SparkApplicationClass that defines parameters and common configuration for a class of applications. Service related configuration can be put into CRs of this new kind.
Add an optional field in SparkApplication for specifying the name of the SparkApplicationClass.
At runtime, the controller fetches the SparkApplicationClass (if applicable) and use the information to configure the driver/executor pods and UI service.

@eterna2 I agree this is a bit clunky. I think we need a thorough design around how the UI service/ingress should be configured and how users define the specifics of the configuration. I'm thinking of this high level approach:

Define a CRD named SparkApplicationClass that defines parameters and common configuration for a class of applications. Service related configuration can be put into CRs of this new kind.
Add an optional field in SparkApplication for specifying the name of the SparkApplicationClass.
At runtime, the controller fetches the SparkApplicationClass (if applicable) and use the information to configure the driver/executor pods and UI service.

Yes, I think this is a better idea. Do u need any help?

@eterna2 Yes, definitely need help on this :).

@liyinan926
Great, how can I start to help?
I assume the new CRD should probably be a subset of SparkApplication + some extras.
The minimal probably should have just the Spark and Hadoop configs + default extra jars (e.g. hadoop-aws sdk) + service/ingress annotations?

Great, how can I start to help?

Thanks for being willing to help! How about a google doc that drafts the CRD spec?

I assume the new CRD should probably be a subset of SparkApplication + some extras.

Pretty much. Basically things that might be shared by a class of applications.

The minimal probably should have just the Spark and Hadoop configs + default extra jars (e.g. hadoop-aws sdk) + service/ingress annotations?

That sounds reasonable. Probably also default service account for the driver pod.

@liyinan926
Sorry for taking so long. Was busy with some other stuff.
Here is my draft proposal:

Use SparkApplicationSpec as template in SparkApplicationClass
Adds a SparkUI field (SparkUISpec) to SparkApplicationSpec :

Host: String
Service: ObjectMeta
Ingress: ObjectMeta

https://docs.google.com/document/d/1G9Kvi3ptf4mobrK2I5rPB_uAvFOymOLJsobuuPvCkS8/edit?usp=sharing

@eterna2 Thanks for putting together the draft! Instead of using SparkApplicationSpec as template in SparkApplicationClass, I would suggest adding an optional field in SparkApplicationSpec to reference a SparkApplicationClass that defines common and default configurations for a class of applications. Initially SparkApplicationClass contains a SparkUISpec or SparkUIConfig.
Another thing is instead of using ObjectMetadata for Service and Ingress, we should use a struct that contains the necessary fields, e.g., a map[string]string for annotations.

@liyinan926
Hey, I think u have a slight misinterpretation on the design. The SparkApplicationSpec for SparkApplicationClass is literally the default template for any spark application, i.e. it serves as the defaults for any unspecified fields in  SparkApplication and SchedulesSparkApplication
SparkApplication and SchedulesSparkApplication selects the SparkApplicationClass  with an annotation.
I originally had 3 ideas:

Similar to what u recommended, a basic SparkApplicationClass with service and ingress annotations, and some common fields. And a additional field to select the class.

A slight modification from 1. A SparkApplicationClass with SparkApplicationSpec (which essentially holds all the fields) and separate blocks for service and ingress annotations. And use annotations to select the class.

Advantage of annotations via selector field is that there need no change to the SparkApplication CRD spec.
Advantage of SparkApplicationSpec instead of manually specifying the "common" fields is that I just need to implement a recursive deep merge instead of a custom map to seed the SparkApplicationSpec. This also allows the class to always move along the the application spec, and allow cluster admins more flexibility to define more classes of spark application, i.e. py vs java vs scala, or large jobs vs small jobs, metrics or non-metrics, etc.

Is the current proposal where I merge the ingress and service metadata into the SparkApplicationSpec. Mostly because I feel that the blocks feels strange to have driver, executor, metrics spec in 1 block, while service and ingress in another.

+1 on map[string]string vs ObjectMetadata
Just think should I name is service annotation to be explicit.

Hey, I think u have a slight misinterpretation on the design. The SparkApplicationSpec for SparkApplicationClass is literally the default template for any spark application, i.e. it serves as the defaults for any unspecified fields in SparkApplication and SchedulesSparkApplication.

Makes sense to me. This is sort of a variant of the class/instance model.

Advantage of annotations via selector field is that there need no change to the SparkApplication CRD spec.

An optional field is a better choice than annotations for a few reasons: 1) a field is explicit and json schema validation can be applied to a field, 2) deprecation management of fields is much easier with fields than with annotations, and 3) an optional field is backward compatible.

@liyinan926
I have updated the docs to reflect ur comments:
https://docs.google.com/document/d/1G9Kvi3ptf4mobrK2I5rPB_uAvFOymOLJsobuuPvCkS8/edit?usp=sharing
Removed the annotations, and added a 2 new optional fields to SparkApplicationSpec

SparkApplicationClass - name of the SparkApplicationClass to inherit
SparkUI - optional configuration for host (aka ingress_format), service annotations, and ingress annotations

@eterna2 should we support multiple inheritance?

@eterna2 thanks for updating the doc! It looks good overall.
@skonto it's technically possible to support multi-class inheritance. However, it's hard to deal with conflicts in different classes. I suggest we start with single-class inheritance.

Great. I will start working on it.

Any updates?

Sorry for the slow progress. Was bogged down with other work.
I will close this PR and track the progress of this CRD in a separate PR #661
I will find some time this week to rebase the branch, and marked out the parts that I have not completed, so that others can contribute if they want.


Automator: update proxy@master in istio/istio@master

Generated by Automator - 2023-04-14T21:18:31+00:00

@istio-testing: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name
Commit
Details
Required
Rerun command

integ-ambient_istio
c77bc54754a41061e70aef1aaf9845a948219210
link
true
/test integ-ambient

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

/test integ-ambient


SAM-2519 indicate current page in samigo like other tools

https://jira.sakaiproject.org/browse/SAM-2519
Most other tools, such as Resources and Gradebook, indicate which page you're on by applying a class to the menu item that the user is currently on. Samigo kind of does this too, but it's not consistent with the other tools.
The linked PR adds 'class="current"' to the span in the navIntraTool bar when you're on the given page. This helps institutional branding that targets the 'current' class.

Super. +1


Upgrade Mailchimp account

Description
Upgrade Mailchimp account so that we can have support.

Chose Essential plan.. $9.99/mo. 50,000 users.


VIM as library

Hi, good afternoon!
I would like to know wif is it possible to use VIM as library instead of an editor and embed their functionality into an IDE. I tried to build VIM from source code and it seems that vim has some option to make a library but I couldn't find any documentation about it. If any, please, can someone point me to the correct place?
Thanks!
Guille

Vim doesn't support such an option.
Maybe libvim is for you?
https://github.com/onivim/libvim

I already have seen libvim but I find somewhat more small than Vim. Well, thank you so much anyway. I had to try :D

The Netbeans interface was made for using Vim in an IDE.  It's very specific for the (discontinued) Sun Netbeans though.


Automated cherry pick of #8264: fix: support public ip create

Cherry pick of #8264 on release/3.4.
#8264: fix: support public ip create

Codecov Report

Merging #8280 into release/3.4 will decrease coverage by 2.67%.
The diff coverage is 0.00%.

@@              Coverage Diff               @@
##           release/3.4   #8280      +/-   ##
==============================================
- Coverage         6.22%   3.54%   -2.68%
==============================================
  Files              759     303     -456
  Lines           117145   62150   -54995
==============================================
- Hits              7289    2205    -5084
+ Misses          109197   59792   -49405
+ Partials           659     153     -506

Flag
Coverage Δ

#aFlag
3.54% <0.00%> (-2.68%)
:arrow_down:

Flags with carried forward coverage won't be shown. Click here to find out more.

Impacted Files
Coverage Δ

pkg/compute/models/buckets.go
1.10% <0.00%> (+0.03%)
:arrow_up:

pkg/compute/models/cachedimages.go
1.75% <0.00%> (-0.06%)
:arrow_down:

pkg/compute/models/capabilities.go
0.00% <0.00%> (ø)

pkg/compute/models/cloudaccounts.go
0.48% <0.00%> (-4.66%)
:arrow_down:

pkg/compute/models/dns_recordsets.go
1.82% <0.00%> (-0.24%)
:arrow_down:

pkg/compute/models/dns_zones.go
1.62% <0.00%> (-0.06%)
:arrow_down:

pkg/compute/models/elasticips.go
1.08% <0.00%> (-0.01%)
:arrow_down:

pkg/compute/models/guest_actions.go
0.00% <0.00%> (ø)

pkg/compute/models/guestdrivers.go
9.09% <ø> (ø)

pkg/compute/models/guests.go
0.51% <ø> (ø)

... and 463 more

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 82c5915...2a21040. Read the comment docs.

/lgtm
/approve


Issues with .graphql files

Currently trying ts-engine in a graphql API and have my type definitions broken out into separate .graphql files, which the build process does not seem to handle.

Relevant Compiled JS
// compiled js, trying to resolve path that doesn't exist (dist/graphql/entities)
var types = loadFiles.loadFilesSync(path__default['default'].resolve(__dirname, './graphql/entities'), {
  recursive: true
});

It doesn't look there is currently any way to hook into rollup's config to instruct it to resolve graphql files. Would this be a welcome change?

hey, so yeah the current rollup config doesn't handle .graphql files. I do an awful lot of graphql but I have to admit I've never come across a .graphql file, could you share the libraries/tooling you use this with please 🙂
With regard to editing the internal rollup config its currently not possible because it is constructed internally and its super easy to break things. I've had a few conversations with people regarding this who are using ts-engine in the wild and its something we're considering for a post v 2.0 release, but it won't initially be in v2.0 which is largely complete but still has a few things to complete before it is released

@LeeCheneler Thanks for shedding light on plans and weighing in! Also, I didn't mention it the other night, so: thank you for authoring ts-engine. Outside of the lack of .graphql handling, it's been an absolute dream. 💥
As for stack, can definitely share. I ended up using graphql-yoga for doing the heavy lifting and the rest deal with schema merging/loading and type generation:
- graphql-yoga
- @graphql-tools
- @graphql-codegen

My schema is broken out across my domains:
- api
  - entities
    - album
      - album.graphql // SDL
      - album.resolvers.ts
      - album.types.ts // auto-generated types for use in resolvers
    - contribution
    - verification
    - ...
    - fields // field-level resolvers for handling album.contributions, album.members, contribution.author, etc.
  - index.ts // glob imports all .graphql files and merges using @graphql-tools

SDL snippet for album:
type Album {
  contributionType: String
  coverPhoto: String
  createdAt: DateTime!
  deleted: Boolean
  deletedAt: DateTime
  id: ID!
  isPrivate: Boolean
  name: String!
  ownerId: String!
}

type CreateAlbumSuccess {
  album: Album!
  createdAt: DateTime!
}

input CreateAlbumInput {
  name: String!
  isPrivate: Boolean
  contributionType: String
  coverPhoto: String!
}

union CreateAlbumResult = CreateAlbumSuccess | ErrorPayload

type Mutation {
  createAlbum(input: CreateAlbumInput!): CreateAlbumResult!
}


Tech Reliance as a Toggle

Essentially in the power menu add a check box or button to toggle on Tech Reliance Powers or not, then add to the powers menu the option to mark a power as Tech Reliant.

Thanks for the suggestion


[flutter_tools][web] Add basic service worker generation support to web applications

Description
A service worker allows for add to home screen, along with offline support. The worker contains a map of all resource files to be cached, along with the file hash of each. This will allow us to support incremental updates in a future change, as well as ensuring that any changes to the web project trigger the byte-difference algorithm to cause a service worker update (without requiring manual intervention or changes by the project author)

I tried flutter's master channel and dev channel but myPWA is not showing Install to Home Screen button on desktop or mobile. I traced it back to the generated flutter_service_worker.js file and following modifications fixed the issue.
Instead of
return cache.addAll(Object.keys(RESOURCES));

replacing it with:
cache.addAll(Object.keys(RESOURCES));
return cache;

Since the file is auto-generated, my changes won't survive future builds. Could someone look into this? I am happy to any needed information.

As flutter_service_worker.js fetches from cache first of all, it doesn't detect new deployed version of my app.
self.addEventListener('fetch', function (event) {
  event.respondWith(
    caches.match(event.request)
      .then(function (response) {
        if (response) {
          return response;
        }
        return fetch(event.request);
      })
  );
});

Do you guys have anything in mind to allow different fetch strategies?

@rseibane I'm having the same issue, this was confusing, did you solve this?

@rseibane I was having the same issue, and that fixes it temporarily. Thank you!

Hi, looks like there has been a lot of activity on this PR, I'd really appreciate it if you opened new bugs instead of discussing here - you are essentially shouting into the void, because by default most people unsubscribe from submitted PRs.

Guys, feature requested for cleaning up the cache based on Build Number. Obviously, there is a problem that PackageInfo is broken on the web (which would be great to have this to be able to implement the feature requested) but I've done a workaround to force cache clearing before service worker instantiation based on saving the build number in a version.txt file during the pipelines. Well, there is a "workaround" in the link bellow, but definitely this should be done in the service worker based in the package info.
https://github.com/flutter/flutter/issues/63500


Fix black background occur.

Black Screen occur when I use only EAIntroPage with nib like this example:
- (void)showIntroWithCustomViewFromNib2 {
    EAIntroPage *page1 = [EAIntroPage pageWithCustomViewFromNibNamed:@"IntroPage"];
    EAIntroPage *page2 = [EAIntroPage pageWithCustomViewFromNibNamed:@"IntroPage"];
    EAIntroPage *page3 = [EAIntroPage pageWithCustomViewFromNibNamed:@"IntroPage"];
    EAIntroPage *page4 = [EAIntroPage pageWithCustomViewFromNibNamed:@"IntroPage"];
    EAIntroView *intro = [[EAIntroView alloc] initWithFrame:rootView.bounds andPages:@[page1,page2,page3,page4]];
    [intro setDelegate:self];
    [intro showInView:rootView animateDuration:0.3];
    _intro = intro;
}

Looks good, thanks!


Solr.add supports commitWithin but not overwrite #181

Adds overwrite=True|False support option to pysolr:Solr.add
Adds testing for Solr.add overwrite option

I have this parked in https://github.com/acdha/pysolr/tree/182-overwrite-support until someone has time to figure out why the tests are failing. At first I thought it was just Solr expecting the overwrite flag to be in the query string like e.g. commit but the tests fail either way.

odd. I'll take a look at this week when I get the chance, thanks.

Added id check in search, resolves test failure as far as I can see.


Bash progress-bar malformed

VSCode Version:
Version: 1.30.0-insider (user setup)
OS Version:
Windows 10 Pro
Steps to Reproduce:

Launch bash in the integrated terminal
Run [sudo] npm install -g @angular/cli

Does this issue occur when all extensions are disabled?: Yes

This is likely related to winpty, tracking in https://github.com/Microsoft/vscode/issues/45693


SQLAlchemy backend over-aggressively pulls columns from subtables

In cases like the following
expr = by(t.name, total=t.amount.sum())
q = by(expr.name, total=t.total.sum())

We get the following SQL
SELECT test_blaze.name, sum(amount_sum) AS total2
FROM test_blaze, (SELECT sum(test_blaze.amount) AS amount_sum
FROM test_blaze GROUP BY test_blaze.name) GROUP BY test_blaze.name, test_blaze.name

note that test_blaze.name is on the outer query when really we should have aliased the inner selection and used that name as the tablename of the outer columns.
This might be due to the dual use of lower_column and inner_columns in the SQLAlchemy backend.  I suspect that this could be resolved by removing lower_column.

This seems to be fine.  In my example above I erroneously used t in the second query when I should have used expr.
In [1]: from blaze import *

In [2]: t = symbol('t', 'var * {name: string, amount: int}')

In [3]: expr = by(t.name, total=t.amount.sum())

In [4]: q = by(expr.name, total=expr.total.sum())

In [5]: sql = resource('sqlite:///:memory:::t', dshape=t.dshape)
In [6]: print compute(q, sql, post_compute=False)
SELECT alias_1.name, sum(alias_1.total) AS total
FROM (SELECT t.name AS name, sum(t.amount) AS total
FROM t GROUP BY t.name) AS alias_1 GROUP BY alias_1.name