Zoom - Sentinel Parsing error for Shared key in received events

Zoom -Azure sentinel webhook integration has a parsing bug for shared key for line 82 in run.ps1
$keyBytes = [Convert]::FromBase64String($SharedKey)
To Reproduce
Steps to reproduce the behavior:

Create azure function as mentioned in github repo using Arm template and integrate using zoom webhook as mentioned.
Go to azure function in portal and use log console for monitoring the function and start your zoom meeting. As you run a meeting or perform some activity on your zoom app. Azure function will be triggered. However the event received by Azure function will show this error in logs console.
See error
please refer to error :

2020-04-30T13:25:20.607 [Error] ERROR: Exception calling "FromBase64String" with "1" argument(s): "The input is not a valid Base-64 string as it contains a non-base 64 character, more than two padding characters, or an illegal character among the padding characters."
At D:\home\site\wwwroot\ZoomLogs\run.ps1:82 char:13
             $keyBytes = [Convert]::FromBase64String($SharedKey)
             ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 CategoryInfo          : NotSpecified: (:) [], MethodInvocationException
 FullyQualifiedErrorId : FormatException
Script stack trace:
   at Build-signature, D:\home\site\wwwroot\ZoomLogs\run.ps1: line 82
   at Post-LogAnalyticsData, D:\home\site\wwwroot\ZoomLogs\run.ps1: line 97
   at Write-OMSLogfile, D:\home\site\wwwroot\ZoomLogs\run.ps1: line 133
   at <ScriptBlock>, D:\home\site\wwwroot\ZoomLogs\run.ps1: line 145

System.Management.Automation.MethodInvocationException: Exception calling "FromBase64String" with "1" argument(s): "The input is not a valid Base-64 string as it contains a non-base 64 character, more than two padding characters, or an illegal character among the padding characters."
   at System.Management.Automation.ExceptionHandlingOps.ConvertToMethodInvocationException(Exception exception, Type typeToThrow, String methodName, Int32 numArgs, MemberInfo memberInfo)
   at CallSite.Target(Closure , CallSite , Type , Object )
   at System.Management.Automation.Interpreter.DynamicInstruction 3.Run(InterpretedFrame frame)
   at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(InterpretedFrame frame)

Expected Behavior: successful parsing of shared key for multiple expected formats.

Hi @deepanshumarwah the $SharedKey variable that is passed to the Write-OMSLogfile function is your Azure Sentinel Workspace Key, which should be a Base64 encoded string. This is likely failing because the Workspace Key being passed to it is incorrect.
So a couple of things to check - first that the Workspace Key that you stored in KeyVault is correct (it should be a Base64 string). Secondly check that the workspaceKey parameter in your Function App is correctly referencing the KeyVault secret and has the authorization to access the secret. If you have correctly configured the KeyVault and parameter the Source column for that parameter should include a green tick icon and read "Key vault Reference":

If you continue to have issues with this you can debug this function app locally and reference the Workspace Key directly to ensure that it is correct.


failed to find the key value in the UI

the setup instructs to find the key "The key field is displayed in the NetStorage HTTP API tab under Upload Accounts:
but its not

They've updated the UI and it seems kind of broken now.  I changed the instructions so you can find it in there.
Thanks for the heads up!
Kirsten

This has been addressed.  The key is now revealed in the updated UI in Luna.


node-waf configure build

npm WARN<EMAIL_ADDRESS>No license field.
npm ERR! Linux 4.15.0-36-generic
npm ERR! argv "/usr/bin/node" "/usr/bin/npm" "install"
npm ERR! node v8.10.0
npm ERR! npm  v3.5.2
npm ERR! file sh
npm ERR! code ELIFECYCLE
npm ERR! errno ENOENT
npm ERR! syscall spawn
npm ERR<EMAIL_ADDRESS>install: node-waf configure build
npm ERR! spawn ENOENT
npm ERR!
npm ERR! Failed at the<EMAIL_ADDRESS>install script 'node-waf configure build'.
npm ERR! Make sure you have the latest version of node.js and npm installed.
npm ERR! If you do, this is most likely a problem with the microtime package,
npm ERR! not with npm itself.
npm ERR! Tell the author that this fails on your system:
npm ERR!     node-waf configure build
npm ERR! You can get information on how to open an issue for this project with:
npm ERR!     npm bugs microtime
npm ERR! Or if that isn't available, you can get their info via:
npm ERR!     npm owner ls microtime
npm ERR! There is likely additional logging output above.
npm ERR! Please include the following file with any support request:
npm ERR!     /home/user/Documents/annemo-master/npm-debug.log

I suppose that since node-wad was replaced by node-gyp it is necessary its configuration inside the project, however a binding.gyp file from the project is missing :/


Introduce a logo for Noosphere

Noosphere doesn't have its own logo, but it should! Once we have one, we can add it to the README, and also include it in static HTML output implemented in #51 (among other use cases).

Fixed, we have a logo in the README as of #141


Apply semver naming for minor release url

The current naming is conflicting with how the version number parts are
called accoring to semantic versioning. Wagtail does not strictly follow
semantic versioning, but it still seems reasonable to adopt the same
terminology as the rest of the world.
See related discussion in #7336 (in particular this comment by @gasman)

@gasman @kaedroho I was wondering if one of you could take a look at this one to unblock #7336

Thanks @gasman


Fix body scroll lock on iOS

PR Checklist
Please check if your PR fulfills the following requirements:

[ ] Tests for the changes have been added (for bug fixes / features)
[x] Docs have been added / updated (for bug fixes / features)

PR Type
What kind of change does this PR introduce?

[x] Bugfix
[ ] Feature
[ ] Code style update (formatting, local variables)
[ ] Refactoring (no functional changes, no api changes)
[ ] Build related changes
[ ] CI related changes
[ ] Documentation content changes
[ ] Other... Please describe:

What is the current behavior?

Global overlay child content wasn't scrollable on iOS
What is the new behavior?
Global overlay child content can be scrolled in iOS by adding the html element attribute body-scroll-lock-ignore to the content
Does this PR introduce a breaking change?
[ ] Yes
[x] No

Other information

I saw this issue with storybook. I tried some stuff in here real quick but still couldn't get it working: https://github.com/storybookjs/storybook/issues/23338
it's why the build's failing

I saw this issue with storybook. I tried some stuff in here real quick but still couldn't get it working: storybookjs/storybook#23338
it's why the build's failing

Those preview errors are likely just the result of something else.


cde.ca.gov-schools.yaml import error: SourceError: Fixed width source must have a schema defined, with column widths.

run:
python load_pre10.py ../../pre-10-bundles/converted/cde.ca.gov-schools/cde.ca.gov-schools.yaml

error:
Starting import ../../pre-10-bundles/converted/cde.ca.gov-schools/cde.ca.gov-schools.yaml...
Loading bundle: cde.ca.gov-schools-0.0.3~d03L003
INFO cde.ca.gov-schools ---- Synchronized ----
Starting ingest...
INFO cde.ca.gov-schools Ingesting: schools from ftp://ftp.cde.ca.gov/demo/schlname/pubschls.txt
INFO cde.ca.gov-schools Downloading ftp://ftp.cde.ca.gov/demo/schlname/pubschls.txt
INFO cde.ca.gov-schools Downloading ftp://ftp.cde.ca.gov/demo/schlname/pubschls.txt
INFO cde.ca.gov-schools Downloading ftp://ftp.cde.ca.gov/demo/schlname/pubschls.txt
Traceback (most recent call last):
  File "load_pre10.py", line 251, in <module>
    main()
  File "load_pre10.py", line 220, in main
    _ingest(b)
  File "load_pre10.py", line 177, in _ingest
    b.ingest(force=force, clean_files=clean_files)
  File "/home/nmb10/projects/ambry_project/ambry/bundle/bundle.py", line 902, in ingest
    source.datafile.load_rows(s, s.spec)
  File "/home/nmb10/.virtualenvs/ambry/local/lib/python2.7/site-packages/ambry_sources/mpf.py", line 429, in load_rows
    intuit_type=intuit_type, run_stats=run_stats)
  File "/home/nmb10/.virtualenvs/ambry/local/lib/python2.7/site-packages/ambry_sources/mpf.py", line 459, in _load_rows
    w.load_rows(source)
  File "/home/nmb10/.virtualenvs/ambry/local/lib/python2.7/site-packages/ambry_sources/mpf.py", line 718, in load_rows
    for row in iter(source):
  File "/home/nmb10/.virtualenvs/ambry/local/lib/python2.7/site-packages/ambry_sources/sources/accessors.py", line 177, in __iter__
    parser = self.make_fw_row_parser()
  File "/home/nmb10/.virtualenvs/ambry/local/lib/python2.7/site-packages/ambry_sources/sources/accessors.py", line 151, in make_fw_row_parser
    raise SourceError('Fixed width source must have a schema defined, with column widths.')
ambry_sources.sources.exceptions.SourceError: Fixed width source must have a schema defined, with column widths.

In this case, the  correct result is to set an error ( 'ingest_error') and exit with an exception. There is a possibility of handling this case automatically, by copying the schema, with the position and width information for the fixed width file into a  source_schema, but it is a rare case, so it would be better to do manually.


Fix reconfig timeout leak

Only the change in stop method is needed to avoid the leak. Just in case, I also made a change to setState method as it looks like it could also cancel it there but no idea
I almost didn't find this awesome library, thanks! Hidden gem

thanks


Work to move API doc source to expressjs/express repo

Per https://github.com/expressjs/express/issues/2887 we're going to move the API doc source from this repo to https://github.com/expressjs/express/.
This issue will track the work to be done in this repo to make that happen.
In addition to actually moving the .md files, we need to add a script here so we don't have to maintain two copies of the API doc.
Before we do that, we should convert ````~~~js ... ~~~back to{% highlight js %} ... {% endhighlight %}```
So the doc source files display better in GH.
Then we need to add a script here to pull down .md files from expressjs/express/doc to here.  Not sure if its' possible to add some kind of hook to make that happen automatically whenever one of the API doc source files is changed in that repo?
This script should also convert
````~~~js ... ~~~to{% highlight js %} ... {% endhighlight %}```
So we get syntax highlighting in code blocks.

@crandmck AFAIK, we'll need something online if we want to use git hooks.

we'll need something online if we want to use git hooks.

OK, for now it will just have to be a manual process, I guess... unless anyone has any suggestions.
My plan is to complete this task this week.
Once I make the above-noted edits to the API .md files and check them in to the express repo, I'll remove them from this repo and add a script at the top level that looks something like this.  I tested this, and it works, but I'm certainly open to suggestions if there is a better way:
git clone https://github.com/expressjs/express.git
mkdir _includes/api/en/4x
cp ./express/doc/*.md _includes/api/en/4x
sed -i.bak 's/~~~js/{% highlight js %}/g' _includes/api/en/4x/*.md
sed -i.bak 's/~~~/{% endhighlight %}/g' _includes/api/en/4x/*.md
rm _includes/api/en/4x/*.bak

To clarify, we don't actually want to remove the _includes/en/api/4x/*.md files from this repo.  We just want to copy them there (see https://github.com/expressjs/express/pull/2892), then make sure that any time someone makes a change there it gets copied here.
So, all this actually requires is adding a script to sync the files from expressjs/express.

Current state at this point is that API docs are in https://github.com/expressjs/express-api-docs and we need to sort out how these will be integrated with the API docs here.

With the announcement of the plan to move this repo to expressjs org, this issue becomes moot, so I'm closing.


Add centos7 nodejs latest as supported

What type of PR is this?
/kind failing-test
/kind feature
What does does this PR do / why we need it:
We need to sync with s2i nodejs container centos image.
Which issue(s) this PR fixes:
Fixes #4347
Fixes #4278
PR acceptance criteria:

[ ] Unit test

[x] Integration test

[ ] Documentation

[x] I have read the test guidelines

How to test changes / Special notes to the reviewer:
centos7 nodejs image should work fine for odo.

/lgtm

/lgtm


SB Pipe error when deploying Website assets.

[INFO]	2021-06-18T02:44:42.877Z	a91a1139-a645-4936-807d-0948e54e3806	Unable to copy website source code into the website bucket: An error occurred (AccessDenied) when calling the ListObjects operation: Access Denied

This is closed out by this PR
https://github.com/aws-samples/simple-file-manager-for-amazon-efs/pull/137


cmd/go: new Go tools like cmd/new5a should go into tool directory, not go/bin

cmd/dist will put them in the tool directory, but go install cmd/new5a will put it in go/bin, making for fun debugging sessions when using go tool new5a.
We should decide what's the best place for the new tools, and use it consistently.

Also, liblink will always invoke the objwriter in tool, not bin.

Nevermind, user error. cmd/go knows to do the right thing already, but apparently I had a stale go tool.


Switch session creation for API security to NEVER

Coverage increased (+0.1%) to 88.968% when pulling 059cca3d4b96a3a69bf193e54d95f78ff484cc46 on tgianos:sessionManagement into 7b9afec9a81d68639fe322566a584ca21a01525d on Netflix:master.


fix swagger diff

Refer to this link for build results (access rights to CI server needed):
ci-cloudbreak.eng.hortonworks.com/job/cloudbreak-pull-request-builder-checkstyle-main/24/

Refer to this link for build results (access rights to CI server needed):
ci-cloudbreak.eng.hortonworks.com/job/cloudbreak-pull-request-builder-spotbugs-main/19/

Refer to this link for build results (access rights to CI server needed):
ci-cloudbreak.eng.hortonworks.com/job/cloudbreak-pull-request-builder-unit-test/17/

Refer to this link for build results (access rights to CI server needed):
ci-cloudbreak.eng.hortonworks.com/job/cloudbreak-pull-request-builder-checkstyle-test/25/

Refer to this link for build results (access rights to CI server needed):
ci-cloudbreak.eng.hortonworks.com/job/cloudbreak-pull-request-builder-spotbugs-test/17/

Refer to this link for build results (access rights to CI server needed):
ci-cloudbreak.eng.hortonworks.com/job/cloudbreak-pull-request-builder-integration-test/17/


Move navbar updates to Main branch

Close #29

This is failing on the build stage - mostly typescript but also issue with fileStructure returned as undefined - filtering through the component hierarchy and causing errors.
Let's fix this and attempt again in 2 weeks time


BitChute ERROR   |  Video Access Limited   (already used cookies file for login as well)

Checklist

[X] I'm reporting a bug unrelated to a specific site
[X] I've verified that I'm running yt-dlp version 2022.05.18 (update instructions) or later (specify commit)
[X] I've checked that all provided URLs are playable in a browser with the same IP and same login details
[X] I've checked that all URLs and arguments with special characters are properly quoted or escaped
[X] I've searched the bugtracker for similar issues including closed ones. DO NOT post duplicates
[X] I've read the guidelines for opening an issue

Description
ERROR: [BitChute]
Video Access Limited
Report issue at: https://github.com/yt-dlp/yt-dlp/issues?q=
Fill out appropriate issue-template.
Confirm use of latest version  yt-dlp -U
❯ yt-dlp -U
Latest    version: 2022.05.18
Current version: 2022.05.18
yt-dlp is up to date (2022.05.18
Command used:
yt-dlp -vU  https://www.bitchute.com/video/JTaXVMz8q1A1/
ERROR: [BitChute] JTaXVMz8q1A1: Video Access Limited; please report this issue on  https://github.com/yt-dlp/yt-dlp/issues?q= , filling out the appropriate issue template. Confirm you are on the latest version using  yt-dlp -U
File "/usr/local/Cellar/yt-dlp/2022.5.18/libexec/lib/python3.10/site-packages/yt_dlp/extractor/common.py", line 642, in extract
ie_result = self._real_extract(url)
File "/usr/local/Cellar/yt-dlp/2022.5.18/libexec/lib/python3.10/site-packages/yt_dlp/extractor/bitchute.py", line 75, in _real_extract
raise ExtractorError(error)
I also ensured my cookies file was loaded (as I was logged in to verify my age).

Verbose log
❯ yt-dlp -vU  https://www.bitchute.com/video/JTaXVMz8q1A1/
[debug] Command-line config: ['-vU', 'https://www.bitchute.com/video/JTaXVMz8q1A1/']
[debug] Encodings: locale UTF-8, fs utf-8, pref UTF-8, out utf-8, error utf-8, screen utf-8
[debug] yt-dlp version 2022.05.18 [b14d52355]
[debug] Python version 3.10.4 (CPython 64bit) - macOS-12.3.1-x86_64-i386-64bit
[debug] Checking exe version: ffprobe -bsfs
[debug] Checking exe version: ffmpeg -bsfs
[debug] exe versions: ffmpeg 5.0.1 (setts), ffprobe 5.0.1
[debug] Optional libraries: Cryptodome-3.14.1, brotli-1.0.9, certifi-2021.10.08, mutagen-1.45.1, sqlite3-2.6.0, websockets-10.3
[debug] Proxy map: {}
Latest version: 2022.05.18, Current version: 2022.05.18
yt-dlp is up to date (2022.05.18)
[debug] [BitChute] Extracting URL: https://www.bitchute.com/video/JTaXVMz8q1A1/
[BitChute] JTaXVMz8q1A1: Downloading webpage
ERROR: [BitChute] JTaXVMz8q1A1: Video Access Limited; please report this issue on  https://github.com/yt-dlp/yt-dlp/issues?q= , filling out the appropriate issue template. Confirm you are on the latest version using  yt-dlp -U
  File "/usr/local/Cellar/yt-dlp/2022.5.18/libexec/lib/python3.10/site-packages/yt_dlp/extractor/common.py", line 642, in extract
    ie_result = self._real_extract(url)
  File "/usr/local/Cellar/yt-dlp/2022.5.18/libexec/lib/python3.10/site-packages/yt_dlp/extractor/bitchute.py", line 75, in _real_extract
    raise ExtractorError(error)


⚠ Bofrost.be has degraded performance

In 5e80495, Bofrost.be (https://www.bofrost.be) experienced degraded performance:

HTTP code: 200
Response time: 2538 ms

Resolved: Bofrost.be performance has improved in e5053ca.


Token cleanup job is running twice for multiple instances

Hi,
We have deployed our identity server on azure ARM and we have two instances of identity server. The cleanup activity of tokens is being performed by both the instances but we need to restrict it to one instance only.

You can disable the cleanup flag on the one you want to disable.

Hi brockallen,
Thanks for the quick response. We have multiple instances of same web application(web-farm) which shares same configurations. Please let me know how we will disable it and which setting in the configurations you are talking about. We have created Instance of TokenCleanup and start it in the application code.
Thanks in Advance !!!

EnableTokenCleanup on http://docs.identityserver.io/en/release/reference/ef.html#operationalstoreoptions

Hi brockllen,
Multiple instances of same web application(web-farm) shares the same code so how we can achieve this by
EnableTokenCleanup property.
Also, we have used identity server3, is there any way in IdentityServer3.

IIRC, there's a similar flag for IdentityServer3.

Thanks Brockallen,
I'm not sure how I would update this property(EnableTokenCleanup) in one instance if both the instances are running on same web application(web-farm) and share same code. Please suggest.

I don't know your hosting or deployment infrastructure. You'd have to figure that out yourself.


Add a write barrier to FunctionInfo::functionBodyImpl.

This has not been needed in the past, but redeferral now experiences symptoms of missing write barrier, i.e., memory pointed to by a ParseableFunctionInfo created by redeferral is freed/overwritten.

@leirocks Can you look at this one?


[backport] ci: Cilium CLI template changes

Reason for Change:

Templatizes Cilium CLI install to ensure that nothing slips.
Updates regex with OR operator to check for old and new cilium images.
Issue Fixed:

Requirements:

[x] uses conventional commit messages

[ ] includes documentation
[ ] adds unit tests
[x] relevant PR labels added

Notes:

/azp run Azure Container Networking PR

/azp run Azure Container Networking PR


[IT] Translate GetState

This PR adds GetState support to the italian language.

@xraver @auanasgheps are you able to help @alessandroias here?

Tonight I'm finishing this :)

I can't understand where's the error, the CI test is not clear.
@alessandroias are you done with your changes?

@auanasgheps @xraver I would love if you could have a look this changes, and tell me what to improve (and why CI checks are not successful).
Thanks a lot! It's driving me crazy! (I'm sleepy too, I will continue tomorrow).

I updated the branch because it reports it's not updated. Lets see if fixes the error.

So, some stuff in intents/tests/it/cover_HassGetState.yaml was not properly in place.
There's still an error, but it's different, hurray!

What I get is
Error:  tests/it/cover_HassGetState.yaml: not all sentences have tests (5/7)
In fact I removed the last two sentences that @alessandroias has added, those are not in the English file. However, if I add them, I get a generic error without explanation.
I cannot find these two sentences in other files, so I don't understand why it complains.
Alessandro do you know where these sentences are referenced?

As far as I can understand: nowhere...

@synesthesiam can you share some light on the error?

@nikito7 thank you!


Python 3.x/2.x incompatibility issue in gammazeta.py

gammazeta.py (function mpc_zetasum) contains the following code:
have_derivatives = derivatives != [0]
(...)

In some scenarios, it is being called with "derivatives" equal to range(0,1). The intended behavior is for "have_derivatives" to evaluate to False in this case.
However:
Python 2.7.9 (default, Dec 10 2014, 12:24:55) [MSC v.1500 32 bit (Intel)] on win32
Type "copyright", "credits" or "license()" for more information.

x=range(0,1)
y=[0]
x==y

True

Python 3.5.2 (v3.5.2:4def2a2901a5, Jun 25 2016, 22:18:55) [MSC v.1900 64 bit (AMD64)] on win32
Type "copyright", "credits" or "license()" for more information.

x=range(0,1)
y=[0]
x==y

False

The effect is that an optimized function (zetasum_sieved) is not used in 3.x.

While we're at it, I suggest a small fix.
The first if() in mpc_zetasum currently reads
if a > 0 and n > ZETASUM_SIEVE_CUTOFF and not have_derivatives and not reflect:
I would modify it to:
if a > 0 and n > ZETASUM_SIEVE_CUTOFF and not have_derivatives and not reflect and (n<4e7 or sys.maxsize>2**32):
(You'd need to add "import sys" in the same file.)
The reason is that current code fails in 32-bit Python if n is sufficiently large. For example, attempting to calculate zeta(0.5+j*1e17) or siegelz(1e17) results in MemoryError being thrown, since zetasum_sieved attempts to allocate a list of length n = sqrt(1e17/2pi) \approx 1.2e8, and 32-bit Python does not have enough memory for that. Avoiding zetasum_sieved path in this scenario allows the calculation to complete (though perhaps to take longer than it would've in a 64-bit interpreter.)

These changes seem OK. Do you want to make a pull request?

Fixed (hopefully).


code is pushed to latest version

@Zaid-Ajaj I have corrected the code to support latest Fable.Core, Elmish and React. But I was facing issue while running build. It would be great if you can check it out. And also push Fake to latest version.
Let me know if anything is required from my end.

Hello @kunjee17, thanks a lot for updates, I didn't know fable-compiler already went stable. Though it seems that Fable.Core is still in beta. I would like to push every library to stable release when Fable.Core is stable too.
As for running the builds, I think you still need mono and then it is just a matter of ./build.sh  or build.cmd if you are on Windows

Travis CI seems to be broken too, I will fix it

@Zaid-Ajaj Build.sh was not working as I have updated fable-compiler as well. Basically there are breaking changes with latest fable. So, I guess there are little bit more changes required from the build.fsx and webpack.config perspective.
So, It would be great if you can have a look at it and update them.

And, yes it could wait till full release if you are not releasing beta like other libraries.

Build.sh was not working as I have updated fable-compiler as well. Basically there are breaking changes with latest fable. So, I guess there are little bit more changes required from the build.fsx and webpack.config perspective.

Yeah things have to be just right everywhere to make the build work. I think build.fsx is using dotnet-fable to run the Fable compilation instead of invoking webpack.

And, yes it could wait till full release if you are not releasing beta like other libraries.

Nah I will release it in beta today :)

Hello @kunjee17, I just managed to publish a beta release as of version 3.0.0-beta and should be available soon when Nuget does it's magic.
The problem in the build was because of outdated webpack and webpack-cli versions. Let's see if travis is happy...


[WIP] #198 Online Status

Todos

[ ] Write tests
[ ] Let user decide if last date is shown to other users

To me it would also be interesting to see not only the last time active, but a visualization of activity. Maybe there is a good solution out there already?

What do you mean? It’s just the timestamp of the last activity to be able to show if the user was active in the last 15 minutes, the same that is done in the current alpha. It has nothing to do with logging or audit.
But I agree that we could throttle it with a small queue for that for saving every 30 sek or something like that.
This was just the first shot to validate the idea.

@roschaefer now its queued!


Add support for matrix decompose and compose

Based on CSS3 transform spec:
http://www.w3.org/TR/css3-transforms/#decomposing-a-3d-matrix
It also describes decomposing 2d matrix.
While we are at it, maybe support composing matrices given its component parts (translation, rotation, skew, perspective, etc).
Chromium also has an implementation in C++:
https://github.com/ChromiumWebApps/chromium/blob/master/ui/gfx/transform_util.cc

These function have been implemented.

@stefnotch Hello, thank you very much for your work!
I saw decompose have been implemented, but compose not yet?

@gonnavis See https://glmatrix.net/docs/module-mat4.html#.fromRotationTranslationScale and other matrix functions. To compose them, you multiply them.
The only thing that I think isn't in there is skew. There was a pull request to add it a while back, but nothing happened since then. I suppose skewing is a quite rare operation.

Thanks a lot!


Integration tests fail in NixOS using nix-build

NixOS builds in sandboxed environments using nixbld users and /homeless-shelter as a $HOME. Those build users do not have .gitconfig setup, so git operations fail with error: could not lock config file /homeless-shelter/.gitconfig: No such file or directory. Complete output below after issuing nix build
     Running tests/integration_test.rs (target/release/deps/integration_test-74d13108bef44e11)

running 43 tests
test cmd_dot_default_no_args ... ok
test cmd_exec_grafted_group ... ok
test cmd_exec_garden_with_grafted_trees ... ok
test cmd_dot_default_double_dash_args ... ok
test cmd_exec_group_with_grafted_trees ... ok
test cmd_dot_default_double_dash ... ok
test cmd_dot_default_no_args_echo ... ok
test eval_config_dir_with_chdir_and_root ... ok
test cmd_no_errexit ... ok
test cmd_dash_dash_arguments_custom ... ok
test eval_exec_pwd_with_root_and_chdir ... ok
test eval_graft_variable_at_tree_scope ... ok
test eval_grafted_variable_at_global_scope ... ok
test eval_grafted_variable_with_namespace ... ok
test cmd_dash_dash_arguments ... ok
test eval_root_with_root ... ok
test cmd_shell_variables ... ok
test eval_root_with_root_and_chdir ... ok
test cmd_breadth_first_and_depth_first ... ok
test cmd_no_errexit_for_command_lists ... ok
test eval_grafted_builtin_variables ... ok
Author identity unknown

*** Please tell me who you are.

Run

  git config --global user.email<EMAIL_ADDRESS>  git config --global user.name "Your Name"

to set your account's default identity.
Omit --global to set the identity only in this repository.

fatal: unable to auto-detect email address (got 'nixbld@localhost.(none)')
Author identity unknown

*** Please tell me who you are.

Run

  git config --global user.email<EMAIL_ADDRESS>  git config --global user.name "Your Name"

to set your account's default identity.
Omit --global to set the identity only in this repository.

fatal: unable to auto-detect email address (got 'nixbld@localhost.(none)')
test cmd_prune_depth ... FAILED
Author identity unknown

*** Please tell me who you are.

Run

  git config --global user.email<EMAIL_ADDRESS>  git config --global user.name "Your Name"

to set your account's default identity.
Omit --global to set the identity only in this repository.

test git_branches ... FAILED
fatal: unable to auto-detect email address (got 'nixbld@localhost.(none)')
Author identity unknown

*** Please tell me who you are.

Run

  git config --global user.email<EMAIL_ADDRESS>  git config --global user.name "Your Name"

to set your account's default identity.
Omit --global to set the identity only in this repository.

fatal: unable to auto-detect email address (got 'nixbld@localhost.(none)')
Author identity unknown

*** Please tell me who you are.

Run

  git config --global user.email<EMAIL_ADDRESS>  git config --global user.name "Your Name"

to set your account's default identity.
Omit --global to set the identity only in this repository.

test eval_garden_config_dir ... FAILED
fatal: unable to auto-detect email address (got 'nixbld@localhost.(none)')
test eval_override_variables ... FAILED
test git_worktree_details ... FAILED
Author identity unknown

*** Please tell me who you are.

Run

  git config --global user.email<EMAIL_ADDRESS>  git config --global user.name "Your Name"

to set your account's default identity.
Omit --global to set the identity only in this repository.

fatal: unable to auto-detect email address (got 'nixbld@localhost.(none)')
test grow_bare_repo_with_config ... FAILED
test cmd_pre_and_post_commands ... ok
Author identity unknown

*** Please tell me who you are.

Run

  git config --global user.email<EMAIL_ADDRESS>  git config --global user.name "Your Name"

to set your account's default identity.
Omit --global to set the identity only in this repository.

fatal: unable to auto-detect email address (got 'nixbld@localhost.(none)')
Author identity unknown

*** Please tell me who you are.

Run

  git config --global user.email<EMAIL_ADDRESS>  git config --global user.name "Your Name"

to set your account's default identity.
Omit --global to set the identity only in this repository.

fatal: unable to auto-detect email address (got 'nixbld@localhost.(none)')
test grow_branches_for_clone ... FAILED
test grow_bare_repo ... FAILED
Author identity unknown

*** Please tell me who you are.

Run

  git config --global user.email<EMAIL_ADDRESS>  git config --global user.name "Your Name"

to set your account's default identity.
Omit --global to set the identity only in this repository.

fatal: unable to auto-detect email address (got 'nixbld@localhost.(none)')
test grow_branch_default ... FAILED
Author identity unknown

*** Please tell me who you are.

Run

  git config --global user.email<EMAIL_ADDRESS>  git config --global user.name "Your Name"

to set your account's default identity.
Omit --global to set the identity only in this repository.

fatal: unable to auto-detect email address (got 'nixbld@localhost.(none)')
test grow_clone ... FAILED
Author identity unknown

*** Please tell me who you are.

Run

  git config --global user.email<EMAIL_ADDRESS>  git config --global user.name "Your Name"

to set your account's default identity.
Omit --global to set the identity only in this repository.

fatal: unable to auto-detect email address (got 'nixbld@localhost.(none)')
test grow_clone_shallow ... FAILED
Author identity unknown

*** Please tell me who you are.

Run

  git config --global user.email<EMAIL_ADDRESS>  git config --global user.name "Your Name"

to set your account's default identity.
Omit --global to set the identity only in this repository.

fatal: unable to auto-detect email address (got 'nixbld@localhost.(none)')
test grow_clone_single_branch ... FAILED
Author identity unknown

*** Please tell me who you are.

Run

  git config --global user.email<EMAIL_ADDRESS>  git config --global user.name "Your Name"

to set your account's default identity.
Omit --global to set the identity only in this repository.

fatal: unable to auto-detect email address (got 'nixbld@localhost.(none)')
Author identity unknown

*** Please tell me who you are.

Run

  git config --global user.email<EMAIL_ADDRESS>  git config --global user.name "Your Name"

to set your account's default identity.
Omit --global to set the identity only in this repository.

fatal: unable to auto-detect email address (got 'nixbld@localhost.(none)')
test grow_default_remote_name ... FAILED
test grow_default_remote_url ... FAILED
test cmd_pre_and_post_nested_commands ... ok
Author identity unknown

*** Please tell me who you are.

Run

  git config --global user.email<EMAIL_ADDRESS>  git config --global user.name "Your Name"

to set your account's default identity.
Omit --global to set the identity only in this repository.

fatal: unable to auto-detect email address (got 'nixbld@localhost.(none)')
Author identity unknown

*** Please tell me who you are.

Run

  git config --global user.email<EMAIL_ADDRESS>  git config --global user.name "Your Name"

to set your account's default identity.
Omit --global to set the identity only in this repository.

fatal: unable to auto-detect email address (got 'nixbld@localhost.(none)')
test grow_gitconfig ... FAILED
test grow_gitconfig_append_value ... FAILED
Author identity unknown

*** Please tell me who you are.

Run

  git config --global user.email<EMAIL_ADDRESS>  git config --global user.name "Your Name"

to set your account's default identity.
Omit --global to set the identity only in this repository.

fatal: unable to auto-detect email address (got 'nixbld@localhost.(none)')
Author identity unknown

*** Please tell me who you are.

Run

  git config --global user.email<EMAIL_ADDRESS>  git config --global user.name "Your Name"

to set your account's default identity.
Omit --global to set the identity only in this repository.

fatal: unable to auto-detect email address (got 'nixbld@localhost.(none)')
test grow_symlinks ... FAILED
test grow_remotes ... FAILED
Author identity unknown

*** Please tell me who you are.

Run

  git config --global user.email<EMAIL_ADDRESS>  git config --global user.name "Your Name"

to set your account's default identity.
Omit --global to set the identity only in this repository.

fatal: unable to auto-detect email address (got 'nixbld@localhost.(none)')
test grow_worktree_and_parent ... FAILED
test cmd_keep_going_and_no_errexit ... ok

failures:

---- cmd_prune_depth stdout ----
thread 'cmd_prune_depth' panicked at tests/common/mod.rs:171:5:
assertion `left == right` failed
  left: 128
 right: 0
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace

---- git_branches stdout ----
thread 'git_branches' panicked at tests/common/mod.rs:171:5:
assertion `left == right` failed
  left: 128
 right: 0

---- eval_garden_config_dir stdout ----
thread 'eval_garden_config_dir' panicked at tests/common/mod.rs:171:5:
assertion `left == right` failed
  left: 128
 right: 0

---- eval_override_variables stdout ----
thread 'eval_override_variables' panicked at tests/common/mod.rs:171:5:
assertion `left == right` failed
  left: 128
 right: 0

---- git_worktree_details stdout ----
thread 'git_worktree_details' panicked at tests/common/mod.rs:171:5:
assertion `left == right` failed
  left: 128
 right: 0

---- grow_bare_repo_with_config stdout ----
thread 'grow_bare_repo_with_config' panicked at tests/common/mod.rs:171:5:
assertion `left == right` failed
  left: 128
 right: 0

---- grow_branches_for_clone stdout ----
thread 'grow_branches_for_clone' panicked at tests/common/mod.rs:171:5:
assertion `left == right` failed
  left: 128
 right: 0

---- grow_bare_repo stdout ----
thread 'grow_bare_repo' panicked at tests/common/mod.rs:171:5:
assertion `left == right` failed
  left: 128
 right: 0

---- grow_branch_default stdout ----
thread 'grow_branch_default' panicked at tests/common/mod.rs:171:5:
assertion `left == right` failed
  left: 128
 right: 0

---- grow_clone stdout ----
thread 'grow_clone' panicked at tests/common/mod.rs:171:5:
assertion `left == right` failed
  left: 128
 right: 0

---- grow_clone_shallow stdout ----
thread 'grow_clone_shallow' panicked at tests/common/mod.rs:171:5:
assertion `left == right` failed
  left: 128
 right: 0

---- grow_clone_single_branch stdout ----
thread 'grow_clone_single_branch' panicked at tests/common/mod.rs:171:5:
assertion `left == right` failed
  left: 128
 right: 0

---- grow_default_remote_name stdout ----
thread 'grow_default_remote_name' panicked at tests/common/mod.rs:171:5:
assertion `left == right` failed
  left: 128
 right: 0

---- grow_default_remote_url stdout ----
thread 'grow_default_remote_url' panicked at tests/common/mod.rs:171:5:
assertion `left == right` failed
  left: 128
 right: 0

---- grow_gitconfig stdout ----
thread 'grow_gitconfig' panicked at tests/common/mod.rs:171:5:
assertion `left == right` failed
  left: 128
 right: 0

---- grow_gitconfig_append_value stdout ----
thread 'grow_gitconfig_append_value' panicked at tests/common/mod.rs:171:5:
assertion `left == right` failed
  left: 128
 right: 0

---- grow_symlinks stdout ----
thread 'grow_symlinks' panicked at tests/common/mod.rs:171:5:
assertion `left == right` failed
  left: 128
 right: 0

---- grow_remotes stdout ----
thread 'grow_remotes' panicked at tests/common/mod.rs:171:5:
assertion `left == right` failed
  left: 128
 right: 0

---- grow_worktree_and_parent stdout ----
thread 'grow_worktree_and_parent' panicked at tests/common/mod.rs:171:5:
assertion `left == right` failed
  left: 128
 right: 0

failures:
    cmd_prune_depth
    eval_garden_config_dir
    eval_override_variables
    git_branches
    git_worktree_details
    grow_bare_repo
    grow_bare_repo_with_config
    grow_branch_default
    grow_branches_for_clone
    grow_clone
    grow_clone_shallow
    grow_clone_single_branch
    grow_default_remote_name
    grow_default_remote_url
    grow_gitconfig
    grow_gitconfig_append_value
    grow_remotes
    grow_symlinks
    grow_worktree_and_parent

test result: FAILED. 24 passed; 19 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s

error: test failed, to rerun pass `--test integration_test`

Possible approaches I can think of:

Provide a gitconfig during the setup. Set up an env variable like GIT_CONFIG and GIT_CONFIG_NOSYSTEM so git commands make use of it. Believe env GIT_CONFIG is deprecated these days though.
I would not hard code expected $HOME values /home/test, such as https://github.com/davvid/garden/blob/main/tests/eval_test.rs#L201, so I'd set it up globally as const HOME: &'static str = "/home/test"; and use that as a reference.
NixOS nixbld users use HOME=/homeless-shelter (although that home does not actually exist) so using that would certainly fix all assertions and does not assume a home under a /home path

Hi Jordi, and thanks for the heads-up! I think we should be able to arrange to provide a gitconfig for use by the tests. I think we might be currently using git config --global in the integration test setup script but that can probably be adjusted to use regular git config commands inside of the temporary repositories we're creating.
If that doesn't work then an environment variable should be able to handle it. I believe git supports $XDG_CONFIG_HOME so that might be another option.

https://gitlab.com/garden-rs/garden/-/blob/main/tests/integration/setup.sh?ref_type=heads#L24 is where we should be able to
git config user.name Garden
git config user.email garden@localhost

and then we won't interact with $HOME at all.

I knew this sounded familiar.. we had first run into this when setting up the .gitlab-ci.yml but the fix was regulated to just that entry point. Now we're fixing it in the tests directly. I should probably rewrite that shell script into a rust function in tests/common/mod.rs.
Thanks Jordi!

Thanks @davvid - this fixed it :+1:


Make printer instances work again

Hi Mike,
since commit c5f5c5a7683924618b3e6a0ab6db5a1674db8f6d, printer instances don't work anymore.
They can be created, e.g. using
lpoptions -p myprinter/myinstance -o Duplex=None

and then show up in ~/.cups/lpoptions. However, they are not listed when e.g. running lpstat -v or in print dialogs.
These two commits make printer instances work again for the case where queues from the local CUPS server are used.
Handling of instances for autodiscovered printers might need a follow-up commit. I wasn't 100 % sure about this, so left it unchanged.

Sorry, that change has some bad side-effects. I will push a simpler fix to cups_enum_dests against the parent bug...

Fine for me, thanks for looking into it!


Terminal test for Ciphey

This PR adds a CI to run ciphey using poetry from terminal. This is done using Github actions. There are 2 tests done in this action.

Running ciphey with plain text
Running ciphey with base64 encoded string

Closes #429

Hey @malathit ! Thanks SO much for this! We really needed this and you pulled through :muscle:  also your code is very, very nice. Nicest GitHub action we have :sweat_smile:  Thanks so much!!!
@all-contributors please add @malathit for code

Hey we're changing from MIT to GPLv3 because some of our projects are licensed with that, do you approve? If you do not approve we will be forced to delete your code and rewrite it 😢
By approving of this change, you are agreeing to re-license the code you wrote under GPLv3.

I agree
On Thu, 20 May 2021 at 16:03, Brandon @.***> wrote:

Hey we're changing from MIT to GPLv3 because some of our projects are
licensed with that, do you approve? If you do not approve we will be forced
to delete your code and rewrite it 😢
By approving of this change, you are agreeing to re-license the code you
wrote under GPLv3.
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
https://github.com/Ciphey/Ciphey/pull/446#issuecomment-844965483, or
unsubscribe
https://github.com/notifications/unsubscribe-auth/AAUPJ5GIY5RU2EJQAHAO2OLTOTQRPANCNFSM4R7PFUHA
.

--
Regards,
Malathi


Add shortname

Currently the app only has the name 'Cafe Analog'. It needs a 'shortname'

Not possible it seems, my bad

Unless we want to rename the app to 'Analog', but that should be a discussion of its own

Thanks for investigating. I think it's fine for now unless we just call it Analog which I think would be just fine


ArcGIS Pro version of editor

Considering ArcGIS Pro already had its first birthday, it may be time to look at a conversion of the ArcGIS Editor for OpenStreetMap to Pro (besides a 10.4 version of the toolbox).
If a full conversion to Pro is to much of an effort at this point in time, especially considering the advanced editing and posting functionality regarding the OSM main database, it might be an idea to develop a lightweight OSM conversion & dataloader instead as a first step to a full conversion of the Editor.
Having a basic OSM data conversion tool in Pro would already be of much use to many people starting to explore Pro, and would facilitate my ArcGIS Renderer for OpenStreetMap as well.
Such a lightweight "ArcGIS Data Loader for OpenStreetMap" might be based on a subset of the existing tools, most likely:

Download OSM Data (XAPI)
Load OSM File (based on the new parallel loader as per https://github.com/Esri/arcgis-osm-editor/pull/110 and https://github.com/Esri/arcgis-osm-editor/pull/119)
OSM Attribute Selector

and possibly some of the basic symbolization options:

Symbolize OSM Data
Symbolize Points
Symbolize Lines
Symbolize Polygons

which can probably be used "as is" in Pro once the lyr files have been replaced by lyrx.
After this, a full conversion of the Editor toolbox, could be done on a later date when convenient and time allows.

Have you seen any progress on this since? I am trying to convert osm data to Arcgis Pro but cannot find any way to do so...

Have you seen any progress on this since? I am trying to convert osm data to Arcgis Pro but cannot find any way to do so...

No, I haven't had any formal response to this one yet as you can see in this thread, although I guess this is on ESRI's TO-DO list or at the very least in the back of their minds while working on other minor updates to the toolbox like the new parallel loader. However, considering the Editor is not an officially supported product, it may take some time as not being part of any official release policies of ESRI.
However, regarding your question: if you have Pro, you also should be able to install ArcMap. That will allow you to do the conversion with the current toolbox, and then use Pro's option for importing ArcMap documents to get the data in Pro (if you intend to stylize in ArcMap first), or simply add the Feature Classes straight to Pro after conversion with ArcMap.
HOWEVER(!): In order for that to function, and depending on what version of ArcMap and the Editor you are running, you may need to have to use the Remove OSM Editor Extension tool first on the data you loaded in your geodatabase, to get Pro capable of reading the data. This is not the case with the newer versions of the toolbox afaik. Anyway, if you have a problem with loading the converted data in Pro, try running the tool.
With that said, you really shouldn't have problems getting the data read and viewed in Pro, I have done that multiple times without issues.

We’ve heard the request for the tools to function in ArcGIS Pro, however we’ve not taken any significate actions toward that as of yet. As noted in this thread, you can use the existing tools in ArcMap and Import the mxd after the OSM data has been copied down and symbolized.
From: mboeringa<EMAIL_ADDRESS>Reply-To: Esri/arcgis-osm-editor<EMAIL_ADDRESS>Date: Thursday, September 29, 2016 at 10:15 AM
To: Esri/arcgis-osm-editor<EMAIL_ADDRESS>Subject: Re: [Esri/arcgis-osm-editor] ArcGIS Pro version of editor (#120)
Have you seen any progress on this since? I am trying to convert osm data to Arcgis Pro but cannot find any way to do so...
No, I haven't had any formal response to this one yet as you can see in this thread, although I guess this is on ESRI's TO-DO list or at the very least in the back of their minds while working on other minor updates to the toolbox like the new parallel loader. However, considering the Editor is not an officially supported product, it may take some time as not being part of any official release policies of ESRI.
However, regarding your question: if you have Pro, you also should be able to install ArcMap. That will allow you to do the conversion with the current toolbox, and then use Pro's option for importing ArcMap documents to get the data in Pro (if you intend to stylize in ArcMap first), or simply add the Feature Classes straight to Pro after conversion with ArcMap.
HOWEVER(!): In order for that to function, and depending on what version of ArcMap and the Editor you are running, you may need to have to use the Remove OSM Editor Extension tool first on the data you loaded in your geodatabase, to get Pro capable of reading the data. This is not the case with the newer versions of the toolbox afaik. Anyway, if you have a problem with loading the converted data in Pro, try running the tool.
With that said, you really shouldn't have problems getting the data read and viewed in Pro, I have done that multiple times without issues.
—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHubhttps://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_Esri_arcgis-2Dosm-2Deditor_issues_120-23issuecomment-2D250531802&d=DQMFaQ&c=n6-cguzQvX_tUIrZOS_4Og&r=JYw2HCRZvEKA6NAcKLB6aTkaNRCv8jCuviz0miw1zM8&m=WwCziy2AykW_E-xcdGeP5kZFY-Sfb1NN7s84Qp_PeDY&s=NfKNAcxB9_zv4C24pml3Xrt4LC1ARWuOeibJKbBUAxo&e=, or mute the threadhttps://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_notifications_unsubscribe-2Dauth_AHHZjdrfGjTaVght0cZ7KBiUnXOTmVt4ks5qu-5FJCgaJpZM4H8OIm&d=DQMFaQ&c=n6-cguzQvX_tUIrZOS_4Og&r=JYw2HCRZvEKA6NAcKLB6aTkaNRCv8jCuviz0miw1zM8&m=WwCziy2AykW_E-xcdGeP5kZFY-Sfb1NN7s84Qp_PeDY&s=FkXamj-IGTDFLP0ixMxMAbDb9z1foOo27QXZGfakihg&e=.

We’ve heard the request for the tools to function in ArcGIS Pro, however we’ve not taken any significate actions toward that as of yet. As noted in this thread, you can use the existing tools in ArcMap and Import the mxd after the OSM data has been copied down and symbolized.

Hi @cloveman ,
Thanks for joining in on this one.
To be honest, your answer still leaves a lot of questions open. I realize a full Editor conversion, considering the low usage stats and excellent alternative editors like iD, JOSM etc, may be a low priority for ESRI.
I would therefore like you to focus and comment regarding the secondary possibility I have been posing here: that is, no Pro version of the full Editor, but just the import tools, and specifically the new fast parallel loader @ThomasEmge has been doing such excellent work on - the OSM File Loader (load only) tool - combined with the Download OSM Data (XAPI) and OSM Attribute Selector tool.
Although I am unfamiliar with the exact challenges such a toolbox conversion from ArcMap to Pro may incur, I think it likely to be far less demanding, and still provide the majority of ArcGIS Pro users interested in OSM data, with a great small toolset allowing easy access to the data and a great conversion option. I think the combination of these three core tools will provide great value to many of them.

Yes, that is helpful and potentially a good way for us to get started with a subset of the tools, and I agree with the greater value of the specific tools you identified.
From: mboeringa<EMAIL_ADDRESS>Reply-To: Esri/arcgis-osm-editor<EMAIL_ADDRESS>Date: Monday, October 3, 2016 at 11:59 AM
To: Esri/arcgis-osm-editor<EMAIL_ADDRESS>Cc: Clint Loveman<EMAIL_ADDRESS>Mention<EMAIL_ADDRESS>Subject: Re: [Esri/arcgis-osm-editor] ArcGIS Pro version of editor (#120)
We’ve heard the request for the tools to function in ArcGIS Pro, however we’ve not taken any significate actions toward that as of yet. As noted in this thread, you can use the existing tools in ArcMap and Import the mxd after the OSM data has been copied down and symbolized.
Hi @clovemanhttps://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_cloveman&d=DQMFaQ&c=n6-cguzQvX_tUIrZOS_4Og&r=JYw2HCRZvEKA6NAcKLB6aTkaNRCv8jCuviz0miw1zM8&m=M0t5epZ_T7QrtqoOShALnDw2cFayeA4MijaS8ufLTyI&s=7UIqQ3btOv1Idg9fjY8C8Gr6VDEtfqmykLPIe-IIVi0&e= ,
Thanks for joining in on this one.
To be honest, your answer still leaves a lot of questions open. I realize a full Editor conversion, considering the low usage stats and excellent alternative editors like iD, JOSM etc, may be a low priority for ESRI.
I would therefore like you to focus and comment regarding the secondary possibility I have been posing here: that is, no Pro version of the full Editor, but just the import tools, and specifically the new fast parallel loader @ThomasEmgehttps://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_ThomasEmge&d=DQMFaQ&c=n6-cguzQvX_tUIrZOS_4Og&r=JYw2HCRZvEKA6NAcKLB6aTkaNRCv8jCuviz0miw1zM8&m=M0t5epZ_T7QrtqoOShALnDw2cFayeA4MijaS8ufLTyI&s=cApk06V09xGGgMkRi1t2aH3g_lZCjr4Lor7RAnhZt1U&e= has been doing such excellent work on - the OSM File Loader (load only) tool - combined with the Download OSM Data (XAPI) and OSM Attribute Selector tool.
Although I am unfamiliar with the exact challenges such a toolbox conversion from ArcMap to Pro may incur, I think it likely to be far less demanding, and still provide the majority of ArcGIS Pro users interested in OSM data, with a great small toolset allowing easy access to the data and a great conversion option. I think the combination of these three core tools will provide great value to many of them.
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHubhttps://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_Esri_arcgis-2Dosm-2Deditor_issues_120-23issuecomment-2D251194316&d=DQMFaQ&c=n6-cguzQvX_tUIrZOS_4Og&r=JYw2HCRZvEKA6NAcKLB6aTkaNRCv8jCuviz0miw1zM8&m=M0t5epZ_T7QrtqoOShALnDw2cFayeA4MijaS8ufLTyI&s=Ltqh-HlDx15WjPeGSVBEENK-Ps8qrVHcYqt7-NSqzUE&e=, or mute the threadhttps://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_notifications_unsubscribe-2Dauth_AHHZjTPSvoAdEICCnFNpOFAce-5FZeWwfEks5qwVCHgaJpZM4H8OIm&d=DQMFaQ&c=n6-cguzQvX_tUIrZOS_4Og&r=JYw2HCRZvEKA6NAcKLB6aTkaNRCv8jCuviz0miw1zM8&m=M0t5epZ_T7QrtqoOShALnDw2cFayeA4MijaS8ufLTyI&s=fSSUXDCe8ZHTTFecKpS12v_pYas_0pl_m6Vcf8dvh7I&e=.

After one year the editor still have NOT been realised, what could I deal it with, ESRI, when I need to download and symbolize OSM file??!

Can we get an update on this please? I have been updated to ArcGIS Pro 2.0 and I no longer have access to ArcGIS Desktop, which leaves me currently unable to generate a network dataset from OSM.

@Chaz6 we are in the process of evaluating the LOE to do this, there is no timeline as of yet.

@cloveman any progress on a ArcGIS Pro editor since Feb 18?

@yobimania We don't have any plans to migrate this toolset to Pro, however we are looking at ways we could make OSM data accessible in Pro.
We've found that most users of this toolset don't actually use it to edit features into OSM. Are you just looking to get OSM data into a file geodatabase?

@skmoore pretty much just need it in gdb format however, as a contributor to OSM I find the web interface to be quite restrictive in making large amounts edits quickly when aspatial data manipulation in ArcGIS can be done much faster (an example being geocoding residential polygons) which currently is an extremely monotonous task of manual data entry.

@yobimania Ok, sounds like an extraction tool in Pro would mostly suit your needs then.
For the editing issues you have, you might want to try using JOSM. I'm not very familiar with it but I know it's much better suited than iD for large edits like building footprints.
We also have a pending pull request on the iD editor repository to allow geometries to be imported from REST services. So if you had access to a dataset like residential polygons which was already published as a service, you could automatically import the geometries into the editor rather than having to manually digitize them one by one. There's been some back and forth discussion on it, we're waiting to see what happens for now.

I would like to also ask for a network data set template based on OSM networks. We have had a huge amount of success with our pre-processed OSM networks  for network data-set creation and analysis. As far as I know, this really just involves attribution of costs/restrictions and planarizing the networks anywhere tunnels/bridges are not yes and the highway tag is not null (for ways vs. areas).
I would like to see progress on this front as well. At least with a basic tag schema for roads.

We've found that most users of this toolset don't actually use it to edit features into OSM. Are you just looking to get OSM data into a file geodatabase?

I need to build network datasets for solving with one-way, barriers, etc.

Any news on this? I also need to build network datasets based on OSM data.

With the lifecycle of 10.x, I also would like to request this to be converted.

In 2022, still nothing on this application compatible with arcgis pro?


Fix #749 - Filter does not work correctly with upper case letter in test name

As of 1.17.1, filters do not work when the module name contains upper case letters (#749) which was introduced by 1d44eb38052d25d97a631b9711e481303fc472b6.
This fixes it by changing valid() to lowercase the filter before using it further.

Looks good to me.

:+1:

CLA checked.
Thanks, @TheCloudlessSky.


Feature: Questions - Does Scorecard also generate score for app's in App stores?

Not really a request, more of a question. Can Scorecard generate scores for app's in App stores?
Can Scorecard produce scores on any binary software object or is it limited to certain types of objects?
Thanks,
Dick Brooks
Reliable Energy Analytics (REA)
<EMAIL_ADDRESS>

Scorecard is run on source code, and is currently heavily geared towards open-source projects hosted on GitHub.
There are apps in App Stores that meet that definition (such as Signal's Android or iOS apps), but you cannot run Scorecard against most apps in an App store. If you know an app is open-source and can find the source repository, you can point Scorecard to that.

To add to @spencerschrock's answer - for binary artifacts the recommendation is to use SLSA. SLSA provenances tie an artifact to a source code from which it was built. Scorecard can then be used produce scores on the source.

Closing for now, re-open if needed.


Replay scene/project buttons does not change icon back when closing the game

If you click Play Project or Play Scene they change to a "replay" icon. If you close the game it still keeps the "replay" icon. It only goes back to the "play" icon if the Stop button is pressed.

The logic was introduced here: 65258f7
Maybe @AlexHolly can help improve it.

I thought I had all cases :D this should solve it #2837


Currency symbol abbreviation "Sc" is not a valid property

What version of regex are you using?
1.5.4
Describe the bug at a high level.
The unicode abbreviation for for the currency symbols as defined here https://www.unicode.org/Public/UCD/latest/ucd/PropertyValueAliases.txt
is not valid and gives a regex parse error.
What are the steps to reproduce the behavior?
Add the regex crate to the cargo.toml file
File: Cargo.toml
[dependencies]
regex = "1.5.4"

File: main.rs
use regex::Regex;

fn main() {
    let regex = Regex::new(r"\p{Sc}").unwrap();
    if regex.is_match("$") {
        println!("Hello, world!");

Expected the regex to compile and return the "$" as a match.

TL;DR - It's a bug and you can work around it for now by using \p{gc=Sc} (or \p{gc:Sc}) to force the class parser to treat Sc as a general category. Although, personally, I would use \p{CurrencySymbol}, since I think that's clearer.
OK, so Sc is an abbreviation for the general category called Currency, and that's defined by Unicode in UTS#18. So first question is, do we have that general category and abbreviation in our Unicode tables? Yes and yes.
The next thing I noticed is that sc is actually a way to explicitly specify "script extension." So, e.g., \p{Greek} and \p{sc=Greek} are equivalent. So my thinking now is that the special treatment of sc is messing with the general category lookup. I believe this is where cases like \p{xxx} are handled, which to me implies that something is going wrote in the canonical_binary method.
... but that all looks right to me. And I don't see where any special handling of sc might be getting in the way. But this is just all by inspection. I write this down in case someone else wants to take a look at fixing this.


Docker Swarm service discovery

This is a docker swarm implementation without business logic.
Fixes #1766
Signed-off-by: Julien Pivotto<EMAIL_ADDRESS>

Are there up to date godocs for the library somewhere? The usual ones are years out of date.

No, I run godoc -http=:8080 locally ... :cry:

Note: we will want the tasks too, to get relevant metadata.
Note: enable version negotiation.

I have reviewed the docs and this is ready for a deeper review @brian-brazil @SuperQ
For your convenience & easy review, I have pushed relevant go docs here  https://roidelapluie.github.io/godoc-docker/pkg/github.com/docker/docker/client/index.html

I have been looking at what the existing service discoveries are doing ; next to the business logic, it is clear that the labels we get with one API call do not cut it. Hence I have added calls to get information about the networks & nodes, and added the useful labels to the services and tasks.
Note: This is not unusual as we do the same kind of things with other service discoveries, like EC2, where multiple calls are needed to get target info.

This is not unusual as we do the same kind of things with other service discoveries

In general that's fine, as long as there's not quotas or general slowness in the way.

We still miss the tasks that publish host ports directly

I have addressed all comments :flying_saucer:

Awesome work @roidelapluie.

Just tested this with the current RC:
I would suggest that the "host" parameter also supports unix-sockets. Exposing the docker socket over TCP is not something you would usually do in a production environment. Granting other containers access to the docker management port is commonly done by mounting /var/run/docker.sock read-only inside the container.

Thank you. We do not limit that; it is a limitation of docker swarm AFAIK.

Docker (Swarm) allows you to access the docker.sock; I was under the impression that the 'host' parameter (of prometheus) only accepts a address. Are you saying that one can also use file:// as a value for host?
2375 is by default not exposed, nor is 2376. Since 19.03 this is also considered malpractice, as docker can be managed through SSH (DOCKER_HOST=ssh://manager-node.domain) - which means you no longer need to expose the socket insecurely (2375) or setup a separate PKI (2376) but rather securely manage your Swarm using your existing PKI (SSH). Effectively the Docker client establishes an SSH session to the ${DOCKER_HOST} and communicates with the Unix socket (/var/run/docker.sock) of that host.

Docker (Swarm) allows you to access the docker.sock; I was under the impression that the 'host' parameter (of prometheus) only accepts a address. Are you saying that one can also use file:// as a value for host?
2375 is by default not exposed, nor is 2376. Since 19.03 this is also considered malpractice, as docker can be managed through SSH (DOCKER_HOST=ssh://manager-node.domain) - which means you no longer need to expose the socket insecurely (2375) or setup a separate PKI (2376) but rather securely manage your Swarm using your existing PKI (SSH). Effectively the Docker client establishes an SSH session to the ${DOCKER_HOST} and communicates with the Unix socket (/var/run/docker.sock) of that host.

Can you comment on the issue #7603? thanks

I just noticed, that only services seem to be discovered which have a port published? Is there a way around this? Many services do not expose their ports externally as they are interconnected by Docker overlay networks.

I just noticed, that only services seem to be discovered which have a port published? Is there a way around this? Many services do not expose their ports externally as they are interconnected by Docker overlay networks.

Prometheus 2.21.0 (out end of August) will expose those services as well (using the port: specified in the config). You can test it with the docker images prom/prometheus:master. Note that that version of prometheus is for testing only.

My finding is the opposite, services which do not have a port exposed (those without a port: in the config) are not being discovered.

@roidelapluie I tired using Docker Swarm Service Discovery in prometheus, but facing problems using it. I followed the docker swarm support documentation. Created a daemon.json file and mounted /var/run/docker.sock in prometheus container. Container is giving permission denied error as prometheus is running as nobody and doesn't have access to mounted /var/run/docker.sock. Below is my prometheus.yml.
Prometheus Version : v2.20.1
 prometheus:
    image: prom/prometheus
    networks:
      - monitor
    ports:
      - "9090:9090"
    command:
      - '--config.file=/etc/prometheus/prometheus.yml'
      - '--storage.tsdb.path=/prometheus'
      - '--storage.tsdb.retention=${PROMETHEUS_RETENTION:-24h}'
    volumes:
      - prometheus:/prometheus
      - /home/efs/devops/dsm:/etc/prometheus:ro
      - /var/run/docker.sock:/var/run/docker.sock:ro
    deploy:
      mode: replicated
      replicas: 1
      resources:
        limits:
          memory: 1024M
        reservations:
          memory: 128M

Prometheus.yml
scrape_configs:
  - job_name: 'docker'
    dockerswarm_sd_configs:
    - host: unix:///var/run/docker.sock
      role: nodes

Error:
<EMAIL_ADDRESS>| level=error ts=2020-08-06T07:21:19.106Z caller=refresh.go:98 component="discovery manager scrape" discovery=dockerswarm msg="Unable to refresh target groups" err="error while listing swarm nodes: Got permission denied while trying to connect to the Docker daemon socket at unix:///var/run/docker.sock: Get \"http://%2Fvar%2Frun%2Fdocker.sock/v1.24/nodes\": dial unix /var/run/docker.sock: connect: permission denied"

@umang5195 prometheus runs as the linux user nobody inside the container. Permissions on the docker socket are effectively restricted to root. Either re-configure prometheus to talk to docker over HTTP, or add user: root to your docker-compose file

I think that those kind of questions could be answered by the Swarm community as well. Running prometheus as root is not a good idea.

Running prometheus as root is not a good idea.

Agree. However, the problem is much broader than this, and that makes running as root arguably one of the better short-term ways to remove the error message. Access to the docker daemon is all-or-nothing, and anyone with access has effective root on the host machine. So regardless of how we do it (unix socket or TCP), if prometheus can access the docker daemon is effectively running with root access on the host system. In fact, not doing this is OWASPs #1 rule for securing docker.
Even if we wrote a different Dockerfile with a custom linux user (e.g. promd), any process running as promd user could use the docker daemon to run as effective root on the host. A simple example is docker run -it -v /:/host-root ubuntu bash - cd into the /host-root and you can relatively-freely browse the entire host filesystem.
We could rewrite the main example to use TLS. This would shift, not solve, the problem. We would no longer need to run prometheus as root, because there would be no problems with reading the socket. However, and process that could read the TLS certificates could still use the docker socket. So we're still effectively running our container with 'root-on-host' permissions.
There are some settings that can help to mitigate the all-or-nothing problem by reducing the set of "all" from "everything under the sun" to "only run containers without these settings". For example, rootless docker daemon is an ongoing project, but has serious limitations (no cgroup support).
As far as I know, the only real solution is for the docker daemon itself to have access controls built into the system. This is exactly what the Docker Access Authorization Plugin is all about - allowing you to grant access to the daemon without that access being all-or-nothing.
Pragmatically (e.g. what can prom authors do about this), the only thing we can do is warn users if they are using swarm service discovery that access to the docker socket is dangerous, and perhaps link them to a good summary page on docker's website. @umang5195 is sadly right that the example in the documentation will be broken out of the box unless you someone give read access to the docker socket. Adding TCP access or a custom-built Dockerfile with a dedicated Linux user to that example would drown out the actual example with pages of configuration guidance. My suggestion would be to have some type of warning box right in the example with red coloring. For example: ("Warning: To run this example, we have to grant prometheus access to the docker socket by running as root. This should not be done in production. See here for information on accessing the docker socket"). Sadly I don't think we can say "on accessing the docker socket safely", because there simply is not an option to allow for that right now

A solution, well workaround is, to expose the docker socket through a sidecar (eg caddy) which mounts the docker.sock read only and has a private network with the Prometheus container. It doesn’t solve all the security concerns, and addresses part of them through, if you will, obscurity. But it’s the best thing I have come up with so far.


Spring Keyvault - Add support for PEM format for private key to Certificates starter

Closing this issue because pem type is already supported: https://github.com/Azure/azure-sdk-for-java/tree/c859ce8a1fb058d5fb4640a06a3fc9fa2dcecef1/sdk/spring/azure-spring-boot-starter-keyvault-certificates#supported-key-type


Recurring Billing on App Installation

I'm having an issue with showing the subscription agreement page after auth.
In my auth.js, this is my /auth/callback logic with the GQL query for appSubscriptionCreate:
`
app.get("/auth/callback", async (req, res) => {
    try {
        const session = await Shopify.Auth.validateAuthCallback(
            req,
            res,
            req.query
        );
        console.log("validating auth ");

        const host = req.query.host;
        app.set(
            "active-shopify-shops",
            Object.assign(app.get("active-shopify-shops"), {
                [session.shop]: session.scope,
            })
        );

        const response = await Shopify.Webhooks.Registry.register({
            shop: session.shop,
            accessToken: session.accessToken,
            topic: "APP_UNINSTALLED",
            path: "/webhooks",
        });

        if (!response["APP_UNINSTALLED"].success) {
            console.log(
                `Failed to register APP_UNINSTALLED webhook: ${response.result}`
            );
        }

        // Redirect to app with shop parameter upon auth

        const returnUrl = `/?shop=${session.shop}&host=${host}`
        const subscriptionQuery = `mutation {
  appSubscriptionCreate(
      name: "A test recurring plan"
      returnUrl: "${returnUrl}"
      test: true
      lineItems: [
      {
        plan: {
          appRecurringPricingDetails: {
              price: { amount: 69.99, currencyCode: USD }
          }
        }
      }
      ]
    ) {
        userErrors {
          field
          message
        }
        confirmationUrl
        appSubscription {
          id
        }
    }
}`
        const client = new Shopify.Clients.Graphql(
            session.shop,
            session.accessToken
        );
        await client.query({ data: subscriptionQuery });

        res.redirect(`/?shop=${session.shop}&host=${host}`);
    } catch (e) {
        switch (true) {
            case e instanceof Shopify.Errors.InvalidOAuthError:
                res.status(400);
                res.send(e.message);
                break;
            case e instanceof Shopify.Errors.CookieNotFound:
            case e instanceof Shopify.Errors.SessionNotFound:
                // This is likely because the OAuth session cookie expired before the merchant approved the request
                res.redirect(`/auth?shop=${req.query.shop}`);
                break;
            default:
                res.status(500);
                res.send(e.message);
                break;
        }
    }
});

`
However, all it's doing is installing the app without prompting for agreement to the recurring charge. Any one else having this as well?

You got error on returnUrl, you have to use a absolute url and not relative url:
const returnUrl = /?shop=${session.shop}&host=${host} -> const returnUrl =https://xxxx.com/?shop=${session.shop}&host=${host}
You have to redirect to confirmationUrl and not to default redirect:
const respGL = await client.query({ data: subscriptionQuery });
const confirmUrl = respGL.body.data.appSubscriptionCreate.confirmationUrl;
res.redirect(confirmUrl);


Added assign_if transformation

Signed-off-by: Kuldeep Singh Pal<EMAIL_ADDRESS>

Codecov Report

Merging #276 (dc5ee2a) into main (6c1dae1) will increase coverage by 0.01%.
The diff coverage is 72.72%.

@@            Coverage Diff             @@
##             main     #276      +/-   ##
==========================================
+ Coverage   66.83%   66.85%   +0.01%
==========================================
  Files          73       73
  Lines        4149     4160      +11
==========================================
+ Hits         2773     2781       +8
- Misses       1197     1199       +2
- Partials      179      180       +1

Flag
Coverage Δ

unittests
66.85% <72.72%> (+0.01%)
:arrow_up:

Flags with carried forward coverage won't be shown. Click here to find out more.

Impacted Files
Coverage Δ

pkg/api/transform_network.go
100.00% <ø> (ø)

pkg/pipeline/transform/transform_network.go
61.87% <72.72%> (+0.80%)
:arrow_up:

Help us with your feedback. Take ten seconds to tell us how you rate us.


Right click to open recent project to new window

In the welcome page, It would be beneficial if we could middle click to open recent projects in a new seperate window. Or right click will show a context menu for other actions like, "Add to workspace", "Open in new window".
Also I am new to open source development. Can i get assigned to do it?

Assign me please, I will do it

Are you aware that the quickpick which displays when you click the "More..." link on the Welcome page gives you more options about what you can do with its entries? Though you have to use keyboard modifiers to use most of them, not mouse gestures.

I didn't know that. Good to know.
Well, unlike me, some people are not comfortable with keyboard shortcuts. It is not a nice experience to open File, Click "Open new window" and then select projects over and over again.

You can also left-click with Ctrl (Cmd on macOS) the recent entries on the Welcome page to open them in a new window.

You can also left-click with Ctrl (Cmd on macOS) the recent entries on the Welcome page to open them in a new window.

I think this serves the purpose of this issue. but can we stop focusing to the new window opened in the settings?

@njayman Would you want this for all new windows or just those opened from the recent list? This would have to be a setting or another modifier when clicking since other users might prefer the existing behavior.

@njayman Would you want this for all new windows or just those opened from the recent list? This would have to be a setting or another modifier when clicking since other users might prefer the existing behavior.

it could be a toggle flag in the setting. it will be like existing behavior by default, if user want, they can change it in the settings. or add some other shortcut like if ctrl + left click opens in new window focused, ctrl + shift + left click or any other combination  will open a new window without not focused.


Question: Why Tensorflow Op kernel using both GPU & CPU

Description
I am trying to find out what is the hardware utilization for T2T ASR Transformer.
I am using GPU accelerator and I am running TensorFlow code and profiling with tf.contrib.tfprof.ProfileContext()
The profiling result showing MatMul kernel is getting executed on both GPU & CPU.
Accelerator time(GPU) :79.74ms (100.00%, 44.37%)
CPU time: 70.17ms (100.00%, 10.34%)
The Matmul kernel should use GPU as it is having support definition on GPU. So why some part of Matmul ( or any other Op ) is on CPU as well ?
...
Environment information
GPU : V100, 16 GB
CPU :  E5 - 2386 , 8-core
Logs

Could you please provide more information about how you get these results like your codes or command lines?


⚠ AGEG website (prod) has degraded performance

In 46fec7d, AGEG website (prod) (https://www.ageg.ca/) experienced degraded performance:

HTTP code: 200
Response time: 1388 ms

Resolved: AGEG website (prod) performance has improved in dc414b3.


Protocol Buffer update for release 1.9.x (EXPOSUREAPP-3411)

Protobuf is added so that the CWA Server team can already start. I converted this to draft, as the client activities are not 100% ready.


Error: failed to run Kubelet: cannot create certificate signing request

I am trying to upgrade my clusters from 1.6.2 to the latest....
When booting the cluster I am getting an error:
Jun 18 22:51:26 ip-10-143-8-241.aue1.central1.cc kubelet-wrapper[2096]: Error: failed to run Kubelet: cannot create certificate signing request: Post https://ckube-a-common.aws.central1.com:443/apis/certificates.k8s.io/v1beta1/certificatesigningrequests: dial tcp <IP_ADDRESS>:443: i/o timeout

I am trying to enable tlsBootstrap & mangeCertificates ( obviously )..
I've tried a few things, but nothing I can think of will resolve it..
If it helps, I am running the latest Version: Cluster bootstrap stability fix on top of v0.9.10
Here is my cluster.yaml ( Ignore the WORD values, these are replaced at Jenkins run time with the correct information needed to manage the given cluster.
clusterName: _CLUSTER_NAME_
s3URI: s3://kubernetes-state-backend-us-east-1/
amiId: "ami-fd3b4582"
disableContainerLinuxAutomaticUpdates: true
apiEndpoints:
- # The unique name of this API endpoint used to identify it inside CloudFormation stacks or
  name: default
  dnsName: _CLUSTER_NAME_.aws.central1.com
  loadBalancer:

    hostedZone:
      id: _ZONE_

keyName: _AWS_KEY_
region: _REGION_
availabilityZone: us-east-1b
kmsKeyArn: _ARN_
controller:
  securityGroupIds:
    - _WORKER_SECURITY_GROUP_
  autoScalingGroup:
    minSize: 1
    maxSize: 1
    rollingUpdateMinInstancesInService: 0
worker:
  nodePools:
    - # Name of this node pool.

Hi! The dial tcp timeout error seems to indicate that you have L4
connectivity issue between the apiserver lb and the node. Can you verify
that your network ACL or route tables blocking it?
2018年6月19日(火) 8:24 qpaulson<EMAIL_ADDRESS>
I found this issue, but it looks like this is not the same issue as the
resolution is to actually enable RBAC, which is now enabled by default so I
do not think this is the issue, unless it was reverted in the latest
versions.....
#874 https://github.com/kubernetes-incubator/kube-aws/issues/874
—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub
https://github.com/kubernetes-incubator/kube-aws/issues/1372#issuecomment-398225920,
or mute the thread
https://github.com/notifications/unsubscribe-auth/AABV-Wjml3WnMlWiqxUiXS_9ZpDoz8D1ks5t-DabgaJpZM4Usnn_
.

It should not be a problem.. If I remove the tlsBootstrap & mangeCertificates options it all starts correctly.
Is there perhaps additional ports that are not correct in the default security groups?
FYI, I've also tried enabling:
  authentication:
    webhook:
      enabled: false
      cacheTTL: 1m0s
      configBase64: base64-encoded-webhook-yaml

No change.

Probably not related, but I am also seeing another error in the logs on the worker nodes..   If I remove the tlsBootstrap & mangeCertificates options it all starts correctly.

Just trying to understand but are you saying that your worker node has access to K8S API when TLS bootstrapping is disabled, but not when it is enabled, right? Definitely something is wrong then, because the log message indicates its a L4 issue.

That is correct. If I disable the Certificate Rotation and bootstrapping it starts.  I will do it again, just to confirm.

This stack ran fine..
clusterName: _CLUSTER_NAME_
s3URI: s3://kubernetes-state-backend-us-east-1/
amiId: "ami-fd3b4582"
disableContainerLinuxAutomaticUpdates: true
apiEndpoints:
- # The unique name of this API endpoint used to identify it inside CloudFormation stacks or
  name: default
  dnsName: _CLUSTER_NAME_.aws.central1.com
  loadBalancer:

    hostedZone:
      id: Z2LGBQ7H2AU015

keyName: _AWS_KEY_
region: _REGION_
availabilityZone: us-east-1b
kmsKeyArn: _ARN_
controller:
  securityGroupIds:
    - _WORKER_SECURITY_GROUP_
  autoScalingGroup:
    minSize: 1
    maxSize: 1
    rollingUpdateMinInstancesInService: 0
worker:
  nodePools:
    - # Name of this node pool. Must be unique among all the node pools in this cluster
      name: nodepool1
      securityGroupIds:
        - _WORKER_SECURITY_GROUP_
      autoScalingGroup:
        minSize: 4
        maxSize: 20
        rollingUpdateMinInstancesInService: 4
      autoscaling:
        clusterAutoscaler:
          enabled: true
      awsNodeLabels:
        enabled: true
      clusterAutoscalerSupport:
        enabled: true
      customFiles:
        - path: "/etc/systemd/system/docker.service.d/10-custom.conf"
          permissions: 0600
          content: |
            [Service]
            Environment="DOCKER_OPTS=--log-opt max-size=50m --log-opt max-file=3 --registry-mirror=http://<IP_ADDRESS>:30199 --registry-mirror=https://artifactory.oss.central1.com:5000 --insecure-registry=<IP_ADDRESS>:30199 --bip=<IP_ADDRESS>/16"
workerInstanceType: t2.xlarge
etcd:
  count: 3
  instanceType: t2.medium
  instanceTags:
    instanceRole: etcd
  dataVolume:
    encrypted: false
    ephemeral: false
  subnets:
    - name: PrivateSubnet1
  snapshot:
    automated: true
  memberIdentityProvider: eni
vpc:
  id: _VPC_ID_
routeTableId: _ROUTING_TABLE_
vpcCIDR: "_VPC_CIDR_"
subnets:
  - name: PrivateSubnet1
    availabilityZone: _ZONE_
    id: "_SUBNET_"
    public: false
containerRuntime: docker
manageCertificates: true
kubernetesDashboard:
  adminPrivileges: true
  insecureLogin: false
amazonSsmAgent:
  enabled: true
  downloadUrl: https://github.com/DailyHotel/amazon-ssm-agent/releases/download/v2.0.805.1/ssm.linux-amd64.tar.gz
  sha1sum: a6fff8f9839d5905934e7e3df3123b54020a1f5e
kubeDns:
  autoscaler:
    coresPerReplica: 256
    nodesPerReplica: 16
    min: 2
kubeProxy:
  ipvsMode:
    enabled: false
    scheduler: rr
    syncPeriod: 300s
    minSyncPeriod: 60s
addons:
  clusterAutoscaler:
    enabled: false
  rescheduler:
    enabled: false
  metricsServer:
    enabled: true
  prometheus:
    securityGroupsEnabled: true
experimental:
  admission:
    podSecurityPolicy:
      enabled: false
    alwaysPullImages:
      enabled: false
    denyEscalatingExec:
      enabled: false
    initializers:
      enabled: false
    priority:
      enabled: false
    mutatingAdmissionWebhook:
      enabled: false
    validatingAdmissionWebhook:
      enabled: false
    OwnerReferencesPermissionEnforcement:
      enabled: false
    persistentVolumeClaimResize:
      enabled: false
  awsEnvironment:
    enabled: false
    environment:
      CFNSTACK: '{ "Ref" : "AWS::StackId" }'
  auditLog:
    enabled: false
    maxage: 30
    logpath: /dev/stdout
  authentication:
    webhook:
      enabled: false
      cacheTTL: 1m0s
      configBase64: base64-encoded-webhook-yaml
  awsNodeLabels:
    enabled: true
  tlsBootstrap:
    enabled: true
  nodeAuthorizer:
    enabled: false
  ephemeralImageStorage:
    enabled: false
  kube2IamSupport:
    enabled: false
  nodeDrainer:
    enabled: true
    drainTimeout: 5
    iamRole:
      arn: ""
  oidc:
    enabled: false
    issuerUrl: "https://accounts.google.com"
    clientId: "kubernetes"
    usernameClaim: "email"
    groupsClaim: "groups"
  disableSecurityGroupIngress: false
kubelet:
  RotateCerts:
    enabled: true
stackTags:
  Name: "Cluster _CLUSTER_NAME_"
  c1:env: "_ENV_"
  c1:cost-centre: "4473"
  c1:cluster: "_CLUSTER_NAME_"
  c1:cluster-type: "kubernetes"
  c1:owner: "_OWNER_"
  c1:supported-by: "Platform Management"

So it definately seems like its related to the SSL Management stuff

@mumoshu  Any other ideas???

@qpaulson Sorry but this one has never been reproduced on my clusters yet. Could you try with the kube-aws build from the master branch?


Update README.md

Merge update readme from master to dev

Hi @vors, I'm your friendly neighborhood Microsoft Pull Request Bot (You can call me MSBOT). Thanks for your contribution!

It looks like you're a Microsoft contributor (Sergei Vorobev). If you're full-time, we DON'T require a Contribution License Agreement. If you are a vendor, please DO sign the electronic Contribution License Agreement. It will take 2 minutes and there's no faxing! https://cla.microsoft.com.

TTYL, MSBOT;


Release/v0.7.0

Are you a current Fivetran customer?

Fivetran PR
What change(s) does this PR introduce?

🚨 Breaking Change 🚨
Updated the following models to aggregate at the repository grain in addition to their time period grain. (https://github.com/fivetran/dbt_github/pull/42, https://github.com/fivetran/dbt_github/pull/43)
github__daily_metrics
github__weekly_metrics
github__monthly_metrics
github__quarterly_metrics
🎉 Features
Added column requested_reviewers to provide a list of users that were requested to review on a pull request. This is to supplement the column reviewers, which provides a list of users that have submitted a reivew, weather or not they were requested to.
PostgreSQL compatibility!
🔧 Bug Fix
Updated model int_github__pull_request_reviewers so that the list of reviewers generated does not contain duplicate usernames.
Did you update the CHANGELOG?

[x] Yes

Does this PR introduce a breaking change?

[x] Yes (please provide breaking change details below.)
[ ] No  (please provide an explanation as to how the change is non-breaking below.)

Did you update the dbt_project.yml files with the version upgrade (please leverage standard semantic versioning)? (In both your main project and integration_tests)

[x] Yes

Is this PR in response to a previously created Bug or Feature Request

[x] Yes, Issue/Feature #44  #43  #37
[ ] No

How did you test the PR changes?

[x] Buildkite
[ ] Local (please provide additional testing details below)

Select which warehouse(s) were used to test the PR

[x] BigQuery
[x] Redshift
[x] Snowflake
[x] Postgres
[x] Databricks
[ ] Other (provide details below)

Provide an emoji that best describes your current mood

✨
Feedback
We are so excited you decided to contribute to the Fivetran community dbt package! We continue to work to improve the packages and would greatly appreciate your feedback on our existing dbt packages or what you'd like to see next.

Interesting point! The ORDER BYs don't appear to be necessary, but I really don't know the history, so I agree it would be good to discuss with the team.


Please be more careful in the future.


Feat/keccak256 zkbnb

Description
Adds support for circuit implementation of Keccak256
Changes
Notable changes:

added hint function to transform pub data bits into bytes
added support of new gnark version with keccak256 implementation

check passed


fix(test): JSON-LD Unit tests fail on Windows

What this PR changes/adds
Fixes issue JSON-LD Unit tests fail on Windows #3408
The URI is asserted against the value: "file:/tmp/foo/doc.json" but on Windows the value will include the drive name such as: "file:/C:/tmp/foo/doc.json".
Implemented suggested fix  to replace:
assertThat(cache).containsEntry("http://foo.org/doc.json", new URI("file:/tmp/foo/doc.json"));
With:
assertThat(cache).containsEntry("http://foo.org/doc.json", new File("/tmp/foo/doc.json").toURI());
Why it does that
If not fixed the bug prevents building connector with extensions on Windows systems.
Linked Issue(s)
Closes #3408

Codecov Report
All modified and coverable lines are covered by tests :white_check_mark:

Comparison is base (cd9dbec) 71.68% compared to head (79a4dc7) 71.68%.
Report is 2 commits behind head on main.

:exclamation: Your organization needs to install the Codecov GitHub app to enable full functionality.
Additional details and impacted files
@@           Coverage Diff           @@
##             main    #3670   +/-   ##
=======================================
  Coverage   71.68%   71.68%
=======================================
  Files         916      916
  Lines       18416    18416
  Branches     1043     1043
=======================================
  Hits        13201    13201
  Misses       4757     4757
  Partials      458      458

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.


Question: minimum JDK version

What version of the JDK will be required to run the next version of FDT? I would like to know what features I can use in new code.
Thanks,
Nick

Currently it is 1.6. Maybe we could chat what other improvements you think about and we could see how we could proceed and are we changing JDK version to support new features.

No, I don't have any arguments yet for changing the version. I just wanted to avoid using unsupported features in future pull requests. Thanks!


update files on desktop

Lol, you are right, I'm still figuring this out, thank you
On Fri, Oct 8, 2021, 9:44 PM LejoFlores @.***> wrote:

Closed #1 https://github.com/LejoFlores/geos518-fall-2021/pull/1.
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
https://github.com/LejoFlores/geos518-fall-2021/pull/1#event-5437580379,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AVIUQNP3IOV5LP7CYTAMPETUF63CPANCNFSM5FTCIBZA
.
Triage notifications on the go with GitHub Mobile for iOS
https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675
or Android
https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.


☂ Improve Gardener Operator

How to categorize this issue?

/area dev-productivity delivery high-availability security open-source
/kind enhancement
As of today, Gardener has no notion of managing any components running in the garden cluster. As a consequence, human operators have to manually deploy the "garden system components" (vertical-pod-autoscaler, hvpa-controller, etcd-druid, nginx-ingress) and the "virtual garden control plane components" (etcd/backup-restore, kube-apiserver, kube-controller-manager) as well as the "Gardener control plane components".
However, logically these processes are quite similar to what we have already implemented in the gardenlet for seed or shoot clusters.
The idea of the gardener-operator component is re-using existing code and sharing it with gardenlet so that the needed components can be made available more easily in all environments.
As part of this, gardener-resource-manager is becoming a central "garden system component" as well since it has a lot of features like token invalidation, seccomp defaulting, token requesting, HA config injection, etc.
Tasks

Initial skaffolding and introduction of new component

[x] https://github.com/gardener/gardener/pull/7009

Manage Garden System Components

[x] Fine-grained PriorityClasses: https://github.com/gardener/gardener/pull/7009
[x] gardener-resource-manager: https://github.com/gardener/gardener/pull/7009
[x] vertical-pod-autoscaler: https://github.com/gardener/gardener/pull/7009
[x] hvpa-controller: https://github.com/gardener/gardener/pull/7048
[x] etcd-druid: https://github.com/gardener/gardener/pull/7048
[ ] @timuthy Istio:

Manage Virtual Garden Control Plane Components

[x] etcd/backup-restore (via Etcd custom resource): https://github.com/gardener/gardener/pull/7067
[x] kube-apiserver exposure

[x] via LoadBalancer service: https://github.com/gardener/gardener/pull/7238
[ ] via Istio:

[x] kube-apiserver: https://github.com/gardener/gardener/pull/7730

Prerequisites / related upfront work:

[x] https://github.com/gardener/gardener/pull/7242
[x] https://github.com/gardener/gardener/pull/7243

[x] https://github.com/gardener/gardener/pull/7710

[x] https://github.com/gardener/gardener/pull/7258
[x] https://github.com/gardener/gardener/pull/7498
[x] https://github.com/gardener/gardener/pull/7518
[x] https://github.com/gardener/gardener/pull/7558
[x] https://github.com/gardener/gardener/pull/7567
[x] https://github.com/gardener/gardener/pull/7573

[x] https://github.com/gardener/gardener/pull/7687

[x] https://github.com/gardener/gardener/pull/7682
[x] https://github.com/gardener/gardener/pull/7693

Follow-up work:

[x] https://github.com/gardener/gardener/pull/7734
[x] https://github.com/gardener/gardener/pull/7735

[ ] @oliver-goetz gardener-resource-manager:
[ ] kube-controller-manager:

Manage Gardener Control Plane Components

[ ] gardener-{apiserver,controller-manager,...}:

Manage Garden Observability Components

[ ] nginx-ingress-controller (~or ideally istio only~):
[ ] kube-state-metrics:
[ ] grafana:
[ ] prometheus-operator (GEP-19):
[ ] fluentbit-operator (similar to GEP-19):

Miscellaneous

[ ] Rework gardenlet's NetworkPolicy for reusability in gardener-operator in the context of https://github.com/gardener/gardener/issues/7352
[ ] Introduce garden-care controller, similar to seed-care controller in gardenlet:
[ ] Introduce garden-reference controller, similar to shoot-reference controller in gardener-controller-manager:
[x] Add support for credentials rotation (similar to how it works for Shoots): https://github.com/gardener/gardener/pull/7144
[x] Extended validation (deletion protection, etc.): https://github.com/gardener/gardener/pull/7144
[x] https://github.com/gardener/gardener/pull/7225
[ ] https://github.com/gardener/gardener/issues/6896

❗ Please note ❗

It is NOT planned (at least for the foreseeable future until this component graduates) to manage any additional addons deployed to the garden cluster (Gardener dashboard, audit log components, ...) or any extensions.
Managing the gardenlet via gardener-operator is NOT planned as well, but could be done. However, in production scenarios, the garden cluster is typically not a seed cluster at a same time, and generally we cannot assume that gardener-operator has network connectivity to the clusters where a gardenlet should be deployed to. Hence, managing the gardenlet has a low priority (if any at all).

@rfranzke can you please also add the HA-related task(s) to the checklist in this issue? For instance, specifying highAvailability spec separately for runtimeCluster and virtualCluster in the Garden spec.
Ref

@rfranzke can you please also add the HA-related task(s) to the checklist in this issue? For instance, specifying highAvailability spec separately for runtimeCluster and virtualCluster in the Garden spec.
Ref

Done, however there won't be highAvailability configuration for the runtimeCluster (we already have zones like in Seeds)

The work on this is currently paused in favor of https://github.com/gardener/gardener/issues/7352.

/assign @timuthy
for the istio task above

/assign @oliver-goetz @ScheererJ


[docs] refactoring to use .base_werf in ci

there is a drawback when switching the version, it does not change in the examples, but I do not know what to replace it with so that it is a dynamic version

there is a drawback when switching the version, it does not change in the examples, but I do not know what to replace it with so that it is a dynamic version

Each werf version has its own documentation.


Repo: https://github.com/cetorres/ai-buddy

I'd be glad to assist with that. This approach could serve as an excellent introduction to Fabric for newcomers. By implementing this in Go, we can leverage Fabric as a framework for web applications. Moreover, this method facilitates various other types of integrations, making them straightforward to implement and manage. The combination of Go's efficiency and Fabric's versatility opens up numerous possibilities for robust and scalable solutions.
BUT maybe that's not the goal of this project??

@cetorres
Hell yeah. After I've seen fabric I got super excited, I see in the README that it's also gonna be rewrited to Go, but in the meantine – I'd love to try out my Go skills and contribute where possible :D


duplicate link in help file

Hi I was not investigating this further, but accidentally I've found in FluidBufFlatten there are two links which point to the same url:
To learn more visit https://learn.flucoma.org/reference/bufflatten/.
Read more about FluidBufFlatten on the learn platform.

fixed in flucoma-docs  (where the source lives) commit 4b2317c


dev: bump types to new version of starknet types

Issue Number: N/A
Type

[ ] feature
[ ] bugfix
[X] dev (no functional changes, no API changes)
[ ] fmt (formatting, renaming)
[ ] build
[ ] docs
[ ] testing

Description
After running cargo update I wasn't able to build the project anymore. As there is no rev for lambda class repo, I assume that we should keep with the head of the pointed branch.
Is that expected? Or should I close the PR and rely on the current implementation?
Breaking changes?

[ ] yes
[X] no

@drspacemn thank you for the feedback, rebased on main.


Update package.json in preparation for publishing

NPM: https://www.npmjs.com/package/@google/model-viewer
Webcomponents.org: https://www.webcomponents.org/element/@google/model-viewer
Unpkg.com: https://unpkg.com/<EMAIL_ADDRESS>Unfortunately, Webcomponents.org picks up the elements that are defined in tests. I'm going to bug @samuelli about this next week to see if there is anything we can do.

@cdata: I think our preferred method here is that you don't include tests in your published binary/package.


ci(yamllint): add rule empty-values & use new yaml-files setting

Automated using https://github.com/myii/ssf-formula/pull/27

:tada: This PR is included in version 0.6.1 :tada:
The release is available on GitHub release
Your semantic-release bot :package::rocket:


Issue with network override of Cache-Busting

Cache-Busting wasn't being overridden by the network settings.

Cache-Busting override works.


Getting error after creating project for the first time.

I just created a project and I'm getting the error 'Cannot GET /' when I try to view localhost:8080. I didn't see any errors during installation or creation, and I haven't edited any files. Any tips on what might be wrong?
[Edit] I'm getting confirmation that webpack built correctly, but I get this error:
ERROR in ./~/css-loader!./~/vue-loader/lib/style-rewriter.js!./~/vue-loader/lib/selector.js?type=style&index=0!./src/App.vue
Module build failed: TypeError: Cannot read property 'options' of undefined
    at Object.module.exports (/home/chronos/user/Downloads/testproject/node_modules/vue-loader/lib/style-rewriter.js:78:21)
 @ ./~/vue-style-loader!./~/css-loader!./~/vue-loader/lib/style-rewriter.js!./~/vue-loader/lib/selector.js?type=style&index=0!./src/App.vue 4:14-189 13:2-17:4 14:20-195

ERROR in ./~/css-loader!./~/vue-loader/lib/style-rewriter.js?id=_v-34da3196&scoped=true!./~/vue-loader/lib/selector.js?type=style&index=0!./src/components/Hello.vue
Module build failed: TypeError: Cannot read property 'options' of undefined
    at Object.module.exports (/home/chronos/user/Downloads/testproject/node_modules/vue-loader/lib/style-rewriter.js:78:21)
 @ ./~/vue-style-loader!./~/css-loader!./~/vue-loader/lib/style-rewriter.js?id=_v-34da3196&scoped=true!./~/vue-loader/lib/selector.js?type=style&index=0!./src/components/Hello.vue 4:14-227 13:2-17:4 14:20-233

This is caused by a bug in<EMAIL_ADDRESS>upgrade to<EMAIL_ADDRESS>and it should be fixed.