Error reading service account token - open : no such file or directory

Describe the bug
While running Keda 2.8 .1on AKS 1.24.6 on few regions we see that after some time ( could be Days / Hours )
Keda looses the Managed Identity and has many authentication errors .
Restarting Keda Pod will fix the issue.
we wonder if this is a bug in Workload Identity / Azure VM restart or Keda Issue .
we also want to see whether Keda Pod Health Check can be integrated with those logs and restart itself in case those error occurs
Steps To Reproduce

run a workload that is 24/7 alive and tries to do something with Token ( e.g read message from Service bus ) every 60 seconds
we have addressed this issue to the Keda team and they claim that all they are doing is to read the token from the file system
and if its not there we should consult the Workload Identity Team

Expected behavior
Logs
╰─ k logs -f  -l app=keda-operator -n keda --since 5m
/workspace/pkg/scaling/cache/scalers_cache.go:94
github.com/kedacore/keda/v2/pkg/scaling.(*scaleHandler).checkScalers
/workspace/pkg/scaling/scale_handler.go:278
github.com/kedacore/keda/v2/pkg/scaling.(*scaleHandler).startScaleLoop
/workspace/pkg/scaling/scale_handler.go:149
2022-12-09T19:07:54Z    ERROR   scalehandler    Error getting scale decision    {"scaledobject.Name": "tm", "scaledObject.Namespace": "vi-be-map", "scaleTarget.Name": "vi-tm-api", "error": "error reading service account token - open : no such file or directory"}
github.com/kedacore/keda/v2/pkg/scaling.(*scaleHandler).checkScalers
/workspace/pkg/scaling/scale_handler.go:278
github.com/kedacore/keda/v2/pkg/scaling.(*scaleHandler).startScaleLoop
/workspace/pkg/scaling/scale_handler.go:149
Environment

Kubernetes version (use kubectl version): 1.24.6
Cloud provider or hardware configuration: Azure/ AKS /
OS (e.g: cat /etc/os-release): Mariner V2
Kernel (e.g. uname -a):
Install tools: Keda / Workload-Identity/OIDC-Issuer/
Network plugin and version (if this is a network-related bug):
Others:  https://github.com/kedacore/keda/issues/3977

Additional context

we have set Expiration Token to 3600 but the problem happens after around 10-24 Hours
currently we are just restarting our workload every 1 hour to prevent this Token lost , but would be great if this issue is mitigated

Still Pending For an Assignment on this Bug

Still Pending For an Assignment on this Bug

@tshaiman Is KEDA using the workload identity webhook? The webhook is not part of the runtime of the pod, it only mutates the pod during deploy time to add the volume for projected service account token. The token is generated by kubelet and written in the volume, so there is no workload identity webhook in the picture during runtime. The token is renewed at 80% expiry by the kubelet process (xref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#serviceaccount-token-volume-projection)
Please share more details on how the pod is reading the service account token, what environment variables it's using, pod spec for us to provide some pointers.

i’ve forward the questions to the keda team on their bug link

Still Pending For an Assignment on this Bug

@tshaiman Is KEDA using the workload identity webhook? The webhook is not part of the runtime of the pod, it only mutates the pod during deploy time to add the volume for projected service account token. The token is generated by kubelet and written in the volume, so there is no workload identity webhook in the picture during runtime. The token is renewed at 80% expiry by the kubelet process (xref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#serviceaccount-token-volume-projection)
Please share more details on how the pod is reading the service account token, what environment variables it's using, pod spec for us to provide some pointers.

KEDA reads in the mounted service account token, and the injected environment variables and tries to acquire the AAD token via federation.
The GetAzureADWorkloadIdentityToken function here most of the job.
It's important to mention @tshaiman has only been facing this issue on AKS with Mariner. On Ubuntu, this problem does not seem to arise.

It's important to mention @tshaiman has only been facing this issue on AKS with Mariner. On Ubuntu, this issue does not happen.

@tshaiman @v-shenoy if there is a consistent repro with mariner, could you share the kubelet logs from the node with issue? As I mentioned that service account token is generated and rotated by kubelet, so if the file doesn't exist we'll need to check if kubelet is having issues creating it?
@tshaiman At the time of the error, have you check if the file does exist in the pod and the underlying node?

@aramase  : I haven't since Keda is Distroless I could not bash into the pod.
currently we have reverted back the entire configuration , I will reproduce the environments and provide with the missing info

@aramase  would it be possible to set a team chat once I will reproduce the issue  so we can investigate it together ?

To share my investigation, I tried following deployment, where service account workload-identity-sa comes from quick start.
apiVersion: apps/v1
kind: Deployment
metadata:
  name: wi-token-1219
spec:
  replicas: 2
  selector:
    matchLabels:
      app: wt1
  template:
    metadata:
      labels:
        app: wt1
    spec:
      containers:
      - image: ubuntu
        command: ["sh", "-ec", "while :; do date && ls $AZURE_FEDERATED_TOKEN_FILE || echo; sleep 60 ; done"]
        name: test
      serviceAccount: workload-identity-sa

There are 2 pods running, 1 on ubuntu and 1 on mariner node, and that token file still present for both after 2d17h.
Thu Dec 22 02:54:40 UTC 2022
/var/run/secrets/azure/tokens/azure-identity-token

thank you for your investigation , I could not reproduce it myself either.
I will close this now and in case I ran into the same issue will reopen this thread.
it could have been a one-time issue where the migration between Ubuntu and Mariner took place.

we have managed To Reproduce the bug after few days
we now see Hundreds of "error reading service account token - open : no such file or directory"}" exception from Keda , and we not fully understand the root cause now - there was no updates on VM's /new OS / new Deplyment or such
keda-operator-65cfcb879f-8ppv8 keda-operator github.com/kedacore/keda/v2/pkg/scaling/cache.(*ScalersCache).IsScaledObjectActive
keda-operator-65cfcb879f-8ppv8 keda-operator    /workspace/pkg/scaling/cache/scalers_cache.go:89
keda-operator-65cfcb879f-8ppv8 keda-operator github.com/kedacore/keda/v2/pkg/scaling.(*scaleHandler).checkScalers
keda-operator-65cfcb879f-8ppv8 keda-operator    /workspace/pkg/scaling/scale_handler.go:278
keda-operator-65cfcb879f-8ppv8 keda-operator github.com/kedacore/keda/v2/pkg/scaling.(*scaleHandler).startScaleLoop
keda-operator-65cfcb879f-8ppv8 keda-operator    /workspace/pkg/scaling/scale_handler.go:149
keda-operator-65cfcb879f-8ppv8 keda-operator 2022-12-27T10:53:01Z       ERROR   azure_servicebus_scaler error   {"type": "ScaledObject", "namespace": "vi-be-map", "name": "facedetection", "error": "error reading service account token - open : no such file or directory"}
keda-operator-65cfcb879f-8ppv8 keda-operator github.com/kedacore/keda/v2/pkg/scaling/cache.(*ScalersCache).IsScaledObjectActive
keda-operator-65cfcb879f-8ppv8 keda-operator    /workspace/pkg/scaling/cache/scalers_cache.go:89
keda-operator-65cfcb879f-8ppv8 keda-operator github.com/kedacore/keda/v2/pkg/scaling.(*scaleHandler).checkScalers
keda-operator-65cfcb879f-8ppv8 keda-operator    /workspace/pkg/scaling/scale_handler.go:278
keda-operator-65cfcb879f-8ppv8 keda-operator github.com/kedacore/keda/v2/pkg/scaling.(*scaleHandler).startScaleLoop
keda-operator-65cfcb879f-8ppv8 keda-operator    /workspace/pkg/scaling/scale_handler.go:149
keda-operator-65cfcb879f-8ppv8 keda-operator 2022-12-27T10:53:01Z       ERROR   azure_servicebus_scaler error   {"type": "ScaledObject", "namespace": "vi-be-map", "name": "emo", "error": "error reading service account token - open : no such file or directory"}
keda-operator-65cfcb879f-8ppv8 keda-operator github.com/kedacore/keda/v2/pkg/scaling/cache.(*ScalersCache).IsScaledObjectActive
keda-operator-65cfcb879f-8ppv8 keda-operator    /workspace/pkg/scaling/cache/scalers_cache.go:89

we know this is holiday season , but any suggestion on what should we look at / logs / etc is much appreciated.

Good News Everyone ! we have managed to reproduce the bug and its ready for query/inspection/playground in order to understand the root cause .
we would be very much interested in demostrating this and we also have a Non-Distroless image that allows us to EXEC into the pod iteslef.
p.s : the Pod is 50 min old , meaning only when it was evicted from 1 VM and got placed on another VM the problem araised.
how's joining the bridge ? ;-)

As @yehiyam per from https://github.com/kedacore/keda/issues/3977:

Hi. I work with @tshaiman
I noticed that in the keda pod the environment variable AZURE_FEDERATED_TOKEN_FILE is not defined, and /var/run/secrets/ only has the kubernetes.io folder

The serviceAccount has the azure.workload.identity/use: "true" label

@tshaiman @tomkerkhove please feel free to set up time for sync internally.
FYI, here is our troubleshooting guide: https://azure.github.io/azure-workload-identity/docs/troubleshooting.html. If the env var is not injected, check the webhook is running, if the service account is annotated and labelled and requests are going through the webhook.

@aramase  : we know this Troubleshoot , we ran on Workload Identity few weeks before this incident happend.
we have all the labels and annotations configured correctly, otherwise we wouldn't open the bug for 3 teams ( keda+Workload Identity + mariner) .
I'm on vacation starting 8/Jan so it must be in the next 1-2 days

with the assitance of @aramase  I've managed to bring some kubelet status + logs
kubelet status :
root@aks-systemv1-84136896-vmss00000O [ / ]# systemctl status kubelet
* kubelet.service - Kubelet
     Loaded: loaded (/etc/systemd/system/kubelet.service; enabled; vendor preset: enabled)
    Drop-In: /etc/systemd/system/kubelet.service.d
             `-10-containerd.conf, 10-tlsbootstrap.conf
     Active: active (running) since Thu 2023-01-05 08:15:59 UTC; 13h ago
   Main PID: 1223 (kubelet)
      Tasks: 25 (limit: 18873)
     Memory: 195.6M
     CGroup: /system.slice/kubelet.service
             `-1223 /usr/local/bin/kubelet --enable-server --node-labels=agentpool=systemv1,kubernetes.azure.com/agentpool=systemv1,kubernetes.azure.com/agentpool=systemv1,kubernetes.azure.com/cluster=vi-staging-uni-wus2-aks-nod>
Jan 05 22:14:55 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 22:14:55.888926    1223 memory_manager.go:345] "RemoveStaleState removing state" podUID="0504394c-9338-4f56-afc0-f6e39136a065" containerName="collector"
Jan 05 22:14:55 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 22:14:55.933265    1223 reconciler.go:342] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jstd6\" (UniqueName: \"kubernetes.io/projected/42b251f1-c22f-4ac0-bdf8-3ee8a5c42cdf-kube-api-access-jstd6\") pod \"nsenter-s3rqhk\" (UID: \"42b251f1-c22f-4ac0-bdf8-3ee8a5c42cdf\") " pod="keda/nsenter-s3rqhk"
Jan 05 22:14:56 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 22:14:56.034059    1223 reconciler.go:254] "operationExecutor.MountVolume started for volume \"kube-api-access-jstd6\" (UniqueName: \"kubernetes.io/projected/42b251f1-c22f-4ac0-bdf8-3ee8a5c42cdf-kube-api-access-jstd6\") pod \"nsenter-s3rqhk\" (UID: \"42b251f1-c22f-4ac0-bdf8-3ee8a5c42cdf\") " pod="keda/nsenter-s3rqhk"
Jan 05 22:14:56 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 22:14:56.060890    1223 operation_generator.go:703] "MountVolume.SetUp succeeded for volume \"kube-api-access-jstd6\" (UniqueName: \"kubernetes.io/projected/42b251f1-c22f-4ac0-bdf8-3ee8a5c42cdf-kube-api-access-jstd6\") pod \"nsenter-s3rqhk\" (UID: \"42b251f1-c22f-4ac0-bdf8-3ee8a5c42cdf\") " pod="keda/nsenter-s3rqhk"
Jan 05 22:14:56 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 22:14:56.219789    1223 kuberuntime_manager.go:469] "No sandbox for pod can be found. Need to start a new one" pod="keda/nsenter-s3rqhk"
Jan 05 22:14:56 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 22:14:56.578766    1223 provider.go:102] Refreshing cache for provider: *credentialprovider.defaultDockerConfigProvider
Jan 05 22:14:56 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 22:14:56.578911    1223 provider.go:82] Docker config file not found: couldn't find valid .dockercfg after checking in [/var/lib/kubelet   /]
Jan 05 22:14:56 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 22:14:56.578950    1223 azure_credentials.go:221] image(docker.io/library/alpine) is not from ACR, return empty authentication
Jan 05 22:14:56 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 22:14:56.708610    1223 kubelet.go:2110] "SyncLoop (PLEG): event for pod" pod="keda/nsenter-s3rqhk" event=&{ID:42b251f1-c22f-4ac0-bdf8-3ee8a5c42cdf Type:ContainerStarted Data:56efdcd902f57d3f3f3a1ed6db412d9f3431f0538ecf30226fdcc6cc52a170bc}
Jan 05 22:14:58 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 22:14:58.716671    1223 kubelet.go:2110] "SyncLoop (PLEG): event for pod" pod="keda/nsenter-s3rqhk" event=&{ID:42b251f1-c22f-4ac0-bdf8-3ee8a5c42cdf Type:ContainerStarted Data:fd2d4a0b165b1a8c01c8d555fc5b4b327c995f64f39617b38a086b458e715614}

kubelet logs :

Jan 05 21:34:42 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:34:42.264168    1223 log.go:195] http: TLS handshake error from <IP_ADDRESS>:34084: tls: no cipher suite supported by both client and server
Jan 05 21:34:42 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:34:42.264459    1223 log.go:195] http: TLS handshake error from <IP_ADDRESS>:34074: tls: no cipher suite supported by both client and server
Jan 05 21:34:42 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:34:42.264610    1223 log.go:195] http: TLS handshake error from <IP_ADDRESS>:34138: tls: no cipher suite supported by both client and server
Jan 05 21:34:42 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:34:42.266400    1223 log.go:195] http: TLS handshake error from <IP_ADDRESS>:34092: tls: no cipher suite supported by both client and server
Jan 05 21:34:42 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:34:42.266474    1223 log.go:195] http: TLS handshake error from <IP_ADDRESS>:34122: tls: no cipher suite supported by both client and server
Jan 05 21:34:42 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:34:42.266981    1223 log.go:195] http: TLS handshake error from <IP_ADDRESS>:34106: tls: no cipher suite supported by both client and server
Jan 05 21:34:42 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:34:42.267658    1223 log.go:195] http: TLS handshake error from <IP_ADDRESS>:34148: tls: no cipher suite supported by both client and server
Jan 05 21:34:42 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:34:42.267806    1223 log.go:195] http: TLS handshake error from <IP_ADDRESS>:34164: tls: no cipher suite supported by both client and server
Jan 05 21:34:42 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:34:42.353158    1223 log.go:195] http: TLS handshake error from <IP_ADDRESS>:34178: tls: no cipher suite supported by both client and server
Jan 05 21:34:42 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:34:42.353483    1223 log.go:195] http: TLS handshake error from <IP_ADDRESS>:34194: tls: no cipher suite supported by both client and server
Jan 05 21:34:42 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:34:42.356079    1223 log.go:195] http: TLS handshake error from <IP_ADDRESS>:34216: tls: no cipher suite supported by both client and server
Jan 05 21:34:42 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:34:42.357601    1223 log.go:195] http: TLS handshake error from <IP_ADDRESS>:34234: tls: no cipher suite supported by both client and server
Jan 05 21:34:42 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:34:42.357914    1223 log.go:195] http: TLS handshake error from <IP_ADDRESS>:34204: tls: no cipher suite supported by both client and server
Jan 05 21:34:42 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:34:42.360785    1223 log.go:195] http: TLS handshake error from <IP_ADDRESS>:34302: tls: no cipher suite supported by both client and server
Jan 05 21:34:42 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:34:42.360969    1223 log.go:195] http: TLS handshake error from <IP_ADDRESS>:34232: tls: no cipher suite supported by both client and server
Jan 05 21:34:42 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:34:42.361347    1223 log.go:195] http: TLS handshake error from <IP_ADDRESS>:34240: tls: no cipher suite supported by both client and server
Jan 05 21:34:42 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:34:42.361718    1223 log.go:195] http: TLS handshake error from <IP_ADDRESS>:34278: tls: no cipher suite supported by both client and server
Jan 05 21:34:42 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:34:42.361811    1223 log.go:195] http: TLS handshake error from <IP_ADDRESS>:34306: tls: no cipher suite supported by both client and server
Jan 05 21:34:42 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:34:42.362518    1223 log.go:195] http: TLS handshake error from <IP_ADDRESS>:34250: tls: no cipher suite supported by both client and server
Jan 05 21:34:42 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:34:42.362541    1223 log.go:195] http: TLS handshake error from <IP_ADDRESS>:34288: tls: no cipher suite supported by both client and server
Jan 05 21:34:42 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:34:42.363606    1223 log.go:195] http: TLS handshake error from <IP_ADDRESS>:34266: tls: no cipher suite supported by both client and server
Jan 05 21:34:42 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:34:42.363998    1223 log.go:195] http: TLS handshake error from <IP_ADDRESS>:34270: tls: no cipher suite supported by both client and server
Jan 05 21:34:42 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:34:42.365868    1223 log.go:195] http: TLS handshake error from <IP_ADDRESS>:34336: tls: no cipher suite supported by both client and server
Jan 05 21:34:42 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:34:42.366079    1223 log.go:195] http: TLS handshake error from <IP_ADDRESS>:34322: tls: no cipher suite supported by both client and server
Jan 05 21:34:42 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:34:42.367918    1223 log.go:195] http: TLS handshake error from <IP_ADDRESS>:34346: tls: no cipher suite supported by both client and server
Jan 05 21:34:42 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:34:42.368095    1223 log.go:195] http: TLS handshake error from <IP_ADDRESS>:34360: tls: no cipher suite supported by both client and server
Jan 05 21:38:13 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:38:13.261859    1223 logs.go:320] "Finished parsing log file" path="/var/log/pods/kube-system_kube-proxy-t8b2k_c761f578-6972-41aa-b375-e9ee59dc7a2a/kube-proxy/1.log"
Jan 05 21:38:13 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:38:13.470661    1223 logs.go:320] "Finished parsing log file" path="/var/log/pods/kube-system_kube-proxy-t8b2k_c761f578-6972-41aa-b375-e9ee59dc7a2a/kube-proxy/0.log"
Jan 05 21:42:13 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:42:13.188925    1223 logs.go:320] "Finished parsing log file" path="/var/log/pods/kube-system_kube-proxy-t8b2k_c761f578-6972-41aa-b375-e9ee59dc7a2a/kube-proxy/1.log"
Jan 05 21:42:13 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:42:13.387441    1223 logs.go:320] "Finished parsing log file" path="/var/log/pods/kube-system_kube-proxy-t8b2k_c761f578-6972-41aa-b375-e9ee59dc7a2a/kube-proxy/0.log"
Jan 05 21:46:13 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:46:13.267651    1223 logs.go:320] "Finished parsing log file" path="/var/log/pods/kube-system_kube-proxy-t8b2k_c761f578-6972-41aa-b375-e9ee59dc7a2a/kube-proxy/1.log"
Jan 05 21:50:15 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:50:15.801068    1223 logs.go:320] "Finished parsing log file" path="/var/log/pods/kube-system_kube-proxy-t8b2k_c761f578-6972-41aa-b375-e9ee59dc7a2a/kube-proxy/1.log"
Jan 05 21:50:16 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:50:16.003154    1223 logs.go:320] "Finished parsing log file" path="/var/log/pods/kube-system_kube-proxy-t8b2k_c761f578-6972-41aa-b375-e9ee59dc7a2a/kube-proxy/0.log"
Jan 05 21:51:01 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:51:01.524192    1223 log.go:195] http: superfluous response.WriteHeader call from k8s.io/kubernetes/vendor/github.com/emicklei/go-restful.(*Response).WriteHeader (response.go:220)
Jan 05 21:54:21 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:54:21.277380    1223 logs.go:320] "Finished parsing log file" path="/var/log/pods/kube-system_kube-proxy-t8b2k_c761f578-6972-41aa-b375-e9ee59dc7a2a/kube-proxy/1.log"
Jan 05 21:54:21 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:54:21.477876    1223 logs.go:320] "Finished parsing log file" path="/var/log/pods/kube-system_kube-proxy-t8b2k_c761f578-6972-41aa-b375-e9ee59dc7a2a/kube-proxy/0.log"
Jan 05 21:55:27 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:55:27.114420    1223 log.go:195] http: superfluous response.WriteHeader call from k8s.io/kubernetes/vendor/github.com/emicklei/go-restful.(*Response).WriteHeader (response.go:220)
Jan 05 21:55:27 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:55:27.188850    1223 log.go:195] http: superfluous response.WriteHeader call from k8s.io/kubernetes/vendor/github.com/emicklei/go-restful.(*Response).WriteHeader (response.go:220)
Jan 05 21:58:22 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:58:22.625312    1223 logs.go:320] "Finished parsing log file" path="/var/log/pods/kube-system_kube-proxy-t8b2k_c761f578-6972-41aa-b375-e9ee59dc7a2a/kube-proxy/1.log"
Jan 05 21:58:22 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 21:58:22.825277    1223 logs.go:320] "Finished parsing log file" path="/var/log/pods/kube-system_kube-proxy-t8b2k_c761f578-6972-41aa-b375-e9ee59dc7a2a/kube-proxy/0.log"
Jan 05 22:02:22 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 22:02:22.051463    1223 logs.go:320] "Finished parsing log file" path="/var/log/pods/kube-system_kube-proxy-t8b2k_c761f578-6972-41aa-b375-e9ee59dc7a2a/kube-proxy/1.log"
Jan 05 22:02:22 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 22:02:22.250856    1223 logs.go:320] "Finished parsing log file" path="/var/log/pods/kube-system_kube-proxy-t8b2k_c761f578-6972-41aa-b375-e9ee59dc7a2a/kube-proxy/0.log"
Jan 05 22:03:04 aks-systemv1-84136896-vmss00000O kubelet[1223]: E0105 22:03:04.136815    1223 logs.go:405] "Failed when writing line to log file" err="write tcp <IP_ADDRESS>:10250-><IP_ADDRESS>:52984: write: connection reset by peer" path="/var/log/pods/keda_keda-operator-8659fb9d9-jtnj4_54ae9092-c6a0-435c-864e-5647215b0311/keda-operator/0.log" line=&{timestamp:{wall:109350179 ext:63808546255 loc:<nil>} stream:stderr log:[9 47 119 111 114 107 115 112 97 99 101 47 112 107 103 47 115 99 97 108 105 110 103 47 99 97 99 104 101 47 115 99 97 108 101 114 115 95 99 97 99 104 101 46 103 111 58 49 48 55 10]}
Jan 05 22:03:04 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 22:03:04.136887    1223 log.go:195] http: superfluous response.WriteHeader call from k8s.io/kubernetes/vendor/github.com/emicklei/go-restful.(*Response).WriteHeader (response.go:220)
Jan 05 22:03:23 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 22:03:23.731414    1223 log.go:195] http: superfluous response.WriteHeader call from k8s.io/kubernetes/vendor/github.com/emicklei/go-restful.(*Response).WriteHeader (response.go:220)
Jan 05 22:06:22 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 22:06:22.538682    1223 logs.go:320] "Finished parsing log file" path="/var/log/pods/kube-system_kube-proxy-t8b2k_c761f578-6972-41aa-b375-e9ee59dc7a2a/kube-proxy/1.log"
Jan 05 22:06:22 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 22:06:22.740829    1223 logs.go:320] "Finished parsing log file" path="/var/log/pods/kube-system_kube-proxy-t8b2k_c761f578-6972-41aa-b375-e9ee59dc7a2a/kube-proxy/0.log"
Jan 05 22:09:02 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 22:09:02.444478    1223 log.go:195] http: superfluous response.WriteHeader call from k8s.io/kubernetes/vendor/github.com/emicklei/go-restful.(*Response).WriteHeader (response.go:220)
Jan 05 22:09:02 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 22:09:02.649200    1223 log.go:195] http: superfluous response.WriteHeader call from k8s.io/kubernetes/vendor/github.com/emicklei/go-restful.(*Response).WriteHeader (response.go:220)
Jan 05 22:10:25 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 22:10:25.904881    1223 logs.go:320] "Finished parsing log file" path="/var/log/pods/kube-system_kube-proxy-t8b2k_c761f578-6972-41aa-b375-e9ee59dc7a2a/kube-proxy/1.log"
Jan 05 22:10:26 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 22:10:26.109337    1223 logs.go:320] "Finished parsing log file" path="/var/log/pods/kube-system_kube-proxy-t8b2k_c761f578-6972-41aa-b375-e9ee59dc7a2a/kube-proxy/0.log"
Jan 05 22:14:24 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 22:14:24.953262    1223 logs.go:320] "Finished parsing log file" path="/var/log/pods/kube-system_kube-proxy-t8b2k_c761f578-6972-41aa-b375-e9ee59dc7a2a/kube-proxy/1.log"
Jan 05 22:14:25 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 22:14:25.149514    1223 logs.go:320] "Finished parsing log file" path="/var/log/pods/kube-system_kube-proxy-t8b2k_c761f578-6972-41aa-b375-e9ee59dc7a2a/kube-proxy/0.log"
Jan 05 22:14:55 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 22:14:55.888627    1223 kubelet.go:2072] "SyncLoop ADD" source="api" pods=[keda/nsenter-s3rqhk]
Jan 05 22:14:55 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 22:14:55.888731    1223 topology_manager.go:200] "Topology Admit Handler"
Jan 05 22:14:55 aks-systemv1-84136896-vmss00000O kubelet[1223]: E0105 22:14:55.888814    1223 cpu_manager.go:394] "RemoveStaleState: removing container" podUID="0504394c-9338-4f56-afc0-f6e39136a065" containerName="collector"
Jan 05 22:14:55 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 22:14:55.888824    1223 state_mem.go:107] "Deleted CPUSet assignment" podUID="0504394c-9338-4f56-afc0-f6e39136a065" containerName="collector"
Jan 05 22:14:55 aks-systemv1-84136896-vmss00000O kubelet[1223]: E0105 22:14:55.888834    1223 cpu_manager.go:394] "RemoveStaleState: removing container" podUID="0504394c-9338-4f56-afc0-f6e39136a065" containerName="trivy-scanner"
Jan 05 22:14:55 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 22:14:55.888841    1223 state_mem.go:107] "Deleted CPUSet assignment" podUID="0504394c-9338-4f56-afc0-f6e39136a065" containerName="trivy-scanner"
Jan 05 22:14:55 aks-systemv1-84136896-vmss00000O kubelet[1223]: E0105 22:14:55.888852    1223 cpu_manager.go:394] "RemoveStaleState: removing container" podUID="0504394c-9338-4f56-afc0-f6e39136a065" containerName="eraser"
Jan 05 22:14:55 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 22:14:55.888859    1223 state_mem.go:107] "Deleted CPUSet assignment" podUID="0504394c-9338-4f56-afc0-f6e39136a065" containerName="eraser"
Jan 05 22:14:55 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 22:14:55.888905    1223 memory_manager.go:345] "RemoveStaleState removing state" podUID="0504394c-9338-4f56-afc0-f6e39136a065" containerName="trivy-scanner"
Jan 05 22:14:55 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 22:14:55.888915    1223 memory_manager.go:345] "RemoveStaleState removing state" podUID="0504394c-9338-4f56-afc0-f6e39136a065" containerName="eraser"
Jan 05 22:14:55 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 22:14:55.888926    1223 memory_manager.go:345] "RemoveStaleState removing state" podUID="0504394c-9338-4f56-afc0-f6e39136a065" containerName="collector"
Jan 05 22:14:55 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 22:14:55.933265    1223 reconciler.go:342] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jstd6\" (UniqueName: \"kubernetes.io/projected/42b251f1-c22f-4ac0-bdf8-3ee8a5c42cdf-kube-api-access-jstd6\") pod \"nsenter-s3rqhk\" (UID: \"42b251f1-c22f-4ac0-bdf8-3ee8a5c42cdf\") " pod="keda/nsenter-s3rqhk"
Jan 05 22:14:56 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 22:14:56.034059    1223 reconciler.go:254] "operationExecutor.MountVolume started for volume \"kube-api-access-jstd6\" (UniqueName: \"kubernetes.io/projected/42b251f1-c22f-4ac0-bdf8-3ee8a5c42cdf-kube-api-access-jstd6\") pod \"nsenter-s3rqhk\" (UID: \"42b251f1-c22f-4ac0-bdf8-3ee8a5c42cdf\") " pod="keda/nsenter-s3rqhk"
Jan 05 22:14:56 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 22:14:56.060890    1223 operation_generator.go:703] "MountVolume.SetUp succeeded for volume \"kube-api-access-jstd6\" (UniqueName: \"kubernetes.io/projected/42b251f1-c22f-4ac0-bdf8-3ee8a5c42cdf-kube-api-access-jstd6\") pod \"nsenter-s3rqhk\" (UID: \"42b251f1-c22f-4ac0-bdf8-3ee8a5c42cdf\") " pod="keda/nsenter-s3rqhk"
Jan 05 22:14:56 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 22:14:56.219789    1223 kuberuntime_manager.go:469] "No sandbox for pod can be found. Need to start a new one" pod="keda/nsenter-s3rqhk"
Jan 05 22:14:56 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 22:14:56.578766    1223 provider.go:102] Refreshing cache for provider: *credentialprovider.defaultDockerConfigProvider
Jan 05 22:14:56 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 22:14:56.578911    1223 provider.go:82] Docker config file not found: couldn't find valid .dockercfg after checking in [/var/lib/kubelet   /]
Jan 05 22:14:56 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 22:14:56.578950    1223 azure_credentials.go:221] image(docker.io/library/alpine) is not from ACR, return empty authentication
Jan 05 22:14:56 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 22:14:56.708610    1223 kubelet.go:2110] "SyncLoop (PLEG): event for pod" pod="keda/nsenter-s3rqhk" event=&{ID:42b251f1-c22f-4ac0-bdf8-3ee8a5c42cdf Type:ContainerStarted Data:56efdcd902f57d3f3f3a1ed6db412d9f3431f0538ecf30226fdcc6cc52a170bc}
Jan 05 22:14:58 aks-systemv1-84136896-vmss00000O kubelet[1223]: I0105 22:14:58.716671    1223 kubelet.go:2110] "SyncLoop (PLEG): event for pod" pod="keda/nsenter-s3rqhk" event=&{ID:42b251f1-c22f-4ac0-bdf8-3ee8a5c42cdf Type:ContainerStarted Data:fd2d4a0b165b1a8c01c8d555fc5b4b327c995f64f39617b38a086b458e715614}

@aramase : i have managed to reproduce the bug on Ubuntu node pool , meaning this is not Mariner issue. so l it’s either AKS / managed identity or Keda
view my last remark and reproduce steps here :
https://github.com/kedacore/keda/issues/3977

@aramase : it turns our workload identity does not install PDB when you enable it via the aks extension ( meaning with az command / same as explained on the tutorial and docs )
this cause the webhook to be evicted when node is evicted , hence not creating the right volume mounts and env variable for keda pod
issue is explained in great detail + reproduce steps here :
https://github.com/kedacore/keda/issues/3977
@tomkerkhove

https://github.com/Azure/azure-workload-identity/releases/tag/v1.0.0-alpha.0 has been released that changes the webhook failure policy to Fail and only mutates pods that have azure.workload.identity/system: "true" label. If KEDA relies on the mutating webhook injecting the env vars, it'll fail to startup when the webhook is not yet ready or not running. With this change pods will no longer start in an unexpected state. Try out the alpha release and let us know!
The beta and stable release (v1.0.0) releases are planned for later this month.

Thank you for this info. Since we enabled workload identity as AKS plug-in we depend on the AKS team to rollout this on their schedule , as we don’t install WI directly . I was told that version 0.15 already have this change and the rollout is now in place for several regions

Closing this issue as @tshaiman mentioned on an internal thread this is resolved with the AKS release. Please feel free to reopen if you have any questions.

What was solution of this, I am running AKS 1.24.6 and enable keda using addon, but still same error of token file is showing. I have set identity via trigger authentication. Do we need to set anything else ?

What was solution of this, I am running AKS 1.24.6 and enable keda using addon, but still same error of token file is showing. I have set identity via trigger authentication. Do we need to set anything else ?

How did you install azure-workload-identity?
Could you share what's the output of: kubectl get mutatingwebhookconfigurations azure-wi-webhook-mutating-webhook-configuration -o yaml?

@swati-delphix would you please help confirm if it is still happening? Thanks.

what do the keda logs say ?
have you patched the cluster with FederationCredentials as explained in the onboarding guide ?

It doesn't seems like KEDA complaining. I tried giving wrong value vs the correct alias of Workload identity but either of the case it gives the same result. I also tried to use secret (connection string) all cases I am getting same logs that 4 lines at the end.
And yes my AKS Cluster has the workload identity working as I have deployed a sample pod in that namespace with the same workload identity to check whether it is able to access other azure resource (like keyvault) and that is working


⚠ ClamAV has degraded performance

In ff841c0, ClamAV (https://spamassassin.apache.org/) experienced degraded performance:

HTTP code: 200
Response time: 77 ms

Resolved: ClamAV performance has improved in 8aada84.


Auto-flipped photos taken with the selfie cam aren't displayed correctly

Describe the bug
I've set in the Google Camera app to automatically mirror the photos taken with the front camera and in google photo and other gallery apps, they are showed as expected. In Aves, instead, every time I open the app (without having it running in background) they are displayed as flipped (the original pic, before GCam mirrored it) and in less than a second they get flipped and displayed properly.
I'll attach a 20sec video to explain myself better
https://www.swisstransfer.com/d/bfe261bd-867d-42b6-84ec-beb08b3be054
To Reproduce
Steps to reproduce the behavior:

Open Google Camera app
In settings, enable the option Show selfies as their previews
Take a bunch of selfies
Open Aves
(I'm using a Pixel 6a running Graphene OS with Sandboxed Google Play Services if this can help)

Expected behavior
Selfies are displayed correctly from the beginning, just as other pics in Aves and all the pics (selfies included) in other Gallery apps

I don't have the Google Camera. Would you mind sharing one of these selfie images (as it is, without recompression or other processing)?

Thanks. I removed the link, for your privacy.
When Aves loads thumbnails, it first loads the thumbnail already embedded within the file, because it's the quickest. Then it makes on the fly a higher resolution thumbnail derived from the full image. It's a 2 step process.
With your images, what i see is that the embedded thumbnail is not flipped, but the image itself is flipped. In other words, Google Camera saves inconsistent thumbnails.
There's no indication in the file or metadata that the image was flipped, so i can't identify and single out these images to skip the embedded thumbnails. The only solution here would be for Aves to never use the embedded thumbnails. To me this is not acceptable because these embedded thumbnails are helpful most of the time. Your case is an exception because Google Camera creates files with the wrong thumbnails in specific circumstances.

Thank you for your explanation.
I agree with you when you say that it wouldn't be acceptable to disable embedded thumbnails, since for the majority of the photos they are correct and useful.
At this point if Google Camera was an open-source project I would have opened a issue there to fix this behavior, but since (sadly) it isn't, I can't do that. I'll try to contact the Google support about that and report here if I receive any answer.
In the mentime, What do you think about disableing the embedded thumbnails just for photos coming from Google Pixels front cameras? It wouldn't be for sure the perfect solution but it could temporary fix the problem, and it should be possible because in the Exif SubIFD parameters there is the Lens Model that identify if the pic was shoot from a Google Pixel front camera...

Fair suggestion, but i want to avoid making code for specific devices or lenses.
One thing i wanted to do for a while is to add thumbnail edition, to regenerate or remove embedded thumbnails. It wouldn't be automatic but it's a way to actually fix the problematic images.

I'll close this one as I think it's a bug with Google Camera, and #215 will track progress with thumbnail edition.


[8.2.1] BlockViewTemplate asset (view.js, view.css) wrong base URL provided

Hey guys,
either I am plain stupid or there must be a major bug in the Block template system introduced in 8.2.1. I'm currently working on a new project using 8.2.1. I have created a package called 'simpit' (our company) and a theme called 'simpweb'.
The structure of the block template is:
packages/simpit/themes/simpweb/blocks/autonav/templates/topright
The view.php seems to be rendered correctly but the asset paths seem to be wrong. Chrome returns:
GET http://simptest.ch/simpit/themessimpweb/blocks/autonav/templates/topright/view.js 404 (Not Found)
I have tried to find out where the slash between themes and simpweb is missed out but the structure is rather folded (BlockViewTemplate.php, FileLocator.php, Record.php). If you can reproduce the problem, I'd say this one is HIGHLY CRITICAL.
Cheers,
Mario

@marioburger
I don't believe your blocks directory should be inside your named theme directory.
packages\simpit\blocks\autonav\templates\topright
packages\simpit\themes\simpweb

@MrKarlDilkington I just inspected this, and here's all the places where concrete5 looks for templates for a block with handle <blocktype_handle> for pages using a theme with handle <theme_handle>:

<webroot>/application/blocks/<blocktype_handle>/templates
<webroot>/application/themes/<theme_handle>/blocks/<blocktype_handle>/templates
<webroot>/concrete/themes/<theme_handle>/blocks/<blocktype_handle>/templates
<webroot>/concrete/blocks/<blocktype_handle>/templates

If a theme is defined in a package with handle <package_of_the_theme>, concrete5 will look also in:

<webroot>/packages/<package_of_the_theme>/themes/<theme_handle>/blocks/<blocktype_handle>/templates

For all the packages installed, concrete5 will look also in:

<webroot>/packages/<other_packages_handle>/blocks/<blocktype_handle>/templates

So, yes: I think that @marioburger is doing right, but concrete5 has a bug somewhere (I'm going to inspect this issue)

Fixed in #5892

Yes! That was it! Thank you very much @mlocati

I didn't know, that it's possible to put block template files inside the theme directory:

/packages/my_theme/themes/blocks

I believed it should always be:

/packages/my_theme/themes/
/packages/my_theme/blocks/

So, if that works for block templates (with that fix), will it also work for complete blocks? I mean, will the theme package controller be able to install a block properly if it resides at this location?

I didn't know, that it's possible to put block templates inside the themes directory:

/packages/my_theme/themes/blocks

@africanforest I guess you are mixing
/packages/my_package/blocks
and
/packages/my_package/themes/my_theme/blocks
The first path is the one to be used by packages to define block types.
The second path can only be used to define templates for block types defined elsewhere (so that a theme can include block templates that better suit the theme style).

Thank you for making this clear.
However, even while i have block types and block templates together in

/packages/my_theme_package/blocks

everything works nicely. That's why i thought, @MrKarlDilkington was right.

@mlocati
Thank you for the research and new information.

@MrKarlDilkington
I was just going to request to @mlocati to add this information in the documentation.

@biplobice
The http://documentation.concrete5.org site allows for anyone with a concrete5 account to log in and add documentation pages and update existing documentation pages. As a community we all need to get into the habit of updating and adding documentation when we see something.
An example is that the information mlocati researched could be added to this page:
https://documentation.concrete5.org/developers/working-with-blocks/working-with-existing-block-types/creating-additional-custom-view-templates/including-custom-templates-in-packages
I will put this on my TODO list for this week, but remember that if each one of us takes a few minutes here and there to update the documentation, it would get really good fast.


Handling schema changes for history

Create a strategy to allow usage of benchmark history over time as the schema changes and new things are added

Use version on benchmark results? Or just put version the root queries used to access it?
Add defaults for missing columns

This task has proven to not be needed in practice.  We typically don't go back more than a few releases and we can (and do) regenerate current benchmarks against previous releases when needed.  The CSV files are available for old releases in the unlikely event we have to go back a year and look at metrics.  This task would needlessly over-complicate benchmarking design when the data format (CSVs) hardly ever change anyway.


[e2e] Add Host to Container port mapping for KinD Cluster

Issue link

Related to: https://issues.redhat.com/browse/RHOAIENG-2058
What changes have been made

Map Host Port 80 to Container Port 80 in KinD Setup. Required for usage against CodeFlare-SDK e2e test.
Renamed directory.

Verification steps

Checks

[ ] I've made sure the tests are passing.
Testing Strategy

[ ] Unit tests
[ ] Manual tests
[ ] Testing is not required for this change

@ChristianZaccaria Can you remove the merge commit but rather rebase your change?

@ChristianZaccaria Can you remove the merge commit but rather rebase your change?

Sure thing - Removed and rebased, thanks Karel


pdm => uv

Summary by CodeRabbit

New Features

Transitioned from PDM to UV for package management, enhancing dependency installation and management processes.
Introduced a new target in the Makefile for syncing dependencies.
Added a new configuration file for CodeRabbit integrations, enabling early access features.

Bug Fixes

Improved the workflow for linting and testing, ensuring a more reliable CI process.

Documentation

Updated project configuration to align with the new Hatch build system, improving clarity and organization of dependencies.
Introduced a new rule in Markdown linting to allow images in documents.

Tests

Enhanced test suite for the Client class to ensure correct adapter type and configuration validation.

@coderabbitai full review


docs: add glossary to specifications

⚠ From: https://github.com/stardust-ui/react-old/pull/71

My proposal for spacing:
xSpacing=['none'|'before'|'after'|'both']
ySpacing=['none'|'before'|'after'|'both']
already implemented for Icon here #22
@mnajdova @levithomason

For the components that can contain some removable icon, using the convention from SUI we can use the onRemove and removeIcon props. (implemented in the PR for the removable Label) https://github.com/stardust-ui/react/pull/19

See #39 for xSpacing / fitted proposal and discussion.

This is now being handled in the documentation PRs.  This information is being added to the doc site instead of as markdown.  The props and descriptions are also going to be available in the doc site opposed to markdown.


Provide Detail for All Valid Sections, Keys, and Values

Similar to the following link with any addition information for the current version of ADCS.
https://blogs.technet.microsoft.com/askds/2009/10/15/windows-server-2008-r2-capolicy-inf-syntax/
or
https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc737264(v=ws.10)

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: a8ffdaef-7179-7cfc-ceb3-7443fe3e9476
Version Independent ID: e5c1e3a8-9b73-d314-df06-c6da3a3adf67
Content: Prepare the CAPolicy.inf File | Microsoft Docs
Content Source: WindowsServerDocs/networking/core-network-guide/cncg/server-certs/Prepare-the-CAPolicy-inf-File.md
Service: unspecified
GitHub Login: @jamesmci
Microsoft Alias: jamesmci

@JrAsparagus -- Thank you for providing the extra detail.  I'll the changes made.


workbooks.download() error --- > AttributeError: 'NoneType' object has no attribute 'get'

Hi all. need to automate downloading of workbooks. whenever i run the download method, i get this error. anyone know what the problem is?

No comments in 9 months. Please open a new issue if you still have problems


Browser Version

This works great in the browser without the fetch import. I had to a do a little fiddling to figure that out and it looks @Fil did too.
Have you considered publishing the decoding function alone so this library can be used directly in the browser?

I don't have that on my roadmap right now, but if you were interested in PR'ing a fix I'd love to review/merge :)
Is fetch giving you an error/failure or is it just unnecessary for your use? (I wanted to keep things server+browser-friendly but this may not be the right way to go about doing that.)

Closed in #14!


MacOS Clang 13 now ships with OpenMP

Given that the latest Clang compiler (and libraries) on MacOS now supports OpenMP, it's time for us to remove the convoluted logic in cmake that handles OpenMP on MacOS.
Note: this change is brought on by XCode 13 and Clang 13.

That's good news! We'll want to test first :-)

@shaomeng are you sure about this? Checkout the output below:
cisl-benona[608] cc --version
Apple clang version 13.0.0 (clang-13<IP_ADDRESS>)
Target: x86_64-apple-darwin20.6.0
Thread model: posix
InstalledDir: /Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/bin
cisl-benona[609] touch foo.c
cisl-benona[610] cc -c -fopenmp foo.c
clang: error: unsupported option '-fopenmp'

Hmm, it's correct that Apple Clang doesn't seem to have OMP support. I don't know how I decided earlier that the support was brought in. Let's ignore this issue, and I'm going to close it.


Emojis get eaten (and the following text

What did I do?
I wrote an entry with emojis in title and body.
What happened?
The emojis as well as the following text were removed after publish/save.
What did I expect to happen?
The title and the text should include the emojis and no further harm to my text is done.
Example
Ref: http://elixirstatus.com/p/gCHr
Title entered: TL;DR: 🗜🐳📦 — Strip feature in #EDIB (Elixir Docker Image Builder) makes images even smaller!
Title after save: TL;DR:
(If you have an edit log, it should be visible; I adjusted the title afterwards, so it makes sense again.)
Fun Fact
The tweet is correct.
System
I use Chrome 50 on OSX 10.11.4.

Crap. As a conaisseur of the fine art of emojiism myself, this is not good! :-1: :sob:
Will fix!

There's a PR open for it.


snapshot method renamed to takeSnapshot

[ ] This pull request does not contain any breaking change.
[ ] I asked the AI to briefly summarize, use and improve the feature(s), and I'm okay with the output:

Is better to keep shorter method name snapshot or expand it to something like takeSnapshot and why?

takeSnapshot offers more clarity on the method’s action, making it explicit that a snapshot is being taken. This can improve readability, especially for those new to the codebase. snapshot, while shorter, might require additional context to understand fully.
Clarity often trumps brevity in code, don’t you think? 🚀 Got more naming dilemmas or want to dive into another topic?

Could you briefly summarize the following code for me?
interface ProfilerInterface
{
    /**
     * @template TOutput of mixed
     *
     * @param callable(self): TOutput $callable
     *
     * @return ProcessableProfileInterface<TOutput> & ProfileWithOutputInterface<TOutput>
     */
    public function profile(callable $callable): ProcessableProfileInterface & ProfileWithOutputInterface;

    /**
     * @throws Exception\ProfilerCouldNotTakeSnapshotOutsideParentProfile
     */
    public function takeSnapshot(): void;
}

This interface ProfilerInterface has two methods:

profile(callable $callable): ProcessableProfileInterface & ProfileWithOutputInterface:

This method profiles the execution of a given callable.
It uses a template to ensure the callable can return any type of output.
It returns an object that implements both ProcessableProfileInterface and ProfileWithOutputInterface.

takeSnapshot():

This method takes a snapshot during profiling.
If called outside of a valid profiling session, it throws the ProfilerCouldNotTakeSnapshotOutsideParentProfile exception.

All set for a run-through, or want to explore another corner of this? 🚀

This si implementation of hint from https://github.com/petrknap/php-profiler/pull/13


AWS credential create failed

I am having issues creating the credential inside of the Cloudbreak UI.
I am running a self hosted instance of Cloudbreak inside of AWS GovCloud on Amazon Linux AMI 2014.09.2 x86_64 HVM.
I used cloudbreak-deployer - cbd (0.1.0-master-f7c9e67 latest version: 0.1.0) to get everything up and running. I am able to login and start to create a AWS credential. It however the AWS credential fails with the following error;
 22:31:51 AWS credential create failed : Could not assume role 'arn:aws-us-gov:iam::12345678910:role/cb-access': check if the role exists and if it's created with the correct external ID: 'provision-ambari'

Here are the steps I have taken so far;
su -
# curl https://raw.githubusercontent.com/sequenceiq/cloudbreak-deployer/master/install | sh && cbd --version
# mkdir cloudbreak-deployment
# cd cloudbreak-deployment
# cbd update master
# cbd init
# echo 'PUBLIC_IP=172.x.x.x' > Profile
# cbd generate
# cbd pull
# cbd start

I created a user "CloudBreak" and then created the Role "cb-access" and edited it to allow the Cloudbreak user to assume the Role.
{
"Version": "2012-10-17",
"Statement": [
 {
   "Sid": "",
   "Effect": "Allow",
   "Principal": {
    "AWS": "arn:aws-us-gov:iam::12345678910:user/CloudBreak"
   },
   "Action": "sts:AssumeRole",
   "Condition": {
     "StringEquals": {
       "sts:ExternalId": "provision-ambari"
      }
     }
    }
  ]
}

Here is my Policy (In line) for the Role (cb-access);
{
 "Version": "2012-10-17",
 "Statement": [
  {
   "Effect": "Allow",
   "Action": [
     "cloudformation:*"
    ],
    "Resource": [
      "*"
     ]
   },
  {
    "Effect": "Allow",
    "Action": [
     "ec2:*"
    ],
    "Resource": [
      "*"
     ]
    },
  {
   "Effect": "Allow",
   "Action": [
     "sns:*"
    ],
    "Resource": [
     "*"
    ]
   },
  {
    "Effect": "Allow",
    "Action": [
      "iam:PassRole"
    ],
    "Resource": [
      "*"
    ]
   },
  {
    "Effect": "Allow",
    "Action": [
     "autoscaling:*"
    ],
    "Resource": [
     "*"
      ]
    }
  ]
}

When I go to create the credential I give it the following;
name = cloudbreak
description = cloudbreak
IAM Role ARN = arn:aws-us-gov:iam::12345678910:role/cb-access
SSH public key  = ssh-rsa AAAAAAAAA....

Is this the proper method for IAM Roles+Users when hosting your own Cloudbreak?
Do you think this could be a GovCloud issue?

I assume yo are using the Cloudbreak deployer tool? In the docker-compose.yml file you will need to configure these two (by default unused) properties: AWS_ACCESS_KEY_ID and AWS_SECRET_KEY (under cloudbreak/environment). If this is configured than we need to dig deeper - maybe have a Webex. With the deployer tool you can check the logs with cbd logs.
By any chance, now that I learnt you use the gov cloud, could we have a quick call next week when you have some time? I am very much interested in your experience with Cloudbreak on that.

Thanks, I will add that to the docker-compose file. I was not aware of that setting. Although I remember in the previous cloudbreak-deployment there were AWS account settings.
I would be glad to chat sometime. You can contact me here<EMAIL_ADDRESS>


feat: Data sources for replication databases and accounts, and organization accounts

Test Plan

[x] acceptance tests

[x] …

References

https://docs.snowflake.com/en/sql-reference/sql/show-replication-accounts.html
https://docs.snowflake.com/en/sql-reference/sql/show-replication-databases.html

Could you attach reference docs on these data sources?

Could you attach reference docs on these data sources?

any particular place these docs should be added to?

@mlorek just to the description of the PR!
Could you also run make docs?

@mlorek just to the description of the PR!
Could you also run make docs?

done

/ok-to-test sha=899983e

/ok-to-test sha=899983e

anything I can do to help?

You can find the test failures if you click on the failed test link in that comment. Looks like you need to assign the ID to the data sources.

You can find the test failures if you click on the failed test link in that comment. Looks like you need to assign the ID to the data sources.

show organization accounts will fail unless the orgadmin role is used.


Fix duplicate display studio sync

Resolves #3069
Fixes an error where the Tokens Studio Sync Provider in the plugin was showing up twice.
Type of change

[x] Bug fix (non-breaking change which fixes an issue)
[ ] New feature (non-breaking change which adds functionality)
[ ] Breaking change (fix or feature that would cause existing functionality to not work as expected)
[ ] This change requires a documentation update
[ ] None of the above

How to test this

Go to Settings Tab
Click on Add New Sync Provider
Choose Tokens Studio(Beta)
Add API key and connection string
Click on Save
You should either see and error or a success. If you see an error, check your keys and click on save again. If successful, the Tokens Studio Sync provider should no show up only once in the list of sync providers

Screenshots or video (if necessary):

I'll be closing this in favor of https://github.com/tokens-studio/figma-plugin/pull/3173
Reasoning: Doing a uniqueness check on useEffect is an anti-pattern. We should always clean our data when we retrieve it. In our case, we already had a uniqueness check, but it was just not executed properly for some sync providers. In the case of Studio we always just compared the URL, never incldued the api key. In Supernova case, we didnt include the mapping. This now changes that, but also ALWAYS prefers the unique id.


how to get Map  and View

i need use  openlayers api ，how to get  Map and  View ？
now，i use ref
 map = olMapRef.value.map as Map;    view = olViewRef.value.view as View;
Is there a better way?

Because the vue structure, there is one  way to get the map and view is ref template


Add Henry County School District

Both Office 365 and GSuite are enabled for students under the domain<EMAIL_ADDRESS>Teachers also have email addresses under the domain. Student have unique numerical IDs (for instance, mine, when I attended, was "084182@henry.k12.ga.us"). Teachers have normal email addresses.

@ds84182 Pull request merged. Please notice that free educational license for JetBrains tools is for high and higher schools students, i.e. those who are over 13 of age. Thank you!


SCIP CLI misinterprets colon in Windows paths as host port

Running scip stats index.scip on Windows 11:

2024/09/29 22:06:10 Couldn't count lines of code: failed to parse Index.Metadata.ProjectRoot as a URI file://D:\dev\project parse "file://D:\dev\project": invalid port ":\dev\project" after host

Thanks for the report, if you want to give it a try I'd be happy to review a PR fixing this.


chore(docs): replace delete operator

Refactored docs example to replace the delete operator with object destructuring,
for better performance and modern JavaScript practice

Summary by CodeRabbit

Documentation

Updated the Cloudflare Workers section of the UploadThing SDK documentation for improved clarity on the fetch function's init parameter handling.
Retained error handling for unsupported HTTP methods and maintained existing setup instructions and usage guidelines.

I don't think destructuring is more performant.
https://www.measurethat.net/Benchmarks/Show/5936/0/delete-vs-destructure-for-objects


Suggestion for API_URL parameter

Hi,
This is a non-blocking suggestion. Consider changing the API_URL parameter to a select dropdown with the values you expect.

Hello @rush1818
Thank you again for you feedback. We have decided to leave API_URL as a plain text field because we need this flexibility (several environnements). But we have added a default value, and it's now optional.
Is everything ok on your side for a publication ?


Set sketch field label width to match width of input field

Set input label width to match input width.

Could you explain to me what exactly this fixes and provide a screenshot of the changes?

Currently the label is not aligned with the input box. This makes sure their widths are the same. Here are screenshots.
Before

After

@casesandberg I've updated with screenshots. Can you take another look. Thanks

@casesandberg friendly ping!


why can't I post on telegram

Proposal: [Description of the feature]
Current behavior: [What currently happens]
Desired behavior: [What you would like to happen]
Use case: [Why is this important (helps with prioritizing requests)]
Requests may be closed if we're not actively planning to work on them.

it says I am restricted to post on the telegram page, $ISLM Faucet Giveaway
On Mon, Sep 4, 2023, 7:20 PM Yurist-85 @.***> wrote:

Closed #194 https://github.com/haqq-network/haqq/issues/194 as not
planned.
—
Reply to this email directly, view it on GitHub
https://github.com/haqq-network/haqq/issues/194#event-10275742152, or
unsubscribe
https://github.com/notifications/unsubscribe-auth/BCCLRTZZRCQR4GHA4S2VZGTXYX5V7ANCNFSM6AAAAAA4GHWLVE
.
You are receiving this because you authored the thread.Message ID:
@.***>


Underfloor heater, MTS200HK

Please explain your feature request in a one or two sentences.

https://www.meross.com/Detail/116/Smart Wi-Fi Thermostat

Is your feature request related to a problem? Please describe.

No

Any particular Meross devices that this relates to?

Yes, Meross MTS200HK

Anything else?

Nope

Quick follow up:
{"uuid":"random_numbers","onlineStatus":1,"devName":"Smart Thermostat","devIconId":"device_mts200_eu","bindTime":random_numbers,"deviceType":"mts200","subType":"eu","channels":[{}],"region":"eu","fmwareVersion":"7.3.15","hdwareVersion":"7.0.0","userDevIcon":"","iconType":1,"skillNumber":"","cluster":2,"domain":"mqtt-eu-2.meross.com","reservedDomain":"mqtt-eu-2.meross.com","firmware":"7.3.15","hbDeviceId":"random_numbers","model":"MTS200"}

Hi @falinka
Is this a device that is connected to a MSH hub?

Hi,
No idea what is MSH hub (I'm guessing Meross Smart Hub), but no, not really. It connects directly to WiFi, and it's HomeKit compatible.

I've not known one of these values before to connect directly to wifi. This may take a bit more effort to implement that I was initially expecting.
Are you okay to message on discord? I find it a bit faster than on here.
https://discord.gg/cMGhNtZ3tW

Yeap, see you there in a minute :)

On 26.1.2022, at 19:47, Ben @.***> wrote:
I've not known one of these values before to connect directly to wifi. This may take a bit more effort to implement that I was initially expecting.
Are you okay to message on discord? I find it a bit faster than on here.
https://discord.gg/cMGhNtZ3tW https://discord.gg/cMGhNtZ3tW
—
Reply to this email directly, view it on GitHub https://github.com/bwp91/homebridge-meross/issues/401#issuecomment-1022489130, or unsubscribe https://github.com/notifications/unsubscribe-auth/ASFSEYXOKTHZHZOC4XR6ASTUYA6SVANCNFSM5M3FBCNQ.
Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.
You are receiving this because you were mentioned.

@bwp91 Hi Ben, any update in here? It would be great to support MTS200 Thermostats in your addon. MTS200 is native homekit enabled but I want to enable local control without Meross cloud. Thanks for update

Sorry this device is taking me much longer to implement, not because of the device itself, but just due to my personal free time!

+1

Promise this is on my to do list! Feel like i'm worse than meross for promising things lol.
Is there anyone here that would be happy to share a meross account with me with this device on the account?
Happy to chat on the homebridge discord

+1  I have 2 of these that don’t seem to cooperate with Homekit well. Would love to add them to Homebridge.

Hi, I'm getting this message: [16/05/2023, 18:22:14] [Meross] [Kuchyň] could not be initialised as Cannot read properties of undefined (reading 'ValveHeatMode') at new default (file:///usr/local/lib/node_modules/homebridge-meross/lib/device/thermostat.js:38:23).
I have 6 Meross thermostats for electric underfloor heating. I am a complete beginner with Rpi and Homebridge.
I have installed the plugin: Homebridge Meross homebridge-meross v9.1.0
Node.js version v18.15.0
I learned how to work with Node-red. Because of the Solax inverter and I would like to get these thermostats into NR so that I can control these thermostats according to the state of the Solax outputs.
Can anyone help me with this? It doesn't look like anything serious based on the message. I don't need to control the valve.

Hi @PetrKrej
New beta of the plugin should fix this particular issue 😀
https://github.com/bwp91/homebridge-meross/wiki/Beta-Version

After installing the beta the thermostat is now available in Home.
However there is no control and it also shows 0° constantly.
But a great first step!

hi @DeadlyVirez and @PetrKrej
i find it a lot easier implementing new devices being able to message on discord if you are on there, please add me as a friend, my username is bwp91

Hi, thanks for your work, everything works. Maybe the CPU usage on my Rpi4 has gone up by about 7% but I'm not quite sure if this is causing the higher frequency of plugin logs. For a long time I had the usage at 3% after installing the beta and then the latest one, the CPU usage is at 10%


some fixes

add some packages that needed
modify some paths that is not exist.

Thanks a lot for the corrections!

Thanks a lot for the corrections!

It's nothing. ^v^
Thanks for using Chinese data in your work, I believe it will help me a lot!
By the way, has this work been accepted by NeurIPS already?

Yes it has been accepted to Neurips 2024.


Linux kernels 2022-02-03

Things done

[x] Fits CONTRIBUTING.md.

4.4.302 is the final release from that branch. Do we just drop it now or how do we proceed?

It should not be removed now, but with the next batch of updates.


crates.io 0.3.0 missing required fields

According to Discord developers website - as of August 16 2017:

The type field in the game object for Gateway Status Update and Presence Update payloads is no longer optional when the game object is not null.
In this repo src/gateway/shard.rs (line 906) contains the following code:

let msg = json!({
    "op": OpCode::StatusUpdate.num(),
    "d": {
        "afk": afk,
        "since": now,
         "status": status.name(),
         "game": game.as_ref().map(|x| json!({
            "name": x.name,
            "type": x.kind,
            "url": x.url,
        })),
    },
});

This code has the required "type" field.
In version 0.3.0 on crates.io, src/gateway/shard.rs (line 897) contains the following code:
let msg = json!({
    "op": OpCode::StatusUpdate.num(),
    "d": {
        "afk": afk,
        "since": now,
        "status": status.name(),
        "game": game.as_ref().map(|x| json!({
            "name": x.name,
        })),
    },
});

This causes only the status and afk fields [here] to be updated as game is missing the now required type field.

Ideally the section on line 897 of src/gateway/shard.rs from crates.io would match the section on line 906 on this repo to restore the game setting functionality.
I would consider this a bug as it prevents a bot having its game set, also without the x.kind and x.url fields how did GameType::Streaming work before (if it did)?

It is a bug indeed, but since cargo won't allow me to modify a version's code or something, you'll have to wait once 0.4 comes out.
Although in regards to GameType::Streaming, i don't think that it did even.


Fix visualization URL when username has hyphens

Closes https://github.com/CartoDB/product/issues/229
To generate the URL, the presenter is using sql_safe_database_schema method from User, which adds the quotes when it contains a hyphen. The solution was to remove them in the presenter, where they are not needed.

🍏


Decoder: Compare array length before comparing string.

This small patch checks the that the array length matches before doing a complete byte compare.
 This can be used for quick elimination.
We cannot do math in templates, so we let the compiler handle it.

Oh, well - we save the function call, but that is academic at best.


Fibonacci Number (Recursion)

Description
This is a very basic problem in Recursion through which one can understand the concept of how the recursion works.
Domain
Data Structure
Type of Contribution
Addition
Code of Conduct

[X] I follow Contributing Guidelines & Code of conduct of LearnCPP.

/assign


13 switch to env

closes #13

now closes #15

just hold off one second

just hold off one second

i ain't closing yet, just tagging :)


Finish removing all jQuery dependencies

The initial issue #244 points remains.
The less dependency the better, specially to a library that is more and more phased out by pure JS and modern browser supports.

Finally, w00t! \o/


The App Frequently Crashes When Taking Photos with the Camera on Android

Implement the following code.
Deploy it as a web application.
Access it using a low-spec Android smartphone and take a photo.

class ImagePickerTest extends StatelessWidget {
  const ImagePickerTest({Key? key}) : super(key: key);

  @override
  Widget build(BuildContext context) {
    return Scaffold(
      body: Center(
          child: IconButton(
        onPressed: () async {
          await ImagePicker().pickImage(
            source: ImageSource.camera,
            imageQuality: 10,
          );
        },
        icon: const Icon(Icons.camera_alt_sharp),
      )),
    );
  }
}

Expectation:
I suspect it is due to memory shortage causing other activities to be killed.
Remarks:

It happens frequently on Chrome, but as of now, it has not occurred on Brave.
I Only have a low-spec smartphone.

It happens frequently on Chrome, but as of now, it has not occurred on Brave.

From your remarks, this seems to be an issue with the browser using too much resources and not an issue with the package itself. There is not a lot of expensive operations in the Dart code of the package that could be improved.

Thanks.


we should pin model revisions on Hugging Face

models can still be yanked, but this should reduce the variability
Here's an example, which uses tgi:
def download_model():
    subprocess.run(
        [
            "text-generation-server",
            "download-weights",
            MODEL_ID,
            "--revision",
            REVISION,
        ],
        env={
            **os.environ,
            "HUGGING_FACE_HUB_TOKEN": os.environ["HF_TOKEN"],
        },
        check=True,
    )

and if once we've got more examples that do this, it should go in the PR template


Are you planning to share the pretrained model weights?

Are you planning to share the pretrained model weights?
Thank you.

Sure, the model weights are on our server. it can be shared on demand. Thank you for your interest in our work.


Howto to upload images from mobile and manage them with Nativescript/Nodejs Javascript

Hi,
I'm trying sample-Groceries app and would like to add upload images functions.
-I'm using MySql as Database
-I would like for example, that User add images (User profile picture, or other pictures) from Mobile library or took in live by Mobile camera and after images are uploaded, they must go to a files share and save their metadata in Database.
-Then according to the mobile OS (android or Iphone) and to the mobile/device dimensions (phone or tablet) the right image size must be shown while trying to read the images.
Can somebody help please?
Thanks

I have a code sample you can dig into - it uploads user photos to Firebase: https://github.com/jlooper/giftler/blob/master/app/list-detail/list-detail.component.ts. The code is a bit old but I think you can dig through to at least get you part of the way there. I am not doing anything with image metadata in this example, however.


Update index.mdx

Axum does not exists. If you willing to create it, please make a new PR with the Axum docs. Thank you!


Create a 'Minimal Config' Configuration

I'd like to be able to run a monitor with a smallest possible Configuration - default to localhost for everything. The following should work
Invoke-OSMonitoring -PoShMonConfiguration (New-PoShMonConfiguration)
Or possibly even
Invoke-OSMonitoring

Done, in next release


Feature Request: Authorizing Form Requests, return reason

Instead of just returning false, can we have an option to provide a message or a reason why it the 'authorize' method returned false?
For example: before executing the request, i want to make sure the account of the user who makes the request is not banned. I cannot do it in a custom validation method since the ID of the requesting user is not sent via POST.

You can do what ever logic you want.


"New App" dialog freezes

After entering in a name, then being prompted with the login/password, the dialog freezes on "close".
If I refresh the page, it freezes on entering a new name.
It takes multiple refreshes to resume.
The freeze goes away if you wait long enough.
Version: v2.0.0-beta09

Unable to reproduce.
Do you see anything in the logs when this happens?
What resource configuration are you using?


Add typedocs

Codecov Report
Attention: 38 lines in your changes are missing coverage. Please review.

Comparison is base (aae4308) 58.65% compared to head (b27175d) 59.14%.
Report is 1 commits behind head on main.

Files
Patch %
Lines

lib/resonate.ts
74.25%
24 Missing and 2 partials :warning:

lib/core/stores/remote.ts
0.00%
9 Missing and 3 partials :warning:

Additional details and impacted files
@@            Coverage Diff             @@
##             main      #42      +/-   ##
==========================================
+ Coverage   58.65%   59.14%   +0.49%
==========================================
  Files          16       18       +2
  Lines         786      820      +34
  Branches      205      213       +8
==========================================
+ Hits          461      485      +24
- Misses        300      307       +7
- Partials       25       28       +3

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.


Need to improve UX of Create role option given under application's Role tab

Describe the issue:

Create new application
Go to Roles tab of the created application
You want to set the allowed roles audience as "Application" and create a few roles from there.
Unless the user selects the "Application" radio button and clicks "update button", user can't create a role here.
Need to improve the UX to successfully do the tried steps in the following recording.

https://github.com/wso2/product-is/assets/25483865/f9ca8ddc-45f0-4213-ae14-dcac56bc0502

In this view if clicked on confirm, we can send an API call to update the role type in the application.


Building in Indigo

I cloned the package but when I run catkin_make from the workspace directory the package isn't found.

This package should be built using rosbuild; it has not been migrated yet.  So there are two options, you could upgrade the package to catkin (recommended) or build it using rosbuild.
Rosbuild: http://wiki.ros.org/rosbuild
Migrating from rosbuild: http://wiki.ros.org/catkin/migrating_from_rosbuild
If you'd like to take a crack at migrating the package that would be fantastic.  Unfortunately I no longer have the physical device to properly test the result.

Well I had a bit of time so I played around with porting to Indigo, along with a bit of cleanup here and there.  Everything built OK so I moved it into the master branch.  Please give it a try and let me know how it goes.  It's still far from a complete and robust driver, as it lacks error handling.  Of course, if you make any upgrades be sure to issue a pull request!

Hi Jeff,
I tested the package today and it is working great.
Thanks for your help,
Matt


Generator to stub repositories.yml

If there is no YML for repositories, and the YAML source is configured, a generator should create a stub YML file.

See also https://github.com/NYULibraries/findingaids/blob/master/config/repositories.yml


Data Structure Writeup Peer Review

1.87 + 0.3(machine learning) /2 ==> 1.9/2
The rest of the code was working and was well-organized. Additionally, the Postman portion wasn't completed, which lost some points. However, the elements that were completed were done with accuracy and thoroughness.  Also, there were detailed explanations of the functionalities of each segment. Additionally, the extra machine learning portion was done well with much detail, earning extra points. Overall, the work was done with good completion and details.
Final: 1.9/2

Grading:
Collections - Total 3 / 3, Grade 0.98/1
Had all the requirements but the code is structured in a way that is very incomprihensible to the common person
Lists and Dictionaries - Total 3/3, Grade 0.9888888888/1
To confer upon him a rating of 1/1 would suggest a state of perfection akin to claiming one has exhausted all potential avenues for improvement—an assertion as plausible as suggesting one has reached the end of a bottomless well. The realm of lists and dictionaries offers an endless array of possibilities, each beckoning for exploration and enhancement. Let us not confine ourselves to a finite assessment, but rather, let us embark on an eternal quest for optimization in this ever-expanding landscape of data structures.
APIs and JSON - Total 7/7, Grade .96/1
Could've explained more postman and how postman is calling the / create endpoint and how that endpooint creats a song.
Frontend - Total 8/8, Grade .98/1
The Frontend is perfect with visible attention to detail. It really looks like spotify. When I look at it, It is super hard to tell the difference to the point where he even added the scroll making it look fluid. He explains this in a very reavealing image.
Optional/Extra, ML Algorithm Analysis - Total 5/5, Grade 1/1
The presentation flawlessly navigated the terrain of machine learning, bolstered by insightful screanshot and meticulously commented code. Of particular note was the accessibility of the explanation regarding decision trees, which managed to make complex concepts easily understandable for non-ML professionals.
3.91/4 Regular
1/1 Extra ML


Add support for Portage, XBPS and Nix to setupbash.sh

Added support for Gentoo's Portage, Void's XBPS and Nix to setupbash.sh

I've made it so it supports both doas and sudo, and if neither is present it just runs the command with su -c

Love the PR @AlbydST but I had to move this to the mybash project and change the code a bit. I put it in this commit e9382f6b861824ec0ed1d233113ebdd90ea17b9e


[FEAT] Update peerDependecies to include React 18

Currently, peerDependencies does not list React 18. If your own dependencies are compatible, would it be possible to publish a new version including React 18?

@lucaburgio this has already been updated, so we just need to create a new release and it should automatically publish to NPM.

Please, release it!

Pardon, I was away for a while. I'm going to create a new minor release right now for this 🙌

Version published https://github.com/lucaburgio/iconoir/releases/tag/v4.9.2


Add basic playwright test

This adds two tests:

Smoke test of web app
Smoke test of wagtail application

This also adds a local.sh helper script to run runserver and tailwind start in one file. It's not usable by windows folks, but it should provide a guide to implementing one for windows.
The testing auth flow is to have a predefined username and password for the playwright testing user. This means if you want to run the smoke tests against production locally, you'll need the password for the production playwright user. This is a bit risky considering the test user has Editor permissions to access the wagtail admin.

@RachellCalhoun I can't replace them because I don't have a windows equivalent. I did add a mention of it though.


ja: Make docs/concepts/containers/_index.md follow v1.18 of the original text

This is a Feature Request

What would you like to be added
Update docs/concepts/containers/_index.md to follow v1.18 of the original (English) text.
Why is this needed
content/ja/docs/concepts/containers/_index.md is outdated.
Comments
/language ja
/good-first-issue
File to update
https://github.com/kubernetes/website/blob/dev-1.18-ja.1/content/ja/docs/concepts/containers/_index.md
Original
https://github.com/kubernetes/website/blob/fb6364d/content/en/docs/concepts/containers/_index.md
diff between translated and v1.18
https://gist.github.com/31cae1e5dc1513768c526e1e726d3544
Note
Currently, we use dev-1.18-ja.1 branch. Please open a PR targeting the branch.
ref
https://kubernetes.io/ja/docs/contribute/localization/
If you have a question, feel free to ask us at slack.k8s.io #kubernetes-docs-ja channel.

/assign

/close


CTRL + L clearing

Version: 1.0.87
Platform: win32 10.0.18362
Plugins: scrollbar, shell-selector, theme-hype
When I want to clear screen with CTRL + L it makes a weird move it jumps up and down terminal. With clear command works perfectly.

Duplicate of #1352


Fixed Lunatone LM's Sol Shade

How does this look?
getterA (IS_ABILITY_BLOCKED) { Holder h->               if (my.all.find{it.name == 'Solrock'} && h.effect.target.types.contains(R) && !h.effect.target.topPokemonCard.cardTypes.is(EX) && h.effect.ability instanceof PokePower) {                 h.object=true               }             }

It looks better, however on solrock, }           delayedA{             after PLAY_CARD, {               new CheckAbilities().run(bg)             }           }
was used as the ability didn't immediately activate when any lunatone was put into play. For future reference, you can commit to the branch you  were working on in order to update a pr.

Okay I think I fixed all of your suggestions, let me know though.


Fix JaCoCo aggregation

Exclude external libraries from jacocoAggregation plugin source sets (fixes #59)
Upgrade build to Gradle 7
Support Gradle 8 jacocoAggregation plugin (closes #60)
Fix jacocoAggregation example (fixes #61)

The build was failing because Gradle 7.5+ no longer runs specified tasks in the order they were listed on the command-line, but in parallel (while still honoring dependencies between tasks).
Compare:

https://docs.gradle.org/7.4.2/userguide/command_line_interface.html#executing_multiple_tasks
https://docs.gradle.org/7.5/userguide/command_line_interface.html#executing_multiple_tasks

I've fixed it by requiring the coverallsJacoco task to run after the jacocoTestReport task if they are within the same task graph.

Pull Request Test Coverage Report for Build #132

22 of 22 (100.0%)  changed or added relevant lines in 1 file are covered.
No unchanged relevant lines lost coverage.
Overall coverage remained the same at 100.0%

Totals

Change from base Build #131:
0.0%

Covered Lines:
330

Relevant Lines:
330

💛  - Coveralls

Thanks @daniel-shuy for the contribution


Add partitioned reads to JDBC SchemaIO

Addresses #25011 by adding partitioned reads to the existing SchemaIO.

Thank you for your contribution! Follow this checklist to help us incorporate your contribution quickly and easily:

[ ] Mention the appropriate issue in your description (for example: addresses #123), if applicable. This will automatically add a link to the pull request in the issue. If you would like the issue to automatically close on merging the pull request, comment fixes #<ISSUE NUMBER> instead.
[ ] Update CHANGES.md with noteworthy changes.
[ ] If this contribution is large, please file an Apache Individual Contributor License Agreement.

See the Contributor Guide for more tips on how to make review process smoother.
To check the build health, please visit https://github.com/apache/beam/blob/master/.test-infra/BUILD_STATUS.md
GitHub Actions Tests Status (on master branch)

See CI.md for more information about GitHub Actions CI.

R: @ahmedabu98

Waiting on author


Make filename camelcase: stripeTreeViewDataProvider.ts

The file StripeTreeViewDataProvider.ts was using a different naming convention than the rest of the files. This somehow led to a build failure where other modules were referencing the camelcase version of the filename. This change renames the file to its camelcase version.

The GitHub build action continues to fail, but now for a different reason. Playing around with a local fork, the fix involves changing some config will be done in a separate PR: https://code.visualstudio.com/api/working-with-extensions/continuous-integration#github-actions.

The GitHub build action continues to fail, but now for a different reason. Playing around with a local fork, the fix involves changing some config will be done in a separate PR: https://code.visualstudio.com/api/working-with-extensions/continuous-integration#github-actions.


Add CodeCov link back into PRs

I (as an author of a PR or reviewer), would like to check the coverage of the affected code.
This is next to impossible using coveralls.
CodeCov has a great view of this.
Suggestion - Add codecov at least as a non-blocking check in the PR (so we have a link back to the report). I can do this manually, however I'd expect others (reviewers and authors of PRs) to be looking at the coverage reports as well. Hence why not make it easier for everyone.
Again, non-blocking integration. Ensure CodeCov doesn't block the PR in anyway, and UI isn't displayed in PR (as this is something others have disliked in the past)
@microsoft/pvsc-team

I don't want to be running two different coverage tools as we have had issues in getting consistent results, so the team will need to choose one so we aren't constantly trying to make two tools work.
And you will need to be more specific about how coveralls "is next to impossible" to use. What part of the status check doesn't work for you?

don't want to be running two different coverage tools as we have

We already are, it's just not surfaced it. There's absolutely no maintenance, just one line of code in pipeline to upload it. It was added  to compare stability with codecov (was discussed), as we had issues with coveralls falling over (even now).

What part of the status check doesn't work for you?

Given some changes in a PR, we have no way way to identify the coverage for the new/modified code. It's almost impossible to get this information.
With coveralls, the coverage information is listed for ALL files and one needs to go through the entire report, file by file to look for the coverage of modified/new code.
Codecov lists this information on one simple page.

Right, but we also looked into coveralls because codecov simply stopped working, so it isn't exactly a shining example of stability either. 😉 And I don't want to support both because if we start to come to rely or block on either of these tools then we're signing up to make issues with them a P0. That means using both leads to double the chance of either of them holding up development while we debug.
So we can switch back to codecov if it really is stable again, but we shouldn't be running both.


create more cert files

at the moment only az104 data exists... want to go live with 900, 104, 204, and 305.
az104.json is the template in the certraw blob container

all done, all 4 cert files are in certfdataarchive and raw


python3: remove subprocess.call in favour of subprocess.run

https://docs.python.org/3/library/subprocess.html#subprocess.run

Is this going to be merged in any time soon? I have been noticing with update_tables.py running every 1 minute it reads in all of the aliases and compares them which can take a while depending on how long your url tables/geo ip are. I am curious if this is faster will it make it a non issue? (Currently with 250k lines or of aliases so it takes about 50% of 1 core on my router for 5s every minute) It does seem to affect the threading somewhat since it is a good size load to be running off/on every minute.
As an alternative I am wondering if there is a reason it needs to read/compare loaded pf tables against for the file tables url/urltable/geoip types every time the script runs? Have there been consistency issues in the past?

Is this done or is there still work for plugins to do? :)

I think there's one left in configd and some in the plugins, the plugins should be easy to replace, configd I rather leave for now. Let me look at the plugins and close the issue when done.


updating browsh to 1.6.4

Project description
@kalbasit would it be possible to bump browsh ?
Metadata

homepage URL: https://github.com/browsh-org/browsh/releases/tag/v1.6.4

done


persisted-query-lists with apollo codegen throws operation mismatch

I am using @apollo/persisted-query-lists with apollo codegen
import type { PersistedQueryManifestConfig } from '@apollo/generate-persisted-query-manifest';
import { fromGraphQLCodegenPersistedDocuments } from '@apollo/generate-persisted-query-manifest';

const config: PersistedQueryManifestConfig = {
  documents: fromGraphQLCodegenPersistedDocuments('./src/gql/persisted-documents.json'),
};

export default config;

however when I use the verification link i get operation mismatch errors on every query. i printed the queries that are being compared by the persisted-query-lists package and it looks like they dont match because the order of fields is different. is there something I can do to fix this issue or is there a bug?
query query GetSupRelationships {
  loggedInShopifyShop {
    id
    relationshipsAsSup(tableFilterInput: {}) {
      edges {
        node {
          id
          hasSupSeenInstantAddUpsellModal
          hasApprovedProposal
          sk {
            id
            name
            __typename
          }
          __typename
        }
        __typename
      }
      __typename
    }
    __typename
  }
}
 manifestoperation query GetSupRelationships {
  loggedInShopifyShop {
    id
    relationshipsAsSup(tableFilterInput: {}) {
      edges {
        node {
          hasApprovedProposal
          hasSupSeenInstantAddUpsellModal
          id
          sk {
            id
            name
            __typename
          }
          __typename
        }
        __typename
      }
      __typename
    }
    __typename
  }
}

Hey @AK3030 👋
I'll do my best to take a look at this soon. Thanks for reporting!


Incorrect NPM_TOKEN

I've forced some runs on the workflows and fixes some issues on the workflows branch, but now I'm hitting https://github.com/pmndrs/detect-gpu/runs/2842464460?check_suite_focus=true
 npm ERR! code EOTP
npm ERR! This operation requires a one-time password from your authenticator.
npm ERR! You can provide a one-time password by passing --otp=<code> to the command you ran.
npm ERR! If you already provided a one-time password then it is likely that you either typoed
npm ERR! it, or it timed out. Please try again.

Which indicates the now NPM_TOKEN is a normal token and should be changed to a automation token
CC @TimvanScherpenzeel

Hi @Gusted, I've changed the NPM_TOKEN with an automation token, hope this works :)

Thank you, seems to be working :D

https://github.com/pmndrs/detect-gpu/actions/runs/944018005 and the commit that it produces is in the master branch and seems okay to me.

LGTM, only thing I was still thinking is that the CHANGELOG.md won't stay up to date. For now I'll add a note that released patches are benchmark updates unless stated otherwise.

https://github.com/pmndrs/detect-gpu/commit/84fdf4cb6b150d9d0b6223c660e4b4d9abd44e20


Automatic error report

<!---   *** BEFORE SUBMITTING: PASTE CLIPBOARD HERE TO COMPLETE YOUR REPORT ***   ---!>I am getting errors from tensorflow propably my installed version is incompatible.

Closing because this is not a place to get support for Tensorflow. This is to report errors about Spyder.


Handwritten Equation Solver using CNN

Description 📜
With the advancement in technology, machine learning and deep learning are playing a crucial role in present times. Now, machine learning and deep learning techniques are being employed in handwriting recognition, robotics, artificial intelligence, and many more fields. Developing such system requires training our machines with data, making it capable to learn and make required prediction. This PR presents a Handwritten Equation Solver trained by handwritten digits and mathematical symbol using Convolutional Neural Network with some image processing techniques.
Fixes #1531
Type of change 📝
[√] Documentation (Content Creation in the form of codes or tutorials)
Other (If you choose other, Please mention changes below)
Domain of Contribution 📊
[√] Datascience with #Python
Checklist ✅
[√ ] I follow Contributing Guidelines & Code of conduct of this project.
[ √] I have performed a self-review of my own code or work.
[ √] I have commented my code, particularly in hard-to-understand areas.
[ √] My changes generates no new warnings.
[ √] I'm GWOC'21 contributor

Made the required changes
Please check @prathimacode-hub mam


Enum PlayerTeam missing value Spectator

As titled, had an exception thrown as a game was loading, presumably before teams were assigned.

Will add, I've also been having other issues. If you want to add me on steam to suggest improvements/fixes to me directly, feel free to do so. [http://steamcommunity.com/id/pupant/](My steam profile)/

Closed due to inactivity.


Support HTMX and Hyperscript

This allows building interactive web pages using HTMX and Hyperscript

Hi @blufor , and thank you for contributing! Unfortunately what you’re looking for is already in the https://github.com/maragudk/gomponents-htmx repo. I haven’t looked at your code as I’m currently on paternity leave, but I think it’ll satisfy your needs? 😊

@markuswustenberg ouch. well, that was quite a waste of time then.
However I see some of the HTMX supported attributes missing - those not having hx- prefix, like sse-* and ws-* and also the underscore (_) attribute that HTMX's buddy-scripting-language Hyperscript leverages. I'll make a PR into the repo you referred.
Additionally, It would be nice to mention the htmx-specific repo on gomponents.com. Or maybe making it more visible. That would definitely stop me from writing a whole new implementation :D Besides that, HTMX deserves to spread ;)
Thank you

@blufor yeah unfortunately it probably was. I know it doesn't help much now, but another time it would be a good idea to open an issue discussing a larger change first, as also mentioned in CONTRIBUTING.md.
I think the ws- and sse- prefixes are for plugins? I haven't had a look at that part. I'm currently on paternity leave, so it'll probably be a while before I will look at any code. I'm not sure I want to integrate anything that's not core to HTMX itself in the library, but we'll see. Of course, you're free to make a fork and do whatever changes you want. 😊
By the way, other gomponents-adjacent libraries are mentioned at https://www.gomponents.com/plus/
Thanks again for taking the time to trying to improve the core library, even though it didn't work out this time. 😊


AttributeError: 'VNet' object has no attribute 'contrastive_class_selector_2'

Traceback (most recent call last):
File "/root/autodl-tmp/code/train_ss_3d.py", line 223, in
prototype_memory.add_features_from_sample_learned(model, proj_labeled_features_correct, labels_correct)
File "/root/autodl-tmp/code/utils/feature_memory.py", line 36, in add_features_from_sample_learned
selector = model.getattr('contrastive_class_selector_' + str(c))  # get the self attention moduel for class c
File "/root/miniconda3/lib/python3.10/site-packages/torch/nn/modules/module.py", line 1695, in getattr
raise AttributeError(f"'{type(self).name}' object has no attribute '{name}'")
AttributeError: 'VNet' object has no attribute 'contrastive_class_selector_2'

pls make sure the " for class_c in range(2):" lines 259/268 of https://github.com/ycwu1997/SS-Net/blob/main/code/networks/VNet.py. The num_classes is your denoted number of classes.


0.6.0 is breaking due to implicit sidekiq/api dependency

It looks like the additional require in 967fa18ef74517dd8cce2ad6991b07ab822a1569 is to blame. I don't use sidekiq in my Rails app, so this require errors out.
I was previously using 0.4.1 without issue.

Thanks so much for reporting this. Now fixed in 0.6.1.


⚠ ClamAV has degraded performance

In 8ffba2e, ClamAV (https://spamassassin.apache.org/) experienced degraded performance:

HTTP code: 200
Response time: 198 ms

Resolved: ClamAV performance has improved in 1cae612.


Cannot add iTunes podcast via URL

Prerequisites

[X] Put an X between the brackets on this line if you have done all of the following:

Checked that your issue isn't already filed: https://github.com/GetStream/Winds/issues

Description
Cannot add iTunes podcast via URL
Steps to Reproduce

Click "New" button, choose "New podcast" from the dropdown menu.  System shows the dialog as expected.
Enter the URL (e.g., https://itunes.apple.com/us/podcast/npr-politics-podcast/id1057255460?mt=2&uo=4)
Click the "Add podcast" button.

Expected behavior: [What you expect to happen]
System should add the podcast.
Actual behavior: [What actually happens]
Red text shows above the button row: "Oops, something went wrong. Please try again later."
Reproduces how often: [What percentage of the time does it reproduce?]
Every time.
Versions
Tried File -> About.  Nothing happened.
Additional Information
I tried these iTunes URLs, all failed:
https://itunes.apple.com/us/podcast/kcrws-left-right-center/id73329771?mt=2&uo=4
https://itunes.apple.com/us/podcast/npr-politics-podcast/id1057255460?mt=2&uo=4
https://itunes.apple.com/us/podcast/slates-political-gabfest/id158004641?mt=2&uo=4
https://itunes.apple.com/us/podcast/startup-podcast/id913805339?mt=2&uo=4
https://itunes.apple.com/us/podcast/new-yorker-politics-more/id268213039?mt=2&uo=4
https://itunes.apple.com/us/podcast/slates-trumpcast/id1093260018?mt=2&uo=4
I tried this URL, it worked as expected:
http://www.npr.org/rss/podcast.php?id=510053

I see.  Thanks for the update, Nick - I'll try the RSS approach.
M.
On Wed, May 23, 2018 at 10:02 AM, Nick Parsons<EMAIL_ADDRESS>wrote:

Hey @mtutty https://github.com/mtutty, this is an issue that our team
is working on right now. For the time being, are you able to source the
direct RSS URL? A great tool to use is: http://getrssfeed.com/. I hope
this helps for now. Thanks for sharing the issue!
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
https://github.com/GetStream/Winds/issues/287#issuecomment-391380659,
or mute the thread
https://github.com/notifications/unsubscribe-auth/AA-7lvqkFOOH8owSoAMxIyBGW8LNa98iks5t1XoMgaJpZM4UKaFf
.


cmd/go: go install with -trimpath and muslc (alpine linux) gcc is needed

with -trimpath option with go install with muslc on default alpine linux, the go install doesn't work.
apk add --no-cache build-base can be executed as workaround before (but, we have to do each time on CI).

What did you see instead?
# runtime/cgo
cgo: C compiler "gcc" not found: exec: "gcc": executable file not found in $PATH

cgo needs a C compiler is needed to build C code, this is working as expected.
If you prefer to disable cgo, you can configure that with the CGO_ENABLED environment option.
If your C compiler command is not "gcc", you can configure cgo to use a different command via the CC environment option.
See https://pkg.go.dev/cmd/go#hdr-Environment_variables for a list of environment variables supported by the go command.
For asking questions, please see https://golang.org/wiki/Questions.

Sorry, I didn't give enough information.
There is no CGO in my Go program. It is pure Go.
Futhermore, if I disable -trimpath into cmd line, then the compilation works without gcc.
I think, this issue is related with #37158, isn't it?
More info here from Ian Lance Taylor: https://groups.google.com/g/golang-nuts/c/dsqLZi2mEog/m/3mcMSda-BAAJ

I see, thanks for more context.
It seems like we can close this issue as a duplicate of #37158, do you agree?
Note that proposal #47257 has been accepted by now, so that will affect this situation when it is resolved.

Thanks for your support and the information.


Add environment variable to opt out of log collection

This PR adds an INTEGRATION_TEST__SKIP_LOG_COLLECTION which disables log collection. This can be quite verbose locally.
We would want to backport this too.

@nickbp I have incorporated your changes.


calling Stabilize on the network doesn't store the positions on node and edge dataset

I am using layouts from other framework and storing the positions it in node and edge datasets. However, I use stabilize to get a force direct layout from visjs. When calling stabilize, it doesn't seem to save the x and y position within those datasets. Its still storing the old x and y position from a different layout I am using. So everytime I update the dataset (to show node labels), the old positions are used and my force layout changes to whatever previous layout I had.
How do I sync the node positions from the network to the dataset itself?

Stabilization is not supposed to alter the datasets. Use network.storePositions() if you want that.


Update CVE-affected dependency versions

Description
Updates Guava and urllib3 versions.
Issues Resolved
https://nvd.nist.gov/vuln/detail/CVE-2023-2976
https://nvd.nist.gov/vuln/detail/CVE-2023-45803
Check List

[x] Commits are signed as per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

@dbwiddis do we need to backport this change?

@dbwiddis do we need to backport this change?

Yes, the vulnerabile libraries affect all versions.