Traefik 2.0 not working with traefik-forward-auth, but works with 1.7

https://github.com/thomseddon/traefik-forward-auth/issues/45
Do you want to request a feature or report a bug?
Bug
Did you try using a 1.7.x configuration for the version 2.0?

[ ] Yes
[x] No

What did you do?
Attempting to set up ForwardAuth with Traefik 2.0 and this forward auth handler service written by @thomseddon.
What did you expect to see?
ForwardAuth to succeed
What did you see instead?
Once authenticated via Google, I get a final redirect to a URL for the traefik-forward-auth service but ultimately results in a 404. See logs at bottom.
So the flow with the shown config below would be.

Go to synology.sub.domain.com
Not authenticated in this browser so sent to google
Get authenticated successfully, 307 redirect happens
Ultimately 404 on a URL at auth.sub.domain.com with a long query string.

Output of traefik version: (What version of Traefik are you using?)
This doesn't work with the alpha AFAICT but I'm on the image created:
2019-04-18 00:00:21

Which I believe is alpha4.
What is your environment & configuration (arguments, toml, provider, platform, ...)?
[global]
  Debug = true
  SendAnonymousUsage = false

[api]

[providers]
  [providers.file]
    watch=true

  [providers.docker]
    endpoint = "unix:///var/run/docker.sock"
    domain = "sub.domain.com"
    watch = true
    exposedByDefault = false

[entryPoints]
  [entrypoints.http]
    address = ":80"

  [entrypoints.https]
    address = ":443"

[http.routers]
  [http.routers.synology]
      entryPoints = ["https", "http"]
      middlewares = [ "compress", "redirect", "forward-auth" ]
      rule = "Host(`synology.sub.domain.com`)"
      service = "synology"

  [http.middlewares]
    [http.middlewares.compress.compress]

    [http.middlewares.redirect.redirectScheme]
      scheme = "https"

    [http.middlewares.forward-auth.forwardAuth]
      address = "https://traefik-forward-auth:4181"
      authResponseHeaders = ["X-Forwarded-User"]

  [http.services]

    [http.services.synology]
      [http.services.synology.LoadBalancer]
          [[http.services.synology.LoadBalancer.servers]]
            url = "http://<IP_ADDRESS>:5000"
            scheme = "http"
            weight= 1

[acme]
  acmeLogging = true
  email =<EMAIL_ADDRESS>  storage = "/acme.json"
  onHostRule = true
  entryPoint = "https"
  [acme.dnsChallenge]
    provider = "provider"

  [[acme.domains]]
    main = "sub.domain.com"
  [[acme.domains]]
    main = "*.sub.domain.com"

docker-compose.yml
version: "3"
services:
  traefik:
    container_name: traefik
    image: traefik:v2.0
    ports:
      - "80:80"
      - "443:443"
      - "8080:8080"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - /nfs/docker/traefik/traefik.toml:/traefik.toml
      # - /var/docker/traefik.toml/:/traefik.toml
      - /nfs/docker/traefik/acme.json:/acme.json
      - /nfs/docker/traefik/access.log:/access.log
      # - /nfs/docker/traefik/traefik.log:/traefik.log
    restart: always
    env_file: ./traefik.env
    labels:
      - "traefik.enable=false"
    dns:
      - <IP_ADDRESS>
      - <IP_ADDRESS>
      - <IP_ADDRESS>
  traefik-forward-auth:
    container_name: traefik-forward-auth
    image: thomseddon/traefik-forward-auth
    environment:
      - CLIENT_ID=client_id
      - CLIENT_SECRET=client_secret
      - SECRET=secret

      - AUTH_HOST=auth.sub.domain.com
      - COOKIE_DOMAIN=sub.domain.com
      - INSECURE_COOKIE=true
      -<EMAIL_ADDRESS>      - LOG_LEVEL=debug

    labels:
      - traefik.enable=true
      - "traefik.http.middlewares.compress=true"
      - "traefik.http.services.traefik-forward-auth.loadbalancer.server.port=4181"
    dns:
      - <IP_ADDRESS>
      - <IP_ADDRESS>
      - <IP_ADDRESS>

If applicable, please paste the log output in DEBUG level (--log.level=DEBUG switch)
traefik-forward-auth    | time="2019-06-11T12:12:31Z" level=debug msg="Starting with options: {\"LogLevel\":\"debug\",\"LogFormat\":\"text\",\"AuthHost\":\"auth.sub.domain.com\",\"CookieDomains\":[{\"Domain\":\"sub.domain.com\",\"DomainLen\":20,\"SubDomain\":\".sub.domain.com\",\"SubDomainLen\":21}],\"InsecureCookie\":true,\"CookieName\":\"_forward_auth\",\"CSRFCookieName\":\"_forward_auth_csrf\",\"DefaultAction\":\"auth\",\"Domains\":null,\"LifetimeString\":43200,\"Path\":\"/_oauth\",\"Whitelist\":[\"me@email.com\",\"other@email.com\"],\"Providers\":{\"Google\":{\"ClientId\":\"<omitted_ID>.apps.googleusercontent.com\",\"Scope\":\"https://www.googleapis.com/auth/userinfo.profile https://www.googleapis.com/auth/userinfo.email\",\"Prompt\":\"\",\"LoginURL\":{\"Scheme\":\"https\",\"Opaque\":\"\",\"User\":null,\"Host\":\"accounts.google.com\",\"Path\":\"/o/oauth2/auth\",\"RawPath\":\"\",\"ForceQuery\":false,\"RawQuery\":\"\",\"Fragment\":\"\"},\"TokenURL\":{\"Scheme\":\"https\",\"Opaque\":\"\",\"User\":null,\"Host\":\"www.googleapis.com\",\"Path\":\"/oauth2/v3/token\",\"RawPath\":\"\",\"ForceQuery\":false,\"RawQuery\":\"\",\"Fragment\":\"\"},\"UserURL\":{\"Scheme\":\"https\",\"Opaque\":\"\",\"User\":null,\"Host\":\"www.googleapis.com\",\"Path\":\"/oauth2/v2/userinfo\",\"RawPath\":\"\",\"ForceQuery\":false,\"RawQuery\":\"\",\"Fragment\":\"\"}}},\"Rules\":{},\"Lifetime\":43200000000000,\"CookieDomainsLegacy\":null,\"CookieSecureLegacy\":\"\",\"DomainsLegacy\":null,\"ClientIdLegacy\":\"<omitted_ID>.apps.googleusercontent.com\",\"PromptLegacy\":\"\"}"
traefik-forward-auth    | time="2019-06-11T12:12:31Z" level=info msg="Listening on :4181"
traefik-forward-auth    | time="2019-06-11T12:12:51Z" level=debug msg="Authenticating request" headers="map[Accept:[text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8] Accept-Encoding:[gzip, deflate, br] Accept-Language:[en-US,en;q=0.5] Cookie:[_forward_auth_csrf=c814ce3749ab60d0d4f66d95ae9cdf27] Dnt:[1] Upgrade-Insecure-Requests:[1] User-Agent:[Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0] X-Forwarded-For:[<IP_ADDRESS>] X-Forwarded-Host:[synology.sub.domain.com] X-Forwarded-Method:[GET] X-Forwarded-Port:[443] X-Forwarded-Proto:[https] X-Forwarded-Server:[8bd8f24fbe93] X-Forwarded-Uri:[/] X-Real-Ip:[<IP_ADDRESS>]]" rule=default source_ip=<IP_ADDRESS>
traefik                 | <IP_ADDRESS> - - [11/Jun/2019:12:12:45 +0000] "GET /_oauth?state=c814ce3749ab60d0d4f66d95ae9cdf27:https://synology.sub.domain.com/&code=4/ZgF_eoY4qYEckmNyZN9uzV-XRtZM5omfbsUVZLB8cW5S3CD_hEVW6-CkwQJmj-QScYCJqC9Rl2Vj9NQsJCT9w8g&scope=email+profile+https://www.googleapis.com/auth/userinfo.email+https://www.googleapis.com/auth/userinfo.profile HTTP/2.0" 404 19 "-" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" 1 - - 0ms
traefik                 | time="2019-06-11T12:12:51Z" level=debug msg="Remote error http://traefik-forward-auth:4181. StatusCode: 307" middlewareType=ForwardedAuthType middlewareName=file.forward-auth
traefik-forward-auth    | time="2019-06-11T12:12:51Z" level=debug msg="Set CSRF cookie and redirecting to google login" source_ip=<IP_ADDRESS>
traefik                 | <IP_ADDRESS> - - [11/Jun/2019:12:12:51 +0000] "GET / HTTP/2.0" 307 467 "-" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" 2 "file.synology" - 2ms
traefik                 | 2019/06/11 12:12:51 server.go:3012: http: TLS handshake error from <IP_ADDRESS>:49956: EOF

Hi @dalanmiller , thanks for your interest in the project.
The code related to the "forward auth" middleware should not have changed since 1.7.x. There is a possibility that the (new) order of middlewares could impact the request to the externalt "traefik-forward-auth" service: sounds like a matter of configuration.
Could you simplify your example so we can track the configuration culprit?

Switch to http only: Remove anything related to https and http -> https redirects
Add a simple backend which is not "traefik-forward-auth" to avoid any consequence of loop redirections (the image containous/whoami is a lightweight webserver pritning the request headers in the response body)
Disable and remove any mention to the middelware others than the forwardAuth
Set the address of the middleware forwardAuth to http proto (instead of https)

Experiencing the same issue.
Middleware is not using https protocol.
When middlewares is set, the requests are not entering the auth server (even when redirecting to a simple server and printing all incoming requests - nothing is being printed to the screen).
When middlewares is removed everything works fine. (i.e. when it is set, only the login endpoint is being called, when it is removed all other endpoints are being called)
    [http.routers]
        [http.routers.login]
            rule = "PathPrefix(`/v1/api/login`)"
            service = "login"
        [http.routers.api]
            rule = "PathPrefix(`/v1/api`)"
            middlewares = ["auth"]
            service = "api"
        [http.routers.ws]
            rule = "PathPrefix(`/socket`)"
            middlewares = ["auth"]
            service = "ws"

    [http.middlewares]
        [http.middlewares.auth.forwardAuth]
            address = "http://localhost:5200/api/authenticate"
            trustFowardHeader = true

@nadavpld it appears you're using v1.7 still and this issue is with v2.0. I can confirm that I was able to get forwardAuth working just fine using v1.7 with the traefik-forward-auth image.

@nadavpld it appears you're using v1.7 still and this issue is with v2.0. I can confirm that I was able to get forwardAuth working just fine using v1.7 with the traefik-forward-auth image.

I am using v2.0 for windows and used the configuration examples from the v2.0 alpha documentation...
Why do you think i'm using 1.7 ? Maybe this is where I went wrong..

@dduportal I've simplified to the following:
traefik.toml
[global]
  Debug = true
  SendAnonymousUsage = false

[api]

[providers]
  [providers.file]
    watch=true

  [providers.docker]
    endpoint = "unix:///var/run/docker.sock"
    domain = "sub.domain.com"
    watch = true
    exposedByDefault = false

[entryPoints]
  [entrypoints.http]
    address = ":80"

  [entrypoints.https]
    address = ":443"

  [http.middlewares]
    [http.middlewares.forward-auth.forwardauth]
      address = "https://traefik-forward-auth:4181"
      authResponseHeaders = ["X-Forwarded-User"]

[acme]
  acmeLogging = true
  email =<EMAIL_ADDRESS>  storage = "/acme.json"
  onHostRule = true
  entryPoint = "https"
  [acme.dnsChallenge]
    provider = "provider"

  [[acme.domains]]
    main = "sub.domain.com"
  [[acme.domains]]
    main = "*.sub.domain.com"

docker-compose.yml
version: "3"
services:
  traefik:
    container_name: traefik
    image: traefik:v2.0
    ports:
      - "80:80"
      - "443:443"
      - "8080:8080"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - /nfs/docker/traefik/traefik.toml:/traefik.toml
    restart: always
    env_file: ./traefik.env
    labels:
      - "traefik.enable=false"
  traefik-forward-auth:
    container_name: traefik-forward-auth
    image: thomseddon/traefik-forward-auth
    environment:
      - CLIENT_ID=client_id
      - CLIENT_SECRET=client_secret
      - SECRET=secret

      - AUTH_HOST=auth.sub.domain.com
      - COOKIE_DOMAIN=sub.domain.com
      - INSECURE_COOKIE=true
      -<EMAIL_ADDRESS>      - LOG_LEVEL=debug
    labels:
      - traefik.enable=true
      - "traefik.http.services.traefik-forward-auth.loadbalancer.server.port=4181"
  hello-auth:
    container_name: hello-auth
    image: containous/whoami
    labels:
      - "traefik.enable=true"

      - "traefik.http.routers.hello-auth.rule=Host(`hello-auth.sub.domain.com`)"
      - "traefik.http.routers.hello-auth.service=hello-auth"
      - "traefik.http.routers.hello-auth.entryPoints=http"
      - "traefik.http.routers.hello-auth.tls=false"

      - "traefik.http.middlewares.forward-auth.forwardauth.address=http://traefik-forward-auth:4181"
      - "traefik.http.middlewares.forward-auth.forwardauth.authresponseheaders=X-Forwarded-User"

      - "traefik.http.services.hello-auth.loadbalancer.server.port=80"

I can access hello-auth.sub.domain.com via http and get a 200 and the container information. I am not prompted to auth via Google as I do in my original example when attempting the Synology service defined in the traefik.toml.
I think I might just be overlooking something.

I can see that the Docker labels for forward auth aren't being parsed/picked up correctly by Traefik where the synology router in my traefik.toml config is being associated properly with the forward auth middleware.
{
  "routers": {
    "docker.hello-auth": {
      "entryPoints": ["http"],
      "service": "hello-auth",
      "rule": "Host(`hello-auth.sub.domain.com`)"
    },
    "docker.hello-http": {
      "entryPoints": ["http"],
      "service": "hello-http",
      "rule": "Host(`hello.sub.domain.com`)"
    },
    "docker.traefik-forward-auth": {
      "entryPoints": ["https"],
      "service": "traefik-forward-auth",
      "rule": "Host(`auth.sub.domain.com`)"
    },
    "file.synology": {
      "entryPoints": ["https", "http"],
      "middlewares": ["forward-auth"],
      "service": "synology",
      "rule": "Host(`synology.sub.domain.com`)",
      "tls": {}
    }
  },
  "middlewares": {
    "docker.forward-auth": {
      "forwardAuth": {
        "address": "http://traefik-forward-auth:4181",
        "authResponseHeaders": ["X-Forwarded-User"]
      }
    },
    "docker.hello-auth": {
      "forwardAuth": {
        "address": "http://traefik-forward-auth:4181",
        "authResponseHeaders": ["X-Forwarded-User", "X-Forwaded-Host"]
      }
    },
    "file.forward-auth": {
      "forwardAuth": {
        "address": "http://traefik-forward-auth:4181",
        "authResponseHeaders": ["X-Forwarded-User", "X-Forwarded-Host"]
      },
      "usedBy": ["file.synology"]
    }
  },
  "services": {
    "docker.hello-auth": {
      "loadbalancer": {
        "servers": [{ "url": "http://<IP_ADDRESS>:80" }],
        "passHostHeader": true
      },
      "usedBy": ["docker.hello-auth"],
      "serverStatus": { "http://<IP_ADDRESS>:80": "UP" }
    },
    "docker.hello-http": {
      "loadbalancer": {
        "servers": [{ "url": "http://<IP_ADDRESS>:80" }],
        "passHostHeader": true
      },
      "usedBy": ["docker.hello-http"],
      "serverStatus": { "http://<IP_ADDRESS>:80": "UP" }
    },
    "docker.traefik-forward-auth": {
      "loadbalancer": {
        "servers": [{ "url": "http://<IP_ADDRESS>:4181" }],
        "passHostHeader": true
      },
      "usedBy": ["docker.traefik-forward-auth"],
      "serverStatus": { "http://<IP_ADDRESS>:4181": "UP" }
    },
    "file.synology": {
      "loadbalancer": {
        "servers": [{ "url": "http://<IP_ADDRESS>:5000" }],
        "passHostHeader": false
      },
      "usedBy": ["file.synology"],
      "serverStatus": { "http://<IP_ADDRESS>:5000": "UP" }
    }
  }
}

The middleware need to be explicitly associated with the router.
labels:
      - "traefik.http.routers.my-container.middlewares=NameOfTheMiddleware@docker"

And middleware must have a name:
# Enable gzip compression
labels:
- "traefik.http.middlewares.test-compress.compress=true"

https://docs.traefik.io/v2.0/middlewares/compress/

Hi @dalanmiller , with the latest 2.0 alpha 7, here is a proposal adapted configuration:

Removed from the traefik.toml the [global] -> debug and [docker] -> domain directives as per https://docs.traefik.io/v2.0/reference/static-configuration/file/

Adapted the labels to what @ldez said + alpha7 changes (associating the router to the middleware with the new naming convention for middlewares).

version: "3"
services:
  traefik:
    container_name: traefik
    image: traefik:v2.0.0-alpha7
    ports:
      - "80:80"
      - "443:443"
      - "8080:8080"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - ./traefik.toml:/traefik.toml
    restart: always
    # env_file: ./traefik.env
    labels:
      - "traefik.enable=false"

  traefik-forward-auth:
    container_name: traefik-forward-auth
    image: thomseddon/traefik-forward-auth
    environment:
      - CLIENT_ID=client_id
      - CLIENT_SECRET=client_secret
      - SECRET=secret
      - AUTH_HOST=auth.sub.domain.com
      - COOKIE_DOMAIN=sub.domain.com
      - INSECURE_COOKIE=true
      -<EMAIL_ADDRESS>      - LOG_LEVEL=debug
    labels:
      - traefik.enable=true
      - "traefik.http.services.traefik-forward-auth.loadbalancer.server.port=4181"

  hello-auth:
    container_name: hello-auth
    image: containous/whoami
    labels:
      - "traefik.enable=true"

      - "traefik.http.routers.hello-auth.rule=Host(`<DOMAIN>`)"
      - "traefik.http.routers.hello-auth.service=hello-auth"
      - "traefik.http.routers.hello-auth.entryPoints=http"
      - "traefik.http.routers.hello-auth.tls=false"
      - "traefik.http.routers.hello-auth.middlewares=hello-auth@docker"

      - "traefik.http.middlewares.hello-auth.forwardauth.address=http://traefik-forward-auth:4181"
      - "traefik.http.middlewares.hello-auth.forwardauth.authresponseheaders=X-Forwarded-User"

      - "traefik.http.services.hello-auth.loadbalancer.server.port=80"

and
[global]
  SendAnonymousUsage = false

[api]

[providers]
  [providers.file]
    watch=true

  [providers.docker]
    endpoint = "unix:///var/run/docker.sock"
    watch = true
    exposedByDefault = false

[entrypoints]
  [entrypoints.http]
    address = ":80"

  [entrypoints.https]
    address = ":443"

with this example on my local machine, I have a redirection happening. Can you let us know how does it behave?

@dduportal I'm still getting the behavior where I end up with a 404 at auth.sub.domain.com?state....
Would you be able to share your /api/rawdata JSON when you have this going so I can compare? Very much appreciate your help in working through this!

https://github.com/containous/traefik/blob/11f04a453ef9a255c4b6bd3cff7e1938ee3e16ba/pkg/middlewares/auth/forward.go#L117-L147
I seem to be triggering the above block given I'm seeing the following in the my logs:
traefik                 | time="2019-06-28T13:05:35Z" level=debug msg="Remote error http://traefik-forward-auth:4181. StatusCode: 307" middlewareName=hello-auth@docker middlewareType=ForwardedAuthType

Which is weird since it's sending the initial redirect to the google oauth page. Moving forward with the auth process which ends in a 404:
traefik                 | <IP_ADDRESS> - - [28/Jun/2019:13:05:35 +0000] "GET / HTTP/1.1" 307 467 "-" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" 1 "hello-auth@docker" - 2ms
traefik                 | <IP_ADDRESS> - - [28/Jun/2019:13:14:12 +0000] "GET /_oauth?state=state_value&code=code_value&scope=email+profile+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fuserinfo.profile+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fuserinfo.email&authuser=0&session_state=session_state_value&prompt=none HTTP/1.1" 404 19 "-" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" 3 - - 0ms

I've since tried:
❌ Completely resetting my OAuth 2.0 Client ID settings  / credentials under Google console.
❌ Switching to traefik-forward-auth overlay mode to attempt to get just hello-auth.sub.domain.com wo work and now get a Not authorized response from traefik.

Hi @dalanmiller , here is the result with alpha7:
{
  "routers": {
    "hello-auth@docker": {
      "entryPoints": [
        "http"
      ],
      "middlewares": [
        "hello-auth@docker"
      ],
      "service": "hello-auth",
      "rule": "Host(`<DOMAIN>`)"
    },
    "traefik-forward-auth_forward-auth@docker": {
      "entryPoints": null,
      "service": "traefik-forward-auth",
      "rule": "Host(`traefik-forward-auth-forward-auth`)"
    }
  },
  "middlewares": {
    "hello-auth@docker": {
      "forwardAuth": {
        "address": "http://traefik-forward-auth:4181",
        "authResponseHeaders": [
          "X-Forwarded-User"
        ]
      },
      "usedBy": [
        "hello-auth@docker"
      ]
    }
  },
  "services": {
    "hello-auth@docker": {
      "loadbalancer": {
        "servers": [
          {
            "url": "http://<IP_ADDRESS>:80"
          }
        ],
        "passHostHeader": true
      },
      "usedBy": [
        "hello-auth@docker"
      ],
      "serverStatus": {
        "http://<IP_ADDRESS>:80": "UP"
      }
    },
    "traefik-forward-auth@docker": {
      "loadbalancer": {
        "servers": [
          {
            "url": "http://<IP_ADDRESS>:4181"
          }
        ],
        "passHostHeader": true
      },
      "usedBy": [
        "traefik-forward-auth_forward-auth@docker"
      ],
      "serverStatus": {
        "http://<IP_ADDRESS>:4181": "UP"
      }
    }
  }
}

you can (and should) totally run the example I gave below to reproduce it locally, and check if you get the same output.

@dduportal I see that this is automatically being created as a route for the middleware:
  "rule": "Host(`traefik-forward-auth-forward-auth`)"

How can I specify what I want this to be? I think this is the problem as I need to tell Google which sub domain to route back to, and it's being dynamically generated.
Also how can this possibly worth if the auto generated route doesn't have any entrypoints? 🤔

Hi @dalanmiller , this rule is the default one (reference https://docs.traefik.io/v2.0/providers/docker/#defaultrule) for the service traefik-forward-auth-forward-auth in the docker-compose.yml, as there is no label traefik.http.routers.hello-auth.rule=Host(...)" defined, my mistake.
My understanding is that this service should have the label traefik.enable=false only, as you are not using a "central auth" - https://github.com/thomseddon/traefik-forward-auth#advanced , right?

@dduportal nay. It should be enabled[0] as it needs to properly route the request depending on whether it's authenticated or not. And then, post authentication somewhere, it needs to route to the correct host. The sample config is exactly what I'm trying to achieve.
[0] - https://github.com/thomseddon/traefik-forward-auth/blob/master/examples/docker-compose-auth-host.yml#L38

Hi @dalanmiller , if my understanding is correct, the service traefik-forward-auth has to be exposed through Traefik to handle the oauth redirection.
Then we (I am the source of the error :) ) are missing a few labels on this service.
Please find below an example with the latest beta1. Can you try it on your side please?

docker-compose.yml:

version: "3"
services:
  traefik:
    image: traefik:v2.0.0-beta1
    ports:
      - "80:80"
      - "8080:8080"
    command:
      - --providers.docker.exposedByDefault=false
      - --api
      - --entrypoints.http.address=:80
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    restart: always

  traefik-forward-auth:
    image: thomseddon/traefik-forward-auth
    environment:
      - CLIENT_ID=client_id
      - CLIENT_SECRET=client_secret
      - SECRET=secret
      - AUTH_HOST=auth.sub.domain.com
      - COOKIE_DOMAIN=sub.domain.com
      - INSECURE_COOKIE=true
      -<EMAIL_ADDRESS>      - LOG_LEVEL=debug
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.forward-auth.rule=Host(`auth.sub.domain.com`)"
      - "traefik.http.routers.forward-auth.service=forward-auth-svc"
      - "traefik.http.services.forward-auth-svc.loadbalancer.server.port=4181"

  hello-auth:
    image: containous/whoami
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.hello-auth.rule=Host(`sub.domain.com`)"
      - "traefik.http.routers.hello-auth.service=hello-auth"
      - "traefik.http.routers.hello-auth.middlewares=hello-auth@docker"
      - "traefik.http.middlewares.hello-auth.forwardauth.address=http://traefik-forward-auth:4181"
      - "traefik.http.middlewares.hello-auth.forwardauth.authresponseheaders=X-Forwarded-User"
      - "traefik.http.services.hello-auth.loadbalancer.server.port=80"

Accessing the webapp gives me this (already working ofr you as I understand):

curl -v -H "Host: sub.domain.com" http://localhost
* Rebuilt URL to: http://localhost/
*   Trying ::1...
* TCP_NODELAY set
* Connected to localhost (::1) port 80 (#0)
> GET / HTTP/1.1
> Host: sub.domain.com
> User-Agent: curl/7.54.0
> Accept: */*
>
< HTTP/1.1 307 Temporary Redirect
< Content-Length: 381
< Content-Type: text/html; charset=utf-8
< Date: Wed, 24 Jul 2019 13:39:33 GMT
< Location: https://accounts.google.com/o/oauth2/auth?client_id=client_id&redirect_uri=http%3A%2F%2Fauth.sub.domain.com%2F_oauth&response_type=code&scope=https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fuserinfo.profile+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fuserinfo.email&state=a2ce7bcb3d80bdc8abab27778a060345%3Ahttp%3A%2F%2Fsub.domain.com%2F
< Set-Cookie: _forward_auth_csrf=a2ce7bcb3d80bdc8abab27778a060345; Path=/; Domain=sub.domain.com; Expires=Thu, 25 Jul 2019 01:39:33 GMT; HttpOnly
<
<a href="https://accounts.google.com/o/oauth2/auth?client_id=client_id&redirect_uri=http%3A%2F%2Fauth.sub.domain.com%2F_oauth&response_type=code&scope=https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fuserinfo.profile+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fuserinfo.email&state=a2ce7bcb3d80bdc8abab27778a060345%3Ahttp%3A%2F%2Fsub.domain.com%2F">Temporary Redirect</a>.

* Connection #0 to host localhost left intact

Trying the redirection given by the oauth, that lead to HTTP/404 before (TL;DR; it works now that the forward-auth service has the right labels):

curl -v -H "Host: auth.sub.domain.com" "http://localhost/_oauth&response_type=code&scope=https://www.googl
eapis.com/auth/userinfo.profile+https://www.googleapis.com/auth/userinfo.email&state=a2ce7bcb3d80bdc8abab27778a060345:http://sub.domain.com/"
*   Trying ::1...
* TCP_NODELAY set
* Connected to localhost (::1) port 80 (#0)> GET /_oauth&response_type=code&scope=https://www.googleapis.com/auth/userinfo.profile+https://www.googleapis.com/auth/userinfo.email&state=a2ce7bcb3
d80bdc8abab27778a060345:http://sub.domain.com/ HTTP/1.1
> Host: auth.sub.domain.com
> User-Agent: curl/7.54.0
> Accept: */*
>
< HTTP/1.1 301 Moved Permanently
< Content-Length: 234
< Content-Type: text/html; charset=utf-8
< Date: Wed, 24 Jul 2019 13:43:01 GMT< Location: /_oauth&response_type=code&scope=https:/www.googleapis.com/auth/userinfo.profile+https:/www.googleapis.com/auth/userinfo.email&state=a2ce7
bcb3d80bdc8abab27778a060345:http:/sub.domain.com/
< <a href="/_oauth&response_type=code&scope=https:/www.googleapis.com/auth/userinfo.profile+https:/www.googleapis.com/auth/userinfo.email&st
ate=a2ce7bcb3d80bdc8abab27778a060345:http:/sub.domain.com/">Moved Permanently</a>.

* Connection #0 to host localhost left intact

Thanks for replying @dduportal.
I've matched your example label for label but I'm still getting an endless redirect back to Google. The flow starts off well with a redirect to accounts.google.com/signin... which goes successfully, and then I'm sent back to auth.sub.domain.com/_oauth but get a 307 back to Google to authenticate.
Can you try the same example but instead of hello-auth living at sub.domain.com can you set the host to hello.sub.domain.com?

Hi @dalanmiller , sorry for the delay of answer.
Can you provide the latest reproduction case you tried please, so we can check? Also, with the release of v2.0 RC2, we might have some changes in the configuration to try.
Thanks a lot!

Hi guys. I just got a basic setup working. It needs some work still but maybe it could help:
`#traefik.yml
version: "3.3"
services:
Traefik - Reverse Proxy
traefik:
container_name: traefik
image: traefik:v2.0.0-rc2
restart: always
networks:
- traefik_proxy
ports:
- "80:80"
- "443:443"
- "8080:8080"
volumes:
- $TRAEFIK2DIR/traefik:/etc/traefik
- /var/run/docker.sock:/var/run/docker.sock:ro
environment:
- CF_API_EMAIL=$CLOUDFLARE_EMAIL
- CF_API_KEY=$CLOUDFLARE_API_KEY
labels:
- traefik.enable=true
- traefik.docker.network=traefik_proxy
- traefik.http.routers.traefik.entrypoints=http
- traefik.http.routers.traefik.rule=Host(traefik.$DOMAINNAME)
  - traefik.http.routers.traefik-secure.entrypoints=https
  - traefik.http.routers.traefik-secure.rule=Host(`traefik.$DOMAINNAME`)
  - traefik.http.routers.traefik-secure.tls.certresolver=cloudflare

  - traefik.http.routers.traefik-secure.middlewares=secured
  - traefik.http.middlewares.secured.chain.middlewares=https-only,test-auth
  - traefik.http.middlewares.https-only.redirectscheme.scheme=https
  - traefik.http.middlewares.test-auth.forwardauth.trustForwardHeader=true
  - traefik.http.middlewares.test-auth.forwardauth.Address=http://oauth:4181
  - traefik.http.middlewares.test-auth.forwardauth.authResponseHeaders=X-Forwarded-User, X-WebAuth-User

  - traefik.http.routers.traefik-secure.service=traefik-secure
  - traefik.http.services.traefik-secure.loadbalancer.server.port=8080

Google OAuth
oauth:
container_name: oauth
image: thomseddon/traefik-forward-auth
restart: always
networks:
- traefik_proxy
environment:
- PROVIDERS_GOOGLE_CLIENT_ID=$GOOGLE_CLIENT_ID
- PROVIDERS_GOOGLE_CLIENT_SECRET=$GOOGLE_CLIENT_SECRET
- SECRET=$OAUTH_SECRET
- COOKIE_DOMAIN=$DOMAINNAME
- INSECURE_COOKIE=1
- AUTH_HOST=oauth.$DOMAINNAME
- URL_PATH=/_ooauth
- WHITELIST=$MY_EMAIL
- LOG_LEVEL=info
- LOG_FORMAT=text
- LIFETIME=43200
labels:
  - traefik.enable=true
  - traefik.docker.network=traefik_proxy
  - traefik.http.routers.oauth.entrypoints=http
  - traefik.http.routers.oauth.rule=Host(`oauth.$DOMAINNAME`)

  - traefik.http.routers.oauth-secure.entrypoints=https
  - traefik.http.routers.oauth-secure.rule=Host(`oauth.$DOMAINNAME`)
  - traefik.http.routers.oauth-secure.tls.certresolver=cloudflare

  - traefik.http.routers.oauth-secure.middlewares=secured
  - traefik.http.middlewares.secured.chain.middlewares=https-only,test-auth
  - traefik.http.middlewares.https-only.redirectscheme.scheme=https
  - traefik.http.middlewares.test-auth.forwardauth.trustForwardHeader=true
  - traefik.http.middlewares.test-auth.forwardauth.Address=http://oauth:4181
  - traefik.http.middlewares.test-auth.forwardauth.authResponseHeaders=X-Forwarded-User, X-WebAuth-User

  - traefik.http.routers.oauth-secure.service=oauth-secure
  - traefik.http.services.oauth-secure.loadbalancer.server.port=4181

networks:
traefik_proxy:
external:
name: traefik_proxy`
and
`#traefik.toml
[global]
checkNewVersion = true
sendAnonymousUsage = true
[entryPoints]
[entryPoints.http]
address = ":80"
[entryPoints.https]
address = ":443"
[entryPoints.ssh]
address = ":2222"
[log]
##Log level (Default: "ERROR")
level = "INFO" ## DEBUG, INFO, WARN, ERROR, FATAL, PANIC
##Sets the filepath for the traefik log. If not specified, stdout will be used. (Default: os.Stdout)
filePath = "log/traefik.log"
##Format is either "json" or "common". (Default: "common")
format = "json"
#[accessLog]
##Sets the filepath for the access log. If not specified, stdout will be used. (Default: os.Stdout)
filePath = "/path/to/log/log.txt"
##Format is either "json" or "common". (Default: "common")
format = "json"
[api]
##Name of the related entry point (Default: "traefik")
entryPoint = "traefik"
##Enabled Dashboard (Default: true)
dashboard = false
#[ping]
##Name of the related entry point (Default: "traefik")
entryPoint = "traefik"
[providers]
[providers.docker]
##Docker server endpoint. Can be a tcp or a unix socket endpoint. (Default: "unix:///var/run/docker.sock")
endpoint = "tcp://<IP_ADDRESS>:2375"
##Default host rule. Optional. (Default: "Host(`{{ normalize .Name }}`)"  )

defaultRule = "Host({{ normalize .Name }}.docker.localhost)"
##Expose containers by default in traefik (Default: true)
exposedByDefault = false

watch = true
swarmMode = false
network = "traefik_proxy"

[providers.file]
##Provide a dedicated file, or a directory of several dedicated files

filename = "/etc/traefik/file.toml"
#directory = "/path/to/config"

watch = true
Enable ACME (Let's Encrypt): automatic SSL.
[certificatesResolvers.cloudflare.acme]
Email address used for registration.
email = "your email"
File or key used for certificates storage.
storage = "/etc/traefik/acme/acme.json"
CA server to use. Uncomment the line to use Let's Encrypt's staging server, leave commented to go to prod. (Optional)
caServer = "https://acme-staging-v02.api.letsencrypt.org/directory"
Use a DNS-01 ACME challenge rather than HTTP-01 challenge.
Note: mandatory for wildcard certificate generation.
[certificatesResolvers.cloudflare.acme.dnsChallenge]
# DNS provider used.
provider = "cloudflare"
resolvers = ["<IP_ADDRESS>:53", "<IP_ADDRESS>:53"]`
Just change  in the traefik.toml.

@dduportal the thing that's absolutely required is that the traefik-forward-auth service needs to have the middle applied to itself as well. This is missing from your examples above.
Within my dynamic toml:
  [http.middlewares]
    [http.middlewares.forward-auth.forwardauth]
      address = "http://traefik-forward-auth:4181"
      trustForwardHeader = true
      authResponseHeaders = ["X-Forwarded-User"]

And then my traefik-foward-auth router also has this middleware applied:
      - "traefik.http.routers.traefik-forward-auth-https.middlewares=forward-auth@file"

@dduportal the thing that's absolutely required is that the traefik-forward-auth service needs to have the middle applied to itself as well. This is missing from your examples above.
Within my dynamic toml:
  [http.middlewares]
    [http.middlewares.forward-auth.forwardauth]
      address = "http://traefik-forward-auth:4181"
      trustForwardHeader = true
      authResponseHeaders = ["X-Forwarded-User"]

And then my traefik-foward-auth router also has this middleware applied:
      - "traefik.http.routers.traefik-forward-auth-https.middlewares=forward-auth@file"


[PORT] Make data and locale optional in multilingual LG

Port this change from botbuilder-dotnet/master branch:
https://github.com/microsoft/botbuilder-dotnet/pull/3932

close: #3931
Changed projects

Microsoft.Bot.Builder.LanguageGeneration
Microsoft.Bot.Builder.LanguageGeneration.Tests

[R10]

platform specific


Images are converted to all black after compression on IPad pro

No errors thrown, but image is uploaded as a black square.
I think the root cause is that the user agent string on an iPad pro presents as a Mac.
Since the user agent determines the browser and the max canvas size, this would mean that the library is assuming the wrong maximum canvas size for the Ipad.
I don't have an IPad pro myself to test on, this was reported by a customer. Will continue to do some debugging and update it here.
If you have an iPad pro and can share what the user agent is, that would be very helpful!

Yes I think the solution will require other means of browser/device detection that does not depend on the user agent..
more context: https://stackoverflow.com/questions/57776001/how-to-detect-ipad-pro-as-ipad-using-javascript


add isparkes to developers

Description
Please add isparkes to the list of developers for https://github.com/jenkinsci/jira-issue-updater-plugin. Laszlo is not really active on this plugin any more (he doesn't use it currently), and I've taken over the maintenance.
I already have commit permissions: (see e.g. e5c33f711c72c2fdadf2ff0f0e24c9542643f8a2)

@isparkes that commit does not map to your GitHub user, so though it seems likely, please associate https://github.com/jenkinsci/jira-issue-updater-plugin/commit/e5c33f711c72c2fdadf2ff0f0e24c9542643f8a2 to your account
Also, I would welcome the original information/place where you requested commit and got it, just for traceability here.
Thanks!

I couldn't find anything on the mailing list but there's a history of commits and PR merges –– looks ok to me.

As we usually handle cases like this, permission to release will be granted after a few days of @laszlomiklosik not denying this request, and he can speed this up by explicitly granting permission.

The "Ian Sparkes" persona is my work persona, picked up from my maven default settings, sorry for the confusion.
I guess I'll have to correct that in any case before I can finish the release... :-D
I'd love to get this plugin on the road again, it's starting to smell bad.


#7: Update variable naming

Fixes #7

Codecov Report

Merging #8 (64c2605) into main (bbb6d1b) will not change coverage.
The diff coverage is 100.00%.

@@            Coverage Diff            @@
##              main        #8   +/-   ##
=========================================
  Coverage   100.00%   100.00%
=========================================
  Files            1         1
  Lines           97        97
=========================================
  Hits            97        97

Impacted Files
Coverage Δ

pylic/pylic.py
100.00% <100.00%> (ø)

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update bbb6d1b...64c2605. Read the comment docs.


Removed reflection on java.lang.String. Was causing a crash on M

Removed reflection on java.lang.String. Was causing a crash on Android M

Can someone take a look at this? I also encountered this issue and unless this gets merged, the library does not work on android 6

I'm using this fix in my fork https://github.com/tinsukE/svg-android. You can use it with gradle:
compile 'com.github.tinsukE:svg-android:2.0.6-1'

@tinsukE your repo isn't listed in mavancentral.. how can I use your fork?

I'm sorry I wasn't clear. I've updated my answer, and you can check out more about it:
https://jitpack.io/#tinsukE/svg-android

@tinsukE Thanks!


Create enums for values

Replace values of digits or single letters with enum classes for type purposes.
Fix issue where the side  of 0, 1, or None all set the right side SIDES_FULL[side] if side else None as noted in #10
@mfugate1 and @mjn138, can you please review as I can't test the split functionality

Getting errors - first it couldn't import MASSSAGE_SPEEDS (I think because it's MASSAGE_SPEED in the Consts.py file).  But now I'm getting "cannot import name 'Mode' from 'asyncsleepiq.consts'" which I think might be also missing in the Consts.py file?

I am not sure what should've been in the consts.py file as I don't have Massage capabilities on my bed (and I'm not that great at reading code), but I added some fake stuff in there, and now the Left Bed Head position is controllable, so you've fixed that, thanks!

Ah always press the "Save All" button before you commit, can you take a look again?

Haha works now, thanks!


Fix awkward again

I finally have awkward working, needs a code review and can be merged if the awkward tests go green.

yay, awkward tests are green, this is ready for a review!

ty


make website available offline

A user should be able to see website and navigate through website even when there is no internet connection.

Able to navigate through website in offline mode for develop branch.


Need some new features!

page size is not configurable

Sorry, my requested feature is already delivered in the latest feature, thanks.


Add AArch64 builds

Use uname -m to key off architecture
Disable CUDA on ARM64 until we move to 12.1
Use canconical docker image to key off Architectures.
Remove use of git so we don't get errors about safe directories

Partial fix for aarch64 tbb requirements https://github.com/openxla/iree/pull/13839 .  We still run into a potential libcapstore version issue:
  /home/anush/github/iree/third_party/tracy/server/TracySourceView.cpp:737:46: error: ‘CS_GRP_BRANCH_RELATIVE’ was not declared in this scope
    737 |                 else if( detail.groups[j] == CS_GRP_BRANCH_RELATIVE && opType < OpType::Branch ) opType = OpType::Branch;
        |                                              ^~~~~~~~~~~~~~~~~~~~~~
  /home/anush/github/iree/third_party/tracy/server/TracySourceView.cpp:740:46: error: ‘CS_GRP_PRIVILEGE’ was not declared in this scope
    740 |                 else if( detail.groups[j] == CS_GRP_PRIVILEGE && opType < OpType::Privileged )
        |                                              ^~~~~~~~~~~~~~~~
  [256/389] Building CXX object runtime/bindings/python/CMakeFiles/iree_runtime_bindings_python_PyExtRt.dir/initialize_module.cc.o

so will likely disable tracy on aarch64 builds for now.

Updated to not change x86_64 and leave that at 2014. When ready we can remove the check for the default image.


Removed double encoding of Public Key from JS.

See Cloudstack issue CLOUDSTACK-8742 & CLOUDSTACK-8649 for information.

It was double encoded because encodeURIComponent() and jQuery.param() encoded it. The latter does this automatically because the request is of type post and the option processData was not explicitly set to false.
http://api.jquery.com/jquery.ajax/#sending-data-to-server

@borisroman does backend do double decoding? there was a patch for cloudmonkey regarding this: https://github.com/apache/cloudstack-cloudmonkey/commit/6bd92395592c133a63b8087bf4acc9cb3a1aac0d so does this need to be fixed in cloudmonkey as well?

so, the double encoding and double decoding lived happily together :)
Now, jquery does the encoding from UI and decoding is done in ApiServlet.processRequestInContext() method
When we make an api call directly(though cloudmonkey etc.), we should pass the encoded value (which is same as earlier and no apidoc change is required)
is my understanding right?

LGTM +1

LGTM.
I made the commit two years ago. However, something changed in the following commit, so the encoding on UI is not needed any more.
commit 6aafb9c50da3cf4db37c0323d8bdc859776a8fa0
Author: Likitha Shetty<EMAIL_ADDRESS>Date:   Thu Nov 21 13:33:57 2013 +0530

    CLOUDSTACK-5227. Cannot pass Japanese characters as parameter values to an API.
    During API check for control characters use pattern matching to avoid identifying all non-printable characters as control characters.

@karuturi Cloudmonkey passes an single encoded public key, as it's supposed to!

@borisroman excluding the cloudmonkey bit, if I make direct api call, should I send the encoded value or the original value. Did that change from previous version?
I think it would be better to also update api documentation to reflect whether it accepts encoded/decoded value. right now it just says "Public key material of the keypair"
https://cloudstack.apache.org/api/apidocs-4.5/user/registerSSHKeyPair.html

@milamberspace, I couldnt find registerSSHKeyPair from UI. I could only see reset ssh key on a stopped vm. Where is this option in UI?

@karuturi  go to the Accounts page, and select "SSH Key pairs" in the dropdown.

@karuturi You should send a public key which has it's special characters ( SPACE / - % ) replaced with uri compatible escape characters. -> encoding http://www.w3schools.com/tags/ref_urlencode.asp

LGTM


show vmess decode errors at warning level

Currently core shows transport error at [Info] level:
2019/08/27 08:51:57 [Info] v2ray.com/core/proxy/vmess/outbound: tunneling request to tcp:v1.mux.cool:9527 via tcp:nov.meponse header > x509: certificate signed by unknown authority

2019/08/27 08:54:44 [Info] [154526732] v2ray.com/core/app/proxyman/outbound: failed to process outbound traffic > v2ray.com/core/proxy/vmess/outbound: connection ends > v2ray.com/core/proxy/vmess/outbound: failed to read header > v2ray.com/core/proxy/vmess/encoding: failed to read response header > x509: certificate signed by unknown authority

Level Info/Debug are too verbose for users to find the root cause of a failing configuration. Show at warning level is more reasonable.

same type errors do not need to be modified, they ARE on WARNING level.
I didn't offer the idea of changing this out of no where,  I just find that other protocol's outbound error all goes to WARNING level but vmess.
EG for h2 protocol
https://github.com/v2ray/v2ray-core/blob/1ab94fed79aa311b612bfaacd8fb1e699da7ad09/transport/internet/http/dialer.go#L104
for kcp
https://github.com/v2ray/v2ray-core/blob/4d23411d80a119b27310625f219b0c1506e08f73/transport/internet/kcp/dialer.go#L57
You can say that they are different, that's because raw vmess protocol doesn't need a wrapper layer, the encode/decode invokes connection directly.  From a user's view,  if a connection error occured, vmess protocol firstly raised up error from the decoder. Thus, they are the same type error of CONNECTION PROBLEMS, which should be warned.


Notifications and Create Composition

The PR provides updates for the following:

https://trello.com/c/RV66gJft/227-3-ui-toast-notifications
https://trello.com/c/QDUGy1OX/165-3-ui-create-composition

Looks good to me. I'll give it a end to end testing when it got merged.


Improved interning and caching

This PR is based on #341

The interned versions of data structures are now cached inside a field on the object
Caching is added to fix_types and jelim using the standard CloneState and CheckState

This significantly improves performance of several tests. For the RNN test, the compilation time goes from ~10s (master) to ~9s (#341) to ~7s (this PR). Running test_algos is about 2x faster than it is on master, although some of the savings appear to be because there is less performance degradation from running many tests one after the other (which is also good). The test suite overall is something like 1.2x faster.

The PR is no longer based on #341

Rebased on the current master


console_path for d-sheet console

In the D-Sheet model (dsheetpiling_model.py) the console path is set to:
return Path("DSheetPiling/DSheetPiling.exe")
However, the default directory for installation of the DSheet Piling v23 consoles/executables is different. These are installed with
D-Sheet Piling 23.1.1/DSheetPiling.exe
Temporary workaround is now changing this line in the installed geolib module.
Is this a bug, or can the actual folder of the executables be specified in the geolib.env file as well? According to the documentation (and code) it is to be excpected in the folder DSheetPiling/ instead of D-Sheet Piling 23.1.1/

Thank you for your answer. Would it be an idea to add the ability to specify this folder in the geolib.env file? The default value would then be DSheetPiling/.
Workarounds with new folders in the Program Files directory is not ideal, especially when creating tools for colleagues who do not have any rights on that directory.

We have some ideas to make the paths to calculation consoles easier to configure in the env file in the short term. It may be an option to offer additional settings to set a path directly, instead of all consoles being discovered through the CONSOLE_FOLDER. That would get us options like DSHEETPILING_CONSOLE_PATH to set it directly

@ChristianRasch These new parameters will be implemented by PR #165

Closing this issue as it is fixed in Pr #165


Add "spo folder roleassignment remove". Close #3701

Closes #3701
New Command = Five Files

src/m365/spo/commands.ts
src/m365/spo/commands/folder/folder-roleassignment-remove.ts
src/m365/spo/commands/folder/folder-roleassignment-remove.spec.ts
docs/mkdocs.yml
docs/docs/cmd/spo/folder/folder-roleassignment-remove.md

Thank you @reshmee011 👏🏻 We will review shortly 👍🏻

@Jwaegebaert : Thanks for the awesome detailed review. I have made the requested changes.

Great job @reshmee011! I'll review it later today.


Receiving redisStandaloneWriter received BUSYKEY reply.

问题描述（Issue Description）
I am receiving received BUSYKEY reply when trying to ingest rdb file to redis cluster
请在这里简要描述你遇到的问题。
Please provide a brief description of the issue you encountered.
I have run the same command earlier as well, with the same rdb file as reader but didnt face any issue then. Now I seeing this BUSYKEY error continuosuly. Haved emptied the cluster and retried, but it is still the same error. How do i resolve this ?
环境信息（Environment）

RedisShake 版本（RedisShake Version）：v4.0.2
Redis 源端版本（Redis Source Version）：static rdb file
Redis 目的端版本（Redis Destination Version）：6.x
Redis 部署方式（standalone/cluster/sentinel）：cluster
是否在云服务商实例上部署（Deployed on Cloud Provider）：no

日志信息（Logs）
2023-12-04 19:57:51 INF create RedisClusterWriter: host:port 2023-12-04 19:57:51 INF not set status port 2023-12-04 19:57:51 INF start syncing... 2023-12-04 19:57:51 INF [rdb_reader] start read 2023-12-04 19:57:51 ERR [writer_host_port] redisStandaloneWriter received BUSYKEY reply. cmd=[restore IFC:{_ _Z__>Z]y___r3}:162957 0                         _^?e_^?e___\_ __]
如果有错误日志或其他相关日志，请在这里提供。
If there are any error logs or other relevant logs, please provide them here.
其他信息（Additional Information）
请提供任何其他相关的信息，如配置文件、错误信息或截图等。
Please provide any additional information, such as configuration files, error messages, or screenshots.

After several times flushing the db and restarting the cluster nodes, I was able to successfully ingest the rdb


Allow more decreases per day as per docs

https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/Limits.html#default-limits-capacity-units-provisioned-throughput
"A dial down is allowed up to four times any time per day. A day is defined according to the GMT time zone. Additionally, if there was no decrease in the past four hours, an additional dial down is allowed, effectively bringing maximum number of decreases in a day to nine times (4 decreases in the first 4 hours, and 1 decrease for each of the subsequent 4 hour windows in a day)."
Right now only 4 decreases work, not the full potential of 9.

I'm not planning on making any further changes considering aws now has their own native solution.

Ok, maybe we'll just do it in our fork. I'm pretty sure we're coming back since the AWS solution doesn't really seem to handle throttles.

Any updates on this?

We've had much better luck w/ the official solution in recent months so longer use this.


Simple Android crashes with unhandled exception when scan invoked - Xamarin Forms

Repro project at https://github.com/jhealy/xammutts/tree/master/ZXingPlaySLN.  Screenshot of crash at bottom.
Build out nice simple scan project using samples below.  Fails on vs2017 15.3 with several versions of xamarn forms.  Unhandled exception deep in android stuff.  No source available.
Following instructions here - https://github.com/Redth/ZXing.Net.Mobile
Create basic xamarin forms + pcl
Update nugets
Test run android - fine on emu
Add https://github.com/Redth/ZXing.Net.Mobile  and Mobile.Forms to all projects
Build solution = ok
Add following line to android oncreate right after forms.init
    protected override void OnCreate(Bundle bundle)
    {
    TabLayoutResource = Resource.Layout.Tabbar;
    ToolbarResource = Resource.Layout.Toolbar;
    base.OnCreate(bundle);
    global::Xamarin.Forms.Forms.Init(this, bundle);
    ZXing.Net.Mobile.Forms.Android.Platform.Init();
    LoadApplication(new App());
    }

Added following to Android->MainActivity.cs
public override void OnRequestPermissionsResult(int requestCode, string[] permissions, Permission[] grantResults)
{
    global::ZXing.Net.Mobile.Forms.Android.PermissionsHandler.OnRequestPermissionsResult (requestCode, permissions, grantResults);
}

Turn on camera and flashlight via built in manifest editor
<?xml version="1.0" encoding="utf-8"?>
<manifest xmlns:android="http://schemas.android.com/apk/res/android" android:versionCode="1" android:versionName="1.0" package="com.companyname.ZXingPlay" android:installLocation="auto">
	<uses-sdk android:minSdkVersion="19" />
	<uses-permission android:name="android.permission.CAMERA" />
	<uses-permission android:name="android.permission.FLASHLIGHT" />
	<application android:label="ZXingPlay.Android"></application>
</manifest>

Wireup MainPage.xaml  to a single button that puts the date and time into a label.
Run to HAXM emulator, 7.1 android 25
OK
Wireup mainpage.cs  as follows, run it, and get "unhandled exception" somewhere in android after SCAN is hit.
private void Button_Scan_Clicked(object sender, EventArgs e)
{
    // Label_ScanResult.Text = $"{DateTime.UtcNow.ToLocalTime().ToString()}";
    DoScan();
}

private async void DoScan()
{
    var scanner = new ZXing.Mobile.MobileBarcodeScanner();
    var result = await scanner.Scan();

    if (result != null)
    {
        Label_ScanResult.Text = result.Text;
    }
    else
    {
        Label_ScanResult.Text = "no results returned";
    }
}

Moved x.forms down to <IP_ADDRESS>0.  Same result.
Run on physical phone.  Same result.
Second wireup, same blowout
        private async Task DoScan()
        {
            ZXingScannerPage scanPage = new ZXingScannerPage();
            scanPage.OnScanResult += (result) => {
                // Stop scanning
                scanPage.IsScanning = false;

                // Pop the page and show the result
                Device.BeginInvokeOnMainThread(() => {
                    Navigation.PopAsync();
                    Label_ScanResult.Text = result.Text;
                    DisplayAlert("Scanned Barcode", result.Text, "OK");
                });
            };

            await Navigation.PushAsync(scanPage);
        }

Main page must be in a NavigationPage.  Closing...

@jhealy do you mind elaborating on what the problem was and how you fixed it? I am encountering the same problem.

@jhealy I have the problem, please elaborate how to fix this

Why is this closed I'm getting the same crash result

hi all
https://forums.xamarin.com/discussion/96719/why-is-zxing-net-mobile-crashing-after-camera-permission check this link it work for me

This thread fixed my similar issue https://github.com/Redth/ZXing.Net.Mobile/issues/637


Review thread safety of GroupIterator and AbstractCloseableIteration

The GroupIterator has a significant amount of code around threadsafety but is not thread safe to use.
I think most of it can be removed and the map/iteration code should attempt to be lazy.
For AbstractCloseableIteration we should not expect multiple threads to invoke hasNext/next methods as this is always unsafe.
Also close() should be safe to call more than once therefore the whole threadsafe logic should not exist.

I've traced back the introduction of internal locking in GroupIterator to this commit by me, from 2012: https://bitbucket.org/openrdf/sesame/commits/03afc450148f01effee86bb4929a1bd477c4a41c . The actual issue was about lazy evaluation rather than concurrency, and I can't for the life of me figure out why I'd introduce that mutex at that point.
Given that removing this is not in any way affecting the public API or even the javadoc, I'm fine with treating this as a bug.
As for AbstractCloseableIteration, I haven't traced it back but I guess the same logic holds. The current incarnation of the code was actually a performance improvement done by @hmottestad to get rid of a (slow) AtomicBoolean, but I can't remember when/why the original mutex was put in place.
I think at the time the thinking may simply have been "better safe than quick" :)


⚠ Bofrost.de has degraded performance

In 6ef0a59, Bofrost.de (https://www.bofrost.de) experienced degraded performance:

HTTP code: 200
Response time: 2175 ms

Resolved: Bofrost.de performance has improved in 03b5cfa after 38 minutes.


Saving login screen changes after first time doesn't work

Seems to be caused by error in inject html into login view.

If you encountered this issue check the file:
/Umbraco/Views/common/dialogs/login.html
and replace any html with bounded by <!--uWhiteLabel--> and <!--/uWhiteLabel--> (including the comments), with:
<h1>{{greeting}}</h1>


Improve audio quality

For some reason, the receiver in QMKit doesn't perform as well as in JS or Android. I should investigate and attempt to bring it up to parity. It's likely to do with configuration of CoreAudio

Distance limitation please?

Please don't clutter issues with unrelated topics. If you have questions, feel free to open a new issue.


Add Getting Started section to README

README update
Please add a getting started section to the README so folks know how to start with this project.

Added Getting Started section to README file.

Added Getting Started section to README file.


https://music.amazon.in Not Working

Tried plugin with other services, it's working fine but not able to control amazon prime music.

This issue is solved and committed to master. The fix will available for all in few hours.

Thanks.
On Sun 4 Mar, 2018, 14:37 Valera Leontyev<EMAIL_ADDRESS>wrote:

This issue is solved and committed to master. The fix will available for
all in few hours.
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
https://github.com/borismus/keysocket/issues/260#issuecomment-370213445,
or mute the thread
https://github.com/notifications/unsubscribe-auth/AFjxzK5WMeq36ZjSdClryr0fTZ4E01Zqks5ta67sgaJpZM4SWS_p
.


x86: add support for signed division operations (IDIV)

This PR implements a complete support for signed division operations through test case instrumentation, summarized below:

In the experiments where division errors are not permitted, we prevent them
through code instrumentation.
Specifically, we may need to prevent two types of faults:

division by zero
division overflow (i.e., quotient is larger than the destination register)

To prevent div by zero we OR the divider with a non-zero value:
divisor = divisor | 1
The mechanism for preventing div overflows depends on the division type:

for unsigned division, we first mask the upper half of the dividend with the divisor,
which makes the quotient at most one bit larger then the destination, and then shift
the result by one, thus compensating for the last one overflow bit.
D = (D & divisor) >> 1
for signed division, we make set its lower bits to 0b10000, which ensures that
all positive divider values are larger or equal to 15, and all negative values
are smaller or equal to -15.
divisor[0:3] = 0b1000
We further constraint the division by clearing the sign bit of the dividend.
Under these two constraints, an overflow is possible only when the dividend
is larger  or equal to (15 << div_size, e.g., for 32-bit division 15 * (2 ** 32)).
Since, the dividend is a combination of two registers (D << div_size + A),
an overflow happens when D is larger or equal to 15. We ensure that it does not
happen by masking the upper bits of D:
D = D & 0b11

There are also two corner cases:

The divisor is D. This case is impossible to resolve, as far as I can tell,
because our instrumentation would have to modify both the divisor and the dividend
at the same time. We just give up in this case and delete the instruction.
8-bit division, when the divisor is the AX register alone.
Here the instrumentation becomes too complicated, so we simply set AX to 1.

This instrumentation has a side effect of reducing the entropy of the division operands:
For unsigned division:

entropy of the divisor is reduced by 1 bit
entropy of D is reduced by (divisor_value_size + 1) bits
For signed division:
entropy of the divisor is reduced by 4 bits
entropy of D is reduced by (division_size - 2) bits (i.e., the resulting
entropy of D is 2 bits, with the sign bit cleared)

Merging the PR without review. @van-ema let me know if you see any problems, we can re-open it later.


Unable to filter DbaDateTime data types with Powershell DateTime data types

Before submitting a bug report:
This issue occurred on the latest stable version of DBATools and was also reproduced by Simone Bizzotto
Steps to Reproduce
Get-DbaLastBackup -sqlinstance sqlinstance | where-object {($_.LastFullBackup -lt (Get-date).AddDays(-1) -and $_.LastDiffBackup -lt (Get-Date).AddDays(-1)  -and $_.LastLogBackup -lt (Get-Date).AddDays(-1) )}
Expected Behavior
I expected the Powershell code to return databases that haven't been backed up within 24 hours on "sqlinstance"

Actual Behavior
It seems that in this instance data type Sqlcollaborative.Dbatools.Utility.DbaDateTime can not be used for comparison against Powershell's System.DateTime data type.

At line:2 char:19
where-object {($_.LastFullBackup -lt (Get-Date).AddDays(-1) `
CategoryInfo          : OperationStopped: (:) [], ArgumentException
FullyQualifiedErrorId : System.ArgumentException

Object must be of type DateTime.
At line:2 char:19
where-object {($_.LastFullBackup -lt (Get-Date).AddDays(-1) `

CategoryInfo : OperationStopped: (:) [], ArgumentException
FullyQualifiedErrorId : System.ArgumentException

Environmental data

PowerShell:
PSVersion                              5.1.14409.1012
PSEdition                               Desktop
PSCompatibleVersions           {1.0, 2.0, 3.0, 4.0...}
BuildVersion                           10.0.14409.1012
CLRVersion                             4.0.30319.42000
WSManStackVersion              3.0
PSRemotingProtocolVersion  2.3
SerializationVersion                <IP_ADDRESS>
SQL Server:
Microsoft SQL Server 2012 (SP3-GDR) (KB4057115) - 11.0.6260.1 (X64)   Jan  9 2018 21:31:12   Copyright (c) Microsoft Corporation  Enterprise Edition (64-bit) on Windows NT 6.3  (Build 9600: ) (Hypervisor)
Workaround
Amending the code in the following way... works around the issue
Get-DbaLastBackup -SqlInstance sqlinstance  | where-object {$(get-date $_.LastFullBackup) -lt $((get-date).Adddays(-1)) -and $(get-date $_.LastDiffBackup) -lt $((get-date).Adddays(-1)) -and $(get-date $_.LastLogBackup) -lt $((get-date).Adddays(-1))}

@FriedrichWeinmann , @zippy1981 : is this a shortcoming on Sqlcollaborative.Dbatools.Utility.DbaDateTime ?

Ah drat, I friggin' hate that issue :(
Apologies for the hassle, PowerShell has a hardcoded comparison logic for datetime that ... requires some careful workarounds. Basically, order matters when it comes to the operators:
Get-DbaLastBackup -sqlinstance sql2017 | where-object {((Get-date).AddDays(-1) -ge $_.LastFullBackup -and (Get-Date).AddDays(-1) -ge $_.LastDiffBackup -and (Get-Date).AddDays(-1) -ge $_.LastLogBackup )}

This will work without an error.
Unfortunately, given that even Bruce Payette couldn't find a way around this, the only way to remove order sensitivity from datetime comparisons is to rip out the custom types and put back default datetime (and suffer the display style pain and possibly breaking existing reports).

Both, thanks very much for looking into this and for the explanation.
I'll close the issue now
Thanks again

@FriedrichWeinmann I added some overloads and made the implicit casts explicit. I will add some pester tests later.
https://github.com/zippy1981/dbatools/tree/testing/DateTimeBase
Then this happened:

I need to overload -lt and -gt.
Explict casts in C# work implicitly in powershell.  I believe we could also use TypeConverterAttribute and a custom Type converter like so:
https://msdn.microsoft.com/en-us/library/ayybcxe5.aspx

Well ... hate to say it, but the equality test does work just fine (wasn't too specific there)
All operators that use .CompareTo() (such as -gt or -le) are the problem.


Added the issue templates we have in the CGW

These are the same issue templates currently being used in the CGW

@Uxio0 I have opened a PR already :) https://github.com/gnosis/safe-transaction-service/pull/560


Multiple config maps to store dashboards

This is our modification on the Grafana operator to address the issues described in #58.
For each Grafana instance the operator uses multiple config maps and distributes the dashboards over them. In #58 metalmatze said that he is working on another approach (to address the issue), which I personally like much more. Anyway I wanted to share our implementation (maybe for temporary use) until something better is in place.

@lukasgr90 Thanks for the contribution, much appreciated! We're currently gauging the effort required to replace the config map storage with direct calls to the Grafana API. This would be the preferred long term solution. For this reason I'd like to hold off a bit before merging this and figure out if this would be a good intermediate step before landing the long term fix.

@lukasgr90 We've decided to go with an API approach instead of multiple config maps in the new release: https://github.com/integr8ly/grafana-operator/releases/tag/v3.0.0
We might revisit this if at some point it turns out that ConfigMaps are still preferable. Thanks a lot for sharing your solution, much appreciated!


SQLiteDb.withOpenDb is @internal

Is this meant to target release/3.3.x instead of master?

Is this meant to target release/3.3.x instead of master?

yes

yes, though i suppose both.

I assumed you were introducing the function as internal in 3.3 so that you can change its signature in 3.4. Is there any reason why you would want to discourage people from using it?

Changing its signature here involves too much flux.

Yep. #4078.


[#1284] Support for simple joins with $lookup on MongoDB 3.2 and later

Pull join out of WorkflowBuilder, and implement a pair of JoinHandlers with different requirements on the workflow type. If the plan's structure does not conform to the very simple pattern, then we fall back to map-reduce as before.
@jdegoes: This commit does not include any checking of the collections $lookup is applied to, so it will fail if the sources are in different databases, or if the collection being merged in is sharded. These checks to prevent runtime errors are the next thing on my list. If you would rather not merge this code in a state where certain queries can fail, I will add that to this PR before it is merged. Otherwise, this is certainly useful as a demonstration of the benefit of $lookup.
A simple example joining the 29k-document zips dataset to itself runs at least 20x faster with $lookup:
💪 $ cd local3.0/quasar-test
💪 $ select a.city, b.state from zips as a join zips as b on a._id = b._id
MongoDB
db.zips.aggregate(...);
db.zips.mapReduce(...);
db.tmp.gen_ebcd9878_0.aggregate(...);

Query time: 4.2s
 city          | state |
---------------|-------|
 AGAWAM        | MA    |
...

💪 $ cd /local3.2/quasar-test
💪 $ select a.city, b.state from zips as a join zips as b on a._id = b._id
MongoDB
db.zips.aggregate(
  [
    { "$match": { "_id": { "$ne": null } } },
    { "$project": { "left": "$$ROOT" } },
    {
      "$lookup": {
        "from": "zips",
        "localField": "left._id",
        "foreignField": "_id",
        "as": "right"
      }
    },
    { "$unwind": "$right" },
    { "$limit": NumberLong("11") },
    {
      "$project": {...}
    },
    { "$project": { "city": true, "state": true, "_id": false } }],
  { "allowDiskUse": true });

Query time: 0.1s
 city          | state |
---------------|-------|
 AGAWAM        | MA    |
...

@mossprescott Let's get it merged now and patch up with a followup PR.

Current coverage is 75.41% (diff: 90.22%)

Merging #1330 into master will increase coverage by 0.13%

@@             master      #1330   diff @@
==========================================
  Files           192        193     +1
  Lines         11469      11510    +41
  Methods       11202      11239    +37
  Messages          0          0
  Branches        124        130     +6
==========================================
+ Hits           8634       8680    +46
+ Misses         2835       2830     -5
  Partials          0          0

Powered by Codecov. Last update e15fd41...53e52d4

Re-assigned in the hope of getting it merged today. @wemrysi, if you're not comfortable giving this a thumbs up, @sellout said he'd be able to look at after his talk today.

A couple minor comments, otherwise LGTM.

Updated for those two comments, and merged from master in the hope of getting better builds.
@sellout: it'd still be great to get your eyes on this if you have a chance. Not as much of a rush, now that it's the weekend already.

I think this looks good, modulo terrible CI.

@estewei: with a successful build (after a couple of restarts) and the build hopefully getting more stable, I don't see any reason to keep holding this back. You ok with me merging it as soon as it builds one more time?

Yep, fine by me.

Build #1 failed in testJar. Restarted.


fix: Fix segmentation fault in tests on CPUs with PKU support

Due to V8's PKU feature, only the thread that initialized the V8 platform or those spawned from it can access the isolates; other threads will get a segmentation fault. Since each test runs in its thread, they crash on newer CPUs that support PKU.
This issue has two possible solutions:

Initialize the platform once in the main thread.
Turn off the PKU feature during testing.

This issue was already encountered for the deno test command, which was resolved by initializing the platform in the main thread (denoland/deno#20495).
In the case of rust tests, the same solution cannot be used, as the default test runner does not allow running code on the main thread before any test runs.
My proposed solution is to add a feature flag to deno_core, which, when enabled, uses the unprotected platform. An alternative solution could be to call deno_core::JsRuntime::init_platform at the beginning of each test.
This PR will also be a step towards fixing denoland/deno#21439

 Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.You have signed the CLA already but the status is still pending? Let us recheck it.

Do we need to add a Cargo feature here? Maybe we could rely on #[cfg(test)] attribute instead?

Do we need to add a Cargo feature here? Maybe we could rely on #[cfg(test)] attribute instead?

I think the problem is that some downstream crates need the PKU workaround.


Pin CodeQL workflow dependencies

Closes #362
Pin all the CodeQL workflow dependencies and bump versions.

[x] Targeted PR against main branch
[x] Linked to Github issue with discussion and accepted design OR link to spec that describes this work
[ ] Code follows the standards mentioned here
[ ] Updated relevant documentation
[ ] Re-reviewed Files changed in the Github PR explorer
[x] Added appropriate labels

Codecov Report
All modified and coverable lines are covered by tests :white_check_mark:

Comparison is base (1e6ec55) 64.93% compared to head (c88d54c) 64.95%.

:exclamation: Current head c88d54c differs from pull request most recent head d6ea896. Consider uploading reports for the commit d6ea896 to get more accurate results

Additional details and impacted files
@@            Coverage Diff             @@
##             main     #363      +/-   ##
==========================================
+ Coverage   64.93%   64.95%   +0.02%
==========================================
  Files          14       14
  Lines        8811     8811
==========================================
+ Hits         5721     5723       +2
+ Misses       2356     2354       -2
  Partials      734      734

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.


get_array_statistics fails when data is fully masked

First reported in https://github.com/NASA-IMPACT/veda-data-pipelines/issues/350
import numpy
from rio_tiler.utils import get_array_statistics

arr = numpy.ma.array(numpy.zeros((1,256,256)))
arr.mask = True
get_array_statistics(arr)

IndexError: cannot do a non-empty take from an empty axes

We will fix this in rio-tiler v4 and V5

🤦 this was already fixed in 5.0 https://github.com/cogeotiff/rio-tiler/blob/main/rio_tiler/utils.py#L117-L122

closed in #618


Slurm Accounting seemingly not fully functional

Required Info:

AWS ParallelCluster version [e.g. 3.1.1]:  3.8.0

Full cluster configuration without any credentials or personal data. ( see next comment, The important point is that slurm accounting database on RDS/mysql aurora is configured)

Cluster name: A2AiClustersergey

Output of pcluster describe-cluster command.

[Optional] Arn of the cluster CloudFormation main stack: arn:aws:cloudformation:us-east-2:654225707598:stack/A2AiClustersergey/7e9b0c10-aa75-11ee-b08b-0a01aa5f1f7b

Bug description and how to reproduce:
With slurm accounting enabled, sreport does not contain any entries at all.
root@ip-10-2-42-167:~# qstat
Job id              Name             Username        Time Use S Queue
------------------- ---------------- --------------- -------- - ---------------
1                   hostname         slurm           365:00:0 R cpu2mem4gb
2                   uptime           root            365:00:0 R cpu2mem4gb
3                   whoami           root            365:00:0 R cpu2mem4gb
4                   qstat            sergey          365:00:0 R cpu2mem4gb

# sacct
JobID           JobName  Partition    Account  AllocCPUS      State ExitCode
------------ ---------- ---------- ---------- ---------- ---------- --------
1              hostname cpu2mem4gb  pcdefault          1  COMPLETED      0:0
1.0            hostname             pcdefault          1  COMPLETED      0:0
2                uptime cpu2mem4gb       root          1  COMPLETED      0:0
2.0              uptime                  root          1  COMPLETED      0:0
3                whoami cpu2mem4gb       root          1    RUNNING      0:0
4                 qstat cpu2mem4gb                     1    RUNNING      0:0

BUT, sreport returns nothing
root@ip-10-2-42-167:~# sreport cluster AccountUtilizationByUser
--------------------------------------------------------------------------------
Cluster/Account/User Utilization 2024-01-02T00:00:00 - 2024-01-02T23:59:59 (86400 secs)
Usage reported in CPU Minutes
--------------------------------------------------------------------------------
  Cluster         Account     Login     Proper Name     Used   Energy
--------- --------------- --------- --------------- -------- --------

If you are reporting issues about scaling or job failure:
We cannot work on issues without proper logs. We STRONGLY recommend following this guide and attach the complete cluster log archive with the ticket.
For issues with Slurm scheduler, please attach the following logs:

From Head node: /var/log/parallelcluster/clustermgtd, /var/log/parallelcluster/clusterstatusmgtd (if version >= 3.2.0), /var/log/parallelcluster/slurm_resume.log, /var/log/parallelcluster/slurm_suspend.log, /var/log/parallelcluster/slurm_fleet_status_manager.log (if version >= 3.2.0) and/var/log/slurmctld.log.
From Compute node:  /var/log/parallelcluster/computemgtd.log and /var/log/slurmd.log.

Additional context:
Setup is basically per https://aws.amazon.com/blogs/hpc/leveraging-slurm-accounting-in-aws-parallelcluster/ with rds/aurora database.
Any other context about the problem. E.g.:

CLI logs: ~/.parallelcluster/pcluster-cli.log
Custom bootstrap scripts, if any
Screenshots, if useful.

config file
HeadNode:
  CustomActions:
    OnNodeStart:
      Script: "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/scripts/branch/release-v3/download_and_run_cookbook.sh"
      Args:
        - "HeadNodeOnNodeStart"
        - "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/a2ai-cloud-cookbook/branch/release-v3/a2a-cloud.tar.gz"
        - "s3://a2ai-cluster-provision-artifacts-dev-654225707598-us-east-2/A2AiClustersergey/config/a2ai.json"

    OnNodeConfigured:
      Script:  "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/scripts/branch/release-v3/download_and_run_cookbook.sh"
      Args:
        - "HeadNodeOnNodeConfigured"
        - "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/a2ai-cloud-cookbook/branch/release-v3/a2a-cloud.tar.gz"
        - "s3://a2ai-cluster-provision-artifacts-dev-654225707598-us-east-2/A2AiClustersergey/config/a2ai.json"
    OnNodeUpdated:
      Script:  "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/scripts/branch/release-v3/download_and_run_cookbook.sh"
      Args:
        - "HeadNodeOnNodeUpdated"
        - "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/a2ai-cloud-cookbook/branch/release-v3/a2a-cloud.tar.gz"
        - "s3://a2ai-cluster-provision-artifacts-dev-654225707598-us-east-2/A2AiClustersergey/config/a2ai.json"

  Iam:
    InstanceRole: arn:aws:iam::654225707598:role/HeadNodeRole
  InstanceType: t3.medium
  Networking:
    AdditionalSecurityGroups:
    # posit workbench launcher callback
      - sg-0e3cf05f5dc1a59da
    SubnetId: subnet-00c65375744fb5ea5   ##public for now, but could/should be private same as compute
    ElasticIp: false
  Ssh:
     KeyName: admin_ED25519
  LocalStorage:
     RootVolume:
       Size: 500 # we allocate 2xRAM swap file on root filesystem

  Dcv:
    Enabled: true
    Port: 8443
    AllowedIps: <IP_ADDRESS>/8 #only letting to access from private ip space. Accessed via cabby/proxy most of the times anywazys

Image:
  Os: ubuntu2204
  CustomAmi: ami-06d0647411b892c8d
Region: us-east-2
Scheduling:
  Scheduler: slurm
  SlurmSettings:
    QueueUpdateStrategy: DRAIN     #Must be one of: DRAIN, COMPUTE_FLEET_STOP, TERMINATE.
    Dns:
      DisableManagedDns: False
      #UseEc2Hostnames: True
    Database:
      Uri: slurmaccountingdb-slurmaccountingdb5933648d-brbj4rghp0xk.cluster-c8saxlvocbwo.us-east-2.rds.amazonaws.com:3306
      UserName: admin
      PasswordSecretArn: arn:aws:secretsmanager:us-east-2:654225707598:secret:/a2ai/a2ai-cloud/slurm-accounting-db-password-LLm2tb
  SlurmQueues:
    - Name: cpu2mem4gb

      CapacityType: SPOT

      ComputeResources:
        - Name: c6i-large
          Instances:
            - InstanceType: c6i.large

          MaxCount: 100
          MinCount: 0
      CustomActions:
        OnNodeStart:
          Script: "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/scripts/branch/release-v3/download_and_run_cookbook.sh"
          Args:
            - "ComputeNodeOnNodeStart"
            - "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/a2ai-cloud-cookbook/branch/release-v3/a2a-cloud.tar.gz"
            - "s3://a2ai-cluster-provision-artifacts-dev-654225707598-us-east-2/A2AiClustersergey/config/a2ai.json"
        OnNodeConfigured:
          Script: "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/scripts/branch/release-v3/download_and_run_cookbook.sh"
          Args:
            - "ComputeNodeOnNodeConfigured"
            - "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/a2ai-cloud-cookbook/branch/release-v3/a2a-cloud.tar.gz"
            - "s3://a2ai-cluster-provision-artifacts-dev-654225707598-us-east-2/A2AiClustersergey/config/a2ai.json"

      Iam:
        InstanceRole: arn:aws:iam::654225707598:role/ComputeFleetRole
      Networking:
        SubnetIds:
          - "subnet-00c65375744fb5ea5"
          - "subnet-080fb7908dc6c99df"
    - Name: cpu4mem32gb

      CapacityType: SPOT

      ComputeResources:
        - Name: r6i-xlarge
          Instances:
            - InstanceType: r6i.xlarge
          MaxCount: 100
          MinCount: 0

      CustomActions:
        OnNodeStart:
          Script: "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/scripts/branch/release-v3/download_and_run_cookbook.sh"
          Args:
            - "ComputeNodeOnNodeStart"
            - "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/a2ai-cloud-cookbook/branch/release-v3/a2a-cloud.tar.gz"
            - "s3://a2ai-cluster-provision-artifacts-dev-654225707598-us-east-2/A2AiClustersergey/config/a2ai.json"
        OnNodeConfigured:
            Script: "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/scripts/branch/release-v3/download_and_run_cookbook.sh"
            Args:
              - "ComputeNodeOnNodeConfigured"
              - "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/a2ai-cloud-cookbook/branch/release-v3/a2a-cloud.tar.gz"
              - "s3://a2ai-cluster-provision-artifacts-dev-654225707598-us-east-2/A2AiClustersergey/config/a2ai.json"

      Iam:
         InstanceRole: arn:aws:iam::654225707598:role/ComputeFleetRole

      Networking:
        SubnetIds:
          - "subnet-00c65375744fb5ea5"
          - "subnet-080fb7908dc6c99df"
    - Name: cpu8mem64gb

      CapacityType: SPOT

      ComputeResources:
        - Name: r6i-2xlarge
          Instances:
            - InstanceType: r6i.2xlarge
          MaxCount: 100
          MinCount: 0

      CustomActions:
        OnNodeStart:
          Script: "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/scripts/branch/release-v3/download_and_run_cookbook.sh"
          Args:
            - "ComputeNodeOnNodeStart"
            - "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/a2ai-cloud-cookbook/branch/release-v3/a2a-cloud.tar.gz"
            - "s3://a2ai-cluster-provision-artifacts-dev-654225707598-us-east-2/A2AiClustersergey/config/a2ai.json"
        OnNodeConfigured:
            Script: "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/scripts/branch/release-v3/download_and_run_cookbook.sh"
            Args:
              - "ComputeNodeOnNodeConfigured"
              - "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/a2ai-cloud-cookbook/branch/release-v3/a2a-cloud.tar.gz"
              - "s3://a2ai-cluster-provision-artifacts-dev-654225707598-us-east-2/A2AiClustersergey/config/a2ai.json"

      Iam:
         InstanceRole: arn:aws:iam::654225707598:role/ComputeFleetRole

      Networking:
        SubnetIds:
          - "subnet-00c65375744fb5ea5"
          - "subnet-080fb7908dc6c99df"

    - Name: cpu2mem8gb

      CapacityType: SPOT

      ComputeResources:
        - Name: c6i-xlarge
          Instances:
            - InstanceType: c6i.xlarge
          MaxCount: 100
          MinCount: 0
          DisableSimultaneousMultithreading: true
      CustomActions:
        OnNodeStart:
          Script: "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/scripts/branch/release-v3/download_and_run_cookbook.sh"
          Args:
            - "ComputeNodeOnNodeStart"
            - "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/a2ai-cloud-cookbook/branch/release-v3/a2a-cloud.tar.gz"
            - "s3://a2ai-cluster-provision-artifacts-dev-654225707598-us-east-2/A2AiClustersergey/config/a2ai.json"
        OnNodeConfigured:
            Script: "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/scripts/branch/release-v3/download_and_run_cookbook.sh"
            Args:
              - "ComputeNodeOnNodeConfigured"
              - "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/a2ai-cloud-cookbook/branch/release-v3/a2a-cloud.tar.gz"
              - "s3://a2ai-cluster-provision-artifacts-dev-654225707598-us-east-2/A2AiClustersergey/config/a2ai.json"

      Iam:
         InstanceRole: arn:aws:iam::654225707598:role/ComputeFleetRole

      Networking:
        SubnetIds:
          - "subnet-00c65375744fb5ea5"
          - "subnet-080fb7908dc6c99df"

    - Name: cpu4mem16gb

      CapacityType: SPOT

      ComputeResources:
        - Name: c6i-2xlarge
          Instances:
            - InstanceType: c6i.2xlarge
          MaxCount: 100
          MinCount: 0
          DisableSimultaneousMultithreading: true
      CustomActions:
        OnNodeStart:
          Script: "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/scripts/branch/release-v3/download_and_run_cookbook.sh"
          Args:
            - "ComputeNodeOnNodeStart"
            - "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/a2ai-cloud-cookbook/branch/release-v3/a2a-cloud.tar.gz"
            - "s3://a2ai-cluster-provision-artifacts-dev-654225707598-us-east-2/A2AiClustersergey/config/a2ai.json"
        OnNodeConfigured:
            Script: "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/scripts/branch/release-v3/download_and_run_cookbook.sh"
            Args:
              - "ComputeNodeOnNodeConfigured"
              - "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/a2ai-cloud-cookbook/branch/release-v3/a2a-cloud.tar.gz"
              - "s3://a2ai-cluster-provision-artifacts-dev-654225707598-us-east-2/A2AiClustersergey/config/a2ai.json"

      Iam:
         InstanceRole: arn:aws:iam::654225707598:role/ComputeFleetRole

      Networking:
        SubnetIds:
          - "subnet-00c65375744fb5ea5"
          - "subnet-080fb7908dc6c99df"

    - Name: cpu16mem128gb

      CapacityType: SPOT

      ComputeResources:
        - Name: r6i-4xlarge
          Instances:
            - InstanceType: r6i.4xlarge
          MaxCount: 100
          MinCount: 0

      CustomActions:
        OnNodeStart:
          Script: "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/scripts/branch/release-v3/download_and_run_cookbook.sh"
          Args:
            - "ComputeNodeOnNodeStart"
            - "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/a2ai-cloud-cookbook/branch/release-v3/a2a-cloud.tar.gz"
            - "s3://a2ai-cluster-provision-artifacts-dev-654225707598-us-east-2/A2AiClustersergey/config/a2ai.json"
        OnNodeConfigured:
            Script: "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/scripts/branch/release-v3/download_and_run_cookbook.sh"
            Args:
              - "ComputeNodeOnNodeConfigured"
              - "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/a2ai-cloud-cookbook/branch/release-v3/a2a-cloud.tar.gz"
              - "s3://a2ai-cluster-provision-artifacts-dev-654225707598-us-east-2/A2AiClustersergey/config/a2ai.json"

      Iam:
         InstanceRole: arn:aws:iam::654225707598:role/ComputeFleetRole

      Networking:
        SubnetIds:
          - "subnet-00c65375744fb5ea5"
          - "subnet-080fb7908dc6c99df"

    - Name: cpu8mem32gb

      CapacityType: SPOT

      ComputeResources:
        - Name: c6i-4xlarge
          Instances:
            - InstanceType: c6i.4xlarge
          MaxCount: 100
          MinCount: 0
          DisableSimultaneousMultithreading: true
      CustomActions:
        OnNodeStart:
          Script: "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/scripts/branch/release-v3/download_and_run_cookbook.sh"
          Args:
            - "ComputeNodeOnNodeStart"
            - "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/a2ai-cloud-cookbook/branch/release-v3/a2a-cloud.tar.gz"
            - "s3://a2ai-cluster-provision-artifacts-dev-654225707598-us-east-2/A2AiClustersergey/config/a2ai.json"
        OnNodeConfigured:
            Script: "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/scripts/branch/release-v3/download_and_run_cookbook.sh"
            Args:
              - "ComputeNodeOnNodeConfigured"
              - "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/a2ai-cloud-cookbook/branch/release-v3/a2a-cloud.tar.gz"
              - "s3://a2ai-cluster-provision-artifacts-dev-654225707598-us-east-2/A2AiClustersergey/config/a2ai.json"

      Iam:
         InstanceRole: arn:aws:iam::654225707598:role/ComputeFleetRole

      Networking:
        SubnetIds:
          - "subnet-00c65375744fb5ea5"
          - "subnet-080fb7908dc6c99df"
    - Name: cpu16mem64gb

      CapacityType: SPOT

      ComputeResources:
        - Name: c6i-8xlarge
          Instances:
            - InstanceType: c6i.8xlarge
          MaxCount: 100
          MinCount: 0
          DisableSimultaneousMultithreading: true
      CustomActions:
        OnNodeStart:
          Script: "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/scripts/branch/release-v3/download_and_run_cookbook.sh"
          Args:
            - "ComputeNodeOnNodeStart"
            - "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/a2ai-cloud-cookbook/branch/release-v3/a2a-cloud.tar.gz"
            - "s3://a2ai-cluster-provision-artifacts-dev-654225707598-us-east-2/A2AiClustersergey/config/a2ai.json"
        OnNodeConfigured:
            Script: "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/scripts/branch/release-v3/download_and_run_cookbook.sh"
            Args:
              - "ComputeNodeOnNodeConfigured"
              - "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/a2ai-cloud-cookbook/branch/release-v3/a2a-cloud.tar.gz"
              - "s3://a2ai-cluster-provision-artifacts-dev-654225707598-us-east-2/A2AiClustersergey/config/a2ai.json"
      Iam:
         InstanceRole: arn:aws:iam::654225707598:role/ComputeFleetRole

      Networking:
          SubnetIds:
            - "subnet-00c65375744fb5ea5"
            - "subnet-080fb7908dc6c99df"

    - Name: cpu32mem128gb

      CapacityType: SPOT

      ComputeResources:
        - Name: c6i-16xlarge
          Instances:
            - InstanceType: c6i.16xlarge
          MaxCount: 100
          MinCount: 0
          DisableSimultaneousMultithreading: true
      CustomActions:
        OnNodeStart:
          Script: "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/scripts/branch/release-v3/download_and_run_cookbook.sh"
          Args:
            - "ComputeNodeOnNodeStart"
            - "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/a2ai-cloud-cookbook/branch/release-v3/a2a-cloud.tar.gz"
            - "s3://a2ai-cluster-provision-artifacts-dev-654225707598-us-east-2/A2AiClustersergey/config/a2ai.json"
        OnNodeConfigured:
            Script: "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/scripts/branch/release-v3/download_and_run_cookbook.sh"
            Args:
              - "ComputeNodeOnNodeConfigured"
              - "s3://a2ai-cloud-build-artifacts-dev-654225707598-us-east-2/a2ai-cloud-cookbook/branch/release-v3/a2a-cloud.tar.gz"
              - "s3://a2ai-cluster-provision-artifacts-dev-654225707598-us-east-2/A2AiClustersergey/config/a2ai.json"

      Iam:
         InstanceRole: arn:aws:iam::654225707598:role/ComputeFleetRole

      Networking:
        SubnetIds:
          - "subnet-00c65375744fb5ea5"
          - "subnet-080fb7908dc6c99df"

SharedStorage:

  - MountDir: /data
    Name: FsxSharedDataFilesystem
    StorageType: FsxLustre
    FsxLustreSettings:
      FileSystemId: fs-0db92f52bb64ade74

  - MountDir: /cluster-data
    Name: ClusterSharedDataFilesystem
    StorageType: Ebs
    EbsSettings:
      VolumeType: gp3
      Size: 100
      Throughput: 500
      DeletionPolicy: Delete
      Encrypted: true

DirectoryService:
  DomainName: ad.dev.a2-ai.cloud
  DomainAddr: ldaps://ad.dev.a2-ai.cloud
  PasswordSecretArn: arn:aws:secretsmanager:us-east-2:654225707598:secret:/a2ai/a2ai-cloud/ad_bind_user_password-0oxi9e
  DomainReadOnlyUser: CN=AD ReadOnly,OU=Users,OU=ad-dev,DC=ad,DC=dev,DC=a2-ai,DC=cloud
  LdapTlsCaCert: /opt/parallelcluster/shared/directory_service/domain-certificate.crt
  LdapTlsReqCert: demand
  #LdapAccessFilter: string
  GenerateSshKeysForUsers: true
  #AdditionalSssdConfigs:

Tags:
  - Key: A2AI:a2ai-cloud-version
    Value: branch/release-v3
  - Key: A2AI:a2ai-cloud-env
    Value: dev
  - Key: A2AI:creator
    Value: sergey```

describe-cluster output
pcluster describe-cluster -n A2AiClustersergey --region us-east-2
{
  "creationTime": "2024-01-03T20:20:10.856Z",
  "headNode": {
    "launchTime": "2024-01-03T20:24:23.000Z",
    "instanceId": "i-0a44846fde3aa054c",
    "instanceType": "t3.medium",
    "state": "running",
    "privateIpAddress": "<IP_ADDRESS>"
  },
  "version": "3.8.0",
  "clusterConfiguration": {
    "url": "https://parallelcluster-97a8b56da16cbe1e-v1-do-not-delete.s3.us-east-2.amazonaws.com/parallelcluster/3.8.0/clusters/a2aiclustersergey-8blzpedizys4pybh/configs/cluster-config.yaml?versionId=EeeUlRSiAZpVZ2ADoj.2GL7keIHf1aqZ&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=ASIAZQUXECJHNEE4JIEM%2F20240103%2Fus-east-2%2Fs3%2Faws4_request&X-Amz-Date=20240103T204603Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEMz%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEaCXVzLWVhc3QtMiJIMEYCIQCn82A%2BYvjtedv3jOdnJkxl6QwYN46lBZ2NJel3jpeRrAIhAIwSIQCZ3mAmuqBN6E5sToZbqGq6C9qrujHbdFoFAdz%2FKv4CCGUQABoMNjU0MjI1NzA3NTk4IgyswAK689OXTeh%2B3sEq2wL%2B2gfLNIVpbFK1X3ZTnGhvzhuMg9tA5aWKE6c494QTf4dTjimy7oIA1uxi3O8ITg5fRw8V3MGKuiGPgx%2BIxYXUQNDyHEa2cIq4aFnpOTZzExMzJVjjDf7TY8BJz%2B9brhgy21ehRvEf5E7lgDSXbuwGvJC4b7fP3uzHA7pKEPbBzNOcOfow%2FSMDfsSGhNDjp7JK%2FrEh7v%2BK10W2Wgul0vomd1UoNGGzN3M8a4FOKSdE0OSOa6Z%2FrLFhEZnzb8LcT4hI3o2yuvywG7v50cngrmdlg7u1s0JFC6F8KGeUrK1d46BdQWzkaVZ7ev97EN8Bah4urfbmThict7Zv10%2Fc%2Fqa%2B7x6PCcg8V5arnNWHsjAP23VfCfpMGYGIk2my%2BvAVDR%2FA0AUBTDBAoOVwplxTLQCzCnXBVXIxW%2B%2Bul9gkLyAleX0ySGXxh5xbCRiAl2nzKo440zLjaHzlqfe7cjCvgtesBjqmAYz6w4z3fdbHcTCqbzqvnzrtYjkRp%2BkiGc1zAHfd%2FjI%2B4puJZYQe5GoTqTdmOAH5O1xWvAgFGG8BkX8cDkqo5xzU%2B6KB5rGG3Z5TDW5w2ERhbZLGJKUugo14IlntcgTpjO9%2BKcUURrqeZUnWrdadvnWauZ%2BqLga03xCgLPxzUoJc2%2FnfaJXnbi%2Fff%2FcbuzJf5CIxFT48w3Gu2faH1wbQCY%2FF2PbjKTk%3D&X-Amz-Signature=a3ae7089f1513eb8261041530e7dd0fe32b237ef2d695de0e47c17bbae5f8ef2"
  },
  "tags": [
    {
      "value": "branch/release-v3",
      "key": "A2AI:a2ai-cloud-version"
    },
    {
      "value": "3.8.0",
      "key": "parallelcluster:version"
    },
    {
      "value": "A2AiClustersergey",
      "key": "parallelcluster:cluster-name"
    },
    {
      "value": "sergey",
      "key": "A2AI:creator"
    },
    {
      "value": "dev",
      "key": "A2AI:a2ai-cloud-env"
    }
  ],
  "cloudFormationStackStatus": "CREATE_COMPLETE",
  "clusterName": "A2AiClustersergey",
  "computeFleetStatus": "RUNNING",
  "cloudformationStackArn": "arn:aws:cloudformation:us-east-2:654225707598:stack/A2AiClustersergey/7e9b0c10-aa75-11ee-b08b-0a01aa5f1f7b",
  "lastUpdatedTime": "2024-01-03T20:20:10.856Z",
  "region": "us-east-2",
  "clusterStatus": "CREATE_COMPLETE",
  "scheduler": {
    "type": "slurm"
  }
}

Hi @snemir2,
we performed some tests on some simple internal clusters and we were able to use the sreport command. Though, I admit that it's as immediate as sacct.
Two things we noticed:

you have to make sure that jobs are associated to a Slurm account (e.g. via the --account option of sbatch). This seems to be present on your side;
you probably have to run applications that last a while: your examples (hostname, uptime, whoami and qstat) are commands that return immediately and won't keep nodes allocated for long.

For any other issue in using sreport, I would recommend contacting SchedMD.

Thank you so much for the feedback; the short demo jobs are just red herrings -- something that I run for demo purposes.  We had the same problem in prod with days-long jobs.
Is there a way to set a "default" account for Slurm?(and perhaps even make that part of the deployment)

A perfect solution for us would be to have a way to map an AD group to a slurm account. Simmingly, no good way of doing that.

I would say that must be done manually when you set up the Slurm accounting database: in ParallelCluster you may have a post-install script that bootstraps the Slurm database from the AD information (although I'm not sure about how to best implement this).


Difference between Envoy url and simple url ?

what is envoy url and simple url?
And what is the difference between them ?

In its simplest form, an envoy URL is just an HTTP(s) URL, such as "https://allowed.example.com/app1/". But envoy also accepts a special URL scheme in this form: "envoy://k1=v1[&kn=vn]?" which includes more parameters.
This is documented further here: https://github.com/greatfire/envoy/tree/master/native#examples


unditional DDIM in fig 2

Dear all,
Thanks for sharing the awesome work!
Would it be possible for you to share a jupyter-notebook to reproduce the unconditional DDIM  results in Fig 2?

Leaving this open for now since I can put in a more formal version of this code but for those wondering about this here's a way to do it

Commited the recon function (not tested but should be fine, re-open if issue) https://github.com/salesforce/EDICT/commit/6d7044423b8263517ac77e7725ccaf3abf678ef7

@bram-w Hello, I have the same problem about the 3th and 4th row of Fig 2:  how do you perform deterministic noising to get the noised $x_T$ which will be used as the starting point of the denoising process? Or say, during this noising process, you use $\varepsilon_{uncondition}$, or $\varepsilon_{condition}$, or $\varepsilon_{uncondition} + w(\varepsilon_{condition}-\varepsilon_{uncondition})$?


Game update version 13.21, now can not enter, which Big Brother Know the new feature code to share, grateful ~ !

Game update version 13.21, now can not enter, which Big Brother Know the new feature code to share, grateful ~ !

https://github.com/sansbruhgaming/R3nzSkin/releases/tag/THEYRE_COMING_HELPME_HELPHEMHEHELPHELPHELPHELPHELP
updated

E8 ? ? ? ? 41 8B 97 C8 11 00 00
R3nzSkinDll.zip

https://github.com/sansbruhgaming/R3nzSkin/releases/tag/THEYRE_COMING_HELPME_HELPHEMHEHELPHELPHELPHELPHELP updated

Doesnt work, it keeps crashing my game

WORKED THANKS <3
https://github.com/R3nzTheCodeGOD/R3nzSkin/issues/869#issuecomment-1778745255

CharacterDataStack__Push: E8 ? ? ? ? 41 8B 97 C8 11 00 00  update 13.21


In-built UI to clean model value

It would be nice to be able to clean model value without additional buttons.
I like the way as it is implemented in ui-select: if allow-clear="true" specified, additional cross button is displayed on the right and if clicked the model value is cleared. Also, DEL key could be used for clearing model value if pressed.
I implemented this behaviour. Here is the demo:
http://plnkr.co/edit/842VHw?p=preview
Any chances it would be integrated into the directive?
Thanks.

Any updates?

I'll pull it through to my branches
https://github.com/GedMarc/nya-bootstrap4-select


Add ci build for ciislation

The ci isolation is defined in java. Add a github action that tests the java code

Closed by #25


temp folder should be deleted before downloading starts or cleaned up on exception

https://github.com/pppontusw/dl-nhltv/blob/1cd27fe7fefbabf8713f4c81b35be345764f6e9b/nhltv_lib/download_nhl.py#L817

Fixed in #11


katib-db-manager grpc binary not found in 0.16.0

Description
channel: latest/edge
The grpc_health_probe binary was removed from katib-db-manager container in upstream changes from v0.15.0 to v0.16.0-rc, see PR.
Charmed katib-db-manager relies on this binary to do the Pebble health check.
With the absence of the grpc binary, the health check cannot be performed and is considered to fail by Pebble, causing the service to constantly restart.
Logs:
2023-08-31T09:55:55.385Z [pebble] Service "katib-db-manager" starting: ./katib-db-manager
2023-08-31T09:55:55.395Z [katib-db-manager] I0831 09:55:55.395346      14 db.go:32] Using MySQL
2023-08-31T09:55:56.390Z [pebble] GET /v1/changes/1/wait?timeout=4.000s 1.009228471s 200
2023-08-31T09:55:56.685Z [pebble] GET /v1/plan?format=yaml 263.776µs 200
2023-08-31T09:56:04.409Z [katib-db-manager] I0831 09:56:04.409069      14 init.go:27] Initializing v1beta1 DB schema
2023-08-31T09:56:04.445Z [katib-db-manager] I0831 09:56:04.445069      14 main.go:113] Start Katib manager: <IP_ADDRESS>:6789
2023-08-31T09:56:55.374Z [pebble] Check "katib-db-manager-up" failure 1 (threshold 5): fork/exec /bin/grpc_health_probe: no such file or directory
2023-08-31T09:57:55.372Z [pebble] Check "katib-db-manager-up" failure 2 (threshold 5): fork/exec /bin/grpc_health_probe: no such file or directory
2023-08-31T09:58:55.373Z [pebble] Check "katib-db-manager-up" failure 3 (threshold 5): fork/exec /bin/grpc_health_probe: no such file or directory
2023-08-31T09:59:55.372Z [pebble] Check "katib-db-manager-up" failure 4 (threshold 5): fork/exec /bin/grpc_health_probe: no such file or directory

Solution
Add grpc binary in the rock, and integrate rock with katib-db-manager

Temporarily, the health checks can be removed until we add the grpc binary to the rock and integrate the rock into the katib-db-manager charm.

Temporarily, the health checks can be removed until we add the grpc binary to the rock and integrate the rock into the katib-db-manager charm.

@NohaIhab Can we add this under Solution as well? Basically described proper solution as you did, with may be a link to the ROCK in question. And then temporary fix until ROCK is integrated.