ACK Controller DBCluster Failure logs not showing

Describe the bug
I am trying to deploy RDS AURORA DBCluster and GlobalCluster in a single file. While ACK is creating the GlobaclCluster, it fails to find the DB cluster since DBCluster is not ready or failed to create.

The errors in the ACK manager pods only point to why GlobalCluster failed to create which is `ERROR	controller.globalcluster	Reconciler error	{"reconciler group": "rds.services.k8s.aws", "reconciler kind": "GlobalCluster", "name": "servicename", "namespace": "namespace", "error": "DBClusterNotFoundFault: The source cluster could not be found or cannot be accessed: arn:aws:rds:us-east-1:{accountname}:cluster:{dbname}y\n\tstatus code: 404}

ACK does not show what is happening to DbCluster if it has some errors or it takes time to provision. but once the globalcluster fails to find the dbcluster, I don't see any other logs other than GlobalCluster failed to create when ACK controller tries to provision the dbscluster

One thing to note here is that we are provisioning DBs in Account A from k8s cluster from Account B we have VPC peering between both.
Steps to reproduce
use combined file:
---
apiVersion: rds.services.k8s.aws/v1alpha1
kind: DBCluster
metadata:
  labels:
    app: name
  name: name
  namespace: namespace
spec:
  availabilityZones:
  - us-east-1b
  - us-east-1d
  - us-east-1a
  backupRetentionPeriod: 1
  copyTagsToSnapshot: false
  databaseName: rdscanary
  dbClusterIdentifier: region-name
  dbClusterParameterGroupName: name
  dbSubnetGroupName: name
  deletionProtection: false
  enableIAMDatabaseAuthentication: true
  engine: aurora-mysql
  engineMode: provisioned
  engineVersion: 8.0.mysql_aurora.3.02.0
  kmsKeyID: arn:aws:kms:us-east-1:{account}:key/{key_num}
  masterUserPassword:
    key: password
    name: secret name
    namespace: namespace
  masterUsername: root
  port: 3306
  preferredBackupWindow: 03:59-04:29
  preferredMaintenanceWindow: fri:05:59-fri:06:29
  storageEncrypted: true
  tags:
  - key: key
    value: "true"
  vpcSecurityGroupIDs:
  - id1
  - id2
  - id3
---
apiVersion: rds.services.k8s.aws/v1alpha1
kind: GlobalCluster
metadata:
  name: rdscanary
spec:
  globalClusterIdentifier: name
  sourceDBClusterIdentifier: arn:aws:rds:us-east-1:{service}:cluster:us-east-1-service

Expected outcome
Should be able to provision both dbcluster and globalcluster and logs should be more descriptive
Environment
AWS
Kubernetes version
1.21+
Using EKS (yes/no), if so version?
YES 1.22
AWS service targeted (S3, RDS, etc.)
RDS Aurora

@jkatz any pointers here?

@riddhi2910 We're currently investigating. In your tests, were you able to create a GlobalCluster and associated objects one-at-a-time, i.e. adding on each object once the other was available?

@jkatz we wait 1800s for Dbcluster to be available before creating GlobalCluster once the 1800s done, ACk only shows errors {"reconciler group": "rds.services.k8s.aws", "reconciler kind": "GlobalCluster", "name": "servicename", "namespace": "namespace", "error": "DBClusterNotFoundFault: The source cluster could not be found or cannot be accessed: arn:aws:rds:us-east-1:{accountname}:cluster:{dbname}y\n\tstatus code: 404} not really sure if ack is trying to create these objects in bacckground.

@jkatz one thing to note here is that we are doing cross-account provisioning, I could create DBSubnetGroup but not the dbcluster .

however other ack controllers (elasticache and dynamodb ) work just fine with cross-account provisioning with VPC peering.

@jkatz I checked the destination account, the AWS calls at that account are for DBSubnetGroup   and DBReplicationGroup and those resources are getting created. I don't see a call to create a DBCluster .
In the ack controller also does not show that it is trying to create the DBCluster. Are there any conditions/configs that ack is checking before creating a DBCluster? Can you provide some pointers?
why there are no logs regarding DBCluster ?

@jkatz  any pointers? I only see the status on was console now that I am able to create the dbcluster. But, the k8s objects for the dbcluster and globaclcluster do not show any status. Any pointers on why that could be?

Hi @riddhi2910 , can you please provide more information on how did you setup the cross-account? i'll try to reproduce the same in my local environment and see if i can get any answers.

Thanks, @A-Hilaly for your reply. We have a VPC peering between two accounts. We have a cilium policy to talk to the cross-account security groups. We use deploy rds objects combined via a home-grown tool. I see the calls have been made to the destination accounts and DB is also up and running on the same account. But, I don't see status reported back, and k8s objects of the rds DB do not have Status.

@A-Hilaly @jkatz So I was able to enable debug logs and found this
1.663006596896689e+09	DEBUG	ackrt	<< kc.Patch (status)	{"account": "ssss", "role": "", "region": "us-east-1", "kind": "DBCluster", "namespace": "preview", "name": "rdscanary", "is_adopted": false, "generation": 2, "error": "DBCluster.rds.services.k8s.aws \"rdscanary\" is invalid: status.ackResourceMetadata.region: Required value"}
the crd for dbcluster is

spec:
conversion:
strategy: None
group: rds.services.k8s.aws
names:
kind: DBCluster
listKind: DBClusterList
plural: dbclusters
singular: dbcluster
scope: Namespaced
versions:

name: v1alpha1
schema:
openAPIV3Schema:
description: DBCluster is the Schema for the DBClusters API
properties:
apiVersion:
description: 'APIVersion defines the versioned schema of this representation
of an object. Servers should convert recognized schemas to the latest
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
type: string
kind:
description: 'Kind is a string value representing the REST resource this
object represents. Servers may infer this from the endpoint the client
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
type: string
metadata:
type: object
spec:
description: "DBClusterSpec defines the desired state of DBCluster. \n
Contains the details of an Amazon Aurora DB cluster. \n This data type
is used as a response element in the DescribeDBClusters, StopDBCluster,
and StartDBCluster actions."
properties:
availabilityZones:
description: A list of Availability Zones (AZs) where instances in
the DB cluster can be created. For information on Amazon Web Services
Regions and Availability Zones, see Choosing the Regions and Availability
Zones (https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Concepts.RegionsAndAvailabilityZones.html)
in the Amazon Aurora User Guide.
items:
type: string
type: array
backtrackWindow:
description: "The target backtrack window, in seconds. To disable
backtracking, set this value to 0. \n Currently, Backtrack is only
supported for Aurora MySQL DB clusters. \n Default: 0 \n Constraints:
\n    * If specified, this value must be set to a number from 0
to 259,200 (72    hours)."
format: int64
type: integer
backupRetentionPeriod:
description: "The number of days for which automated backups are retained.
\n Default: 1 \n Constraints: \n    * Must be a value from 1 to
35"
format: int64
type: integer
characterSetName:
description: A value that indicates that the DB cluster should be
associated with the specified CharacterSet.
type: string
copyTagsToSnapshot:
description: A value that indicates whether to copy all tags from
the DB cluster to snapshots of the DB cluster. The default is not
to copy them.
type: boolean
databaseName:
description: The name for your database of up to 64 alphanumeric characters.
If you do not provide a name, Amazon RDS doesn't create a database
in the DB cluster you are creating.
type: string
dbClusterIdentifier:
description: "The DB cluster identifier. This parameter is stored
as a lowercase string. \n Constraints: \n    * Must contain from
1 to 63 letters, numbers, or hyphens. \n    * First character must
be a letter. \n    * Can't end with a hyphen or contain two consecutive
hyphens. \n Example: my-cluster1"
type: string
dbClusterParameterGroupName:
description: "The name of the DB cluster parameter group to associate
with this DB cluster. If you do not specify a value, then the default
DB cluster parameter group for the specified DB engine and version
is used. \n Constraints: \n    * If supplied, must match the name
of an existing DB cluster parameter    group."
type: string
dbSubnetGroupName:
description: "A DB subnet group to associate with this DB cluster.
\n Constraints: Must match the name of an existing DBSubnetGroup.
Must not be default. \n Example: mySubnetgroup"
type: string
deletionProtection:
description: A value that indicates whether the DB cluster has deletion
protection enabled. The database can't be deleted when deletion
protection is enabled. By default, deletion protection is disabled.
type: boolean
destinationRegion:
description: DestinationRegion is used for presigning the request
to a given region.
type: string
domain:
description: "The Active Directory directory ID to create the DB cluster
in. \n For Amazon Aurora DB clusters, Amazon RDS can use Kerberos
Authentication to authenticate users that connect to the DB cluster.
For more information, see Kerberos Authentication (https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/kerberos-authentication.html)
in the Amazon Aurora User Guide."
type: string
domainIAMRoleName:
description: Specify the name of the IAM role to be used when making
API calls to the Directory Service.
type: string
enableCloudwatchLogsExports:
description: "The list of log types that need to be enabled for exporting
to CloudWatch Logs. The values in the list depend on the DB engine
being used. For more information, see Publishing Database Logs to
Amazon CloudWatch Logs (https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_LogAccess.html#USER_LogAccess.Procedural.UploadtoCloudWatch)
in the Amazon Aurora User Guide. \n Aurora MySQL \n Possible values
are audit, error, general, and slowquery. \n Aurora PostgreSQL \n
Possible value is postgresql."
items:
type: string
type: array
enableGlobalWriteForwarding:
description: "A value that indicates whether to enable this DB cluster
to forward write operations to the primary cluster of an Aurora
global database (GlobalCluster). By default, write operations are
not allowed on Aurora DB clusters that are secondary clusters in
an Aurora global database. \n You can set this value only on Aurora
DB clusters that are members of an Aurora global database. With
this parameter enabled, a secondary cluster can forward writes to
the current primary cluster and the resulting changes are replicated
back to this cluster. For the primary DB cluster of an Aurora global
database, this value is used immediately if the primary is demoted
by the FailoverGlobalCluster API operation, but it does nothing
until then."
type: boolean
enableHTTPEndpoint:
description: "A value that indicates whether to enable the HTTP endpoint
for an Aurora Serverless DB cluster. By default, the HTTP endpoint
is disabled. \n When enabled, the HTTP endpoint provides a connectionless
web service API for running SQL queries on the Aurora Serverless
DB cluster. You can also query your database from inside the RDS
console with the query editor. \n For more information, see Using
the Data API for Aurora Serverless (https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/data-api.html)
in the Amazon Aurora User Guide."
type: boolean
enableIAMDatabaseAuthentication:
description: "A value that indicates whether to enable mapping of
Amazon Web Services Identity and Access Management (IAM) accounts
to database accounts. By default, mapping is disabled. \n For more
information, see IAM Database Authentication (https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.IAMDBAuth.html)
in the Amazon Aurora User Guide."
type: boolean
engine:
description: "The name of the database engine to be used for this
DB cluster. \n Valid Values: aurora (for MySQL 5.6-compatible Aurora),
aurora-mysql (for MySQL 5.7-compatible Aurora), and aurora-postgresql"
type: string
engineMode:
description: "The DB engine mode of the DB cluster, either provisioned,
serverless, parallelquery, global, or multimaster. \n The parallelquery
engine mode isn't required for Aurora MySQL version 1.23 and higher
1.x versions, and version 2.09 and higher 2.x versions. \n The global
engine mode isn't required for Aurora MySQL version 1.22 and higher
1.x versions, and global engine mode isn't required for any 2.x
versions. \n The multimaster engine mode only applies for DB clusters
created with Aurora MySQL version 5.6.10a. \n For Aurora PostgreSQL,
the global engine mode isn't required, and both the parallelquery
and the multimaster engine modes currently aren't supported. \n
Limitations and requirements apply to some DB engine modes. For
more information, see the following sections in the Amazon Aurora
User Guide: \n    * Limitations of Aurora Serverless (https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless.html#aurora-serverless.limitations)
\n    * Limitations of Parallel Query (https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-mysql-parallel-query.html#aurora-mysql-parallel-query-limitations)
\n    * Limitations of Aurora Global Databases (https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-global-database.html#aurora-global-database.limitations)
\n    * Limitations of Multi-Master Clusters (https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-multi-master.html#aurora-multi-master-limitations)"
type: string
engineVersion:
description: "The version number of the database engine to use. \n
To list all of the available engine versions for aurora (for MySQL
5.6-compatible Aurora), use the following command: \n aws rds describe-db-engine-versions
--engine aurora --query "DBEngineVersions[].EngineVersion" \n
To list all of the available engine versions for aurora-mysql (for
MySQL 5.7-compatible Aurora), use the following command: \n aws
rds describe-db-engine-versions --engine aurora-mysql --query "DBEngineVersions[].EngineVersion"
\n To list all of the available engine versions for aurora-postgresql,
use the following command: \n aws rds describe-db-engine-versions
--engine aurora-postgresql --query "DBEngineVersions[].EngineVersion"
\n Aurora MySQL \n Example: 5.6.10a, 5.6.mysql_aurora.1.19.2, 5.7.12,
5.7.mysql_aurora.2.04.5 \n Aurora PostgreSQL \n Example: 9.6.3,
10.7"
type: string
globalClusterIdentifier:
description: The global cluster ID of an Aurora cluster that becomes
the primary cluster in the new global database cluster.
type: string
kmsKeyID:
description: "The Amazon Web Services KMS key identifier for an encrypted
DB cluster. \n The Amazon Web Services KMS key identifier is the
key ARN, key ID, alias ARN, or alias name for the KMS key. To use
a KMS key in a different Amazon Web Services account, specify the
key ARN or alias ARN. \n When a KMS key isn't specified in KmsKeyId:
\n    * If ReplicationSourceIdentifier identifies an encrypted source,
then    Amazon RDS will use the KMS key used to encrypt the source.
Otherwise,    Amazon RDS will use your default KMS key. \n    *
If the StorageEncrypted parameter is enabled and ReplicationSourceIdentifier
\   isn't specified, then Amazon RDS will use your default KMS key.
\n There is a default KMS key for your Amazon Web Services account.
Your Amazon Web Services account has a different default KMS key
for each Amazon Web Services Region. \n If you create a read replica
of an encrypted DB cluster in another Amazon Web Services Region,
you must set KmsKeyId to a KMS key identifier that is valid in the
destination Amazon Web Services Region. This KMS key is used to
encrypt the read replica in that Amazon Web Services Region."
type: string
kmsKeyRef:
description: 'AWSResourceReferenceWrapper provides a wrapper around
*AWSResourceReference type to provide more user friendly syntax
for references using ''from'' field Ex: APIIDRef:   from:     name:
my-api'
properties:
from:
description: AWSResourceReference provides all the values necessary
to reference another k8s resource for finding the identifier(Id/ARN/Name)
properties:
name:
type: string
type: object
type: object
masterUserPassword:
description: "The password for the master database user. This password
can contain any printable ASCII character except "/", """,
or "@". \n Constraints: Must contain from 8 to 41 characters."
properties:
key:
description: Key is the key within the secret
type: string
name:
description: Name is unique within a namespace to reference a
secret resource.
type: string
namespace:
description: Namespace defines the space within which the secret
name must be unique.
type: string
required:
- key
type: object
masterUsername:
description: "The name of the master user for the DB cluster. \n Constraints:
\n    * Must be 1 to 16 letters or numbers. \n    * First character
must be a letter. \n    * Can't be a reserved word for the chosen
database engine."
type: string
optionGroupName:
description: "A value that indicates that the DB cluster should be
associated with the specified option group. \n Permanent options
can't be removed from an option group. The option group can't be
removed from a DB cluster once it is associated with a DB cluster."
type: string
port:
description: "The port number on which the instances in the DB cluster
accept connections. \n Default: 3306 if engine is set as aurora
or 5432 if set to aurora-postgresql."
format: int64
type: integer
preSignedURL:
description: "A URL that contains a Signature Version 4 signed request
for the CreateDBCluster action to be called in the source Amazon
Web Services Region where the DB cluster is replicated from. You
only need to specify PreSignedUrl when you are performing cross-region
replication from an encrypted DB cluster. \n The pre-signed URL
must be a valid request for the CreateDBCluster API action that
can be executed in the source Amazon Web Services Region that contains
the encrypted DB cluster to be copied. \n The pre-signed URL request
must contain the following parameter values: \n    * KmsKeyId -
The Amazon Web Services KMS key identifier for the KMS key    to
use to encrypt the copy of the DB cluster in the destination Amazon
\   Web Services Region. This should refer to the same KMS key for
both the    CreateDBCluster action that is called in the destination
Amazon Web Services    Region, and the action contained in the pre-signed
URL. \n    * DestinationRegion - The name of the Amazon Web Services
Region that    Aurora read replica will be created in. \n    * ReplicationSourceIdentifier
- The DB cluster identifier for the encrypted    DB cluster to be
copied. This identifier must be in the Amazon Resource    Name (ARN)
format for the source Amazon Web Services Region. For example,    if
you are copying an encrypted DB cluster from the us-west-2 Amazon
Web    Services Region, then your ReplicationSourceIdentifier would
look like    Example: arn:aws:rds:us-west-2:123456789012:cluster:aurora-cluster1.
\n To learn how to generate a Signature Version 4 signed request,
see Authenticating Requests: Using Query Parameters (Amazon Web
Services Signature Version 4) (https://docs.aws.amazon.com/AmazonS3/latest/API/sigv4-query-string-auth.html)
and Signature Version 4 Signing Process (https://docs.aws.amazon.com/general/latest/gr/signature-version-4.html).
\n If you are using an Amazon Web Services SDK tool or the CLI,
you can specify SourceRegion (or --source-region for the CLI) instead
of specifying PreSignedUrl manually. Specifying SourceRegion autogenerates
a pre-signed URL that is a valid request for the operation that
can be executed in the source Amazon Web Services Region."
type: string
preferredBackupWindow:
description: "The daily time range during which automated backups
are created if automated backups are enabled using the BackupRetentionPeriod
parameter. \n The default is a 30-minute window selected at random
from an 8-hour block of time for each Amazon Web Services Region.
To view the time blocks available, see Backup window (https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Aurora.Managing.Backups.html#Aurora.Managing.Backups.BackupWindow)
in the Amazon Aurora User Guide. \n Constraints: \n    * Must be
in the format hh24:mi-hh24:mi. \n    * Must be in Universal Coordinated
Time (UTC). \n    * Must not conflict with the preferred maintenance
window. \n    * Must be at least 30 minutes."
type: string
preferredMaintenanceWindow:
description: "The weekly time range during which system maintenance
can occur, in Universal Coordinated Time (UTC). \n Format: ddd:hh24:mi-ddd:hh24:mi
\n The default is a 30-minute window selected at random from an
8-hour block of time for each Amazon Web Services Region, occurring
on a random day of the week. To see the time blocks available, see
Adjusting the Preferred DB Cluster Maintenance Window (https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_UpgradeDBInstance.Maintenance.html#AdjustingTheMaintenanceWindow.Aurora)
in the Amazon Aurora User Guide. \n Valid Days: Mon, Tue, Wed, Thu,
Fri, Sat, Sun. \n Constraints: Minimum 30-minute window."
type: string
replicationSourceIdentifier:
description: The Amazon Resource Name (ARN) of the source DB instance
or DB cluster if this DB cluster is created as a read replica.
type: string
scalingConfiguration:
description: For DB clusters in serverless DB engine mode, the scaling
properties of the DB cluster.
properties:
autoPause:
type: boolean
maxCapacity:
format: int64
type: integer
minCapacity:
format: int64
type: integer
secondsBeforeTimeout:
format: int64
type: integer
secondsUntilAutoPause:
format: int64
type: integer
timeoutAction:
type: string
type: object
sourceRegion:
description: SourceRegion is the source region where the resource
exists. This is not sent over the wire and is only used for presigning.
This value should always have the same region as the source ARN.
type: string
storageEncrypted:
description: A value that indicates whether the DB cluster is encrypted.
type: boolean
tags:
description: Tags to assign to the DB cluster.
items:
description: Metadata assigned to an Amazon RDS resource consisting
of a key-value pair.
properties:
key:
type: string
value:
type: string
type: object
type: array
vpcSecurityGroupIDs:
description: A list of EC2 VPC security groups to associate with this
DB cluster.
items:
type: string
type: array
required:
- dbClusterIdentifier
- engine
type: object
status:
description: DBClusterStatus defines the observed state of DBCluster
properties:
ackResourceMetadata:
description: All CRs managed by ACK have a common Status.ACKResourceMetadata
member that is used to contain resource sync state, account ownership,
constructed ARN for the resource
properties:
arn:
description: 'ARN is the Amazon Resource Name for the resource.
This is a globally-unique identifier and is set only by the
ACK service controller once the controller has orchestrated
the creation of the resource OR when it has verified that an
"adopted" resource (a resource where the ARN annotation was
set by the Kubernetes user on the CR) exists and matches the
supplied CR''s Spec field values. TODO(vijat@): Find a better
strategy for resources that do not have ARN in CreateOutputResponse
https://github.com/aws/aws-controllers-k8s/issues/270'
type: string
ownerAccountID:
description: OwnerAccountID is the AWS Account ID of the account
that owns the backend AWS service API resource.
type: string
region:
description: Region is the AWS region in which the resource exists
or will exist.
type: string
required:
- ownerAccountID
- region
type: object
activityStreamKMSKeyID:
description: "The Amazon Web Services KMS key identifier used for
encrypting messages in the database activity stream. \n The Amazon
Web Services KMS key identifier is the key ARN, key ID, alias ARN,
or alias name for the KMS key."
type: string
activityStreamKinesisStreamName:
description: The name of the Amazon Kinesis data stream used for the
database activity stream.
type: string
activityStreamMode:
description: The mode of the database activity stream. Database events
such as a change or access generate an activity stream event. The
database session can handle these events either synchronously or
asynchronously.
type: string
activityStreamStatus:
description: The status of the database activity stream.
type: string
allocatedStorage:
description: For all database engines except Amazon Aurora, AllocatedStorage
specifies the allocated storage size in gibibytes (GiB). For Aurora,
AllocatedStorage always returns 1, because Aurora DB cluster storage
size isn't fixed, but instead automatically adjusts as needed.
format: int64
type: integer
associatedRoles:
description: Provides a list of the Amazon Web Services Identity and
Access Management (IAM) roles that are associated with the DB cluster.
IAM roles that are associated with a DB cluster grant permission
for the DB cluster to access other Amazon Web Services on your behalf.
items:
description: Describes an Amazon Web Services Identity and Access
Management (IAM) role that is associated with a DB cluster.
properties:
featureName:
type: string
roleARN:
type: string
status:
type: string
type: object
type: array
automaticRestartTime:
description: The time when a stopped DB cluster is restarted automatically.
format: date-time
type: string
backtrackConsumedChangeRecords:
description: The number of change records stored for Backtrack.
format: int64
type: integer
capacity:
description: "The current capacity of an Aurora Serverless DB cluster.
The capacity is 0 (zero) when the cluster is paused. \n For more
information about Aurora Serverless, see Using Amazon Aurora Serverless
(https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless.html)
in the Amazon Aurora User Guide."
format: int64
type: integer
cloneGroupID:
description: Identifies the clone group to which the DB cluster is
associated.
type: string
clusterCreateTime:
description: Specifies the time when the DB cluster was created, in
Universal Coordinated Time (UTC).
format: date-time
type: string
conditions:
description: All CRS managed by ACK have a common Status.Conditions
member that contains a collection of ackv1alpha1.Condition objects
that describe the various terminal states of the CR and its backend
AWS service API resource
items:
description: Condition is the common struct used by all CRDs managed
by ACK service controllers to indicate terminal states  of the
CR and its backend AWS service API resource
properties:
lastTransitionTime:
description: Last time the condition transitioned from one status
to another.
format: date-time
type: string
message:
description: A human readable message indicating details about
the transition.
type: string
reason:
description: The reason for the condition's last transition.
type: string
status:
description: Status of the condition, one of True, False, Unknown.
type: string
type:
description: Type is the type of the Condition
type: string
required:
- status
- type
type: object
type: array
crossAccountClone:
description: Specifies whether the DB cluster is a clone of a DB cluster
owned by a different Amazon Web Services account.
type: boolean
customEndpoints:
description: Identifies all custom endpoints associated with the cluster.
items:
type: string
type: array
dbClusterMembers:
description: Provides the list of instances that make up the DB cluster.
items:
description: Contains information about an instance that is part
of a DB cluster.
properties:
dbClusterParameterGroupStatus:
type: string
dbInstanceIdentifier:
type: string
isClusterWriter:
type: boolean
promotionTier:
format: int64
type: integer
type: object
type: array
dbClusterOptionGroupMemberships:
description: Provides the list of option group memberships for this
DB cluster.
items:
description: Contains status information for a DB cluster option
group.
properties:
dbClusterOptionGroupName:
type: string
status:
type: string
type: object
type: array
dbClusterParameterGroup:
description: Specifies the name of the DB cluster parameter group
for the DB cluster.
type: string
dbClusterResourceID:
description: The Amazon Web Services Region-unique, immutable identifier
for the DB cluster. This identifier is found in Amazon Web Services
CloudTrail log entries whenever the KMS key for the DB cluster is
accessed.
type: string
dbSubnetGroup:
description: Specifies information on the subnet group associated
with the DB cluster, including the name, description, and subnets
in the subnet group.
type: string
domainMemberships:
description: The Active Directory Domain membership records associated
with the DB cluster.
items:
description: An Active Directory Domain membership record associated
with the DB instance or cluster.
properties:
domain:
type: string
fQDN:
type: string
iamRoleName:
type: string
status:
type: string
type: object
type: array
earliestBacktrackTime:
description: The earliest time to which a DB cluster can be backtracked.
format: date-time
type: string
earliestRestorableTime:
description: The earliest time to which a database can be restored
with point-in-time restore.
format: date-time
type: string
enabledCloudwatchLogsExports:
description: "A list of log types that this DB cluster is configured
to export to CloudWatch Logs. \n Log types vary by DB engine. For
information about the log types for each DB engine, see Amazon RDS
Database Log Files (https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_LogAccess.html)
in the Amazon Aurora User Guide."
items:
type: string
type: array
endpoint:
description: Specifies the connection endpoint for the primary instance
of the DB cluster.
type: string
globalWriteForwardingRequested:
description: Specifies whether you have requested to enable write
forwarding for a secondary cluster in an Aurora global database.
Because write forwarding takes time to enable, check the value of
GlobalWriteForwardingStatus to confirm that the request has completed
before using the write forwarding feature for this cluster.
type: boolean
globalWriteForwardingStatus:
description: Specifies whether a secondary cluster in an Aurora global
database has write forwarding enabled, not enabled, or is in the
process of enabling it.
type: string
hostedZoneID:
description: Specifies the ID that Amazon Route 53 assigns when you
create a hosted zone.
type: string
httpEndpointEnabled:
description: "A value that indicates whether the HTTP endpoint for
an Aurora Serverless DB cluster is enabled. \n When enabled, the
HTTP endpoint provides a connectionless web service API for running
SQL queries on the Aurora Serverless DB cluster. You can also query
your database from inside the RDS console with the query editor.
\n For more information, see Using the Data API for Aurora Serverless
(https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/data-api.html)
in the Amazon Aurora User Guide."
type: boolean
iamDatabaseAuthenticationEnabled:
description: A value that indicates whether the mapping of Amazon
Web Services Identity and Access Management (IAM) accounts to database
accounts is enabled.
type: boolean
latestRestorableTime:
description: Specifies the latest time to which a database can be
restored with point-in-time restore.
format: date-time
type: string
multiAZ:
description: Specifies whether the DB cluster has instances in multiple
Availability Zones.
type: boolean
pendingModifiedValues:
description: A value that specifies that changes to the DB cluster
are pending. This element is only included when changes are pending.
Specific changes are identified by subelements.
properties:
dbClusterIdentifier:
type: string
engineVersion:
type: string
iamDatabaseAuthenticationEnabled:
type: boolean
masterUserPassword:
type: string
pendingCloudwatchLogsExports:
description: A list of the log types whose configuration is still
pending. In other words, these log types are in the process
of being activated or deactivated.
properties:
logTypesToDisable:
items:
type: string
type: array
logTypesToEnable:
items:
type: string
type: array
type: object
type: object
percentProgress:
description: Specifies the progress of the operation as a percentage.
type: string
readReplicaIdentifiers:
description: Contains one or more identifiers of the read replicas
associated with this DB cluster.
items:
type: string
type: array
readerEndpoint:
description: "The reader endpoint for the DB cluster. The reader endpoint
for a DB cluster load-balances connections across the Aurora Replicas
that are available in a DB cluster. As clients request new connections
to the reader endpoint, Aurora distributes the connection requests
among the Aurora Replicas in the DB cluster. This functionality
can help balance your read workload across multiple Aurora Replicas
in your DB cluster. \n If a failover occurs, and the Aurora Replica
that you are connected to is promoted to be the primary instance,
your connection is dropped. To continue sending your read workload
to other Aurora Replicas in the cluster, you can then reconnect
to the reader endpoint."
type: string
scalingConfigurationInfo:
description: "Shows the scaling configuration for an Aurora DB cluster
in serverless DB engine mode. \n For more information, see Using
Amazon Aurora Serverless (https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless.html)
in the Amazon Aurora User Guide."
properties:
autoPause:
type: boolean
maxCapacity:
format: int64
type: integer
minCapacity:
format: int64
type: integer
secondsBeforeTimeout:
format: int64
type: integer
secondsUntilAutoPause:
format: int64
type: integer
timeoutAction:
type: string
type: object
status:
description: Specifies the current state of this DB cluster.
type: string
tagList:
items:
description: Metadata assigned to an Amazon RDS resource consisting
of a key-value pair.
properties:
key:
type: string
value:
type: string
type: object
type: array
vpcSecurityGroups:
description: Provides a list of VPC security groups that the DB cluster
belongs to.
items:
description: This data type is used as a response element for queries
on VPC security group membership.
properties:
status:
type: string
vpcSecurityGroupID:
type: string
type: object
type: array
type: object
type: object
served: true
storage: true
subresources:
status: {}
status:
acceptedNames:
kind: DBCluster
listKind: DBClusterList
plural: dbclusters
singular: dbcluster
conditions:
lastTransitionTime: "2022-05-17T22:30:59Z"
message: no conflicts found
reason: NoConflicts
status: "True"
type: NamesAccepted
lastTransitionTime: "2022-05-17T22:30:59Z"
message: the initial names have been accepted
reason: InitialNamesAccepted
status: "True"
type: Established
storedVersions:
v1alpha1

Hey @riddhi2910,
So the way we set regions in ACK land is by setting annotations, similar to this config https://github.com/aws-controllers-k8s/lambda-controller/blob/main/test/e2e/resources/alias.yaml#L6.
Are also setting CARM using namespaces and the "carm" configmap? as mentioned here https://aws-controllers-k8s.github.io/community/docs/user-docs/cross-account-resource-management/
Also happy to hop on a Slack call and discuss/debug this with you, my name on slack is Amine Hilaly.

This issue was solved by using rds-controller v0.1.0
/close


Enable to define bulk attribute extraction rules

Is your feature request related to a problem? Please describe.
Data that we would like to sent to logs may contain a couple of JSON keys from a larger pool (beyond 2000). Though we could list them all in attribute_extraction_jmespath_expression this would be harder to maintain and may seriously affect performance of ingest, when scanning though the attribute_extraction_jmespath_expression mapping.
Describe the solution you'd like
We would like to define a simple rule where all top level JSON keys are mapped to attributes based on given pattern.
For example:
attribute_extraction_regexp_expression:     "myattr_$1": "(.+)"
would map all top level keys to myattr_* attributes.
Since there is a limit on number of attributes created, we should also enable a way to exclude some top level keys from mapping, e.g.,
attribute_extraction_regexp_expression:     "exclude!": "(skip|these|keys)"     "myattr_$1": "(.+)"

As the solution based on regex key matching consumes too much resources, the new proposed format will be:
attribute_mapping_from_top_level_json:
  include: start_time, end_time
  exclude: exec_time
  prefix: myattr.
  posfix: _mapped


Make Refresh Interval configurable per feed

I have 2 RSS feeds:

News (frequent)
App releases on play store (once a month)

Refresh Interval is configured to 30 mins which is an overkill for the second feed, where a once a day check would be sufficient

Instead of "fiddling" with each feed, how about an adaptive interval, moving average based on update frequency in the past. Make a settable min and max bounds 1 min - 24h. (my weather data come in at 5 min interval).

An adaptive update frequency would probably be easier to implement given that a configurable one would need to be stored and an UI would have to be implemented for it as well.

Some background on dynamic intervals https://www.rn.inf.tu-dresden.de/uploads/Publikationen/feedpaper_poster.pdf


Authenticating in server-side route?

Is it possible to authenticate in a server-side route? I tried simply calling Meteor.user() in a server-side route but I got the error: "Meteor.userId can only be invoked in method calls. Use this.userId in publish functions." I also tried to simply wrap a server method around Meteor.user() and call that method from the server-side route. This didn't produce an error but it also didn't correctly tell me i was logged in.
Given that many apps need user authentication to access the appropriate data from a collection, it seems like this is a good/necessary feature, but if it is possible, I haven't found any information about it.
I see that reststop2 can do authentication, but I don't think it would play well with Iron Router in the same project.
If it isn't possible, then what would be the canonical way to provide a REST API to verify that a user is logged in?

yea, i dont know what everyone is talkin about, but @alethes's solution works reliably. Perhaps its because we're both using fast-render--but you should be using that anyway. Problem solved. Iron router should have a this.userId() on the object that has this.request and this.response, i.e. the context of ur route functions

@faceyspacey I'm not sure what problem this is that relates to Meteor's internals, but @alethes solution is working very unreliably for me. After a couple of attempts I remain logged in on the client but the server no longer recognises it

What about this issue? May it be the cookie is no longer parsed in latest versions? It may also be my custom login routine, I still use Meteor's auth model thought.
edit:
Seems to me that my custom authorisation does not stick when I add fast-render :/ .

I recently wrote a blog post describing solution to this: https://blog.hagmajer.com/server-side-routing-with-authentication-in-meteor-6625ed832a94.
If you need authentication, you basically need to set up a server route using a https://atmospherejs.com/mhagmajer/server-router package and you can get current user with this.userId just like with Meteor methods.


Fix fail reporter

JSHint 2.8.0 made this bug apparent.

@spalger

Sorry for neglecting this @Slayer95. Can you add a test case for this please?

Well, as I mentioned before, there were 2 tests failing before this.
Unfortunately, I am not familiar enough with the JSHint results, but theoretically a test could be written
myfixture.js
 // both using JSHint 2.7.0 and 2.8.0.
// In particular, before and after https://github.com/jshint/jshint/pull/2338/files

it('should not require warnings to fail', function () {
    var fakeFile = new Fixture('myfixture');

    var stream = jshint();
    var failStream = jshint.reporter('fail');
    stream.pipe(failStream);

    failStream.on('error', function (err) {
      should.exist(err);
      err.message.indexOf(fakeFile.relative).should.not.equal(-1, 'should say which file');
      done();
    });

    stream.write(fakeFile);
    stream.end();


fix: test with pre-kcp branch

points to a ref from this PR

Note that I think we will also need this PR as well: https://github.com/redhat-appstudio/jvm-build-service/pull/232

Note that I think we will also need this PR as well: #232

Good point. This means that this PR's CI checks will fail on this line
Should we merge this PR and rerun CI in yours (https://github.com/redhat-appstudio/jvm-build-service/pull/232) or should I cherry pick your changes?

I went with cherry-picking

@stuartwdouglas @gabemontero all tests passed. are you happy to merge this?
once https://github.com/redhat-appstudio/e2e-tests/pull/187 is merged, we could switch back the ref to main branch, to get the latest changes from e2e-tests


Good Reads

Let's collect some links for protocol engineering.

https://www.nanog.org/sites/default/files/Paasch_Network_Support.pdf on TCP Fast Open and the experiences with real deployment. Curse the middleboxes.

Possible duplicate of https://github.com/ipfs/ipfs/pull/24.

RFC 5218, "What Makes for a Successful Protocol?".

-> https://github.com/ipfs/reading-list


Color scheme support in the editor

From ashwin.sathya on 2011-05-17T12:24:33Z
Colorscheme support in the editor.
Original issue: http://code.google.com/p/spyderlib/issues/detail?id=658

From ccordoba12 on 2011-05-17T11:09:59Z
That's already implemented. Please go to Tools > Preferences > Editor and select your preferred scheme under "Syntax color scheme".
You can also define your custom scheme under Tools > Preferences > Syntax coloring.
Or did you mean something else?
Labels: Cat-Editor

From ccordoba12 on 2011-05-24T06:37:54Z
I guess you meant what I mentioned. If you have another problem, please don't hesitate to report it here or on the google discussion group
Thanks for your interest in Spyder,
Carlos
Status: Invalid

From ashwin.sathya on 2011-05-24T07:24:49Z
Sorry for the delayed response. This was exactly what i had requested for.
However, will love to see if we can get a elflord(available in
vim) available there

From<EMAIL_ADDRESS>on 2011-10-30T10:27:06Z
Reclassifying as valid and fixed.
Summary: Color scheme support in the editor
Status: Done


[SINT-1841] Dogfood Datadog SCA

What does this PR do?

Add a new Gitlab CI job listing this repository dependencies with trivy and uploading them to Datadog. This will make it possible to use the SCA product for this repository (see https://app.datadoghq.com/ci/code-analysis?limit=100&offset=0).
Motivation

@DataDog/software-integrity-and-trust partners with @DataDog/static-analysis to dogfood their SCA product and secure Datadog's supply chain.
Additional Notes
I created and saved an app key in the AWS build-stable account under path: ci.datadog-agent.datadog_app_key_org2 with appropriate permissions.

Possible Drawbacks / Trade-offs

Describe how to test/QA your changes

Successful CI execution: https://gitlab.ddbuild.io/DataDog/datadog-agent/-/jobs/439355805
Navigate to https://app.datadoghq.com/ci/code-analysis?limit=100&offset=0 and check DataDog/datadog-agent is visible in the list. Click it, and inspect its dependencies.

/merge


Weird behavior recently

Recently I see that when I try to run tmux I face the following issue using the latest kitty terminal, but it used to be smooth earlier:

Same issue, the latest tmux version and MacOS iterm2

Same issue, the latest tmux version and MacOS iterm2

It seems it was happening because there was a running session already. So I killed the server ( tmux kill-server) and restarted and it worked fine.


TBCEditor Subcomponentstructure is very static

Currently everything like Completionproposal, Minimap, SearchEngine etc is a part of the Editor.
For example the CompletionProposal (except from OnBeforeExecute) has no events. Neither can i derive from the existing one to extend it. For example how am i supposed to add icons to each entry? Instead of everything being baked into one thing i'd expect components you can put together.

That is my considered choice. I don't want to mess up with multiple components like SynEdit does. But the source is completely free and anyone can do whatever they want with it. Because this is my hobby, I can do also whatever I want with it and believe me I will. :)


Minor fixes to showReport

Handle newlines in app name
Don’t output name/value for name == u'accounts:authorized_apps as apps are listed later

Jay,
I've got one app with a  newline.
App: Copia de Set All or Some Questions as Required?\n,1 users,
629218857843-l9v5q1qr9cktij43tifhijf6phqvtr6u.apps.googleusercontent.com
If you don't include the continue (which used to be there) you get this
bogus line.
accounts:authorized_apps,0,
The 0 is left over from the previous iteration through the loop. The
continue is not for all msgValues, just accounts:authorized_apps
  elif u'msgValue' in item:

    if name == u'accounts:authorized_apps':

      for subitem in item[u'msgValue']:

        app = {}

        for an_item in subitem:

          if an_item == u'client_name':

            app[u'name'] = u'App: %s' % subitem[an_item].replace(u'\n',

u'\n')
          elif an_item == u'num_users':

            app[u'value'] = u'%s users' % subitem[an_item]

          elif an_item == u'client_id':

            app[u'client_id'] = subitem[an_item]

        auth_apps.append(app)

      continue

Ross
On Wed, Mar 22, 2017 at 12:03 PM, Jay Lee<EMAIL_ADDRESS>wrote:

@jay0lee commented on this pull request.
In src/gam.py
https://github.com/jay0lee/GAM/pull/452#discussion_r107504338:

           elif an_item == u'num_users':

             app[u'value'] = u'%s users' % subitem[an_item]
           elif an_item == u'client_id':
             app[u'client_id'] = subitem[an_item]
         auth_apps.append(app)

     continue

also not sure why this is needed if rest of loop is inside the else...
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
https://github.com/jay0lee/GAM/pull/452#pullrequestreview-28481262, or mute
the thread
https://github.com/notifications/unsubscribe-auth/AIU8L0_WkmOXJLfdsZHjy4E2paB7pHzmks5roXCCgaJpZM4MlqqC
.

--
Ross Scroggs
<EMAIL_ADDRESS>


Add instructions on how to use?

This tool looks interesting but the Readme is a little bare bones.  Could you add some instructions of how to use it?

@jmreicha I have another project which uses this module: https://github.com/ibrokethecloud/prometheus-container-monitor
Have a look at this.


composer: use PSR-4 autoload

PSR-0 is deprecated over a year

Hi @TomasVotruba  thanks a lot!!
can you please fix the PR A non-empty PSR-4 prefix must end with a namespace separator.
I think you have to add the // at the end of namespace

Hi, oh sry, I forgot that. Fixed!

:+1:  @TomasVotruba

:+1:

@TomasVotruba I think composer has problem can you run composer validate ASAP?

@liuggio Could you link me to the issue?

@TomasVotruba  https://github.com/liuggio/ExcelBundle/issues/96


Don't remember last payload for telemetry

The remembering approach is generally fine, but I have a small worry about bloating memory when aggregators have high volume.
Instead, for integration tests, we'll override the default client post implementation and capture the params and result.
I also left a #TODO here around making an assertion of the endpoint we're posting too. Feels like a good thing to have.
Pardon the occasional rubocop formatting noise.

@mikowitz the other thought I had here is that we could restructure things such that sync returns the status, data sent, and endpoint for us to make assertions on in tests (and the live client never uses that return value). It would help us avoid hijacking client in tests.
I don't feel strongly enough about it to do the work now (maybe later) but mention it in case you think it'd be a quick and worthwhile refactor.

@semanticart I tried that, and the problem is that because the sync mechanism wraps the actual post to the endpoint in Concurrent::ThreadPoolExecutor#post do ... end, it becomes non-trivial to get the request and data out of that thread back into the test thread. Possibly worth digging into more at some point, but for now, if this solution works, I'm fine to go with it.

Also, since it had the TODO here, added test data for endpoints in the data repo PR and added the test steps here.

Sounds good!


Feature/ab

Codecov Report
Patch coverage: 100.00% and project coverage change: +0.05 :tada:

Comparison is base (dbde440) 86.69% compared to head (ed32678) 86.74%.

Additional details and impacted files
@@            Coverage Diff             @@
##           master     #111      +/-   ##
==========================================
+ Coverage   86.69%   86.74%   +0.05%
==========================================
  Files          10       10
  Lines         248      249       +1
  Branches       42       43       +1
==========================================
+ Hits          215      216       +1
  Misses         33       33

Impacted Files
Coverage Δ

contracts/libraries/DynamicSuffix.sol
100.00% <ø> (ø)

contracts/libraries/FusionDetails.sol
90.90% <ø> (ø)

contracts/Settlement.sol
91.37% <100.00%> (+0.15%)
:arrow_up:

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Do you have feedback about the report comment? Let us know in this issue.


Publish NuGet packages

ClangSharp.Pathogen work

[x] Embed the untracked assembly info files to make Source Link happy.
[x] Add disclaimer to ClangSharp.Pathogen packages to clarify they're primarily meant to be consumed by Biohazrd.
[x] Change the ClangSharp.Pathogen -> ClangSharp.Pathogen.Runtime dependency to be exact since we do not guarantee
ABI compatibility in the native runtime.

Requires using this custom target: https://github.com/NuGet/Home/issues/5556#issuecomment-585482714
[x] Ditto for the ClangSharp reference

[x] Set up (fix?) CI publish to NuGet.org
[x] Add NuGet badge to readme
[x] Fix ClangSharp.Pathogen solution using x64 as the solution platform

Biohazrd packages

[x] Add package metadata to all published projects

[x] Decide on package description format. (Right now it's intentionally inconsistent.)
[x] Change all packages to use the two-line description format.

[x] Make the package name of the Biohazrd project Biohazrd.Core
[x] Make a metapackage named Biohazrd which includes all the packages for C# development

[x] TODO: What should the plan be for other languages? For instance, Biohazrd.DLang should probably be the equivalent of Biohazrd.CSharp, but what would a D-centric generator reference? Do they just reference Biohazrd and Biohazrd.DLang and ignore the C# bits? -- Let's just burn this bridge when we cross it.

[x] Set up source link
[x] Set up CI packages (automatically publish main runs to GitHub Packages.)
[x] Set up manually-triggered CI publish to NuGet.org

[x] Add validation that published packages don't reference CI builds of ClangSharp.Pathogen. (Implicitly happens during restore since we don't include the CI package source.)

[x] Don't even include the CI package feed in release CI builds
[x] Implement not including the CI package feed in release CI builds (make it always include production NuGet.org)

[x] Stop marking Biohazrd as x64-only to avoid MSB3270 warnings.

This restriction was in place primarily because ClangSharp.Pathogen only provides x64 matrix runtimes. While this is still true, nothing about Biohazrd its self is x64-only, and advanced users can manually provide their own libclang-pathogen for their platform as necessary.

[x] Use exact version matching for Biohazrd project dependencies since we don't support proper semver. (Developers can add NoWarn="NU1605" to their PackageReference if they can manually validate that packages are compatible. Also this serves as a scream test to discover if someone starts wanting semver semantics out of Biohazrd. Considering Roslyn does this I think we can safely do so as well.)
[x] Add NuGet badge to readme

Packages published! 🎉


feat: 🎸 support asset IDs as uuids

JIRA Link
DA-1347
https://polymesh.atlassian.net/browse/DA-1347
Changelog / Description

return the assetId as asset in the response when creating an asset
use uuid format for asset ID

Checklist -

[ ] New Feature ?
[ ] Updated swagger annotation (if API structure is changed) ?
[ ] Unit Test (if possible) ?
[ ] Updated the Readme.md (if required) ?

/fast-forward


Bank vault unsealer init container crashing when using GCP KMS and postgres key store

Describe the bug:
Hi Team, I am facing issue while installing vault helm chart(https://github.com/banzaicloud/bank-vaults/tree/master/charts/vault). The bank-vault container running argument “unseal” “init” is crashing with following error.
`

$ kubectl logs -n vault vault-0 -c vault-unsealer
{"level":"info","msg":"initializing vault...","time":"2021-10-27T20:41:58Z"}
{"level":"info","msg":"vault metrics exporter enabled: :9091/metrics","time":"2021-10-27T20:41:58Z"}
{"level":"info","msg":"initializing vault","time":"2021-10-27T20:41:58Z"}
{"level":"fatal","msg":"error initializing vault: error testing keystore before init: error getting secret for key 'vault-test': resource name may not be empty","time":"2021-10-27T20:41:58Z"}

`
Expected behaviour:
unsealer container should have completed without error, since there is no such key 'vault-test' in postgres table.
`

vault=> select * from vault_kv_store;
 parent_path | path | key | value
-------------+------+-----+-------
(0 rows)
vault=> select * from vault_ha_locks;
 ha_key | ha_identity | ha_value | valid_until
--------+-------------+----------+-------------
(0 rows)

`
Steps to reproduce the bug:
Install vault helm chart using https://github.com/banzaicloud/bank-vaults/tree/master/charts/vault. My configuration for postgres backend and seal/unseal looks like below,
in values.yaml
`

unsealer:
  image:
    repository: banzaicloud/bank-vaults
    tag: "1.14.3"
    pullPolicy: IfNotPresent
  args:
    [
      "--google-cloud-kms-key-ring",
      "gcp-key-ring",
      "--google-cloud-kms-crypto-key",
      "gcp-crypto-key",
      "--google-cloud-kms-location",
      "global",
      "--google-cloud-kms-project",
      "gcp-project"
    ]

vault:
  config:
    listener:
      tcp:
        address: "<IP_ADDRESS>:8200"
        tls_client_ca_file: /vault/tls/ca.crt
        tls_cert_file: /vault/tls/tls.crt
        tls_key_file: /vault/tls/tls.key
    storage:
      postgresql:
        connection_url = "postgres://user:password@host:5432/vault"
        ha_enabled = "true"
        ha_table = "vault_ha_locks"
    seal:
      gcpckms:
        project     : "gcp-project"
        region      : "global"
        key_ring    : "gcp-key-ring"
        crypto_key  : "gcp-crypto-key"

`
I don't see any permission issue to connect to gcp to read unseal key from KMS using service account. It is working fine, service account has enough permissions.
Additional context:
logs from vault container:
`

$ kubectl logs -n vault vault-0 -c vault
telemetry.disable_hostname has been set to false. Recommended setting is true for Prometheus to avoid poorly named metrics.
==> Vault server configuration:

      GCP KMS Crypto Key: crypto-key
        GCP KMS Key Ring: key-ring
         GCP KMS Project: project
          GCP KMS Region: global
             Api Address: https://
                     Cgo: disabled
         Cluster Address: https://:444
              Go Version: go1.15.7
              Listener 1: tcp (addr: "<IP_ADDRESS>:8200", cluster address: "<IP_ADDRESS>:8201", max_request_duration: "1m30s", max_request_size: "33554432", tls: "enabled")
               Log Level: info
                   Mlock: supported: true, enabled: true
           Recovery Mode: false
                 Storage: postgresql (HA available)
                 Version: Vault v1.6.2
             Version Sha: be65a227ef2e80f8588b3b13584b5c0d9238c1d7

==> Vault server started! Log data will stream in below:

2021-10-27T20:41:31.655Z [INFO]  proxy environment: http_proxy= https_proxy= no_proxy=
2021-10-27T20:41:31.854Z [INFO]  core: stored unseal keys supported, attempting fetch
2021-10-27T20:41:31.855Z [WARN]  failed to unseal core: error="stored unseal keys are supported, but none were found"
2021-10-27T20:41:35.554Z [INFO]  core: security barrier not initialized
2021-10-27T20:41:35.555Z [INFO]  core.autoseal: seal configuration missing, but cannot check old path as core is sealed: seal_type=recovery
2021-10-27T20:41:36.855Z [INFO]  core: stored unseal keys supported, attempting fetch
2021-10-27T20:41:36.857Z [WARN]  failed to unseal core: error="stored unseal keys are supported, but none were found"
2021-10-27T20:41:40.566Z [INFO]  core: security barrier not initialized
2021-10-27T20:41:40.567Z [INFO]  core.autoseal: seal configuration missing, but cannot check old path as core is sealed: seal_type=recovery
2021-10-27T20:41:41.857Z [INFO]  core: stored unseal keys supported, attempting fetch
2021-10-27T20:41:41.859Z [WARN]  failed to unseal core: error="stored unseal keys are supported, but none were found"

`
unsealer container crashes before using the unsealer key(KMS) to decrypt the master token and unseal the vault.
I tried deleting the postgres database instance and created it again. Facing same issue.
Environment details:

bank-vaults version: “1.14.4”
bank-vault docker image: “1.14.3"
vault docker image: “1.6.2”
Kubernetes version: "1.19.14-gke.1900"
Cloud-provider/provisioner: GKE
Install method: helm

/kind bug

Can you please help me to resolve this issue?


Limit JSON-RPC retries

So that we don't get stuck, for example requesting a block hash that got reorged. The block stream already resets on error so this will not fail the subgraph.

@leoyvens The changes look good. Could you briefly explain how this is not failing the subgraph but resets the block stream and tries again outside the adapter. I forgot how that worked.

Heh, wait. Isn't this more or less the same as https://github.com/graphprotocol/graph-node/pull/1277/files?

@Jannis it is 🤦♂. The difference is that this only limits retries for calls used in the block stream. For example I'm not sure if limiting retries in the block ingestor would be prudent.
I like the env var name in that PR better so I renamed it in this PR, and documented it.

@leoyvens I think my PR caused more drastic failures in situations where they weren't desirable. So let's go with yours.


chore: Use distroless base image instead of alpine

What this PR does / why we need it:
This PR uses distroless static non-root Docker base image using the standard nobody uid (65534). This simplifies the build in a (very) small way.

@jimmidyson Thanks for doing this. However, I am not sure if this is desirable as of now. AFAIK the distroless image is more secure, but it makes it difficult to debug problems.
I would recommend keeping it as it is until we have a more concrete plan for a stable release.
You might have a better reasoning for this update. Please let me know if there is one.

That is a very good point. I've got so used to using ephemeral containers for debugging on my projects, but realise that it's alpha so not enabled by default. I'll close this for now and open an issue, but I would like to revisit this for beta/GA when people are running this in production.
Out of interest, do you have a list of common issues that you regularly troubleshoot for kubefed? Would be good to get together a doc for users perhaps?

/close


Bitsandbytes cannot find CUDA libraries

System Info
Windows 10
Python 3.10.3
Reproduction
I installed bitsandbytes on Windows this way:

pip install https://github.com/jllllll/bitsandbytes-windows-webui/releases/download/wheels/bitsandbytes-0.41.0-py3-none-win_amd64.whl

But I get the following error when I try to import the lib:

UserWarning: C:\Users\kevguima\AppData\Local\anaconda3\envs\genai did not contain ['cudart64_110.dll', 'cudart64_12.dll'] as expected! Searching further paths...
warn(msg)
The following directories listed in your path were found to be non-existent: {WindowsPath('/EMED2ADC01')}
The following directories listed in your path were found to be non-existent: {WindowsPath('C:/Users/kevguima/Documents/WindowsPowerShell/Modules')}
CUDA_SETUP: WARNING! libcudart.so not found in any environmental path. Searching in backup paths...
The following directories listed in your path were found to be non-existent: {WindowsPath('/usr/local/cuda/lib64')}
DEBUG: Possible options found for libcudart.so: set()
CUDA SETUP: PyTorch settings found: CUDA_VERSION=118, Highest Compute Capability: 8.6.
CUDA SETUP: To manually override the PyTorch CUDA version please see:https://github.com/TimDettmers/bitsandbytes/blob/main/how_to_use_nonpytorch_cuda.md
CUDA SETUP: Required library version not found: libbitsandbytes_cuda118.dll. Maybe you need to compile it from source?
CUDA SETUP: Defaulting to libbitsandbytes_cpu.dll...
...

Though, I properly installed the CUDA runtime and the file cudart64_12.dll can be found in my Anaconda environment:
C:\Users\kevguima\AppData\Local\anaconda3\envs\genai\Lib\site-packages\nvidia\cuda_runtime\bin
I add that torch can locate it (i.e. torch.cuda.is_available() returns True).
So, what should be done so that bitsandbytes could locate CUDA libraries?
Expected behavior

I expect bitsandbytes to be properly ported to Windows (many issues already report this problem)
I expect bitsandbytes to properly detect the CUDA libraries, or to document the way to configure the paths

As an update, I set the variable LD_LIBRARY_PATH to the CUDA installation path "C:\Program Files\NVIDIA GPU Computing Toolkit\CUDA\v12.3\bin" and bitsandbytes finds it but still doesn't find the required libraries inside...

C:\Users\kevguima\bitsandbytes\bitsandbytes\cuda_setup\main.py:183: UserWarning: C:\Program Files\NVIDIA GPU Computing Toolkit\CUDA\v12.3\bin did not contain ['cudart64_110.dll', 'cudart64_12.dll'] as expected! Searching further paths...

I suspect the issue to be the absence of the 'cudart64_110.dll' file in the CUDA installation directory. Do you confirm?

@kevin-guimard-ext The bitsandbytes distribution you've installed is from a third-party so it's hard to say. However, it does look like you've got PyTorch built with CUDA 11.8 installed, but also trying to load libraries from a CUDA Toolkit v12.3, so that's why things aren't lining up. Normally you shouldn't really even need the CUDA Toolkit installed.
You should find the cudart64_110.dll somewhere included with your PyTorch installation, e.g. in torch/lib. Maybe you can get away with using os.add_dll_directory() to point to the right location as LD_LIBRARY_PATH doesn't do anything for Windows.
An official Windows build will be coming rather soon. Until then, you could also try compiling from source.

About how soon @matthewdouglas ?

@matthewdouglas Thanks for your reply. I was about to apply your suggestions when I found out that everything already worked... My computer reboot made miracles. :) So please post a Windows version soon in 0.41.3+ so that it could support 4-bit models.

@ELMatero6 @kevin-guimard-ext FYI: v0.43.0 has been released, which includes support for Windows!

Awesome! Thank you @matthewdouglas.

@matthewdouglas You the man matthew! I would never have noticed!

Dear all,
Since the current release (last week, 8th of March) we now have official support for Windows 🎉 (which we did not have before) via
pip install bitsandbytes>=0.43.0

We're closing all old Windows issues and are asking everyone to try installing with this new version as outlined above and validate the install with python -m bitsandbytes which should spit out a bunch of stuff and then SUCCESS. Please let us know if everything worked correctly in this new umbrella / catch-all issue. Thanks 🤗


:zap: Apply (configurable) back-pressure to backfills

#687  👈 (View in Graphite)
main

This stack of pull requests is managed by Graphite. Learn more about stacking.


Add YouTube / Vimeo text from corresponding API's

For YouTube posts, the description/text is not available as it can only be requested by the corresponding API's.

Resolved by #5


add scheduler for optimizaiton and ut

shceduler.py handles the learning rate of algorithm optimization

need to add numpy


Calculate NDVI peak

Why have changes been made?
We need to integrate Ivar's NDVI peak calculation to add NDVI to our list of covariates.
What changes have been made?

data/external/focalCovariates.csv - NDVI peak has been added to our focal covariate list
functions/get_modis.R - an ndvi_peak argument has been added to this, and Ivar's code has been integrated into the function
pipeline/import/utils/defineEnvSource.R - we use the focal parameter to decide whether to start processing ndvi or net productivity data

since only one layer exists per day, imported using rast for all days in a year and removed merge() (theoretically used if  multiple objects for a given day)
I changed use of app() for max/mean to standard terra::max() and terra::mean(), which are significantly optimised.
-- terra::max() returns NaN when value is NA rather than -Inf, so I commented out clamp(lower = 0) function. It was not deleted, because there are still NDVI values between -2000 and 0 which would have been turned into NA. I assumed we don't want this, but if we do, we can uncomment "set lower NDVI limit to 0" section.

You were not joking when you said it'd be exponentially quicker


distDocker task requires clean to reflect code changes

Description
As a developer, I want distDocker to conform to what is typically expcted of tasks, that they rebuild any dependencies. Recompiling and distributing the reassembled code into the docker image seems like it should be automatically triggered.
Acceptance Criteria

./gradlew distDocker will reflect code changes from the last time this command was run.

Steps to Reproduce (Bug)

./gradlew clean
Edit main in besu.java to

  public static void main(final String... args) {
    final Logger logger = setupLogging();
    logger.info("1");
    System.exit(0);

run ./gradlew --parallel distDocker && docker run hyperledger/besu:1.4.7-SNAPSHOT (or whatever your snapshot version is) and observe the 1
Edit main in besu.java to

  public static void main(final String... args) {
    final Logger logger = setupLogging();
    logger.info("2");
    System.exit(0);

run ./gradlew --parallel distDocker && docker run hyperledger/besu:1.4.7-SNAPSHOT and observe the 1
./gradlew --parallel clean distDocker && docker run hyperledger/besu:1.4.7-SNAPSHOT and observe the 2

Versions (Add all that apply)

Software version: 8589177e49740e5ad533f99819de88fa35c82933

@davemec definitely optional but fixing this (or finding a workaround) would make iterating on the hive tests a much faster experience since you won't have to recompile besu from scratch each time.


rename types

rename :
- LockedRound       -> PreferredRound
- EpochId           -> Epoch
- PersistentStorage -> PersistentSafetyStorage
- ProcessedVMOutput -> StateComputeResult

Note: when renaming, variables and acronyms were renamed consistently also.

refactored stuff from
- Persistent[Saftey]Storage to SafetyData

change constructor names
- mk* -> *.new (e.g., mkBlock -> Block.new where the '.' is a solid bullet)

Thanks @haroldcarr, merging now.


How the secret share is managed on the server side for Particle's TSS wallet solution?

https://docs.particle.network/security


TagBot trigger issue

This issue is used to trigger TagBot; feel free to unsubscribe.

Triggering TagBot for merged registry pull request: https://github.com/JuliaRegistries/General/pull/73784

Triggering TagBot for merged registry pull request: https://github.com/JuliaRegistries/General/pull/74906

Triggering TagBot for merged registry pull request: https://github.com/JuliaRegistries/General/pull/75187

Triggering TagBot for merged registry pull request: https://github.com/JuliaRegistries/General/pull/75529

Triggering TagBot for merged registry pull request: https://github.com/JuliaRegistries/General/pull/75536

Triggering TagBot for merged registry pull request: https://github.com/JuliaRegistries/General/pull/75675


#6542: Little issue with content picker

Fixes in one place #6542
When using the new Add Selected button that allow to select multiple items in the content picker view, the returned data is not an item but an array of items. Some scripts that consume these data has been updated but not in all places.
Here, because a content menu item only needs one related item, if data is an array we only use the first one.
Note: Same issue to insert an item in a list (Orchard.Lists). Here, we have to iterate through the array to insert multiple items. I need to update orchard-lists-admin.js but i need to update my tools to produce the minified version of the script. I'll do it asap.
Best

Please target 1.10.x


Update docs for sdk config

Add docs for SDK v4.2.0 which includes additional SDK configuration.
Documents support for the attribution preference

🟡 Heimdall Review Status

Requirement
Status
More Info

Reviews

🟡
0/1

Denominator calculation

Show calculation

1 if user is bot
0

1 if user is external
0

From .codeflow.yml

1

Additional review requirements

Show calculation

Max
0

0

From CODEOWNERS

0

Global minimum
0

Max

1

1

1 if commit is unverified
1

Sum
2


Failures on [package:js] Added checks for external non-JS members....[VM] Adds Debugger break for Future.catchError

There are new test failures on [package:js] Added checks for external non-JS members....[VM] Adds Debugger break for Future.catchError.
The tests
standalone/io/large_file_read_small_file_test RuntimeError (expected Pass)
standalone_2/io/large_file_read_small_file_test RuntimeError (expected Pass)

are failing on configurations
dartk-strong-win-release-ia32
dartk-weak-asserts-win-release-ia32
dartk-win-debug-ia32
dartk-win-release-ia32

Example log:
--- Command "vm" (took 06.000593s):
set DART_CONFIGURATION=ReleaseIA32 & set DART_SUPPRESS_WER=1 & set DART_CRASHPAD_HANDLER=C:\b\s\w\ir\out\ReleaseIA32\crashpad_handler.exe & out\ReleaseIA32\dart.exe --sound-null-safety --ignore-unrecognized-flags --packages=C:\b\s\w\ir\.packages C:\b\s\w\ir\tests\standalone\io\large_file_read_small_file_test.dart

exit code:
255

stderr:
Unhandled exception:
FileSystemException: read failed, path = 'C:\b\s\w\itpckxdq\large_file_read85c458f0\hello_world.txt' (OS Error: Not enough storage is available to process this command.

, errno = 8)
#0      _RandomAccessFile.read.<anonymous closure> (dart:io/file_impl.dart:746:9)
<asynchronous suspension>
#1      main.<anonymous closure> (file:///C:/b/s/w/ir/tests/standalone/io/large_file_read_small_file_test.dart:38:21)
<asynchronous suspension>
#2      runWithTempDir (file:///C:/b/s/w/ir/tests/standalone/io/large_file_read_small_file_test.dart:13:5)
<asynchronous suspension>
#3      main (file:///C:/b/s/w/ir/tests/standalone/io/large_file_read_small_file_test.dart:25:3)
<asynchronous suspension>

--- Re-run this test:
python tools/test.py -n dartk-strong-win-release-ia32 standalone/io/large_file_read_small_file_test

/cc @mkustermann

I hope the 2 CLs I landed will get rid of this issue.

Noting that it went from RuntimeError -> Timeout on dartk-win-release-ia32 last night after these changes (logs).

I'll have to get a windows machine and try to debug it. Possibly I'll just skip the tests on windows then. They are fulfilling their purpose on linux where the issue was observed.


[CWS] Add setting to disable enforcement capabilities

What does this PR do?
Add a runtime_security_config.enforcement.enabled config flag to disable
enforcement capabilities. Rules using this capability will still apply but the
action will be ignored.

Motivation
Ability to disable any enforcement capabilities.

Additional Notes

Possible Drawbacks / Trade-offs

Describe how to test/QA your changes

Create a rule making use of the 'kill' action.
Check the rule works properly.
Set runtime_security_config.enforcement.enabled to false and check that the rule action is not executed.

Reviewer's Checklist

[ ] If known, an appropriate milestone has been selected; otherwise the Triage milestone is set.
[ ] Use the major_change label if your change either has a major impact on the code base, is impacting multiple teams or is changing important well-established internals of the Agent. This label will be use during QA to make sure each team pay extra attention to the changed behavior. For any customer facing change use a releasenote.
[ ] A release note has been added or the changelog/no-changelog label has been applied.
[ ] Changed code has automated tests for its functionality.
[ ] Adequate QA/testing plan information is provided. Except if the qa/skip-qa label, with required either qa/done or qa/no-code-change labels, are applied.
[ ] At least one team/.. label has been applied, indicating the team(s) that should QA this change.
[ ] If applicable, docs team has been notified or an issue has been opened on the documentation repo.
[ ] If applicable, the need-change/operator and need-change/helm labels have been applied.
[ ] If applicable, the k8s/<min-version> label, indicating the lowest Kubernetes version compatible with this feature.
[ ] If applicable, the config template has been updated.

/merge


Button coloring (icon is hidden after type update)

Describe the bug
Button coloring hides the icon after updating it's type
To Reproduce
use a button and react on a click event e.g.:
def thumb_up(self, e: ClickEvent):
    if self.state.voted is False:
        self.state.voted = True
        self.state.rating = 1
        feedback(self.state, page="chat", positive=True, data=None)
        print("Thumb up")

with me.content_button(
on_click=self.thumb_up,
# disabled=self.state.voted, # not used due to color change
type="flat" if self.state.rating > 0 else "icon",
):
    me.icon("thumb_up")

this will change the button type as soon as it's pressed, but the bug is: the icon is not shown anymore.
the icon will show up if a second message is sent (just for testing purposes this uses the same definition).
Expected behavior
The icon should be shown.
Screenshots

Additional context
NOTE: the disable button is not used here, as this is not yet configurable in color.
(this might be a feature MESOP should implement to have custom "disabling" colors rather than just graying out a disabled button)

workaround that is at least working for the icon color:
with me.content_button(
    on_click=self.thumb_up,
    # disabled=self.state.voted, # not used due to color change
    type="icon",
    style=(
        me.Style(color="#0064ff") if self.state.rating > 0 else None
        ),
    ):
        me.icon("thumb_up")


Into the unknown quest bug

Quest does not appear of quest log, unable to advance the main quest as a result. The Reddit IRL attached to this report goes into further detail with multiple parties across PC and console having the same issue.

Details
https://www.reddit.com/r/Starfield/comments/1684aht/main_quest_bug_into_the_unknown/
Game Version
12053165
New Game
Yes
Reproduction Steps
From what I have read it has to do with advancing the Crimson Fleets missions before Constellation with then can cause the bug.

Some more information as I've been digging into this one.
I too had an issue because I did crimson fleet quests first.
It doesn't allow the quest to start at all, it shows up as stopped by doing player.sqs 160a9
Sqs shows stage 0 and stopped
Advancing to any of the stages does not progress
Reset quest does nothing
Completequest removes the dialogue about Vlad from Sarah, nothing else
Progression can be forced by starting the next quest and being forced to Neon with Walter. This leaves Andrejas dialogue bugged.
Don't know if any of that's of use, but that's what I've found

I've had this issue too but the quest failed to appear before doing any Crimson Fleet stuff. My order of playing was I got the Constellation quest with Sarah, did the UC faction quest, after which the Deep Cover (start of the Crimson Fleet quest) quest became available but instead I did the Constellation quest with Sarah, then the Rangers quest and then the Constellation quest with Sam. Into The Unknown failed to appear. I didn't even know it was a bug initially and started doing some side quests and eventually started Deep Cover.

I had this issue, It seems to resolve itself randomly after a time.
No console commands work.
I saw on reddit that for everybody it happens to show randomly playing it normally.
One guy said that he waited for 3 days and it showed.

This seems to be fixed by Bethesda in the latest patch.
Cannot confirm that it was really fixing, because I'm not facing this bug anymore, before the patch was released.

Closing as fixed by Bethesda.


Will Google play store be supported?

or is there a way to install it?

not with Chromium OS, unless Google decides to change how things are.

not with Chromium OS, unless Google decides to change how things are.

@Itai-Nelken  https://releases.fydeos.io/11.4/rpi4-fydeos you may want to check out this one, it's FydeOS for You, not Chromium OS, and it supports Android and Linux.

@Itai-Nelken  https://releases.fydeos.io/11.4/rpi4-fydeos you may want to check out this one, it's FydeOS for You, not Chromium OS, and it supports Android and Linux.

Great! I'll check it out!

Great! I'll check it out!

@fydeos-alpha where can I open a bug report/ask a question about FydeOS for You rpi?
it keeps freezing on my pi4 4gb, sometimes it recovers, and most of the time I have to force reboot it by taking the power out/in.
I'm using a pretty old samsung EVO+ 32gb sd card, could that be the culprit?

@fydeos-alpha where can I open a bug report/ask a question about FydeOS for You rpi?
it keeps freezing on my pi4 4gb, sometimes it recovers, and most of the time I have to force reboot it by taking the power out/in.
I'm using a pretty old samsung EVO+ 32gb sd card, could that be the culprit?

someone?


Deploy "N" EDPM nodes

ref: https://github.com/openstack-k8s-operators/dataplane-operator/pull/189
make edpm_nodes EDPM_TOTAL_NODES=4
make edpm_deploy DATAPLANE_TOTAL_NODES=4 DATAPLANE_SINGLE_NODE=false

@fultonj I agree, I'll drop the loop.
About edpm_compute_repos instead of looping, I believe we can use a service:
https://github.com/openstack-k8s-operators/dataplane-operator/pull/189
the idea is making easier to do scale tests (OSP-23847), so instead of calling edpm_compute_repos 200 times, it would be better t have it set in parallel through AEE

recheck

recheck

recheck


Link not working

I have added links in flowchart. see image below-

It is generating flowchart successfully and also showing link when I hover on it.

But issue here is when I click the box it is not opening the link(www.google.com).
I checked in browser I see below errors.

Is it because of this (raphael)error link is not working?
How to make the link work.
Thank you https://github.com/adrai

please create areproducible example... seems to work here: https://flowchart.js.org/

I am not sure why it is not working at my side. Is there any way we can connect on call and while sharing screen you an check the code.?

Minimal reproducible example:::
Step 1: Declaration
st=>start: START
start=>parallel: -_-
end=>end: END:>http://www.yahoo.com
ldm=>operation: Leather Defect Marking
spreadcncroll=>operation: Spreading rolls and CNC cutting roll material
scannest=>operation: Leather scanning and nesting /CNC cutting real leather
spreadcncfoam=>operation: Spreading rolls and CNC cutting foam / spacer material
Step 2: Implementation
st->start(path1, bottom)->end
start(path3, right)->end
Problem : If you notice, I have added link to 'end' but it is not working. I am not able to click on it.
Let me know if you need more details. I should have uploaded image but my employer does not allow me.

Seems to work here: https://flowchart.js.org/

So must be something in your website/code... sorry


Nekoin token and community DAO

The Nekoin token is our community DAO token used to vote and suggest ideas.
The original idea was to do everything on-chain, but that would be expensive and hard to implement. The first issue is the community member needs to spend GAS to interact with the contract. The second issue is the contract need to support multiple DAO type, like voting (select 1 or N from X options), selection (select 1 or N from unlimited options), do something (call on-chain contract if X% vote is gained).
The first issue can be solved by issuing new tokens when users vote. For the UNI, they mint 2% tokens per year. We can mint new tokens for every event at a low rate instead of every year. For example, the initial supply is relatively small (100K), and for each event, we mint 0.1% (can be set per event) and give them to the user when they vote. When the vote ends, the contract owner (us) will stop the event, mint the new token, and distribute it to the community user based on their real-time balance. But how much GAS will it cost us is unknown.
The second issue is not easy to solve. We have to implement different types of DAO under a unified framework and ensure the framework can be extended to support more kinds of DAO in the future.

Then AxLabs hosts a DevLog about the community DAO, which makes me think about putting everything on-chain. And then, I have the second idea, which mixing the on-chain and off-chain parts. For example, use the Nekoin token to prove someone is a community member. Then we can make use of cryptography. We can talk things off-chain (like GitHub), then the user would attach their signature to the message using their wallet, so now the GitHub comments will link with their NEO N3 account. At this time, by fetching the user's balance from the chain.
This method is easier to implement since the on-chain part is only a NEP-17 token. And the off-chain world has many APIs, which make coding easier. However, this needs everyone to trust GitHub (since someone can delete a message or change the message) and trust someone to fetch and handle the data processing.

Another idea is copy & pasted from ETH. I noticed there is a service on ETH called snapshot, it offers a way to vote off-chain (thus no fee and easy to discuss), meanwhile enjoys the on-chain DAO (take a snapshot of a given block number and use the account balance to count the vote result).
By doing some coding, I find out a way to read data of a given contract at a given block at anytime, which, basically is the snapshot of a given block number. However, I can only read the storage area, I cannot invoke contract under a given block. So you have to read the data and reconstruct the objects somewhere else.
With this ability, I think it offers a better way to let off-chain world to use on-chain data. Instead of storing the vote on-chain, we can do the vote off-chain and store a signed message to identify who vote for what, then take a snapshot of the balance and count the result. Which, in my word, is a simple copy & paste of snapshot.org from ETH.
With this method, we have to solve those issues: There has to be a place to discuss, and it's inevitably to be a centralized service, but if it's operated by the core community members, or the developing team, then it would be more trustable. The second issue is How to incorporate on-chain data. discourse is a platform for community discussion, but it's written in Ruby, I have no idea on how to add features on it, like binding N3 wallet address to the website account, add vote methods, etc. Discord is a good place, maybe a discord bot can help?

Implemented nekoin token: https://github.com/NekoHitDev/Ritmin/pull/47


Publish snapshots on merge

Changed the publish code as this was causing a syntax error - explained here: http://blog.tgrrtt.com/exploring-the-travisci-configuration-file#travis-amp-bash-scripts_2
@raulraja can you review please?

Codecov Report

Merging #40 into master will not change coverage.

@@           Coverage Diff           @@
##           master      #40   +/-   ##
=======================================
  Coverage   80.43%   80.43%
=======================================
  Files          10       10
  Lines          92       92
=======================================
  Hits           74       74
  Misses         18       18

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 05ad6f4...d37b9e4. Read the comment docs.


Import both plain text and Twitter for a single bot (Multiple data sources)

It would be awesome if there was support for multiple data sources to feed some text into the system to speed up the learning.
Example:
You archive the user's tweets and grep and filter their IRC logs and then consume them both into one model for one bot.

fwiw the consume command can be used to read in .json (with values for 'tweet'), .csv (with values for column named 'tweet'), and even lines from a text file (one line = one 'tweet'): https://github.com/mispy/twitter_ebooks/blob/master/lib/twitter_ebooks/model.rb#L142

@negatendo That was extremely helpful :+1: Thanks :)


Better looking errors

You can use miette for better errors its not really necessary but nice to have
dosc:
https://docs.rs/miette/latest/miette/
preview:

Can you give an example of an error that could be made better through miette?


Feature Request: p5.Oscillator missing getPhase() or getValue()

From @hepiyellow on April 15, 2017 17:30
I am missing the ability to sample the current value of an oscillator.
Either the value or the phase.
This would allow to make visuals which are synced to the sound.
For example a Freq modulation oscillator , and visuals which modulate in-sync would be very nice to have. I think it is the basic of good audio-visual creations.
Copied from original issue: processing/p5.js#1895

@hepiyellow ?
What are you looking for exactly ?  Doesn't those examples cover this use case ?
https://p5js.org/examples/sound-measuring-amplitude.html
https://p5js.org/examples/sound-oscillator-frequency.html
https://p5js.org/examples/sound-frequency-spectrum.html
on most of those function you can pass the size of the buffer you want to analyse. To get a sample accurate value you'd have to run your sketch at an impossible to achieve framerate.
Audio rate is 44100 samples per seconds, optimal sketch framerate is 60 frame per second.
So you need to do the analysis on a chunck of samples each frame and you can play on this buffer size to have something more responsive (with a small buffer - heavier on ressources) or something more based on averaged values (bigger buffer - easier on ressource but can introduce latency issues).
Let me know if it helps

Is this possible?
a= new p5.Amplitude();
a.setInput(new p5.TriOsc());

On 2017. Apr 19., at 0:37, b2renger<EMAIL_ADDRESS>wrote:
@hepiyellow ?
What are you looking for exactly ? Doesn't those examples cover this use case ?
https://p5js.org/examples/sound-measuring-amplitude.html
https://p5js.org/examples/sound-oscillator-frequency.html
https://p5js.org/examples/sound-frequency-spectrum.html
on most of those function you can pass the size of the buffer you want to analyse. To get a sample accurate value you'd have to run your sketch at an impossible to achieve framerate.
Audio rate is 44100 samples per seconds, optimal sketch framerate is 60 frame per second.
So you need to do the analysis on a chunck of samples each frame and you can play on this buffer size to have something more responsive (with a small buffer - heavier on ressources) or something more based on averaged values (bigger buffer - easier on ressource but can introduce latency issues).
Let me know if it helps
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub, or mute the thread.

Yes :) of course !
you may want to create a seperate variable for you oscillator though but yes definitely

In case it helps anyone else, osc.f and osc.output.gain.value will give you the frequency and amplitude of an oscillator osc.

.. and osc.phaseAmount gives you the phase. Looks like this can be closed.

thanks @aatishb!


34 image map element

Changes to add image-map and related properties
Fixes #34

[ ] Could the world-map gif go into regions/images please?

[ ]  Could the world-map gif go into regions/images please?

Done


test: remove unstable case

Signed-off-by: Wei Fu<EMAIL_ADDRESS>1.Describe what this PR did
Remove the unstable case
2.Does this pull request fix one issue?
Yes. Someone's CI failed caused by the unstable case.
3.Describe how you did it
Remove the case.
4.Describe how to verify it
I found that "stopped" status was setting by hooked.
The task already exited but the state is still running and waiting for hook. If the "rm" action and the cleanup job reads the status before the hook, the CI will fail.
Detail in: https://travis-ci.org/alibaba/pouch/builds/318601340#L614
The detail shows us EOF because the goroutine has paniced caused by https://github.com/alibaba/pouch/blob/master/ctrd/container.go#L199. If the task already exited, the err will be NoTFOUND. Then next call will use nil pointer and panic.....
I'm still thinking about how to avoid dirty read....
#346
5.Special notes for reviews
It will take long time if add timeout to wait the status. So I decide to remove the case. What do you think?
ping @allencloud and @mozhuli

Currently start API is not compatible with Moby's API. @skoo87 will come to refactor this. Removing test is OK.
LGTM

Thank you!


[WIP]Restart browser if it became unresponsive (closes #1815)

@testcafe-build-bot retest

@testcafe-build-bot retest

@testcafe-build-bot retest

Please review
P.S. We decided to run tests only in Chrome, but I need different user agents to manipulate with browser disconnects and assertions
P.P.S. The issue with hanging tests in FF is fixed, there is no need for workaround now

ping @AndreyBelym @helen-dikareva


event:pvp (and others) not working

NPC does attack (PLAYERS and MONSTERS is working). If i try event:pvp, event:pvnpc or the other ones, the npc does nothing. :(
More Information: I did removed all Ignors. Server version: Spigot 1.11.2

Is PvP actually validly happening without any intermediary plugins in the direct line-of-sight for the NPC Sentinel?


A problem I'm not sure if it's a bug, or, is it designed that way?

adxe version: latest
devices test on: any
developing environments

NDK version: r19c
Xcode version: 12.4
VS/msvctools version: Visual Studio 2019(16.11)/14.29.30133
cmake version:

Use cocos2d::Label::createWithTTF(...) to create a label;
setMaxLineWidth(...) and setLineBreakWithoutSpace(true) and setOverflow(Label::Overflow::RESIZE_HEIGHT)
setString(...)
Yes, now the label is able to wrap lines.
However, when I use cocos2d::Label::create() to create a label, the label line wrap doesn't seem to work?

Is this expected behavior?

That's strange, can you dig to check what happen?

This is because the _maxLineWidth length is not used correctly in the _getFontDefinition function. For a label with no Dimensions set, width is set to 0, but sometimes _maxLineWidth is available.
And I commited a PR to simply fix it.


fixed the config dump issue #28

recursive function to print the config from the json has issues as reported in #28 .
The diff coverage is 80%.

@@            Coverage Diff             @@
##           master      #30      +/-   ##
==========================================
- Coverage   93.23%   93.07%   -0.16%
==========================================
  Files           6        6
  Lines         547      549       +2
==========================================
+ Hits          510      511       +1
- Misses         37       38       +1

Impacted Files
Coverage Δ

apacheconfig/loader.py
90.84% <80%> (-0.29%)
:arrow_down:

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update a9ffc10...814e6cc. Read the comment docs.

Thank you!

With my follow up fixes, one needs to run it like this
apacheconfigtool --namedblocks --json-input issue28.json

To get this patch in effect.


Fails to autoeject disk

Everything works perfectly, but auto eject fails for both drives. Logs say
[makemkvcon-0] Current progress - 99%, Total progress - 99%
[makemkvcon-0] Current progress - 100%, Total progress - 99%
[makemkvcon-0] Current progress - 100%, Total progress - 100%
[makemkvcon-0] 1 titles saved
[makemkvcon-0] Copy complete. 1 titles saved.
[autodiscripper-0] Disc rip terminated successfully.
[autodiscripper-0] Ejecting disc from drive 0 (/dev/sr1)...
sh: missing ]
grep: ]: No such file or directory
[autodiscripper-0] ERROR: Failed to eject drive 0 (/dev/sr1): eject: cannot open /dev/sr1: Resource busy.
tail: write error: Broken pipe

I set up the container with this command
docker run -d \
    --name=makemkv \
    -p 5800:5800 \
    -v /makemkv:/config:rw \
    -v /makemkv:/storage:ro \
    -v /makeMKVout:/output:rw \
    -e AUTO_DISC_RIPPER=1 \
    -e AUTO_DISC_RIPPER_PARALLEL_RIP=1 \
    -e AUTO_DISC_RIPPER_MIN_TITLE_LENGTH=600 \
    -e AUTO_DISC_RIPPER_EJECT=1 \
    --device /dev/sg0 \
    --device /dev/sg1 \
    --device /dev/sr0 \
    --device /dev/sr1 \
    jlesage/makemkv
    ```
    I really hope I'm not missing anything obvious

^forgot to mention, I can manually eject the disks from the webui just fine. I tried adding --privileged and it did not help, same error.

Can you try again with the latest Docker image ?

now i get
[makemkvcon-0] Current progress - 99%, Total progress - 99%
[makemkvcon-0] Current progress - 100%, Total progress - 99%
[makemkvcon-0] Current progress - 100%, Total progress - 100%
[makemkvcon-0] 1 titles saved
[makemkvcon-0] Copy complete. 1 titles saved.
[autodiscripper-0] Disc rip terminated successfully.
[autodiscripper-0] Ejecting disc from drive 0 (/dev/sr1)...
[autodiscripper-0] Failed to eject disc: drive busy.  Retrying...
tail: write error: Broken pipe
[autodiscripper-0] Ejecting disc from drive 0 (/dev/sr1)...
[autodiscripper-0] Failed to eject disc: drive busy.  Retrying...
[autodiscripper-0] Ejecting disc from drive 0 (/dev/sr1)...
[autodiscripper-0] Failed to eject disc: drive busy.  Retrying...
[autodiscripper-0] Ejecting disc from drive 0 (/dev/sr1)...
[autodiscripper-0] Failed to eject disc: drive busy.  Retrying...
[autodiscripper-0] Ejecting disc from drive 0 (/dev/sr1)...
[autodiscripper-0] Failed to eject disc: drive busy.  Retrying...
[autodiscripper-0] Ejecting disc from drive 0 (/dev/sr1)...
[autodiscripper-0] ERROR: Failed to eject drive 0 (/dev/sr1): eject: cannot open /dev/sr1: Resource busy.

running "eject /dev/sr1" ejects it perfectly fine. could it be some screwed up permission issue?

well this is awkward.... months ago when i had an issue with connectivity, I wasn't able to ssh into the server. I plugged in a monitor and mouse+keyboard, fixed it... and then didnt log out. It appears that this was what was causing the device to be busy, as once i set up grafana i noticed there was a user logged in. I suddenly realized that i hadn't logged out. I went back in, logged out, and suddenly makemkv ejected properly.


Sync .github/workflows directory with azure-sdk-tools for PR 9490

Sync .github/workflows directory with azure-sdk-tools for PR https://github.com/Azure/azure-sdk-tools/pull/9490  See eng/common workflow

/check-enforcer override


Support notermguicolors

Resolves #34

[x] Fix background (Qix-/color-convert#74 submitted for this)
[x] Fix visual highlight w/ no termguicolors (might be fixed by above)

Looks like most syntax highlighting works, but the background still needs some work. It's way lighter than it should be. Also looks like some misspelled strings are getting highlighted differently between the two.
Most of this was done with a macro, but it looks like I'll need to do some coding myself :laughing:
termguicolors set on top, not set on bottom

Pull Request Test Coverage Report for Build 225

0 of 0   changed or added relevant lines in 0 files are covered.
No unchanged relevant lines lost coverage.
Overall coverage increased (+0.009%) to 97.387%

Totals

Change from base Build 224:
0.009%

Covered Lines:
469

Relevant Lines:
480

💛  - Coveralls

Sorry for the long wait!
termguicolors set on top, not set on bottom

This looks absolutely fantastic, @spenserblack—thank you for your hard work!

These changes have been released to npm in<EMAIL_ADDRESS>and deployed to themer.dev. 👍


Mechvibes keeps aborting when I try to install.

basically yeah that's all I have to say, I download it in the default download spot fyi

make sure your disk space is enough, mechvibes takes roughly around 300 mb in size (as i can remember)

I am also suffering from same problem
and i have 200gb extra in my disk

i figured out, i uninstall it in a bad way and when i tryied to install it again, gives me the error from the pic. I just uninstall it from control panel and i install it again. It works for me

This appears to be an issue with electron-builder, which we cannot fix. The work-around is to use the uninstaller, which we've made permanently available at https://mechvibes.com/windows/Uninstall_Mechvibes.exe


No type

Here's an idea, trying to make the Backend API a bit more palatable. Main items:

no more get_type() method in the Serve trait, just stash it at creation
create a handle field wrapping the pointer so you at least can't destroy the backend as easily while returning a dangling pointer
the vmod code can return the handle and the conversion to VCL_BACKEND is done through macros
Serve::get_headers() now returns Body, which can be empty, AsRef<[u8]> or a Read

I like that API quite a bit, you can notably check the updated examples in backend.rs for the Read case, and vmod_be for the AsRef<[u8]>, but there are a couple of caveats:

using dyn to avoid specializing the functions means the vmod write needs to box objects, which I'm not a fan of, but that can be alleviated using helper functions
main problem is that right vmod_be clones the data, and it'd be so much nicer to just use a reference, but I ran out of time before finding a way to not impose lifetime hell down to the writer. A quick solution would be ti use Arc, but there's probably something cleaner?

I'm still not happy about it because it uses an Arc, uses more boilerplate and we really don't need it (because we are real programmers who know what they are doing /s) but at lease we don't copy the Vec:
struct Sentence {
    data: VecWrap,
}

#[derive(Clone)]
struct VecWrap (Arc<Vec<u8>>);

impl AsRef<[u8]> for VecWrap {
    fn as_ref(&self) -> &[u8] {
        &*self.0
    }
}

// a lot of the Serve trait's methods are optional, but we do need to implement
// get_headers() that sets the response headers, and returns a Body
impl Serve for Sentence {
    fn get_headers(&self, ctx: &mut Ctx) -> Result<Body, VclError> {
        let beresp = ctx.http_beresp.as_mut().unwrap();
        beresp.set_status(200);
        beresp.set_header("server", "parrot")?;

        Ok(Body::Buffer(Box::new(self.data.clone())))
    }
}