MAP for evaluation

Hi! we have programmed some time ago a callback for MAP evaluation. It should work for any dataset as long as inputs and outputs match:
https://github.com/oarriaga/paz/blob/3a59d68e51e1cdd1b2131ca62e53b36369f14b9c/paz/optimization/callbacks.py#L86
Also feel free to contact me if you would like to collaborate :)  Cheers.

Thank you for letting me know about this, looks interesting!
Have you by any chance checked the compatibility with Cloud TPUs ?, I did not happen to go through or run the code on TPUs


Add students' mail domain .smail of Nanjing University.

The university official website URL: www.nju.edu.cn
A URL of a page on the official website where a long-term (>1 year) IT related course is offered by the university: https://cs.nju.edu.cn/xyfeng/teaching/SICP/index.htm
A URL of a page showing that the university recognizes the domain which you are submitting as an official email domain for the enrolled students: https://itsc.nju.edu.cn/1b/ce/c21586a334798/page.htm
P.S. the domain of our school (.nju.edu.cn) was banned for some reason. However, this subdomain (smail.nju.edu.cn) is the only domain used for students' mailbox now that can not be issued for any other individuals.

@CybCom I am sorry, the domain smail.nju.edu.cn is removed from our trusted domains list because the school allows to register an email address there even if you are not a student of the school. If you are the student of this school, please apply with official document (OFFICIAL DOCUMENT tab at https://www.jetbrains.com/shop/eform/students).

@CybCom I am sorry, the domain nju.edu.cn is removed from our trusted domains list because the school allows to register an email address there even if you are not a student of the school. If you are the student of this school, please apply with official document (OFFICIAL DOCUMENT tab at https://www.jetbrains.com/shop/eform/students).


Question: Any plans to make the tool available at Biocontainers?

This would make it easier to integrate into pipelines, e.g. nf-core.
https://biocontainers.pro/ https://github.com/BioContainers
Edit: When following the installation instructions, I notice a few other things:

The location for the trained model (~/.cache/BASALT) will be difficult. Wouldn't it be better to make this configurable?
Locations also for other databases, e.g. CheckM, would be good if one could specify with a parameter.
BASALT is a pipeline in itself. It feels like this could lead to programs, e.g. binners but also CheckM and maybe others, being run more than once. Is there a convenient way around this?
Does BASALT work only with unzipped input files?

Thanks very much for your suggestions! We will be definitely happy to make it available at Biocontainers. We will manage to integrate it in the next version.
As per your questions/suggestions:

We have also noticed that this could be an issue for user to handle. Currently, running with containers such as singularity can address this issue, but we will try to make this configurable in the next version.
Sure we can add this option.
Frankly, this is one of our main task to optimise, especially CheckM, as it takes a long time to run.
Yes, BASALT works with both zipped and unzipped files.

Thanks again for your suggestions, your experience is very important to us. We will try our best to make BASALT better and user friendly.
Cheers,
BASALT team

Thanks for your reply!
Regarding CheckM taking long to run -- CheckM2 is much faster and, according to their paper, better!


Documentation Structure of Projects

For all the projects, what do you guys think of categorizing their documentation into 2 types: "Developer/Technical" (setting up dev environment, API docs, etc.) and "Product" (roadmaps, user stories), and keeping "Developer" docs in the project repo itself and "Product" docs in this repo? Or should we just have each project repo contain everything about the project?
I feel that having the language agnostic docs in this repo would help us deal with the issue of polyglot development more gracefully :)

That's a very tough thing to do correctly, glad you bring the discussion up. I agree that technical docs should stay with the repo - pretty sure that's a given.
However I think it is important to keep some sort of "planning" with the invidivual component -
and therefore in the respective repository. When I thought about it I came up with the term featuremap to explicitly state the difference to the project roadmap. The idea behind a component individual featuremap is to allow ideation within a component. If we overprocess this by having all ideas submitted to a general repository you might kill meritocracy
The challenge is that OSS works great on a single project/component. In our case we have to somehow align multiple components that are isolated for developers due to barriers on the technical side (different languages) as well as domain (crypto, blockchain, AI..). So we basically have N small projects that should be able to live out meritocracy.
In my head the core contributor(s) of each component would be part of generating the OpenMined roadmap and decide on milestones.
Note: That's a process that we more or less live at work - except meritocracy 🙈

Great points raised here. First thing that came to my mind was feedforward (ideation) and backpropagation (defining issues) :P


"Invalid Expression"

I am trying to use this node to run the cron expression "0 * * ? * *".
A couple of online checkers, say this is valid, but your code rejects it, and every variation of it, with the error "invalid expression"
Looking at the code itself, it looks like any error in the code, gives the error "invalid expression" so the issue might be elsewhere.

use crontab.guru to build the expression, has a bit different format


Performance/project access/cache global cds module promise

To load global installed cds module, we use shell command to identify the path to load from. This is quite expensive, and gets even worse if called multiple times in parallel. So far, only after retrieving the path, we cached it to avoid further requests - now, we already cache the promise, thus we can avoid sending the same shell command again, while the first request is still running.

Hi Klaus,
I added a change-set now. I hope, I did it correctly ;)


DAIKIN EKHHP-A2V3

Hello. I see that my pump has the X10A connector with 8 pins. Is it supported? Which model should I select in the setup.h?

Update: I tested 1 or 2 includes so far and was only able to get data without errors from the PROTOCOL_S_ROTEX.
Sample data:
{"Circulation pump":"OFF","External heater?":"OFF","Priority to domestic water":"OFF","Burner inhibit from solaris":"OFF","Refrig. Temp. liquid side(C)":46.1719,"Inlet water temp.(C)":212.953,"Outlet Water Temp.(C)":212.953,"D(C)":212.953,"DHW tank temp.(C)":44.1719,"F(C)":0.00390625,"Delta-Tr(deg)":0,"R/C Setpoint(C)":0,"Operation Mode":"Fan Only","Error Code":" 0","Thermo Off Error":" 0","Warning Code":" 0","Caution Code":" 0","????":-69.5547,"WifiRSSI":"-50dBm","FreeMem":"25800"}
I would like to know a couple things more at least. For instance, the setpoint and if the HP is operating or not (with our without booster). Any ideas?

@gomes89 Did you make any progress on this? I have the same unit

@gomes89 Did you make any progress on this? I have the same unit

Not really. I tested a bunch of the includes and this was the best I got.

@gomes89 I'm struggling with getting it working with my unit. I keep getting connection timeout errors.
Would you be able to share your src/setup.h (with your wifi commented out, etc), and your include/def/PROTOCOL_S_ROTEX.h so I can compare to my setup?
If you have any pics of your connection to hand that would be super useful too 😉 😁

@gomes89 I'm struggling with getting it working with my unit. I keep getting connection timeout errors.
Would you be able to share your src/setup.h (with your wifi commented out, etc), and your include/def/PROTOCOL_S_ROTEX.h so I can compare to my setup?
If you have any pics of your connection to hand that would be super useful too 😉 😁

Unfortunately, I didn't take any pics and I'm currently away from the setup. In any way, the pinout is straightforward from the documentation. I would suggest you to re-check.
As for the src/setup.h, I didn't do anything custom. I just selected #include "def/PROTOCOL_S_ROTEX.h" and configured my own Wi-Fi, MQTT and GPIO PINs. Are your pins set correctly? Don't forget TX goes to RX in the pump, and vice-versa.

Same here, I have an EKHHP-A2V3. The best I could get was with the PROTOCOL_S_ROTEX file. I don't know if we can get more information unfortunately.
I had a bit of trouble connecting my Dupont connectors because the connectors on the Daikin side are thinner, so I had to disassemble my Dupont and tighten them a little so that the contact was correct.
I didn't take a picture but it wasn't the most complex to find, the README is very well done for that (just, the picture of the 8pin connector in the readme is reversed compared to the position of the connector when the water heater is facing me.)
If anyone has any tips for having more data, I'm interested.
Here is the json I receive on the MQTT channel :
{    "Circulation pump":"OFF",    "External heater?":"OFF",    "Priority to domestic water":"OFF",    "Burner inhibit from solaris":"OFF",    "Refrig. Temp. liquid side(C)":21.2188,    "Inlet water temp.(C)":212.953,    "Outlet Water Temp.(C)":212.953,    "D(C)":212.953,    "DHW tank temp.(C)":48.2812,    "F(C)":0.00390625,    "Delta-Tr(deg)":0,    "R/C Setpoint(C)":0,    "Operation Mode":"Fan Only",    "Error Code":" 0",    "Thermo Off Error":" 0",    "Warning Code":" 0",    "Caution Code":" 0",    "????":-69.5547,    "M5BatV":"6.33V",    "WifiRSSI":"-50dBm",    "FreeMem":"204956" }


[UI] Create Tab for Resident and Event

closes #75

Codecov Report

Merging #76 (aaf5b9d) into master (fe9d643) will decrease coverage by 1.00%.
The diff coverage is 0.00%.

@@             Coverage Diff              @@
##             master      #76      +/-   ##
============================================
- Coverage     63.40%   62.39%   -1.01%
  Complexity      460      460
============================================
  Files            88       90       +2
  Lines          1798     1827      +29
  Branches        211      215       +4
============================================
  Hits           1140     1140
- Misses          585      614      +29
  Partials         73       73

Impacted Files
Coverage Δ

...rc/main/java/safeforhall/model/event/Capacity.java
0.00% <ø> (ø)

...c/main/java/safeforhall/model/event/EventDate.java
0.00% <ø> (ø)

src/main/java/safeforhall/model/event/Venue.java
0.00% <ø> (ø)

src/main/java/safeforhall/ui/EventCard.java
0.00% <0.00%> (ø)

src/main/java/safeforhall/ui/EventListPanel.java
0.00% <0.00%> (ø)

src/main/java/safeforhall/ui/MainWindow.java
0.00% <0.00%> (ø)

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update fe9d643...aaf5b9d. Read the comment docs.


Some questions regarding the 6-8 bit models?

I had a few questions:
I am getting a huge difference in performance when i load sd_xl_base_1.0_f16.ckpt vs sd_xl_base_1.0_q6p_q8p.ckpt.
The codec in openStore is not set in both cased. The memory used is also the same in both cases. But when i load sd_xl_base_1.0_q6p_q8p, its much faster.
Why is the case?
I thought if i dont use any codec then it would just cast all the weights in fp16 format

not providing codec would not cast to fp16 actually (if it is any of these ezm7, qXp). Only fp32 / fp16 has this seamless conversions happen. What happens is it will try to load as fp16 / fp32, and most likely fail, at that time to initialize the weights with the builtin initialization scheme (I believe it is either He-init, or Xavier-init).
It feels faster probably because these init scheme will result in nan for deeper networks and then the shader took a shortcut?
We should introduce a "strict" mode to make it easier (so we can notice some of these parameters are not loaded). All these are originated from s4nnc is a training framework in the beginning, so it is common to load part of the weights and then init the rest.

Thanks, yes this seems to be the case.
If i want to use return .final( tensor )  to load 6bit weights, how to go about it?
I am assuming tensor has to be on CPU and should be 6bit already.


[Bug]: css animation is removed in css module

System Info
System:
OS: Linux 6.11 Arch Linux
CPU: (32) x64 13th Gen Intel(R) Core(TM) i9-13980HX
Memory: 44.75 GB / 62.56 GB
Container: Yes
Shell: 3.7.1 - /usr/bin/fish
Binaries:
Node: 22.10.0 - /usr/bin/node
pnpm: 9.12.1 - /usr/bin/pnpm
npmPackages:
@rspack/cli: ^1.0.14 => 1.0.14
@rspack/core: ^1.0.14 => 1.0.14
Details
css classes is preserved, but @keyframes is removed.
Reproduce link
https://github.com/Austaras/rspack-css-module
Reproduce Steps
see dist folder

After some investigation, this bug is caused by not adding animation names to the deps of exported name, which is impossible to fix because css-module-lexer doesn't expose local classes to keyframe deps, @ahabhgk would you rather fix it yourself or me sending a PR?

I see, the keyframe dependency (the aaa inside .foo local class) is actually depend on the keyframe decl dependency (the @keyframe aaa), so for this css module, there is a kind of self reference we didn't handle well. And since the keyframe decl is actually depended by the keyframe, not the local class, so we don't need to change css-module-lexer.
I think we can fix this by adding get_referenced_exports for the keyframe dependency, then rspack's treeshaking will flag the keyframe decl dependency as "used", and won't remove it from the output asset. For now in rspack keyframe and keyframe decl are both using CssLocalIdentDependency, we probably need  to create CssUseLocalIdentDependency for the keyframe. Do you want to send a PR?

Sure. But I would require some assistance. First, how to add a proper test?

Well I thought css module compose works, but it doesn't either. You may see the new commit in my repro

Thanks in advance! You can add tests under packages/rspack-test-tools/tests/configCases, you can refer to configCases/builtins/css-modules-pseudo.

No I don't believe that would work. configCases only tests if the export mapping, but in the actual generated CSS, composes and animation referenced idents are removed.


How to go about testing/self hosting?

Hello! I was wondering if its possible to test out the private server software, more specifically on the vita version of the game. I saw that there is already compiled artifacts available, and also wanted to know how much progress has been made so far in the private server software.
Also, do you by any chance have a backup of the vita 6.30 update? I have only been able to find up to 5.41 archived online, and the 6.31 update prevents you from finding a server (Text box pops up about the end of service).

Hello! Sorry for the late reply, I was busy. Of course it's possible to test the server. To start it:

Get the master server and the ship server (either from compiling or from actions)
Get the data directory from actions or compile yourself: cargo run --bin=data_compiler data data_dir
Copy the config files for master server and the ship server from data directory to the executable location
Start the master server first
Edit the ship server cfg to point to the master server (don't use localhost if you are planning to connect with the vita)
Start the ship server

Now, about the vita version: PSN still has 6.30, NoPayStation scripts (more specifically pyNPU.py) will help you. You'll also need the RePatch plugin. To prepare the vita version:

Install FAGDec on your vita
Backup the 6.31 eboot.bin from the patch folder (!)
Temporarily replace the 6.31 eboot.bin in the patch folder with the 6.30 one
Using FAGDec decrypt it to an ELF
Using any hex editor replace the RSA key in the ELF file
Using vita-elf-inject replace the bin file with the new one
Restore the 6.31 eboot.bin
Place the injected eboot.bin in rePatch/PCSG00141/ folder (you might also need to copy the 6.30 050 and 051 cpks, but I'm not sure)

If you don't have access to a self hosted DNS server (i.e. pihole) you'll also need to replace the IP addresses

Extract the sy_script.fpk file
In the compiled lua file 3B9C16C5.lua replace the IP addresses (e.g. gs001.pso2gs.net) with your desired IP address (strings are prepended with the 32 bit length (string len + null terminator) value, so don`t forget to change it)
Pack the sy_script.fpk file back and put in the rePatch/PCSG00141/data/vita folder

About the servers progress: it's not a whole lot. Basically only lobby works semi-normally, everything else is VERY unfinished. I have basic damage calculation working, but it's not upstream, I'm wating to update the packet library, then I'll push the server changes.

Thanks for the reply and no worries!
I really appreciate the helpful instructions, and didn't know about the python script to get the updates on vita! I'll try this later on today and update you on it, I think it's really awesome your making a project like this!

Update: So I have been having some trouble with the 6.30 update files. Using pyNPS, it does find the update files for PSO2, however its the 5.42 version (A0542).

I did however find the 6.30 version via playstation's update servers, but after unpacking using pkg2zip and putting the eboot.bin in the update folder, FAGDec does not recognize the file (May be still encrypted, cant find a RIF to decrypt it via pkg2zip)
I'm stuck at this point (And am sorry for my inexperience), is there a certain way to configure pyNPS, or would it be possible to provide the pre-patched eboot? Thanks in advance.

Vita OS is very picky about the files in the patch folder. Make sure that the patch folder doesn't contain any extra files and folders and the game patch folder itself doesn't anything extra also. If this fails you can try to copy the whole 6.30 patch folder and rebuilding the livearea cache.
Also, when copying the files to the patch folder, they should be encryped.
Running the script with python pyNPU.py -al -t PCSG00141 gives the A0630 version download link. I don't feel comfortable sharing binaries.

Great news! So I ended up going the nuclear route and wiping the PCSG00141 patch folder and replacing it with the 6.30 folder, which finally let me decrypt the eboot.bin!

Now my next question is about the RSA key. Where would I find the key to replace? Also, what hex values would the key be located at? Thank you again for your help (and patience with a noob like me lol).

Finding the RSA key is quite easy: inside the new eboot.bin.elf search for the header 0x06, 0x02, 0x00, 0x00, 0x00, 0xA4, 0x00, 0x00, 0x52, 0x53, 0x41, 0x31. The key is 148 bytes in total (with header).
Now, running the server should create a keypair.pem, but it's in another format, so we'll need to convert it. The easiest way is to use openssl: openssl rsa -in keypair.pem -outform MS\ PUBLICKEYBLOB -pubout -out publickey.blob. After running this command you should get a publickey.blob file. Just open the file in a hex editor and use it to replace the RSA key in the eboot.

So I have some bad news... After applying the HEX edit to change the RSA key, one of two things happen.

Game crashes and errors out with error 1-12828-1 (Corrupted error)
Game loads, but stuck on a black screen (Music is playing)

I have tried decrypting using FAGDec (Both as a ELF and SELF), I also attempted reinstalling the patch to no avail.
https://drive.google.com/file/d/1G5iDXngzuQWXwZJxSEqdLF4QmcwZkHA9/view?usp=sharing
I have attached my patch files, along with my RSA blob as well. I'm not sure if i'm doing something wrong when modifying the ELF (Maybe wrong hex values?)

I'll take a look at the files a bit later, but I can tell you that the black screen is a symptom of an unrecognized patch folder.

Your ELF files look good, so there should be no issues with the binaries, so I assume the problem is with your patch folder. If FAGDec doesn't display the patch folder as an option, then the OS won't see it also.

Oh shoot, I meant my rePatch folder. I put the patched eboot in the folder, and that's when I see the black screen. Weirdly enough I do see the loading wheel and such, but after I just hear audio but no video. Without the patched eboot the game loads fine.

That's weird. I'm unable to recreate the problem (although I'm using my own eboot). I'm gonna assume that your rePatch folder contains the data directory from 6.30. Try only leaving the eboot in the rePatch folder and see what happens.
If the eboot was corrupted I'd assume that the game would crash immediately. But it may fallback to an 1.0 version. How long is the loading wheel? If it's around 1 sec then the OS is loading the 1.0 version, if it's around 5 secs then the 6.30-6.31 version is loading.

Here's a video of what is happening when I launch the game (With the Repatch folder only containing the eboot.bin)
https://www.youtube.com/watch?v=_z3el7gWR7M
It looks as if its loading the full 6.30/6.31 patch, but weirdly I can only hear audio (And sometimes if I spam the button enough the PSN sign in even pops up weirdly enough...)
By the way, what hex editor are you using? I am using HxD, so im unsure if the editor could be the problem?
Also, when getting the 6.30 patch the way you showed earlier, is the patch supposed to be the full 16-17GB or only around 200MB?

Ok, weird. Can you try putting the whole (decrypted) 6.30/6.31 patch folder alongside the patched eboot in the rePatch folder?
I'm using imHex.
About the patch size: IIRC only the changed files are included In the patch set, so to get the full 6.30 patch you'd need to start at the latest full patch (somewhere along v5.xx, it's the first link in the patch list)

Sorry for the late response (Hope you had a good 4th)
Ill download the entire patch from 5.XX-6.30 and decrypt the eboot again, along with using imHex instead and report back.

Just wondering, how do you compile the eboot.elf back to eboot.bin?
The way I been doing it is

Use FAGDec to decrypt the 6.60 eboot.bin to both SELF and ELF and transfer it over
Use imHex (previously used HxD) to replace the RSA key
After, use vita-elf-inject to remake the eboot
Put it in the rePatch folder

I have also attempted to use vita-unmake-fself to create an ELF from the decrypted eboot as well.
Weirdly (and I don't know if this is normal) I receive a Compressed size too big! before compile.

Along with that, ill attach two photos of before replacing the RSA key and after (To make sure im pasting it in right)
Before

After

I'm feeling either i'm not compiling it right, or maybe im accidently overwriting something key in the eboot? Maybe my RSA key wasnt converted right, im not sure.
My RSA blob

Another weird thing, after upgrading the patch folder from 6.19 to 6.30 (Using the script that's the lowest version I get, and seems pretty complete), it gets stuck in a loading loop. I plan to try just installing 6.19 and see if the patch works, and upgrade one by one. Might also decompile 6.31 and do the RSA key replacement, to rule out if either the key or my compiling is the problem.
Thanks for helping and sticking with me this far, I really appreciate your help so far. :3

The way I'm doing the injection is:

Using FAGDec I get the ELF file and transfer it to my PC
Using VitaShell I get the decrypted bin file
Replace the RSA key
Run the injector with the decrypted bin and modified ELF files as arguments
Copy the resulting bin file to the rePatch folder

Your RSA key looks fine. Also did a quick check using the files you provided earlier

I used the 6.31 decrypted bin and your ELF file. Injection seems fine, will check if it runs and I'll get back.

Last thing
I noticed when starting the ship server, it gives me an IO error relating to it not being able to find the item file.

In the image I have included the error, along with my current file path. I have made sure to have the data.zip unzipped in the same DIR (Obtained from artifacts).

The current upstream version is quite hard to setup as it turns out. The required data structure:

Also a few configuration edits are required:

Change registration_enabled to true in the master ship cfg

Prepend the paths with the data/ in the ship cfg

Forgot to clarify earlier, the compression message I received when
injecting the 6.60 ELF with the 6.60 eboot (decrypted).
I'll downgrade PSO2 later today and try the decrypt the eboot via vitashell
method instead.
On Sat, Jul 6, 2024, 2:54 AM Anton @.***> wrote:

The current upstream version is quite hard to setup as it turns out. The
required data structure:
image.png (view on web)
https://github.com/PhantasyServer/phantasyserver/assets/24509063/47e04982-3a4e-4bb5-ad19-bd4c1c474cae
image.png (view on web)
https://github.com/PhantasyServer/phantasyserver/assets/24509063/cba2cb4c-3220-44e2-a7f8-57d39c9ab737
Also a few configuration edits are required:

Change registration_enabled to true in the master ship cfg
image.png (view on web)
https://github.com/PhantasyServer/phantasyserver/assets/24509063/383c5631-0991-40e5-99c6-81558249ae36
Prepend the paths with the data/ in the ship cfg
image.png (view on web)
https://github.com/PhantasyServer/phantasyserver/assets/24509063/2cf96885-1fa1-4e1e-afc7-94b5e766c619

—
Reply to this email directly, view it on GitHub
https://github.com/PhantasyServer/phantasyserver/issues/18#issuecomment-2211724064,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AUDRY262HVVK3M2ZKV2GALTZK65HDAVCNFSM6AAAAABKEVVSDCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDEMJRG4ZDIMBWGQ
.
You are receiving this because you authored the thread.Message ID:
@.***>

So after decrypting both 6.31 and 6.30, merging them (replacing 6.31 files with 6.30's) and putting them in the repatch folder...
I'm happy to say it works!! The game loads (albeit a bit slowly).
Now comes to patching the FPK file to make it connect to the server (which I think I can handle on my own)
But, im having another issue related to the private server host software.

Regardless if I set my local IP or localhost, I keep getting this error. I have tried with my firewall off as well, and I have set my PC's IP as static/reserved (Along with my vitas if that makes any difference).

Ok, what is master_ship field in the ship config is set to?

I have it set to my computers IP (on my network)

This error is due to disabled ship registration. Have you set the registration_enabled in the master ship cfg?

I feel dumb...
So notepad on windows was not saving my config files...Changing to another notepad tool and editing the files again fixed the problem!
Ship is working and starting up now!
The final part, for replacing the IP address in the lua, do I include the port number or just leave the port out? Also for the 32-bit strings, what do I change exactly on that?
Thank you again, I'm in the final stretch!

Here's how to do it (at least how I remember doing it long ago):

For example, I want to replace the first ship IP address. From the screenshot below we can see that the length of the string is before the string itself (null terminator included).

Let's say that I want to replace it with <IP_ADDRESS>. That string is 9 + 1 (null terminator) bytes long, so I'll write it down.

Next I'll write the address itself with the terminator.

Then I'll remove the now extra bytes from previous address.

So my IP being 12 characters (<IP_ADDRESS>) would equal 0C

Does this look all good? (I'm not really experienced in hex editing)

You forgot to count the null byte, so your length will be 13 (0D).

I'm glad to say after all the work, it is now fully working and connecting!

I really appreciate all the help given, and apologize for how long this ended up being (me being a noob lol).
If you have a donation page of some sort, id love to donate (once I get paid), also is there any way I (or someone with little code experience) could help?
Finally, could the private server run on something bare/basic like a bare linux install (Think like ubuntu server and such)?
Again, I really appreciate all the help.

Good to hear that! Gonna answer your questions:

Donations are a no-go for a long time due to certain geopolitical reasons. And also this is kinda a hobby project.
I guess the main ways you can help is with understanding packets or gathering EN and JP item names and descriptions from live. A lot of packets are still unknown (e.g. nothing from alliances, emergency trials, personal quarters, crafting and etc is done).
Server can definitely be run from a basic linux install (my main dev env is linux). Artifacts should work, but IMO on linux it's better to compile yourself. You'd only need rust compiler and lld (because I've made lld the default linker in the .cargo/config.toml, can be easily reverted)

Got it! I play frequently on global, so I can def grab a lot of the English item descriptions (also have a JP account as well).
Arks-visiphone also has a good wiki on some of the items, along with the various shops and what they contain https://pso2.arks-visiphone.com/wiki/Portal:PSO2.
Lastly, how does the item formatting work in the items name json file? Along with that, is there a way to add these items for testing?

I don't fully know how sega's formatting works but here's an example of what it would look like in the json file:
[
  {
    "item_type": 3,
    "id": 70,
    "unk3": 0,
    "subid": 1
    "en_name": "Marbled Meat",
    "jp_name": "",
    "en_desc": "Meat that can be found on <c f0df60>every planet<c>. Very<br>soft and marbled with high-quality fat.",
    "jp_desc": ""
  }
]

Capturing packet with a proxy helps with this, since all names and descriptions are streamed from the server.
There is a command to add items to your inventory, but it's kinda scuffed: !add_item <item_type_id> <item_id> <item_subid>.

Interesting, also for commands do you type it into the server command line or ingame?
For packet capture, would the global version or JP version work best? Also, what proxy could I use to capture the packets?
Finally, where could I submit the packets?

The commands are for ingame chat.
Here are my proxy and RSA injector. I know that they work on global, unsure about JP. For capturing any version will do.
I'd advise against submitting packets publicly since they contain Sega ID passwords and maybe other PII, but if you are really ok with that, then you can email them to me (email in profile).

Alright, thanks for letting me know that! I might try the packet capture out later on (and maybe take a Crack at the item index)
Anyway thank you a lot, I hope the project keeps going well and really appreciate all the help given!

As the original issue was solved, I'll close this issue.


Selected tree-view directory has no background color

Selected directories in tree-view have a transparent background unlike files, which are highlighted. Is This makes it hard to see which directory is selected and to navigate the tree-view using the keyboard.


Security: redirect to "login" from address bar causes Access Denied error (HTTP 403)

I am running the Shared Security sample. I enter correctly to the application (localhost:8080/login). When I logon, the application redirects to localhost:8080 and I can access to the options. If in the address bar, I add "/login" to "localhost:8080" (localhost:8080/login), the application crash. How can I fix this?

See security configuration in Application class:
http.authorizeRequests().antMatchers("/login/**").anonymous()
It allows only anonymous users to see login page - that's why you get 403. If you wish to allow users to see this view (and probably behave differently in that case), use permitAll() instead of anonymous()

Thanks for the help.
It works.


v10 - slow exemption performance

Describe the bug
In V10, the plan performance is slow when you have a large number of exemptions against individual resources.
We have around 5k exemptions and still processing after 2 hours.
This looks to be due to a call to Get-AzResource -ResourceId $scope -ErrorAction SilentlyContinue for each exemption against a resource ID.
https://github.com/Azure/enterprise-azure-policy-as-code/blob/7092b094e75b14d802f8623bf2fd3def53b77cb5/Scripts/Helpers/Get-AzPolicyExemptions.ps1#L151C25-L151C100
EPAC Version
10.1.2

could we maybe utilise the deleteOrphanedExemptions switch to not start the resource exist check ?

Not currently, I could see a different kind of switch; (-DoNotValidateExemptedResources); I'll tag your issue as a Feature Request.
As a cybersecurity guy, I think 5000 Exemptions indicates a deeper problem (please note that this pure speculation). If you like we could have a private chat (my LinkedIn link is on my GH profile page)

@techlake
Regarding the number of exemptions I agree, we have been trying to resolve this with our customer.
Regarding the resource check is this something that is actually needed in Get-AzPolicyExemptions? Exemptions are child ID's of their resources so by default, if the resource no longer exists, the exemption doesn't either.

Agreed, orthogonal concerns. I'll look into it today or Monday.

Hi Mark, I have a solution, but need a private test. I sent you a message via LinkedIn.

I optimized the retrieval of resource existence - needs a test for a large number of resource-level exemptions
I added a switch parameter to Build-DeploymentPlans.

Fixed in v10.2.2


About online training

Dear Liruiw:
I have a question about online training.
According to README.md, ./experiments/scripts/train_online_visdom.sh should be used for online training, but I can't find this script, so I instead follow ./experiments/scripts/train_online.sh and use the command
PYTHONUNBUFFERED=True CUDA_VISIBLE_DEVICES=0,1,2 python -m core.train_online --save_model --config_file td3_critic_aux_policy_aux.yaml --policy DDPG --log --fix_output_time ddpg_model_233_300000_18 --seed 233 --max_epoch 300000

where the argument max_epoch is added in train_online.py to control the number of iterations, which is by default 80000 in ./experiments/cfgs/td3_critic_aux_policy_aux.yaml.
I trained several models with different max_epoch and seed, but I can not get the same success rate as ./output/demo_model. The success rates of all the models are shown below.
demo_model
Avg. Performance: (Return: 0.941 +- 0.02778) (Success: 0.941 +- 0.02778)
+---------------------+---------+-----------+
| object name         |   count |   success |
|---------------------+---------+-----------|
| 003_cracker_box     |      30 |        22 |
| 004_sugar_box       |      30 |        27 |
| 005_tomato_soup_can |      30 |        27 |
| 006_mustard_bottle  |      30 |        30 |
| 010_potted_meat_can |      30 |        30 |
| 021_bleach_cleanser |      30 |        30 |
| 024_bowl            |      30 |        30 |
| 025_mug             |      30 |        29 |
| 061_foam_brick      |      30 |        29 |
+---------------------+---------+-----------+

seed=233, max_epoch=80000
Avg. Performance: (Return: 0.641 +- 0.01667) (Success: 0.641 +- 0.01667)
+---------------------+---------+-----------+
| object name         |   count |   success |
|---------------------+---------+-----------|
| 003_cracker_box     |      30 |        13 |
| 004_sugar_box       |      30 |        22 |
| 005_tomato_soup_can |      30 |        23 |
| 006_mustard_bottle  |      30 |        19 |
| 010_potted_meat_can |      30 |         8 |
| 021_bleach_cleanser |      30 |        19 |
| 024_bowl            |      30 |        30 |
| 025_mug             |      30 |        16 |
| 061_foam_brick      |      30 |        23 |
+---------------------+---------+-----------+

seed=987, max_epoch=300000
Avg. Performance: (Return: 0.822 +- 0.02222) (Success: 0.822 +- 0.02222)
+---------------------+---------+-----------+
| object name         |   count |   success |
|---------------------+---------+-----------|
| 003_cracker_box     |      30 |        26 |
| 004_sugar_box       |      30 |        25 |
| 005_tomato_soup_can |      30 |        24 |
| 006_mustard_bottle  |      30 |        29 |
| 010_potted_meat_can |      30 |        18 |
| 021_bleach_cleanser |      30 |        27 |
| 024_bowl            |      30 |        30 |
| 025_mug             |      30 |        21 |
| 061_foam_brick      |      30 |        22 |
+---------------------+---------+-----------+

Also, I tested the above models in handover-sim, and observed distinct success rates in hold setting:

model
success rate

demo_model
77/144=0.535

seed=233, max_epoch=80000
27/144=0.188

seed=987, max_epoch=300000
15/144=0.104

The training curve of actor_critic_loss is shown below:

Could you please help me out? Thank you.

Hi, sorry it has been a while since I last checked the RL online training. Does the BC and BC-dagger work with you as proof of concept? Could you try a larger batch size such as 512 if resources allowed? It can take some tuning to get the online training to work.

Hi, sorry it has been a while since I last checked the RL online training. Does the BC and BC-dagger work with you as proof of concept? Could you try a larger batch size such as 512 if resources allowed? It can take some tuning to get the online training to work.

Thank you for your prompt response. I also tried offline training using the command:
CUDA_VISIBLE_DEVICES=0 nohup bash ./experiments/scripts/train_offline.sh bc_aux_dagger.yaml BC

The success rate is shown below:
Avg. Performance: (Return: 0.822 +- 0.00556) (Success: 0.822 +- 0.00556)
+---------------------+---------+-----------+
| object name         |   count |   success |
|---------------------+---------+-----------|
| 003_cracker_box     |      30 |        20 |
| 004_sugar_box       |      30 |        23 |
| 005_tomato_soup_can |      30 |        21 |
| 006_mustard_bottle  |      30 |        30 |
| 010_potted_meat_can |      30 |        23 |
| 021_bleach_cleanser |      30 |        28 |
| 024_bowl            |      30 |        26 |
| 025_mug             |      30 |        25 |
| 061_foam_brick      |      30 |        26 |
+---------------------+---------+-----------+

However, this model got a 0% success rate in handoversim hold setting.
I'm going to try batch size 256 for online training. Thanks for your advice.

Right. I am actually not that familiar with the handover benchmark.


Short-circuit 'easy' rglob/glob patterns

Resolves #274

@pjbull friendly ping :)

Thanks @Gilthans, while I think this fix looks directionally reasonable, but I'd like to do a bit more investigation on why performance is bad in #274.
I assumed that it was because there was a network call somewhere in the glob path, but we actually only call the list dir once here:
https://github.com/drivendataorg/cloudpathlib/blob/b7f601023e478adbe400a4bbc57efae5bfc95a81/cloudpathlib/cloudpath.py#L349-L358
If you get a chance, could you do some profiling and report in #274? I'm hoping there may be a better more general fix than the short circuit if this isn't networking related (or maybe it is and I just missed where the call is in my scan of the code).

I assumed that it was because there was a network call somewhere in the glob path, but we actually only call the list dir once here:

I actually came to the same conclusion before opening the issue. I got that far into the code and couldn't figure out why it was slow either.
I'd love to do this profiling (one of my hobbies actually :) ), but in the meantime, maybe we could push forward with this? It seems to me like a net-positive regardless


feat: add workflows and checks on PR

Creating workflows and checks for the repository. The following workflows have bee added:
flake8
black
isort

Thanks so much for this! I just have some very minor change requests then it looks good to me. The minimum Python version you need is Python 3.8 for this bot so please can you just change those.

Done!


Update whats new for wpf/winforms

Internal previews

📄 File
🔗 Preview link

docs/core/whats-new/dotnet-9/overview.md
What's new in .NET 9

@gewarren looks good to me


Decompiler: Add printRaw implementation for ambiguous TypeOps

Fixes #4951.
This adds a printRaw implementation to 13 TypeOps, similar in implementation to TypeOpIntSright::printRaw. This change makes it possible to uniquely identify the TypeOp that produced a given printRaw output. The new operators used also correspond to the sleigh syntax for the TypeOps. The changed operators are also shown in the table below.

TypeOp class name
Old operator
New operator

TypeOpIntSless
<
s<

TypeOpIntSlessEqual
<=
s<=

TypeOpIntSdiv
/
s/

TypeOpIntSrem
%
s%

TypeOpFloatEqual
==
f==

TypeOpFloatNotEqual
!=
f!=

TypeOpFloatLess
<
f<

TypeOpFloatLessEqual
<=
f<=

TypeOpFloatAdd
+
f+

TypeOpFloatDiv
/
f/

TypeOpFloatMult
*
f*

TypeOpFloatSub
-
f-

TypeOpFloatNeg (unary)
-
f-

What's the progress on this PR? It's been in triage for quite some time now. Is there anything I can do to help this get merged?

Thanks for the response. I am probably a bit biased, but I think this PR shouldn't be too much effort to review and it might be an easy one to decrease the number of open PRs. On the other hand, looking at all the issues and pull requests assigned to @caheckman, I understand this PR is not at the top of that list.
If there's anything I can do to help this PR or any of my other PRs / issues, feel free to let me know. It can be quite frustrating to see it's been assigned and it sitting in triage for months with no comment from the team.


Waypoint: Access MultiDimensional Arrays With Indexes [Beta] spelling

When you use brackets to access your array, the first set of bracket refers to the entries in outer-most array, and each subsequent level of brackets refers to the next level of entry in.

the first set of brackets? And I find the ending quite confusing with the entry in... Not sure what is supposed to be conveyed.

also "entries in outer-most array" probably needs a "the" before "outer"


Set alpha parameter for regularization of ElasticNetRegression

Is your feature request related to a problem?
It's not possible to set the alpha parameter for regularization of elastic net regression.
Desired solution

Add a new parameter alpha: float to the initializer of safeds.ml.regression.ElasticNetRegression
Raise a value error if alpha < 0
Warn if alpha == 0 -> Users should use LinearRegression instead
Pass it along to alpha of the wrapped scikit-learn model in the fit method

Possible alternatives (optional)
No response
Screenshots (optional)
No response
Additional Context (optional)

Use warnings.warn to warn.
Use with pytest.warns to test that the warning is created.

:tada: This issue has been resolved in version 0.12.0 :tada:
The release is available on:

v0.12.0
GitHub release

Your semantic-release bot :package::rocket:


Create projectInternalView() dependency method in JvmComponentDepenencies

Adds a method which creates a dependency on the current project, except with an additional CompileView#JAVA_COMPLETE attribute.

@bot-gradle test qfl

OK, I've already triggered the following builds for you:

QuickFeedbackLinux build

@bot-gradle test this

OK, I've already triggered the following builds for you:

PullRequestFeedback build

@bot-gradle test this

OK, I've already triggered the following builds for you:

PullRequestFeedback build

@bot-gradle test this

OK, I've already triggered the following builds for you:

PullRequestFeedback build

@bot-gradle test and merge

OK, I've already triggered a build for you.


Security issue due to wide permissions

Hi,
I'm seeing that the controller has read access on all the resources of a cluster: https://github.com/argoproj-labs/argocd-operator/blob/master/deploy/olm-catalog/argocd-operator/0.0.13/argocd-operator.v0.0.13.clusterserviceversion.yaml#L520
Are these permissions necessary  even in namespaced installs ?
Regards

and for multi-tenant clusters this security issue a very big impact

Hi @aelbarkani. The operator was set up this way as per the guidance from the official Argo CD documentation.
https://argoproj.github.io/argo-cd/operator-manual/security/#cluster-rbac
Perhaps raising the issue upstream could get more insight into why Argo CD is designed this way.
That said, we can probably come up with a documented process that people who are concerned with the default behavior can follow to lock the operator down to a specific namespace or something similar.

Thanks @jmckind. I see here though that there are two types of installations: standard and namespaced.
https://github.com/argoproj/argo-cd/tree/master/manifests
I think having the two options in the operator would be great (and more secure).

Oh yes :))
we had the same concern and opted out to install the operator for our application teams and went back to the normal install for them :)
I see a huge use case for having multiple namespaced ArgoCD instances in bigger companies :)

@Numblesix yes, we are considering the same here. For big companies having multi-tenant clusters in production it's a huge concern. So we are considering uninstalling the operator and get back to normal install.

@Numblesix yes, we are considering the same here. For big companies having multi-tenant clusters in production it's a huge concern. So we are considering uninstalling the operator and get back to normal install.

You will still have to either fix a lot of rbac permissions or to blacklist basically everything in argocd which is on cluster-lvl

@Numblesix thanks for the tip. did you use this manifest https://github.com/argoproj/argo-cd/blob/master/manifests/namespace-install.yaml ? I don't see any ClusterRole or ClusterRoleBinding there...

@aelbarkani I had some success starting with that namespace-install.yaml, but I also had to make some significant changes before Argo CD was able to manage only namespace-scoped resources in other namespaces.
Regardless, here's some points on how I got it working:

Create a rolebinding giving argocd-application-controller a namespaced admin role from your namespace
Use resource.inclusions to create a whitelist of resources which Argo CD is allowed to manage (this part sucks, but otherwise you get a bunch of errors that Argo CD failed to get some resource type).
Create a cluster in Argo CD which is namespaced:

apiVersion: v1
kind: Secret
metadata:
  labels:
    argocd.argoproj.io/secret-type: cluster
  name: namespaced-cluster
type: Opaque
stringData:
  config: '{"tlsClientConfig":{"insecure":false}}'
  name: in-cluster
  namespaces: my-namespace
  server: https://kubernetes.default.svc

If there's more interest in this, I can share a more complete code example, but for now I don't want to have to go through and sanitize any company references from the manifests :)

thanks @chrisob ! will try that

https://github.com/argoproj-labs/argocd-operator/blob/master/deploy/olm-catalog/argocd-operator/0.0.13/argocd-operator.v0.0.13.clusterserviceversion.yaml#L520
clusterPermissions:
      - rules:
        - apiGroups:
          - '*'
          resources:
          - '*'
          verbs:
          - get
          - list
          - watch
        - nonResourceURLs:
          - '*'
          verbs:
          - get
          - list
        serviceAccountName: argocd-application-controller

This effectively enables argocd-application-controller to read all resources, but without being able to create/update, is this of any use?
I think, this rolebinding gives argocd-application-controller the powers it needs to be able to create/update objects.
https://github.com/argoproj-labs/argocd-operator/blob/master/deploy/olm-catalog/argocd-operator/0.0.13/argocd-operator.v0.0.13.clusterserviceversion.yaml#L666
In that case, maybe we could even remove the clusterPermissions ? Of course, that makes me wonder how argocd would watch cluster-scoped resources.

There seems to have some improvements in the operator, but the permissions are still too wide :
https://github.com/argoproj-labs/argocd-operator/blob/master/deploy/olm-catalog/argocd-operator/0.0.15/argocd-operator.v0.0.15.clusterserviceversion.yaml#L574
Is it really necessary to have all the permissions on all the clusterroles and clusterrolebindings of the cluster ?

There seems to have some improvements in the operator, but the permissions are still too wide :
https://github.com/argoproj-labs/argocd-operator/blob/master/deploy/olm-catalog/argocd-operator/0.0.15/argocd-operator.v0.0.15.clusterserviceversion.yaml#L574
Is it really necessary to have all the permissions on all the clusterroles and clusterrolebindings of the cluster ?

In that case, maybe we could even remove the clusterPermissions ? Of course, that makes me wonder how argocd would watch cluster-scoped resources.

Yes I agree: clusterPermissions should be removed. In my opinion ArgoCD independently from the cluster. If someone needs to add a cluster managed by ArgoCD then he can add it. Otherwise it is almost impossible to deploy ArgoCD in a multi-tenant cluster (the admins of the namespace may have access to argocd's service account, and perform a privilege escalation to get cluster-admin permissions).

In that case, maybe we could even remove the clusterPermissions ? Of course, that makes me wonder how argocd would watch cluster-scoped resources.

Yes I agree: clusterPermissions should be removed. In my opinion ArgoCD independently from the cluster. If someone needs to add a cluster managed by ArgoCD then he can add it. Otherwise it is almost impossible to deploy ArgoCD in a multi-tenant cluster (the admins of the namespace may have access to argocd's service account, and perform a privilege escalation to get cluster-admin permissions).

I think since quite a while (v0.1.0 or so), this issue seems to be solved.
A default Argo CD instance is always installed in namespace-scoped mode by default, with only RBAC permissions for that particular namespace.
In order to have one or more instances being cluster scoped, with cluster-wide permissions, the Operator itself needs to be supplied with an environment variable defining the allowed namespaces.
I will close this issue now. If people feel that there is still something left regarding the concerns here, feel free to speak up and we will re-open the issue.

what if I'm using helm where to define these kind of permissions, all I need that application-controller wouldn't be able to delete a namespace or a pic


Use Azure Verified Modules where available

[ ] Storage Accounts
[ ] Availability Set
[ ] Disk
[ ] Disk Encryption Set
[ ] Virtual Machine
[ ] Data Factory
[ ] AVD: Application Group, Host Pool, Workspace
[ ] Event Grid System Topic
[ ] Key Vault
[ ] Logic App
[ ] User Assigned Managed Identity
[ ] Bastion
[ ] Firewall Policy
[ ] Network Interface (from SvenAelterman/Bicep-VNetModule)
[ ] Network Security Group (from SvenAelterman/Bicep-VNetModule)
[ ] Private DNS Zone
[ ] Private Endpoint
[ ] Route Table (from SvenAelterman/Bicep-VNetModule)
[ ] Virtual Network (from SvenAelterman/Bicep-VNetModule)
[ ] Log Analytics Workspace
[ ] Deployment Script
[ ] Resource Group
[x] Azure Compute Gallery
[x] Azure Image Builder Template

(All pending compatibility with the requirements of this project.)
Benefits
Leverage common patterns, e.g., for Diagnostic Settings.

Excluded Resource Group because we need Resource Group symbolic references to set scope.


[Backpack] Remove CRUD::setFromDb() and manually define Fields and Columns

Search for CRUD::setFromDb(); across all Backpack controllers. We need to manually define the columns and fields to display according to Backpack's documentation.
This has been done for critical controllers but some of them still rely on auto-detection from database.
This is an easy fix for anyone willing to contribute.

See #169

Thanks @damienBAUDET  for working on this issue!


feat: make venvs visible

Description
Change the default settings for vscode, .venv and .tox is now visible.
Type of change
Please delete options that are not relevant.

[ ] Bug fix
[x] New feature
[ ] Document
[ ] Test
[ ] CI/CD
[ ] Refactor

How has this been tested

[x] Unittest
[ ] Others:

Checklist:

[x] I have made corresponding changes to the documentation
[x] My changes generate no new warnings
[x] I have added tests that prove my fix is effective or that my feature works
[x] New and existing unit tests pass locally with my changes
[x] Let's make the world better✨😋🐍🌎

Codecov Report

Merging #49 (4db7f3f) into main (bb67abd) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##             main      #49   +/-   ##
=======================================
  Coverage   95.48%   95.48%
=======================================
  Files          21       21
  Lines         620      620
  Branches       66       66
=======================================
  Hits          592      592
  Misses         19       19
  Partials        9        9

:mega: Codecov can now indicate which changes are the most critical in Pull Requests. Learn more


Is non-base64 downloads required?

The docs are (surprise surprise!) ambiguous about this one. Nothing in the reference guide says anything about it, but the GetPolicyMessage has a urlattachmentSupportedIndicator. Which isn't exclusively saying that courts expect a URL, just that they support one.
The ECF spec mentions attachments, which seems like a restatement of MTOM, but either way says that the

actual binary encoded electronic document SHOULD be included in ore or more attachments to the message or MAY be embedded in the message using following structure (...</...>)

So we've got the correct default implementation there.
The URL download option is mentioned in http://docs.oasis-open.org/legalxml-courtfiling/specs/ecf/v4.01/ecf-v4.01-spec/errata02/os/ecf-v4.01-spec-errata02-os-complete.html#_Toc425241596, which says that the indicated development policies aren't likely to change from the development stage, and again is vague on if the court is only accepting URL downloads. None of the current IL courts have the URL attachment policy on at this point, so I don't think we need to support URL downloads from the proxy server.


Get-AzsUserSubscription throws error for non-existent subscriptions

Get-AzsUserSubscription throws an error when the subscription doesn't exist. It should really just return null value.

The fix should be in the swagger file

@rakku-ms  pls check

plan for next sprint

plan for next sprint


[BUG] for edge node, kubectl logs xxx error: Error from server (ServiceUnavailable): the server is currently unable to handle the request ( pods/log xxx)

What happened:
I installed the openyurt cluster followed https://openyurt.io/zh/docs/installation/manually-setup. And used yurtadm join to join an edge node:
[root@iZf8z8lt4aao5n3cymq3rzZ ~]# kubectl get node -owide
NAME                      STATUS   ROLES                  AGE    VERSION   INTERNAL-IP   EXTERNAL-IP   OS-IMAGE         KERNEL-VERSION                CONTAINER-RUNTIME
izf8z8lt4aao5n3cymq3rzz   Ready    control-plane,master   131m   v1.22.8   <IP_ADDRESS>    <none>        CentOS Linux 8   4.18.0-348.7.1.el8_5.x86_64   docker://19.3.14
izf8z8lt4aao5n3cymq3s0z   Ready    <none>                 85m    v1.22.8   <IP_ADDRESS>    <none>        CentOS Linux 8   4.18.0-348.7.1.el8_5.x86_64   docker://20.10.17

[root@iZf8z8lt4aao5n3cymq3rzZ ~]# kubectl get pod -n kube-system -owide
NAME                                              READY   STATUS    RESTARTS       AGE    IP            NODE                      NOMINATED NODE   READINESS GATES
coredns-dl7bz                                     1/1     Running   1 (11m ago)    119m   <IP_ADDRESS>    izf8z8lt4aao5n3cymq3rzz   <none>           <none>
coredns-jscq9                                     1/1     Running   1 (68m ago)    74m    <IP_ADDRESS>   izf8z8lt4aao5n3cymq3s0z   <none>           <none>
etcd-izf8z8lt4aao5n3cymq3rzz                      1/1     Running   11 (11m ago)   120m   <IP_ADDRESS>    izf8z8lt4aao5n3cymq3rzz   <none>           <none>
kube-apiserver-izf8z8lt4aao5n3cymq3rzz            1/1     Running   2 (11m ago)    119m   <IP_ADDRESS>    izf8z8lt4aao5n3cymq3rzz   <none>           <none>
kube-controller-manager-izf8z8lt4aao5n3cymq3rzz   1/1     Running   1 (11m ago)    119m   <IP_ADDRESS>    izf8z8lt4aao5n3cymq3rzz   <none>           <none>
kube-flannel-ds-6tlq2                             1/1     Running   1 (68m ago)    74m    <IP_ADDRESS>    izf8z8lt4aao5n3cymq3s0z   <none>           <none>
kube-flannel-ds-9bvkc                             1/1     Running   2 (10m ago)    119m   <IP_ADDRESS>    izf8z8lt4aao5n3cymq3rzz   <none>           <none>
kube-proxy-4fprk                                  1/1     Running   1 (11m ago)    119m   <IP_ADDRESS>    izf8z8lt4aao5n3cymq3rzz   <none>           <none>
kube-proxy-tl5sz                                  1/1     Running   0              68m    <IP_ADDRESS>    izf8z8lt4aao5n3cymq3s0z   <none>           <none>
kube-scheduler-izf8z8lt4aao5n3cymq3rzz            1/1     Running   11 (11m ago)   120m   <IP_ADDRESS>    izf8z8lt4aao5n3cymq3rzz   <none>           <none>
yurt-app-manager-66dffb5dc9-xwclb                 1/1     Running   2 (10m ago)    119m   <IP_ADDRESS>    izf8z8lt4aao5n3cymq3rzz   <none>           <none>
yurt-controller-manager-77b97fd47b-tdrvg          1/1     Running   1 (11m ago)    119m   <IP_ADDRESS>    izf8z8lt4aao5n3cymq3rzz   <none>           <none>
yurt-hub-izf8z8lt4aao5n3cymq3s0z                  1/1     Running   12 (68m ago)   73m    <IP_ADDRESS>    izf8z8lt4aao5n3cymq3s0z   <none>           <none>
yurt-tunnel-agent-x2rjz                           1/1     Running   0              68m    <IP_ADDRESS>    izf8z8lt4aao5n3cymq3s0z   <none>           <none>
yurt-tunnel-dns-9cbd69765-w4kvp                   1/1     Running   1 (11m ago)    119m   <IP_ADDRESS>    izf8z8lt4aao5n3cymq3rzz   <none>           <none>
yurt-tunnel-server-6fdb679789-gwfhq               1/1     Running   2 (11m ago)    119m   <IP_ADDRESS>    izf8z8lt4aao5n3cymq3rzz   <none>           <none>

However, for edge node, kubectl logs xxx will get an error: Error from server (ServiceUnavailable): the server is currently unable to handle the request ( pods/log xxx) :
such as:
[root@iZf8z8lt4aao5n3cymq3rzZ ~]# kubectl logs -n kube-system kube-flannel-ds-6tlq2
Error from server (ServiceUnavailable): the server is currently unable to handle the request ( pods/log kube-flannel-ds-6tlq2)
[root@iZf8z8lt4aao5n3cymq3rzZ ~]#
[root@iZf8z8lt4aao5n3cymq3rzZ ~]# kubectl logs -n kube-system yurt-tunnel-agent-x2rjz
Error from server (ServiceUnavailable): the server is currently unable to handle the request ( pods/log yurt-tunnel-agent-x2rjz)

What you expected to happen:
For edge node, kubectl logs xxx no errors.
Anything else we need to know?:
yurt-tunnel-server logs:
[root@iZf8z8lt4aao5n3cymq3rzZ ~]# kubectl logs -n kube-system yurt-tunnel-server-6fdb679789-gwfhq
I0904 14:58:54.498831       1 start.go:63] yurttunnel-server version: projectinfo.Info{GitVersion:"-e710112", GitCommit:"e710112", BuildDate:"2022-09-01T02:27:15Z", GoVersion:"go1.17.1", Compiler:"gc", Platform:"linux/amd64"}
W0904 14:58:54.498963       1 client_config.go:615] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0904 14:58:54.499705       1 options.go:168] yurttunnel server config: &config.Config{EgressSelectorEnabled:false, EnableIptables:true, EnableDNSController:true, IptablesSyncPeriod:60, IPFamily:0x1, DNSSyncPeriod:1800, CertDNSNames:[]string{}, CertIPs:[]net.IP{}, CertDir:"", ListenAddrForAgent:"<IP_ADDRESS>:10262", ListenAddrForMaster:"<IP_ADDRESS>:10263", ListenInsecureAddrForMaster:"<IP_ADDRESS>:10264", ListenMetaAddr:"<IP_ADDRESS>:10265", RootCert:(*x509.CertPool)(0xc00012cc30), Client:(*kubernetes.Clientset)(0xc00012e420), SharedInformerFactory:(*informers.sharedInformerFactory)(0xc0002ff400), ServerCount:1, ProxyStrategy:"destHost", InterceptorServerUDSFile:""}
I0904 14:58:54.500145       1 leaderelection.go:248] attempting to acquire leader lease kube-system/tunnel-dns-controller...
E0904 14:58:54.502174       1 iptables.go:216] failed to delete rule that nat chain OUTPUT jumps to TUNNEL-PORT: error checking rule: exit status 2: iptables v1.8.7 (legacy): Couldn't load target `TUNNEL-PORT':No such file or directory

Try `iptables -h' or 'iptables --help' for more information.
I0904 14:58:59.518004       1 certificate_store.go:130] Loading cert/key pair from "/var/lib/yurttunnel-server/pki/yurttunnel-server-current.pem".
I0904 14:58:59.518230       1 certificate_manager.go:270] kubernetes.io/kubelet-serving: Certificate rotation is enabled
I0904 14:58:59.518262       1 certificate_store.go:130] Loading cert/key pair from "/var/lib/yurttunnel-server/pki/yurttunnel-server-proxy-client-current.pem".
I0904 14:58:59.518358       1 certificate_manager.go:270] kubernetes.io/kube-apiserver-client: Certificate rotation is enabled
I0904 14:58:59.518356       1 certificate_manager.go:270] kubernetes.io/kubelet-serving: Certificate expiration is 2122-08-11 13:05:38 +0000 UTC, rotation deadline is 2105-11-29 20:00:54.765966272 +0000 UTC
I0904 14:58:59.518380       1 certificate_manager.go:270] kubernetes.io/kubelet-serving: Waiting 729629h1m55.247587976s for next certificate rotation
I0904 14:58:59.518428       1 certificate_manager.go:270] kubernetes.io/kube-apiserver-client: Certificate expiration is 2122-08-08 09:16:58 +0000 UTC, rotation deadline is 2101-05-15 16:48:48.626345312 +0000 UTC
I0904 14:58:59.518449       1 certificate_manager.go:270] kubernetes.io/kube-apiserver-client: Waiting 689809h49m49.107897674s for next certificate rotation
I0904 14:58:59.520745       1 handler.go:141] enqueue service add event for kube-system/x-tunnel-server-internal-svc
I0904 14:58:59.521863       1 handler.go:43] enqueue node add event for izf8z8lt4aao5n3cymq3rzz
I0904 14:58:59.521878       1 handler.go:43] enqueue node add event for izf8z8lt4aao5n3cymq3s0z
I0904 14:58:59.522035       1 handler.go:175] handle configmap add event for kube-system/yurt-tunnel-server-cfg to update localhost ports
I0904 14:58:59.522115       1 handler.go:93] enqueue configmap add event for kube-system/yurt-tunnel-server-cfg
I0904 14:58:59.625035       1 iptables.go:472] clear conntrack entries for ports ["10250" "10255"] and nodes ["<IP_ADDRESS>"]
E0904 14:58:59.627753       1 iptables.go:491] clear conntrack for <IP_ADDRESS>:10250 failed: "conntrack v1.4.6 (conntrack-tools): 0 flow entries have been deleted.\n", error message: exit status 1
E0904 14:58:59.630325       1 iptables.go:491] clear conntrack for <IP_ADDRESS>:10255 failed: "conntrack v1.4.6 (conntrack-tools): 0 flow entries have been deleted.\n", error message: exit status 1
I0904 14:58:59.630345       1 iptables.go:543] directly access nodes changed, [<IP_ADDRESS>] for ports [10250 10255]
I0904 14:59:04.519384       1 anpserver.go:107] start handling request from interceptor
I0904 14:59:04.519426       1 wraphandler.go:67] add localHostProxyMiddleware into wrap handler
I0904 14:59:04.519437       1 tracereq.go:80] 2 informer synced in traceReqMiddleware
I0904 14:59:04.519441       1 wraphandler.go:67] add TraceReqMiddleware into wrap handler
I0904 14:59:04.519466       1 anpserver.go:143] start handling https request from master at <IP_ADDRESS>:10263
I0904 14:59:04.519512       1 anpserver.go:157] start handling http request from master at <IP_ADDRESS>:10264
I0904 14:59:04.519562       1 anpserver.go:195] start handling connection from agents
I0904 14:59:04.519744       1 util.go:75] "start handling meta requests(metrics/pprof)" server endpoint="<IP_ADDRESS>:10265"
I0904 14:59:12.145959       1 leaderelection.go:258] successfully acquired lease kube-system/tunnel-dns-controller
I0904 14:59:12.148845       1 dns.go:177] starting tunnel dns controller
I0904 14:59:12.148863       1 shared_informer.go:240] Waiting for caches to sync for tunnel-dns-controller
I0904 14:59:12.148877       1 shared_informer.go:247] Caches are synced for tunnel-dns-controller
I0904 14:59:12.150757       1 dns.go:301] sync tunnel server service as whole
I0904 14:59:12.150839       1 dns.go:310] sync dns record as whole
I0904 14:59:12.150881       1 dns.go:310] sync dns record as whole
I0904 14:59:12.156450       1 handler.go:166] adding node dns record for izf8z8lt4aao5n3cymq3rzz
I0904 14:59:12.157590       1 handler.go:166] adding node dns record for izf8z8lt4aao5n3cymq3s0z
I0904 14:59:12.159165       1 dns.go:301] sync tunnel server service as whole
I0904 15:01:01.635356       1 tracereq.go:135] start handling request GET https://<IP_ADDRESS>:10250/containerLogs/kube-system/kube-flannel-ds-6tlq2/kube-flannel, from <IP_ADDRESS>:51164 to <IP_ADDRESS>:10250
E0904 15:01:01.635639       1 tunnel.go:74] "currently no tunnels available" err="No backend available"
E0904 15:01:01.635750       1 interceptor.go:136] fail to setup the tunnel: fail to setup TLS handshake through the Tunnel: write unix @->/tmp/interceptor-proxier.sock: write: broken pipe
I0904 15:01:01.635765       1 tracereq.go:139] stop handling request GET https://<IP_ADDRESS>:10250/containerLogs/kube-system/kube-flannel-ds-6tlq2/kube-flannel, request handling lasts 388.499µs
I0904 15:01:05.353882       1 tracereq.go:135] start handling request GET https://<IP_ADDRESS>:10250/containerLogs/kube-system/kube-flannel-ds-6tlq2/kube-flannel, from <IP_ADDRESS>:51164 to <IP_ADDRESS>:10250
E0904 15:01:05.354115       1 tunnel.go:74] "currently no tunnels available" err="No backend available"
E0904 15:01:05.354221       1 interceptor.go:136] fail to setup the tunnel: fail to setup TLS handshake through the Tunnel: write unix @->/tmp/interceptor-proxier.sock: write: broken pipe
I0904 15:01:05.354244       1 tracereq.go:139] stop handling request GET https://<IP_ADDRESS>:10250/containerLogs/kube-system/kube-flannel-ds-6tlq2/kube-flannel, request handling lasts 338.313µs
I0904 15:07:49.005417       1 tracereq.go:135] start handling request GET https://<IP_ADDRESS>:10250/containerLogs/kube-system/kube-flannel-ds-6tlq2/kube-flannel, from <IP_ADDRESS>:54486 to <IP_ADDRESS>:10250
E0904 15:07:49.005605       1 tunnel.go:74] "currently no tunnels available" err="No backend available"
E0904 15:07:49.005777       1 interceptor.go:136] fail to setup the tunnel: fail to setup TLS handshake through the Tunnel: write unix @->/tmp/interceptor-proxier.sock: write: broken pipe
I0904 15:07:49.005827       1 tracereq.go:139] stop handling request GET https://<IP_ADDRESS>:10250/containerLogs/kube-system/kube-flannel-ds-6tlq2/kube-flannel, request handling lasts 392.457µs
I0904 15:11:17.062869       1 tracereq.go:135] start handling request GET https://<IP_ADDRESS>:10250/containerLogs/kube-system/kube-flannel-ds-6tlq2/kube-flannel, from <IP_ADDRESS>:56198 to <IP_ADDRESS>:10250
E0904 15:11:17.063057       1 tunnel.go:74] "currently no tunnels available" err="No backend available"
E0904 15:11:17.063201       1 interceptor.go:136] fail to setup the tunnel: fail to setup TLS handshake through the Tunnel: write unix @->/tmp/interceptor-proxier.sock: write: broken pipe
I0904 15:11:17.063219       1 tracereq.go:139] stop handling request GET https://<IP_ADDRESS>:10250/containerLogs/kube-system/kube-flannel-ds-6tlq2/kube-flannel, request handling lasts 333.209µs
I0904 15:11:24.737302       1 tracereq.go:135] start handling request GET https://<IP_ADDRESS>:10250/containerLogs/kube-system/yurt-tunnel-agent-x2rjz/yurt-tunnel-agent, from <IP_ADDRESS>:56198 to <IP_ADDRESS>:10250
E0904 15:11:24.737544       1 tunnel.go:74] "currently no tunnels available" err="No backend available"
E0904 15:11:24.737646       1 interceptor.go:136] fail to setup the tunnel: fail to setup TLS handshake through the Tunnel: write unix @->/tmp/interceptor-proxier.sock: write: broken pipe
I0904 15:11:24.737665       1 tracereq.go:139] stop handling request GET https://<IP_ADDRESS>:10250/containerLogs/kube-system/yurt-tunnel-agent-x2rjz/yurt-tunnel-agent, request handling lasts 344.865µs

yurt-tunnel-agent logs:
[root@iZf8z8lt4aao5n3cymq3s0Z ~]# docker logs 09bc5ed94e6c
I0904 14:01:27.145540       1 start.go:50] yurttunnel-agent version: projectinfo.Info{GitVersion:"latest", GitCommit:"ef26d5c", BuildDate:"2021-12-03T07:50:34Z", GoVersion:"go1.15.15", Compiler:"gc", Platform:"linux/amd64"}
I0904 14:01:27.145600       1 options.go:136] ipv4=<IP_ADDRESS>&host=izf8z8lt4aao5n3cymq3s0z is set for agent identifies
I0904 14:01:27.145606       1 options.go:141] neither --kube-config nor --apiserver-addr is set, will use /etc/kubernetes/kubelet.conf as the kubeconfig
I0904 14:01:27.145610       1 options.go:145] create the clientset based on the kubeconfig(/etc/kubernetes/kubelet.conf).
I0904 14:01:27.158357       1 start.go:86] yurttunnel-server address: <IP_ADDRESS>:31838
W0904 14:01:27.158410       1 filestore_wrapper.go:49] unexpected error occurred when loading the certificate: no cert/key files read at "/var/lib/yurttunnel-agent/pki/yurttunnel-agent-current.pem", ("", "") or ("/var/lib/yurttunnel-agent/pki", "/var/lib/yurttunnel-agent/pki"), will regenerate it
E0904 14:01:27.168653       1 certificate_manager.go:434] Failed while requesting a signed certificate from the master: cannot create certificate signing request: the server could not find the requested resource
E0904 14:01:29.294594       1 certificate_manager.go:434] Failed while requesting a signed certificate from the master: cannot create certificate signing request: the server could not find the requested resource
I0904 14:01:32.158526       1 start.go:101] certificate yurttunnel-agent not signed, waiting...
E0904 14:01:33.676383       1 certificate_manager.go:434] Failed while requesting a signed certificate from the master: cannot create certificate signing request: the server could not find the requested resource
I0904 14:01:37.158539       1 start.go:101] certificate yurttunnel-agent not signed, waiting...
I0904 14:01:42.158508       1 start.go:101] certificate yurttunnel-agent not signed, waiting...
E0904 14:01:42.214762       1 certificate_manager.go:434] Failed while requesting a signed certificate from the master: cannot create certificate signing request: the server could not find the requested resource
I0904 14:01:47.158460       1 start.go:101] certificate yurttunnel-agent not signed, waiting...
I0904 14:01:52.158546       1 start.go:101] certificate yurttunnel-agent not signed, waiting...
I0904 14:01:57.158526       1 start.go:101] certificate yurttunnel-agent not signed, waiting...
E0904 14:01:58.922836       1 certificate_manager.go:434] Failed while requesting a signed certificate from the master: cannot create certificate signing request: the server could not find the requested resource
E0904 14:01:58.922853       1 certificate_manager.go:318] Reached backoff limit, still unable to rotate certs: timed out waiting for the condition
I0904 14:02:02.158549       1 start.go:101] certificate yurttunnel-agent not signed, waiting...
I0904 14:02:07.158505       1 start.go:101] certificate yurttunnel-agent not signed, waiting...
I0904 14:02:12.158546       1 start.go:101] certificate yurttunnel-agent not signed, waiting...
I0904 14:02:17.158560       1 start.go:101] certificate yurttunnel-agent not signed, waiting...
I0904 14:02:22.158555       1 start.go:101] certificate yurttunnel-agent not signed, waiting...
I0904 14:02:27.158547       1 start.go:101] certificate yurttunnel-agent not signed, waiting...
E0904 14:02:30.936598       1 certificate_manager.go:434] Failed while requesting a signed certificate from the master: cannot create certificate signing request: the server could not find the requested resource
I0904 14:02:32.158548       1 start.go:101] certificate yurttunnel-agent not signed, waiting...
I0904 14:02:37.158544       1 start.go:101] certificate yurttunnel-agent not signed, waiting...
I0904 14:02:42.158548       1 start.go:101] certificate yurttunnel-agent not signed, waiting...
I0904 14:02:47.158551       1 start.go:101] certificate yurttunnel-agent not signed, waiting...
I0904 14:02:52.158505       1 start.go:101] certificate yurttunnel-agent not signed, waiting...
I0904 14:02:57.158553       1 start.go:101] certificate yurttunnel-agent not signed, waiting...
I0904 14:03:02.158554       1 start.go:101] certificate yurttunnel-agent not signed, waiting...
E0904 14:03:02.926781       1 certificate_manager.go:434] Failed while requesting a signed certificate from the master: cannot create certificate signing request: the server could not find the requested resource
I0904 14:03:07.158547       1 start.go:101] certificate yurttunnel-agent not signed, waiting...
I0904 14:03:12.158553       1 start.go:101] certificate yurttunnel-agent not signed, waiting...
I0904 14:03:17.158542       1 start.go:101] certificate yurttunnel-agent not signed, waiting...
I0904 14:03:22.158566       1 start.go:101] certificate yurttunnel-agent not signed, waiting...
I0904 14:03:27.158872       1 start.go:101] certificate yurttunnel-agent not signed, waiting...
I0904 14:03:32.158543       1 start.go:101] certificate yurttunnel-agent not signed, waiting...
E0904 14:03:34.929000       1 certificate_manager.go:434] Failed while requesting a signed certificate from the master: cannot create certificate signing request: the server could not find the requested resource
I0904 14:03:37.158548       1 start.go:101] certificate yurttunnel-agent not signed, waiting...
I0904 14:03:42.158561       1 start.go:101] certificate yurttunnel-agent not signed, waiting...
I0904 14:03:47.158542       1 start.go:101] certificate yurttunnel-agent not signed, waiting...
I0904 14:03:52.158547       1 start.go:101] certificate yurttunnel-agent not signed, waiting...
I0904 14:03:57.158544       1 start.go:101] certificate yurttunnel-agent not signed, waiting...
I0904 14:04:02.158566       1 start.go:101] certificate yurttunnel-agent not signed, waiting...
E0904 14:04:06.930163       1 certificate_manager.go:434] Failed while requesting a signed certificate from the master: cannot create certificate signing request: the server could not find the requested resource
I0904 14:04:07.158548       1 start.go:101] certificate yurttunnel-agent not signed, waiting...

Environment:

OpenYurt version: latest
Kubernetes version (use kubectl version): 1.22.8
OS (e.g: cat /etc/os-release): centos7

/kind bug

@windydayc It looks like that you have used a old yurt-tunnel-agent version. would you be able to upload the image info of yurt-tunnel-agent?

[root@iZf8z8lt4aao5n3cymq3rzZ ~]# docker images
REPOSITORY                                                TAG                 IMAGE ID            CREATED             SIZE
openyurt/yurt-controller-manager                          latest              8b4dc25d9b5e        27 hours ago        50.5MB
openyurt/yurt-tunnel-server                               latest              2f6b80a7898d        4 days ago          48.3MB
openyurt/yurt-controller-manager                          <none>              6a80f9c1ccc5        4 days ago          50.5MB
openyurt/yurt-app-manager                                 latest              f9d16234defc        4 days ago          46.8MB
rancher/mirrored-flannelcni-flannel                       v0.19.1             252b2c3ee6c8        4 weeks ago         62.3MB
oamdev/kube-webhook-certgen                               v2.4.1              fda55395b2bf        3 months ago        54.7MB
coredns/coredns                                           1.9.3               5185b96f0bec        3 months ago        48.8MB
rancher/mirrored-flannelcni-flannel-cni-plugin            v1.1.0              fcecffc7ad4a        3 months ago        8.09MB
sea.hub:5000/kube-apiserver                               v1.22.8             c0d565df2c90        5 months ago        128MB
sea.hub:5000/kube-proxy                                   v1.22.8             c1cfbd59f774        5 months ago        104MB
sea.hub:5000/kube-controller-manager                      v1.22.8             41ff05350898        5 months ago        122MB
sea.hub:5000/kube-scheduler                               v1.22.8             398b2c18375d        5 months ago        52.7MB
registry.cn-hangzhou.aliyuncs.com/openyurt/flannel-edge   v0.14.0-1           85c9944d9ff5        7 months ago        68MB
<none>                                                    <none>              a37effd3346a        13 months ago       25.7MB
sea.hub:5000/etcd                                         3.5.0-0<PHONE_NUMBER>84        14 months ago       295MB
registry                                                  2.7.1               0d0107588605        15 months ago       25.7MB
sea.hub:5000/coredns/coredns                              v1.8.4              8d147537fb7d        15 months ago       47.6MB
quay.io/coreos/flannel                                    v0.14.0             8522d622299c        15 months ago       67.9MB
sea.hub:5000/pause                                        3.5                 ed210e3e4a5b        17 months ago       683kB
sea.hub:5000/kube-proxy                                   v1.19.8             ea03182b84a2        18 months ago       118MB
sea.hub:5000/kube-apiserver                               v1.19.8             9ba91a90b7d1        18 months ago       119MB
sea.hub:5000/kube-controller-manager                      v1.19.8             213ae7795128        18 months ago       111MB
sea.hub:5000/kube-scheduler                               v1.19.8             919a3f36437d        18 months ago       46.5MB
sea.hub:5000/etcd                                         3.4.13-0            0369cf4303ff        2 years ago         253MB
registry.aliyuncs.com/google_containers/coredns           1.7.0               bfe3a36ebd25        2 years ago         45.2MB
sea.hub:5000/coredns                                      1.7.0               bfe3a36ebd25        2 years ago         45.2MB
sea.hub:5000/pause                                        3.2                 80d28bedfe5d        2 years ago         683kB

[root@iZf8z8lt4aao5n3cymq3s0Z ~]# docker images
REPOSITORY                                                  TAG         IMAGE ID       CREATED        SIZE
registry.cn-hangzhou.aliyuncs.com/openyurt/yurthub          latest      5fec9617227e   27 hours ago   54.6MB
sea.hub:5000/kube-proxy                                     v1.22.8     c1cfbd59f774   5 months ago   104MB
registry.cn-hangzhou.aliyuncs.com/openyurt/flannel-edge     v0.14.0-1   85c9944d9ff5   7 months ago   68MB
openyurt/yurt-tunnel-agent                                  latest      0175b008dfc2   9 months ago   75.9MB
registry.aliyuncs.com/google_containers/coredns             1.7.0       bfe3a36ebd25   2 years ago    45.2MB
registry.cn-hangzhou.aliyuncs.com/google_containers/pause   3.2         80d28bedfe5d   2 years ago    683kB

@windydayc It looks like that you have used a old yurt-tunnel-agent version. would you be able to upload the image info of yurt-tunnel-agent?

You are right. This is indeed a problem with yurt-tunnel-agent image. I re-pulled this image and the problem was solved.

But logs a pod in edge node, it still has an error:
[root@iZf8z8lt4aao5n3cymq3rzZ ~]# kubectl logs -n kube-system yurt-tunnel-agent-rm9wt
error: You must be logged in to the server (the server has asked for the client to provide credentials ( pods/log yurt-tunnel-agent-rm9wt))
[root@iZf8z8lt4aao5n3cymq3rzZ ~]#
[root@iZf8z8lt4aao5n3cymq3rzZ ~]# kubectl logs -n kube-system kube-flannel-ds-9rnw6
error: You must be logged in to the server (the server has asked for the client to provide credentials ( pods/log kube-flannel-ds-9rnw6))

This is very similar to what was mentioned in issue #508

After re-pulled, images are:
[root@iZf8z8lt4aao5n3cymq3rzZ ~]# docker images
REPOSITORY                                                TAG                 IMAGE ID            CREATED             SIZE
openyurt/yurt-tunnel-server                               latest              0986a4ef72ab        3 hours ago         48.3MB
openyurt/yurt-controller-manager                          latest              25ead6b7338f        4 hours ago         50.5MB
openyurt/yurt-app-manager                                 latest              f9d16234defc        4 days ago          46.8MB
rancher/mirrored-flannelcni-flannel                       v0.19.1             252b2c3ee6c8        4 weeks ago         62.3MB
oamdev/kube-webhook-certgen                               v2.4.1              fda55395b2bf        3 months ago        54.7MB
coredns/coredns                                           1.9.3               5185b96f0bec        3 months ago        48.8MB
rancher/mirrored-flannelcni-flannel-cni-plugin            v1.1.0              fcecffc7ad4a        3 months ago        8.09MB
sea.hub:5000/kube-apiserver                               v1.22.8             c0d565df2c90        5 months ago        128MB
sea.hub:5000/kube-scheduler                               v1.22.8             398b2c18375d        5 months ago        52.7MB
sea.hub:5000/kube-controller-manager                      v1.22.8             41ff05350898        5 months ago        122MB
sea.hub:5000/kube-proxy                                   v1.22.8             c1cfbd59f774        5 months ago        104MB
registry.cn-hangzhou.aliyuncs.com/openyurt/flannel-edge   v0.14.0-1           85c9944d9ff5        7 months ago        68MB
<none>                                                    <none>              a37effd3346a        13 months ago       25.7MB
sea.hub:5000/etcd                                         3.5.0-0<PHONE_NUMBER>84        14 months ago       295MB
registry                                                  2.7.1               0d0107588605        15 months ago       25.7MB
sea.hub:5000/coredns/coredns                              v1.8.4              8d147537fb7d        15 months ago       47.6MB
quay.io/coreos/flannel                                    v0.14.0             8522d622299c        15 months ago       67.9MB
sea.hub:5000/pause                                        3.5                 ed210e3e4a5b        17 months ago       683kB
sea.hub:5000/kube-proxy                                   v1.19.8             ea03182b84a2        18 months ago       118MB
sea.hub:5000/kube-apiserver                               v1.19.8             9ba91a90b7d1        18 months ago       119MB
sea.hub:5000/kube-controller-manager                      v1.19.8             213ae7795128        18 months ago       111MB
sea.hub:5000/kube-scheduler                               v1.19.8             919a3f36437d        18 months ago       46.5MB
sea.hub:5000/etcd                                         3.4.13-0            0369cf4303ff        2 years ago         253MB
registry.aliyuncs.com/google_containers/coredns           1.7.0               bfe3a36ebd25        2 years ago         45.2MB
sea.hub:5000/coredns                                      1.7.0               bfe3a36ebd25        2 years ago         45.2MB
sea.hub:5000/pause                                        3.2                 80d28bedfe5d        2 years ago         683kB

[root@iZf8z8lt4aao5n3cymq3s0Z ~]# docker images
REPOSITORY                                                  TAG         IMAGE ID       CREATED        SIZE
openyurt/yurt-tunnel-agent                                  latest      b222279c605a   3 hours ago    43.2MB
registry.cn-hangzhou.aliyuncs.com/openyurt/yurthub          latest      5fec9617227e   28 hours ago   54.6MB
sea.hub:5000/kube-proxy                                     v1.22.8     c1cfbd59f774   5 months ago   104MB
registry.cn-hangzhou.aliyuncs.com/openyurt/flannel-edge     v0.14.0-1   85c9944d9ff5   7 months ago   68MB
registry.aliyuncs.com/google_containers/coredns             1.7.0       bfe3a36ebd25   2 years ago    45.2MB
registry.cn-hangzhou.aliyuncs.com/google_containers/pause   3.2         80d28bedfe5d   2 years ago    683kB

I cleaned the /var/lib/yurttunnel-server/pki/ dir and redeployed the yurt-tunnel-server and yurt-tunnel-agent, then this problem was solved.
The following are the specific steps:
rm -rf /var/lib/yurttunnel-server/pki
kubectl delete -f config/setup/yurt-tunnel-server.yaml
kubectl delete -f config/setup/yurt-tunnel-agent.yaml
kubectl apply -f config/setup/yurt-tunnel-server.yaml
kubectl apply -f config/setup/yurt-tunnel-agent.yaml


User request: add a dynamic textarea with the current PGN to Study, like in Analysis

In the analysis board you can see the PGN evolve and edit it, and copy etc. E.g., you're going down a line "1. e4 c5 2. Nc3 Nc6 3. Bb5 Nd4 4. Nf3" and want to stop there and copy it you can do so from the PGN tab below the board. There are similar tools within a study - to copy the entire PGN, to copy a specific entire branch, but it's less precise than what I'm talking about. E.g., let's say I want to copy just the PGN that's currently on the board, it can be harder to do that

Implemented in v2.1.19


Revert FileSystemError changes due to Windows breakage

Related revert in SwiftPM is in https://github.com/apple/swift-package-manager/pull/3060.

CC @compnerd

apple/swift-package-manager#3060
apple/swift-tools-support-core#169
@swift-ci please test

Looks like the TSC PR is not a revert, but a proper fix. This PR is no longer needed.


Auth Cookies from mobile expired

I success-ed call all serenity api's from android APP . but discovered that the cookies expires , and need to auth again , the logic that mobile app will auth one time only and then every api call will send the cookie only . So how you handle these scenarios in mobile app ?? do you make two calls in every request one for auth and another for the target request ??? if i think it will be too long and affect performance , any help ??

You can Increase Expire time in startup Like this:
ervices.AddAuthentication(o =>
{
o.DefaultScheme = CookieAuthenticationDefaults.AuthenticationScheme;
o.DefaultAuthenticateScheme = CookieAuthenticationDefaults.AuthenticationScheme;
o.DefaultChallengeScheme = CookieAuthenticationDefaults.AuthenticationScheme;
}).AddCookie(o =>
{
o.Cookie.Name = ".AspNetAuth";
            o.ExpireTimeSpan = TimeSpan.FromHours(1);

            o.LoginPath = new PathString("/Account/Login/");
            o.AccessDeniedPath = new PathString("/Account/AccessDenied");
        });

You can Increase Expire time of  Cookie like this example :
services.AddAuthentication(o =>
{
o.DefaultScheme = CookieAuthenticationDefaults.AuthenticationScheme;
o.DefaultAuthenticateScheme = CookieAuthenticationDefaults.AuthenticationScheme;
o.DefaultChallengeScheme = CookieAuthenticationDefaults.AuthenticationScheme;
}).AddCookie(o =>
{
o.Cookie.Name = ".AspNetAuth";
o.ExpireTimeSpan = TimeSpan.FromHours(1);
            o.LoginPath = new PathString("/Account/Login/");
            o.AccessDeniedPath = new PathString("/Account/AccessDenied");
        });

@mjacoup  hello , would you please give me an example about serenity on android app ,I have no idea about it


Adds opctl environment validator decorator.

Description
https://jira.oci.oraclecorp.com/browse/ODSC-47201
Adds opctl environment validator decorator.
A Python decorator to validate whether a OPCTL CLI command can be executed in the current environment. This decorator will help ensure that CLI commands are only executed when the necessary conditions are met within the environment. For instance the operator's image cannot be created in the NB session or OCI Jobs.
Pre-commit

Tests

In the next PR will add extra validation:
try:
    import docker
    docker.from_env().version()
except:
    raise OpctlEnvironmentError()