Corrupt Word document

After running the CdmOnboarding the generated Word document seems to be corrupt according to Word:
"Word found unreadable content in CdmOnboarding-xxx.docx. Do you want to recover the contents of this document? If you trust the source of this document, click Yes."
After recovering the document looks fine.

We have seen this before. Not sure what triggers this, but will take a look.
Good to know that at least after recovering the document looks fine.

Fixed by taking a recovered document as the new template


fixes #81 so we generate an openshift specific yaml file for openshift specific resources

fixes #81 so we generate an openshift specific yaml file for openshift specific resources

[merge]


Model : Report

Report Models Are handled with three JSON fields:

Report#Mod (still debated) - Sayonika<Mod>
Report#ReportClassification - int
Report#Author - Sayonika<User>

Where the:
Report#Mod
This is a valid Sayonika<Mod> Snowflake. Still under debate if we should include this.
Report#ReportClassification
This is a field accepting three (3) integers where:

1 : IP Guideline Violation
2 : Mod Entry Standard Violation
3 : "No unauthorized Copyrighted Content" Violation - effectively a DMCA as well.

Report#Author
This is a field containing the Sayonika<User> Snowflake of the reporter.

Done in succeeding commits


Python extension hangs on loading

Environment data

VS Code version: 1.57.1
Extension version (available under the Extensions sidebar): v2021.6.944021595
OS and version: Windows 10 build 19042
Python version (& distribution if applicable, e.g. Anaconda): 3.8
Type of virtual environment used (N/A | venv | virtualenv | conda | ...): N/A
Relevant/affected Python-related VS Code extensions and their versions: Pylance 2021.6.3
Value of the python.languageServer setting: Pylance

[NOTE: If you suspect that your issue is related to the Microsoft Python Language Server (python.languageServer: 'Microsoft'), please download our new language server Pylance from the VS Code marketplace to see if that fixes your issue]
Expected behaviour
Python extension loads
Actual behaviour
Python extension hangs on loading indefinitely
Steps to reproduce:
[NOTE: Self-contained, minimal reproducing code samples are extremely helpful and will expedite addressing your issue]

Open VSCode, extension begins loading and hangs immediately.

Disabling then re-enabling extensions did not correct issue
Uninstalling and re-installing extensions did not correct issue

Logs

Output for Python in the Output panel (View→Output, change the drop-down the upper-right of the Output panel to Python)

User belongs to experiment group 'pythonaa'
User belongs to experiment group 'pythonJoinMailingListVar2'
User belongs to experiment group 'pythonJediLSP'
User belongs to experiment group 'pythonDiscoveryModuleWithoutWatcher'
User belongs to experiment group 'pythonTensorboardExperiment'
User belongs to experiment group 'pythonSurveyNotificationcf'
User belongs to experiment group 'PythonPyTorchProfiler'
Python interpreter path: ~\AppData\Local\Microsoft\WindowsApps\PythonSoftwareFoundation.Python.3.8_qbz5n2kfra8p0\python.exe

Did you set the Python interpreter path manually in your settings? That path is to the Windows Store install of Python in a special Windows directory that we explicitly try not to set.

I don't recall manually changing it.
It's the same path I see for my default system interpreter (i.e. print(sys.executable))

Looking into it further, it appears that this only occurs when using a file on a USB drive. Files on the local disk have the extension load without issue. I did select to trust the locations in both cases.
Additionally, I changed the interpreter location to Python interpreter path: ~\AppData\Local\Programs\Python\Python39\python.exe and it did not change behaviour.

The Windows Store install is a bit weird -- due to how Windows Store apps are sandboxed -- as there's the path to the thing you're supposed to execute, and then the actual thing that gets run (the latter is what you're seeing in your output and with sys.executable).
And that second path you specified is a different version than the first one you specified.
You obviously are loading to some point, so are you able to launch the environment picker? Basically what is giving the impression of the extension hanging?

And that second path you specified is a different version than the first one you specified.

Right, I changed the path away from the windows store path because it was unusual. It did not correct anything.

You obviously are loading to some point, so are you able to launch the environment picker? Basically what is giving the impression of the extension hanging?

I get this on load and I cannot get into the environment picker.

It seems this issue only happens when I'm editing files on a USB drive. If I'm editing files on my local disk, the extension loads correctly.

Is it an especially fast or slow USB drive? Basically VS Code has a timer to try and call out bad extensions that are slow. It's possible that the interactions we do with a workspace when we launch is too slow on your USB drive for us to not trigger the warning.

I've tried a couple USB drives, they aren't especially slow or fast. The extension has worked previously on them without issue on multiple PCs.

You could try disabling Telemetry in VScode settings. I was having the exact same behavior when trying to use the CircuitPython extension. (The microntroller gets used as a USB drive and the Python extension was hanging like you described when trying to open the python text file. And same as you mentioned, everything worked fine with the same files and folders copied to the local file system.) Same behavior with 3 different boards. I disabled telemetry and the Python extension loads OK. Re-enabled and same issue occurs again. I have no idea why this would work, and maybe it's just something specific to my use case or system.

@debadam Thank you so much, that fixed it!


Suggestions to programming languages chapter

This issue is user submitted and needs to be validated:
The page
http://www.csfieldguide.org.nz/ProgrammingLanguages.html
mentions a few functional programming languages at the end.
I'm passionate about programming languages, and I noticed two small issues that you could easily fix:

you write Haskel while the language's name is Haskell
it would be nice to list OCaml as well, as it's a programming language with an active community of users and that still influences other programming languages (a good example being F# which was born as a dialect of OCaml, and remains very close). Scala would also deserve a mention.

On a more imprecise note, I think the description of Prolog is not accurate: the idea of declarative languages as specifying "what, not how" is more of a dream than a reality; in reality, the Prolog programmer needs a very good understanding of the order of rule resolutoin to distinguish the good ways to express a problem from the bad. I would propose the following reformulation: "Another important type of programming is logic programming, where a program is given as set of deductions that can be made, plus a problem to solve; the interpreter then searches for the right order of deductions to make to solve this problem."

That page doesn't exist (404), I assume they refer to
http://csfieldguide.org.nz/en/chapters/programming-languages.html


Scheduler Updates

Apologies for the big diff with lots of small changes, but it was hard to split these up and still have the tests pass.
To summarise:

Add Job.InternalID, distinct from Job.JobID, making jobs easier to track (see this comment)
Reduce logging
Support getting only "active" formations from the controller (i.e. ones with at least one process scaled up) so the scheduler only needs to make a single request in SyncFormations (rather than getting all apps, then a request per app for formations)
Support getting expanded formations from the controller to avoid the scheduler needing to lookup apps / releases / artifacts separately
Start jobs in a goroutine (part of fixing #1920), using "placement requests" to the main loop to determine which host to start the job on at each attempt
Refactor handling of job events & comment to make it much clearer
Replace JobStateCrashed with JobStateScheduled to indicate the job is scheduled to start in the future
Add a job restart timer so restarts can be cancelled before trying to stop running jobs (fixes #1922)
Jobs with a type not from the release (e.g. slugbuilder jobs) don't trigger a rectify
Track failed formation lookups and trigger a rectify if the formation appears in a future sync
Track type-less jobs in memory (fixes #2013)
Don't handle crashed jobs in non-leaders (fixes #2030)
Cancel new jobs (i.e. ones in the process of being started) when stopping jobs so they do not continue to be started (fixes #2133, fixes #2004)

Can any tests be added for fixed bugs?

@titanous comments addressed (I added test coverage around picking which jobs to stop)

@titanous comments addressed

LGTM!


Errors during action handlers

TL;DR If an error is thrown whilst handling an action the Dispatcher will not allow any further actions to be dispatched.
The logic that causes this is, I think, contained within Dispatcher::dispatch:
Dispatcher.prototype.dispatch = function dispatch(actionName, payload) {
    if (this.currentAction) {
        throw new Error('Cannot call dispatch while another dispatch is executing. Attempted to execute \'' + actionName + '\' but \'' + this.currentAction.name + '\' is already executing.');
    }
    ...
    this.currentAction = new Action(actionName, payload);
    ....
    this.currentAction.execute(handlerFns);
    debug('finished ' + this.currentAction.name);
    this.currentAction = null;

If an error is thrown during Action::execute, this.currentAction is never reset to null and so further calls to dispatch throw the 'Cannot call dispatch' error.
Using try around the Action::execute call prevents the 'Cannot call dispatch' error from being thrown under legitimate circumstances, in fact there is a test case ensuring that dispatch() does not swallow errors thrown by Store handlers.
Given that the current behaviour renders an app unusable, what are the suggestions for handling errors in a Fluxible app?
M

Handling this better would be very nice - I have to try/catch while debugging because exceptions (from my code) get swallowed by the Dispatchr error handling mechanism.  Guidance on best practices would be appreciated!

Ok, so most of this stems from the fact that we're not resetting currentAction after a thrown exception. Perhaps we can add a try/catch/finally to the execute method to ensure that it gets reset.

@mridgway this is hopefully what's achieved in #47.
M

I'm not sure that we need to differentiate the internal errors with the store's errors in this case. Both should still throw, but they should be able to be handled by the caller to dispatch. Also, I think in your implementation the this.currentAction wouldn't get reset since throw would exit the flow.
Here is my proposal for fixing this: https://github.com/yahoo/dispatchr/commit/66f5355dc7c7333ef85a6e40aeec053830f2740f

Yup, you're right! That looks spot on.
M
On 12 Jan 2015 20:56, "Michael Ridgway"<EMAIL_ADDRESS>wrote:

I'm not sure that we need to differentiate the internal errors with the
store's errors in this case. Both should still throw, but they should be
able to be handled by the caller to dispatch. Also, I think in your
implementation the this.currentAction wouldn't get reset since throw
would exit the flow.
Here is my proposal for fixing this: 66f5355
https://github.com/yahoo/dispatchr/commit/66f5355dc7c7333ef85a6e40aeec053830f2740f
—
Reply to this email directly or view it on GitHub
https://github.com/yahoo/dispatchr/issues/46#issuecomment-69644370.


Fixes #1329 - Added base/inheritance to Medplum custom resources

Coverage remained the same at 93.931% when pulling a6869e1ef47bdf529fdeba35f3ae19d02c2f44ea on cody-fixed-medplum-structure-definitions into 8ab8ee87094f7db70e621c4482cb540df4b22a6e on main.


sbt-robovm does not work on Windows, even if not used in multi-project settings

Adding sbt-robovm plugin causes SBT to fail with information "Unsupported Operating System: Windows ***" even in multi-project setups (like libgdx-sbt-project.g8), when someone compiles only Windows or Android versions.

Is this still an issue?

I have not done anything in particular to fix it, so it needs testing. I have a windows dev machine again so I can try it.

If I understand this correctly, just including sbt-robovm in build will produce errors on sbt run in windows, is that correct?

Yeah, for example in the sbt libgdx template. We will want it to detect if it is being run on an unsupported platform and make sure to not doing anything.

A fellow windows user tried libgdx sbt template, the message change since last time. It is now
java.lang.UnsatisfiedLinkError: Native library for windows-x86_64 not found

(full stack trace: http://pastebin.com/t4WbFtw5) and earlier it was
Unsupported Operating System: Windows ***

Hmm, it seems that this line val config = launchTask(Arch.getDefaultArch, OS.getDefaultOS, TargetType.console, skipInstall = true).value has its parameters evaluated even without calling the task. That seems to be a property of .value macro. When I have a little time to setup test environment, I'll try fixing it by changing launchTask to pass parameters by name ( arch: =>Arch, ...), that could hopefully fix it.

I will test this when I update the libgdx g8 template.

This should be fixed.


[Tree Unique] Loop hoisting

This PR implemented Loop Invariant boundary detection and loop invariant hoisting for Tree Unique Args.
An loop invariant is considered boundary iff it's invariant but one or more of it's parent is not invariant.
An invariant can be moved out the loop iff it's boundary invariant and it's Expr-size > 1, which mean it's not simple (Get (Arg id) n).

This is really great work, but we should focus on the new schema. Shall we close this for now?

closing for now


Add information about the max time allowed for recording a meeting

I received this question from customers and internal resources at Microsoft a few times:
Can we add the max recording time for:
Teams Live Events
Teams normal meetings
Just to make it crisp: If a meeting goes on for 24 hours, are we going to record all the 24 hours? Or is there a hard limit where the recording will be interrupted before that?
Same thing for Live Events. Their time limit is usually for 4 hours, but with COVID we expanded their duration to (if I remember well) 16 hours. Are we going to record all of it or just 4 hour? I believe for Live Events we will always record all of it, but for normal meetings, as I exposed above, it is not super clear.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 905e2c09-ef3e-07cc-0809-6ff171157c47
Version Independent ID: c0d33162-183d-fff8-32e9-a999f391ea51
Content: Limits and specifications for Microsoft Teams - Microsoft Teams
Content Source: Teams/limits-specifications-teams.md
Service: msteams
GitHub Login: @SerdarSoysal
Microsoft Alias: serdars

Thank you for submitting feedback and contributing to the docs. We are currently investigating this.

Thank you for submitting feedback and contributing to the docs. We are currently investigating this.

@cadasi thank you for reaching out. Since recorded videos are stored in Microsoft Stream, the limit mentioned in the article is in terms of data eg. a Microsoft Stream tenant receives a fixed allocation of 500 GB of storage. The size of a 1-hour recording is approximately 400 MB, but most users have found that the limit is somewhere around 4 hours. Please also see here https://techcommunity.microsoft.com/t5/microsoft-teams/what-is-the-time-limit-of-a-recording-during-a-meeting/m-p/1436310. Teams Meeting time limits are 24 hours.

@cadasi thank you for reaching out. Since recorded videos are stored in Microsoft Stream, the limit mentioned in the article is in terms of data eg. a Microsoft Stream tenant receives a fixed allocation of 500 GB of storage. The size of a 1-hour recording is approximately 400 MB, but most users have found that the limit is somewhere around 4 hours. Please also see here https://techcommunity.microsoft.com/t5/microsoft-teams/what-is-the-time-limit-of-a-recording-during-a-meeting/m-p/1436310. Teams Meeting time limits are 24 hours.

@cadasi Thank you for submitting feedback. We understand that this issue has been resolved.
Please feel free to re-open this issue if there is a specific area of the docs that we can improve or make better. Thank you.


Fix SWDEV-473314 by avoiding empty unique_ptr dereference

Revert part of blamed commit modifying source/lib/omnitrace/library/components/roctracer.cpp with goal of  "clear roctracer_data storage if roctracer not initialized"
Particularly, I don't think tim::storage<comp::roctracer_data>::instance() returns the instance of the storage singleton if it exists, but rather creates an empty unique_ptr to the storage type

I can clarify my statement about "tim::storagecomp::roctracer_data::instance()": This instance() function uses specialized templates and calls into the wrong (generic) version yielding a false positive signal that "there is still roctracer_data that needs to be destroyed in the storage singleton".
File src: source\lib\omnitrace\library\thread_data.hpp

// Generic Template, which is being called and returns a pointer to uninitialized structure
template <typename Tp, typename Tag, size_t MaxThreads>
unique_ptr_t<thread_data<std::optional<Tp>, Tag, MaxThreads>>&
thread_data<std::optional<Tp>, Tag, MaxThreads>::instance()
{
    static auto _v = unique_ptr_t<this_type>{};
    return _v;
}

// Specialized Template, which you want to call but is not used. Returns a pointer to the singleton
template <typename Tp, typename Tag, size_t MaxThreads>
unique_ptr_t<Tp>&
thread_data<Tp, Tag, MaxThreads>::instance()
{
    return instances().at(threading::get_id());
}


RHTAPINST-120: GitHub Project Release

Adding Github Action to release the project artifacts using goreleaser.
This PR introduces documentation and automation to release the rhtap-cli for multiple platforms upon the creation of a new GitHub release (i.e. Git tag).

https://goreleaser.com/customization/release/
Let's try to have prereleases. Can be usefull for QE testing when we launch a pre-release


AzCopy Transfer from file to directory path not supported - Help.

Problem description
I am using AzCopy to download the stand alone simulator environment. However, when I run the AzCopy code I get an error about transfer from file to directory not being supported. What destination is acceptable for AzCopy? I've read the AzCopy documentation however can't seem to find anything on this specifically. Thank you
Problem details
This is what I inputted:
C:\Program Files (x86)\Microsoft SDKs\Azure>AzCopy /Source:https://airsimtutorialdataset.blob.core.windows.net/e2edl/AD_Cookbook_AirSim.7z /Dest:C:/Users/zs70/Documents/Tomi/Airsim/AutonomousDrivingCookbook-master/Landscape
Below is the output I get back:
[2019/03/27 14:21:09][WARNING] The command line "AzCopy /Source:https://airsimtutorialdataset.blob.core.windows.net/e2edl/AD_Cookbook_AirSim.7z /Dest:C:/Users/zs70/Documents/Tomi/Airsim/AutonomousDrivingCookbook-master" in the journal file "C:\Users\zs70\AppData\Local\Microsoft\Azure\AzCopy\AzCopy.jnl" is different from your input.
[2019/03/27 14:21:09][WARNING] Incomplete operation with different command line detected at the journal directory "C:\Users\zs70\AppData\Local\Microsoft\Azure\AzCopy".
Do you want to overwrite the journal to start a new operation? Choose Yes to overwrite, choose No to cancel current operation. (Yes/No) y
[2019/03/27 14:30:36][ERROR] Error parsing destination location "C:/Users/zs70/Documents/Tomi/Airsim/AutonomousDrivingCookbook-master": Transfer from a file to a directory path is not supported. Please update /Dest with an absolute path to a file. For more details, please type "AzCopy /?:Dest" or use verbose option /V.

Experiment/Environment details

Tutorial used: AirSimE2EDeepLearning
Environment used: Landscape
Versions of artifacts used (if applicable): Python 3.7, Keras 2.1.2

Hi, did you manage to get the solution to this?

This is the solution : -
The destination is interpreted according to following rules:
1) When source is a single file, destination
is interpreted as a single file.
2) When source is a directory, destination
is interpreted as a directory.


SignedDistanceField implementation for unit types

i.e. Float; if a float literal were to represent a constant distance field, various modifiers could be further generalized to apply SDFs in place of floats (ex. shapes that use p.z - r to cheaply model a Z-axis plane).
Some of Inigo Quilez' examples min against zero, which in this context is equivalent to applying a boolean union with the unit distance field.
a.k.a. a distance field that returns 0.0 for every possible input point.
a.k.a. a hard-to-imagine imaginary shape whose surface is everywhere.
This seems like an interesting mathematical property, since it effectively makes a shape into an interior-only distance field.
Or exterior only, if you instead apply a boolean intersection.

Done.


Dependency causing an ANR in the Background

We are using the dependency to record the audio, we have noticed that it causing an ANR in the background with the following stack trace.
Dependency version : audio_session: ^0.1.13
Device : Redmi 9 Power
Android version : 12
Flutter doctor :
Doctor summary (to see all details, run flutter doctor -v):
[✓] Flutter (Channel stable, 3.10.5, on macOS 14.1.1 23B81 darwin-arm64, locale en-IN)
[✓] Android toolchain - develop for Android devices (Android SDK version 33.0.0)
[✓] Xcode - develop for iOS and macOS (Xcode 15.0)
[✓] Chrome - develop for the web
[✓] Android Studio (version 2022.3)
[✓] VS Code (version 1.84.2)
[✓] Connected device (2 available)
[✓] Network resources

Stacktrace
main (runnable):tid=1 systid=22413
       at android.media.AudioDeviceInfo.getProductName(AudioDeviceInfo.java:415)
       at com.ryanheise.audio_session.AndroidAudioManager$Singleton.encodeAudioDevice(AndroidAudioManager.java:273)
       at com.ryanheise.audio_session.AndroidAudioManager$Singleton.encodeAudioDevices(AndroidAudioManager.java:265)
       at com.ryanheise.audio_session.AndroidAudioManager$Singleton.access$4300(AndroidAudioManager.java:251)
       at com.ryanheise.audio_session.AndroidAudioManager$Singleton$1.onAudioDevicesAdded(AndroidAudioManager.java:298)
       at android.media.AudioManager$NativeEventHandlerDelegate$1.handleMessage(AudioManager.java:7926)
       at android.os.Handler.dispatchMessage(Handler.java:106)
       at android.os.Looper.loopOnce(Looper.java:211)
       at android.os.Looper.loop(Looper.java:300)
       at android.app.ActivityThread.main(ActivityThread.java:8322)
       at java.lang.reflect.Method.invoke(Native method)
       at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:556)
       at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:1038)

Couldn’t reproduce the issue locally as there was no Flutter/dart associated stacktrace.

Thank you for the report.
Without seeing the exception message, it's hard to know what is the cause of this. The getProductName method inside of the SDK looks like this:
    /**
     * @return The human-readable name of the audio device.
     */
    public CharSequence getProductName() {
        String portName = mPort.name();
        return (portName != null && portName.length() != 0) ? portName : android.os.Build.MODEL;
    }

I guess it could be a NullPointerException if mPort is null. It would be strange if this were null, though. Since I can't reproduce it, you would have to do some debugging on your end. For example, you could add a println in the code just before the call to device.getProductName() to print out device.getPort() and see if it is null. If that's the cause, I can fix it.

Thank you for the response!
Since the issue is not reproducible in my end either, it is getting reported on our firebase-crashlytics dashboard, not sure if this will work, but will try this.

If you could get the exception message as well, that would be helpful.
Taking a second look, audio_session calls device.getId() first without crashing, and getId() should theoretically trigger the same NPE since it accesses a member of mPort. So that would suggest mPort is not the problem, although then I have no more clues on what the error is pointing to.
Aside from the error, I'm also suspicious that an error on this line could cause an ANR. One theory is that the cause of the ANR is elsewhere, then the app gets killed, and then this stack trace happens to just reveal what audio_session was doing at the time the app was killed, without that audio_session's activity itself being blocking in any way. That could also explain why there is no exception message.


SSLV3_ALERT_CLOSE_NOTIFY error

Preflight Checklist

[X] I have installed the latest version of Storage Explorer.
[X] I have checked existing resources, including the troubleshooting guide and the release notes.
[X] I have searched for similar issues.

Storage Explorer Version
1.19.1
Platform
Windows
OS Version
Windows 10
Architecture
x64
Build Number
20210425.1
Regression From
No response
Bug Description
Hello,
I am unable to retrieve the blob containers of my storages.
I have checked that I have no proxy or weird internet settings.
Could you please tell me what I can do ?
Thank you,
Etienne
Unable to get child resources
Details :
{
"name": "FetchError",
"message": "request to https://.blob.core.windows.net/?include=metadata&comp=list failed, reason: write EPROTO 245231464:error:100003e8:SSL routines:OPENSSL_internal:SSLV3_ALERT_CLOSE_NOTIFY:../../third_party/boringssl/src/ssl/tls_record.cc:592:SSL alert number 0\n",
"stack": "FetchError: request to https://.blob.core.windows.net/?include=metadata&comp=list failed, reason: write EPROTO 245231464:error:100003e8:SSL routines:OPENSSL_internal:SSLV3_ALERT_CLOSE_NOTIFY:../../third_party/boringssl/src/ssl/tls_record.cc:592:SSL alert number 0\n\n    at ClientRequest. (C:\Program Files (x86)\Microsoft Azure Storage Explorer\resources\app\node_modules\node-fetch\lib\index.js:1461:11)\n    at ClientRequest.emit (events.js:310:20)\n    at TLSSocket.socketErrorListener (_http_client.js:426:9)\n    at TLSSocket.emit (events.js:310:20)\n    at errorOrDestroy (internal/streams/destroy.js:108:12)\n    at onwriteError (_stream_writable.js:424:5)\n    at onwrite (_stream_writable.js:445:5)\n    at internal/streams/destroy.js:50:7\n    at TLSSocket.Socket._destroy (net.js:677:5)\n    at TLSSocket.destroy (internal/streams/destroy.js:38:8)",
"type": "system",
"errno": "EPROTO",
"code": "EPROTO"
}
Steps to Reproduce
Login to Azure account is ok.
Storages are listed correctly.
Error happen when I try to list the Blob containers.
Actual Experience
I am unable to retrieve the blob containers of my storages.
Expected Experience
No response
Additional Context
No response

OK. Windows Update told me I was up to date, but when I forced the check it proposed an update for .Net framework 3.5 and 4.8. After install and reboot the above issue seems to be solved.
Hope it helps if someone encounter the same issue. :)

Since it is mitigated, we are going to close the issue. Please let us know if you still run into any issue later on.


Allow whitelisted ips

Hi,
Is it possible to allow a block of ip addresses access even if they go over the maximum request amount? Kind of like a whitelist?

+1

@gabayliran
Use this branch for whitelist support, adds a whitelist rule in Web ACL:
https://github.com/vuls-for-work/aws-waf-sample/tree/add-whitelist-rule-support


add integration test for get_collections when missing certificates

Please first review https://github.com/MystenLabs/narwhal/pull/227 , this is follow up work.
This PR is introducing an end to end test for the get_collections gRPC endpoint when we are missing some certificates.

Thanks @akichidis !


Do next for dump

Move everything to the public shema.
Maybe figure out a way to get good permissive permissions by default.
 What is the best way out of that?

don't forget to add the new dump file to the katacoda images


tutorial self-added :) + tiny page layout change

as suggested by wingnut

This pull request has been mentioned on Babylon.js. There might be relevant details there:
https://forum.babylonjs.com/t/we-have-emissivecolor-do-we-also-have-emissivetexture-for-all-texture-baked-exported-model/178/8

lol, these automatic messages are awesome ! :+1:


Remove SSM related infra

Terraform Plan Output - Uat

Note: Objects have changed outside of Terraform

Terraform detected the following changes made outside of Terraform since the
last "terraform apply":

# aws_db_subnet_group.subnet_group has been changed
~ resource "aws_db_subnet_group" "subnet_group" {
        id          = "uat-shipment-tracker"
        name        = "uat-shipment-tracker"
      + tags        = {}
        # (4 unchanged attributes hidden)
    }
# aws_rds_cluster.rds_cluster has been changed
~ resource "aws_rds_cluster" "rds_cluster" {
      + enabled_cloudwatch_logs_exports     = []
        id                                  = "shipment-tracker"
      + tags                                = {}
        # (36 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }
# aws_kms_key.key has been changed
~ resource "aws_kms_key" "key" {
        id                                 = "65d6d147-e1e7-4465-8839-53c5a529764d"
      + tags                               = {}
        # (11 unchanged attributes hidden)
    }
# aws_security_group.security_group has been changed
~ resource "aws_security_group" "security_group" {
        id                     = "sg-01f89a318da07a9d2"
      ~ ingress                = [
          + {
              + cidr_blocks      = [
                  + "<IP_ADDRESS>/16",
                ]
              + description      = "Allow traffic from VPC"
              + from_port        = 5432
              + ipv6_cidr_blocks = []
              + prefix_list_ids  = []
              + protocol         = "tcp"
              + security_groups  = []
              + self             = false
              + to_port          = 5432
            },
          + {
              + cidr_blocks      = []
              + description      = "Allow traffic from legacy VPC"
              + from_port        = 5432
              + ipv6_cidr_blocks = []
              + prefix_list_ids  = []
              + protocol         = "tcp"
              + security_groups  = [
                  + "755865716437/sg-6b57e40f",
                ]
              + self             = false
              + to_port          = 5432
            },
        ]
        name                   = "uat-shipment-tracker-db-sg"
      + tags                   = {}
        # (7 unchanged attributes hidden)
    }
# aws_security_group_rule.legacy_vpc has been changed
~ resource "aws_security_group_rule" "legacy_vpc" {
      + cidr_blocks              = []
        id                       = "sgrule-2487716616"
      + ipv6_cidr_blocks         = []
      + prefix_list_ids          = []
        # (8 unchanged attributes hidden)
    }
# aws_security_group_rule.vpc has been changed
~ resource "aws_security_group_rule" "vpc" {
        id                = "sgrule-2225686304"
      + ipv6_cidr_blocks  = []
      + prefix_list_ids   = []
        # (8 unchanged attributes hidden)
    }

Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

No changes. Your infrastructure matches the configuration.

Your configuration already matches the changes detected above. If you'd like
to update the Terraform state to match, create and apply a refresh-only plan:
  terraform apply -refresh-only

Terraform Plan Output - Production

Note: Objects have changed outside of Terraform

Terraform detected the following changes made outside of Terraform since the
last "terraform apply":

# aws_iam_instance_profile.ec2_ssm_iam has been changed
~ resource "aws_iam_instance_profile" "ec2_ssm_iam" {
        id          = "ec2-ssm"
        name        = "ec2-ssm"
      + tags        = {}
        # (6 unchanged attributes hidden)
    }
# aws_iam_role.ec2_ssm_iam has been changed
~ resource "aws_iam_role" "ec2_ssm_iam" {
        id                    = "ec2-ssm-role"
        name                  = "ec2-ssm-role"
      + tags                  = {}
        # (9 unchanged attributes hidden)

      - inline_policy {}
      + inline_policy {
          + name   = "ec2-ssm-policy"
          + policy = jsonencode(
                {
                  + Statement = [
                      + {
                          + Action   = [
                              + "ssmmessages:OpenDataChannel",
                              + "ssmmessages:OpenControlChannel",
                              + "ssmmessages:CreateDataChannel",
                              + "ssmmessages:CreateControlChannel",
                              + "ssm:UpdateInstanceInformation",
                            ]
                          + Effect   = "Allow"
                          + Resource = "*"
                          + Sid      = "ssm"
                        },
                      + {
                          + Action   = "s3:GetEncryptionConfiguration"
                          + Effect   = "Allow"
                          + Resource = "*"
                          + Sid      = "s3"
                        },
                    ]
                  + Version   = "2012-10-17"
                }
            )
        }
    }
# aws_security_group.ssm has been changed
~ resource "aws_security_group" "ssm" {
        id                     = "sg-0e172fd553d063ce0"
        name                   = "terraform-20211206162838152700000001"
      + tags                   = {}
        # (9 unchanged attributes hidden)
    }
# aws_vpc_endpoint.ssmmessages has been changed
~ resource "aws_vpc_endpoint" "ssmmessages" {
        id                    = "vpce-0e2a920ca1b504c27"
      + tags                  = {}
        # (16 unchanged attributes hidden)
    }
# aws_instance.dump_restore has been changed
~ resource "aws_instance" "dump_restore" {
        id                                   = "i-0748ce6cb1382a01e"
        tags                                 = {
            "Name" = "pg_dump pg_restore"
        }
        # (27 unchanged attributes hidden)

      ~ root_block_device {
          + tags                  = {}
            # (9 unchanged attributes hidden)
        }
        # (3 unchanged blocks hidden)
    }
# aws_rds_cluster.rds_cluster has been changed
~ resource "aws_rds_cluster" "rds_cluster" {
        id                                  = "shipment-tracker"
        tags                                = {}
        # (37 unchanged attributes hidden)

      ~ scaling_configuration {
          ~ max_capacity             = 2 -> 32
          ~ min_capacity             = 2 -> 32
            # (3 unchanged attributes hidden)
        }
    }
# aws_vpc_endpoint.ssm has been changed
~ resource "aws_vpc_endpoint" "ssm" {
        id                    = "vpce-0fae4d6b357d8ceba"
      + tags                  = {}
        # (16 unchanged attributes hidden)
    }
# aws_vpc_endpoint.ec2messages has been changed
~ resource "aws_vpc_endpoint" "ec2messages" {
        id                    = "vpce-02600efde4b6cc620"
      + tags                  = {}
        # (16 unchanged attributes hidden)
    }

Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
~ update in-place
- destroy

Terraform will perform the following actions:

# aws_iam_instance_profile.ec2_ssm_iam will be destroyed
- resource "aws_iam_instance_profile" "ec2_ssm_iam" {
      - arn         = "arn:aws:iam::341175100383:instance-profile/ec2-ssm" -> null
      - create_date = "2021-12-06T16:28:39Z" -> null
      - id          = "ec2-ssm" -> null
      - name        = "ec2-ssm" -> null
      - path        = "/" -> null
      - role        = "ec2-ssm-role" -> null
      - tags        = {} -> null
      - tags_all    = {
          - "Created_by"  =<EMAIL_ADDRESS>          - "Domain"      = "platform"
          - "Environment" = "production"
          - "Managed_by"  = "terraform"
          - "Repository"  = "github.com/FundingCircle/shipment_tracker"
          - "Team"        = "platform-engineering"
        } -> null
      - unique_id   = "AIPAU63464PP6RWG6GN5H" -> null
    }

# aws_iam_role.ec2_ssm_iam will be destroyed
- resource "aws_iam_role" "ec2_ssm_iam" {
      - arn                   = "arn:aws:iam::341175100383:role/ec2-ssm-role" -> null
      - assume_role_policy    = jsonencode(
            {
              - Statement = [
                  - {
                      - Action    = "sts:AssumeRole"
                      - Effect    = "Allow"
                      - Principal = {
                          - Service = "ec2.amazonaws.com"
                        }
                      - Sid       = ""
                    },
                ]
              - Version   = "2012-10-17"
            }
        ) -> null
      - create_date           = "2021-12-06T16:28:38Z" -> null
      - force_detach_policies = false -> null
      - id                    = "ec2-ssm-role" -> null
      - managed_policy_arns   = [] -> null
      - max_session_duration  = 3600 -> null
      - name                  = "ec2-ssm-role" -> null
      - path                  = "/" -> null
      - tags                  = {} -> null
      - tags_all              = {
          - "Created_by"  =<EMAIL_ADDRESS>          - "Domain"      = "platform"
          - "Environment" = "production"
          - "Managed_by"  = "terraform"
          - "Repository"  = "github.com/FundingCircle/shipment_tracker"
          - "Team"        = "platform-engineering"
        } -> null
      - unique_id             = "AROAU63464PPX5JRVDBIQ" -> null

      - inline_policy {
          - name   = "ec2-ssm-policy" -> null
          - policy = jsonencode(
                {
                  - Statement = [
                      - {
                          - Action   = [
                              - "ssmmessages:OpenDataChannel",
                              - "ssmmessages:OpenControlChannel",
                              - "ssmmessages:CreateDataChannel",
                              - "ssmmessages:CreateControlChannel",
                              - "ssm:UpdateInstanceInformation",
                            ]
                          - Effect   = "Allow"
                          - Resource = "*"
                          - Sid      = "ssm"
                        },
                      - {
                          - Action   = "s3:GetEncryptionConfiguration"
                          - Effect   = "Allow"
                          - Resource = "*"
                          - Sid      = "s3"
                        },
                    ]
                  - Version   = "2012-10-17"
                }
            ) -> null
        }
    }

# aws_iam_role_policy.ec2_ssm_iam will be destroyed
- resource "aws_iam_role_policy" "ec2_ssm_iam" {
      - id     = "ec2-ssm-role:ec2-ssm-policy" -> null
      - name   = "ec2-ssm-policy" -> null
      - policy = jsonencode(
            {
              - Statement = [
                  - {
                      - Action   = [
                          - "ssmmessages:OpenDataChannel",
                          - "ssmmessages:OpenControlChannel",
                          - "ssmmessages:CreateDataChannel",
                          - "ssmmessages:CreateControlChannel",
                          - "ssm:UpdateInstanceInformation",
                        ]
                      - Effect   = "Allow"
                      - Resource = "*"
                      - Sid      = "ssm"
                    },
                  - {
                      - Action   = "s3:GetEncryptionConfiguration"
                      - Effect   = "Allow"
                      - Resource = "*"
                      - Sid      = "s3"
                    },
                ]
              - Version   = "2012-10-17"
            }
        ) -> null
      - role   = "ec2-ssm-role" -> null
    }

# aws_instance.dump_restore will be destroyed
- resource "aws_instance" "dump_restore" {
      - ami                                  = "ami-05cd35b907b4ffe77" -> null
      - arn                                  = "arn:aws:ec2:eu-west-1:341175100383:instance/i-0748ce6cb1382a01e" -> null
      - associate_public_ip_address          = false -> null
      - availability_zone                    = "eu-west-1c" -> null
      - cpu_core_count                       = 4 -> null
      - cpu_threads_per_core                 = 2 -> null
      - disable_api_termination              = false -> null
      - ebs_optimized                        = false -> null
      - get_password_data                    = false -> null
      - hibernation                          = false -> null
      - iam_instance_profile                 = "ec2-ssm" -> null
      - id                                   = "i-0748ce6cb1382a01e" -> null
      - instance_initiated_shutdown_behavior = "stop" -> null
      - instance_state                       = "running" -> null
      - instance_type                        = "c5.2xlarge" -> null
      - ipv6_address_count                   = 0 -> null
      - ipv6_addresses                       = [] -> null
      - monitoring                           = false -> null
      - primary_network_interface_id         = "eni-04bc90b852c1d8e19" -> null
      - private_dns                          = "ip-10-41-17-88.eu-west-1.compute.internal" -> null
      - private_ip                           = "<IP_ADDRESS>" -> null
      - secondary_private_ips                = [] -> null
      - security_groups                      = [] -> null
      - source_dest_check                    = true -> null
      - subnet_id                            = "subnet-0554c73b64017b4ef" -> null
      - tags                                 = {
          - "Name" = "pg_dump pg_restore"
        } -> null
      - tags_all                             = {
          - "Created_by"  =<EMAIL_ADDRESS>          - "Domain"      = "platform"
          - "Environment" = "production"
          - "Managed_by"  = "terraform"
          - "Name"        = "pg_dump pg_restore"
          - "Repository"  = "github.com/FundingCircle/shipment_tracker"
          - "Team"        = "platform-engineering"
        } -> null
      - tenancy                              = "default" -> null
      - vpc_security_group_ids               = [
          - "sg-02915ad6027a89396",
        ] -> null

      - capacity_reservation_specification {
          - capacity_reservation_preference = "open" -> null
        }

      - enclave_options {
          - enabled = false -> null
        }

      - metadata_options {
          - http_endpoint               = "enabled" -> null
          - http_put_response_hop_limit = 1 -> null
          - http_tokens                 = "required" -> null
        }

      - root_block_device {
          - delete_on_termination = true -> null
          - device_name           = "/dev/xvda" -> null
          - encrypted             = true -> null
          - iops                  = 750 -> null
          - kms_key_id            = "arn:aws:kms:eu-west-1:341175100383:key/3c38bfea-eac0-48dd-9e79-ad861d9f7b00" -> null
          - tags                  = {} -> null
          - throughput            = 0 -> null
          - volume_id             = "vol-0bea1237e2861c43e" -> null
          - volume_size           = 250 -> null
          - volume_type           = "gp2" -> null
        }
    }

# aws_rds_cluster.rds_cluster will be updated in-place
~ resource "aws_rds_cluster" "rds_cluster" {
        id                                  = "shipment-tracker"
        tags                                = {}
        # (37 unchanged attributes hidden)

      ~ scaling_configuration {
          ~ max_capacity             = 32 -> 2
          ~ min_capacity             = 32 -> 2
            # (3 unchanged attributes hidden)
        }
    }

# aws_security_group.ssm will be destroyed
- resource "aws_security_group" "ssm" {
      - arn                    = "arn:aws:ec2:eu-west-1:341175100383:security-group/sg-0e172fd553d063ce0" -> null
      - description            = "For temporary VPC endpoints for SSM" -> null
      - egress                 = [
          - {
              - cidr_blocks      = [
                  - "<IP_ADDRESS>/16",
                ]
              - description      = "HTTPS"
              - from_port        = 443
              - ipv6_cidr_blocks = []
              - prefix_list_ids  = []
              - protocol         = "tcp"
              - security_groups  = []
              - self             = false
              - to_port          = 443
            },
        ] -> null
      - id                     = "sg-0e172fd553d063ce0" -> null
      - ingress                = [
          - {
              - cidr_blocks      = [
                  - "<IP_ADDRESS>/16",
                ]
              - description      = "HTTPS"
              - from_port        = 443
              - ipv6_cidr_blocks = []
              - prefix_list_ids  = []
              - protocol         = "tcp"
              - security_groups  = []
              - self             = false
              - to_port          = 443
            },
        ] -> null
      - name                   = "terraform-20211206162838152700000001" -> null
      - name_prefix            = "terraform-" -> null
      - owner_id               = "341175100383" -> null
      - revoke_rules_on_delete = false -> null
      - tags                   = {} -> null
      - tags_all               = {
          - "Created_by"  =<EMAIL_ADDRESS>          - "Domain"      = "platform"
          - "Environment" = "production"
          - "Managed_by"  = "terraform"
          - "Repository"  = "github.com/FundingCircle/shipment_tracker"
          - "Team"        = "platform-engineering"
        } -> null
      - vpc_id                 = "vpc-002f660de056c36ae" -> null
    }

# aws_vpc_endpoint.ec2messages will be destroyed
- resource "aws_vpc_endpoint" "ec2messages" {
      - arn                   = "arn:aws:ec2:eu-west-1:341175100383:vpc-endpoint/vpce-02600efde4b6cc620" -> null
      - cidr_blocks           = [] -> null
      - dns_entry             = [
          - {
              - dns_name       = "vpce-02600efde4b6cc620-awa36jd4.ec2messages.eu-west-1.vpce.amazonaws.com"
              - hosted_zone_id = "Z38GZ743OKFT7T"
            },
          - {
              - dns_name       = "vpce-02600efde4b6cc620-awa36jd4-eu-west-1c.ec2messages.eu-west-1.vpce.amazonaws.com"
              - hosted_zone_id = "Z38GZ743OKFT7T"
            },
          - {
              - dns_name       = "ec2messages.eu-west-1.amazonaws.com"
              - hosted_zone_id = "Z10396222I3PDV9I6S2YZ"
            },
        ] -> null
      - id                    = "vpce-02600efde4b6cc620" -> null
      - network_interface_ids = [
          - "eni-0692e6b4587740a41",
        ] -> null
      - owner_id              = "341175100383" -> null
      - policy                = jsonencode(
            {
              - Statement = [
                  - {
                      - Action    = "*"
                      - Effect    = "Allow"
                      - Principal = "*"
                      - Resource  = "*"
                    },
                ]
            }
        ) -> null
      - private_dns_enabled   = true -> null
      - requester_managed     = false -> null
      - route_table_ids       = [] -> null
      - security_group_ids    = [
          - "sg-0e172fd553d063ce0",
        ] -> null
      - service_name          = "com.amazonaws.eu-west-1.ec2messages" -> null
      - state                 = "available" -> null
      - subnet_ids            = [
          - "subnet-0554c73b64017b4ef",
        ] -> null
      - tags                  = {} -> null
      - tags_all              = {
          - "Created_by"  =<EMAIL_ADDRESS>          - "Domain"      = "platform"
          - "Environment" = "production"
          - "Managed_by"  = "terraform"
          - "Repository"  = "github.com/FundingCircle/shipment_tracker"
          - "Team"        = "platform-engineering"
        } -> null
      - vpc_endpoint_type     = "Interface" -> null
      - vpc_id                = "vpc-002f660de056c36ae" -> null
    }

# aws_vpc_endpoint.ssm will be destroyed
- resource "aws_vpc_endpoint" "ssm" {
      - arn                   = "arn:aws:ec2:eu-west-1:341175100383:vpc-endpoint/vpce-0fae4d6b357d8ceba" -> null
      - cidr_blocks           = [] -> null
      - dns_entry             = [
          - {
              - dns_name       = "vpce-0fae4d6b357d8ceba-2fh318f2.ssm.eu-west-1.vpce.amazonaws.com"
              - hosted_zone_id = "Z38GZ743OKFT7T"
            },
          - {
              - dns_name       = "vpce-0fae4d6b357d8ceba-2fh318f2-eu-west-1c.ssm.eu-west-1.vpce.amazonaws.com"
              - hosted_zone_id = "Z38GZ743OKFT7T"
            },
          - {
              - dns_name       = "ssm.eu-west-1.amazonaws.com"
              - hosted_zone_id = "Z08701912BFR00VAOEBG5"
            },
        ] -> null
      - id                    = "vpce-0fae4d6b357d8ceba" -> null
      - network_interface_ids = [
          - "eni-0fa35b76405ae1615",
        ] -> null
      - owner_id              = "341175100383" -> null
      - policy                = jsonencode(
            {
              - Statement = [
                  - {
                      - Action    = "*"
                      - Effect    = "Allow"
                      - Principal = "*"
                      - Resource  = "*"
                    },
                ]
            }
        ) -> null
      - private_dns_enabled   = true -> null
      - requester_managed     = false -> null
      - route_table_ids       = [] -> null
      - security_group_ids    = [
          - "sg-0e172fd553d063ce0",
        ] -> null
      - service_name          = "com.amazonaws.eu-west-1.ssm" -> null
      - state                 = "available" -> null
      - subnet_ids            = [
          - "subnet-0554c73b64017b4ef",
        ] -> null
      - tags                  = {} -> null
      - tags_all              = {
          - "Created_by"  =<EMAIL_ADDRESS>          - "Domain"      = "platform"
          - "Environment" = "production"
          - "Managed_by"  = "terraform"
          - "Repository"  = "github.com/FundingCircle/shipment_tracker"
          - "Team"        = "platform-engineering"
        } -> null
      - vpc_endpoint_type     = "Interface" -> null
      - vpc_id                = "vpc-002f660de056c36ae" -> null
    }

# aws_vpc_endpoint.ssmmessages will be destroyed
- resource "aws_vpc_endpoint" "ssmmessages" {
      - arn                   = "arn:aws:ec2:eu-west-1:341175100383:vpc-endpoint/vpce-0e2a920ca1b504c27" -> null
      - cidr_blocks           = [] -> null
      - dns_entry             = [
          - {
              - dns_name       = "vpce-0e2a920ca1b504c27-45kgdp35.ssmmessages.eu-west-1.vpce.amazonaws.com"
              - hosted_zone_id = "Z38GZ743OKFT7T"
            },
          - {
              - dns_name       = "vpce-0e2a920ca1b504c27-45kgdp35-eu-west-1c.ssmmessages.eu-west-1.vpce.amazonaws.com"
              - hosted_zone_id = "Z38GZ743OKFT7T"
            },
          - {
              - dns_name       = "ssmmessages.eu-west-1.amazonaws.com"
              - hosted_zone_id = "Z05040872DGKC1PLAFZLA"
            },
        ] -> null
      - id                    = "vpce-0e2a920ca1b504c27" -> null
      - network_interface_ids = [
          - "eni-018f5430742d17ba9",
        ] -> null
      - owner_id              = "341175100383" -> null
      - policy                = jsonencode(
            {
              - Statement = [
                  - {
                      - Action    = "*"
                      - Effect    = "Allow"
                      - Principal = "*"
                      - Resource  = "*"
                    },
                ]
            }
        ) -> null
      - private_dns_enabled   = true -> null
      - requester_managed     = false -> null
      - route_table_ids       = [] -> null
      - security_group_ids    = [
          - "sg-0e172fd553d063ce0",
        ] -> null
      - service_name          = "com.amazonaws.eu-west-1.ssmmessages" -> null
      - state                 = "available" -> null
      - subnet_ids            = [
          - "subnet-0554c73b64017b4ef",
        ] -> null
      - tags                  = {} -> null
      - tags_all              = {
          - "Created_by"  =<EMAIL_ADDRESS>          - "Domain"      = "platform"
          - "Environment" = "production"
          - "Managed_by"  = "terraform"
          - "Repository"  = "github.com/FundingCircle/shipment_tracker"
          - "Team"        = "platform-engineering"
        } -> null
      - vpc_endpoint_type     = "Interface" -> null
      - vpc_id                = "vpc-002f660de056c36ae" -> null
    }

Plan: 0 to add, 1 to change, 8 to destroy.

Terraform Plan Output - Staging

Note: Objects have changed outside of Terraform

Terraform detected the following changes made outside of Terraform since the
last "terraform apply":

# aws_iam_role.ec2_ssm_iam has been changed
~ resource "aws_iam_role" "ec2_ssm_iam" {
        id                    = "ec2-ssm-role"
        name                  = "ec2-ssm-role"
      + tags                  = {}
        # (9 unchanged attributes hidden)

      - inline_policy {}
      + inline_policy {
          + name   = "ec2-ssm-policy"
          + policy = jsonencode(
                {
                  + Statement = [
                      + {
                          + Action   = [
                              + "ssmmessages:OpenDataChannel",
                              + "ssmmessages:OpenControlChannel",
                              + "ssmmessages:CreateDataChannel",
                              + "ssmmessages:CreateControlChannel",
                              + "ssm:UpdateInstanceInformation",
                            ]
                          + Effect   = "Allow"
                          + Resource = "*"
                          + Sid      = "ssm"
                        },
                      + {
                          + Action   = "s3:GetEncryptionConfiguration"
                          + Effect   = "Allow"
                          + Resource = "*"
                          + Sid      = "s3"
                        },
                    ]
                  + Version   = "2012-10-17"
                }
            )
        }
    }
# aws_security_group.ssm has been changed
~ resource "aws_security_group" "ssm" {
        id                     = "sg-02d55e7ebe6900546"
        name                   = "terraform-20211206161625074400000001"
      + tags                   = {}
        # (9 unchanged attributes hidden)
    }
# aws_iam_instance_profile.ec2_ssm_iam has been changed
~ resource "aws_iam_instance_profile" "ec2_ssm_iam" {
        id          = "ec2-ssm"
        name        = "ec2-ssm"
      + tags        = {}
        # (6 unchanged attributes hidden)
    }
# aws_instance.dump_restore has been changed
~ resource "aws_instance" "dump_restore" {
        id                                   = "i-067d7dcf818d1de6a"
        tags                                 = {
            "Name" = "pg_dump pg_restore"
        }
        # (27 unchanged attributes hidden)

      ~ root_block_device {
          + tags                  = {}
            # (9 unchanged attributes hidden)
        }
        # (3 unchanged blocks hidden)
    }
# aws_vpc_endpoint.ec2messages has been changed
~ resource "aws_vpc_endpoint" "ec2messages" {
        id                    = "vpce-0e5c70477abd0e659"
      + tags                  = {}
        # (16 unchanged attributes hidden)
    }
# aws_vpc_endpoint.ssm has been changed
~ resource "aws_vpc_endpoint" "ssm" {
        id                    = "vpce-00aa733f25a42c6a5"
      + tags                  = {}
        # (16 unchanged attributes hidden)
    }
# aws_vpc_endpoint.ssmmessages has been changed
~ resource "aws_vpc_endpoint" "ssmmessages" {
        id                    = "vpce-0102ef5a18e613c4c"
      + tags                  = {}
        # (16 unchanged attributes hidden)
    }

Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
- destroy

Terraform will perform the following actions:

# aws_iam_instance_profile.ec2_ssm_iam will be destroyed
- resource "aws_iam_instance_profile" "ec2_ssm_iam" {
      - arn         = "arn:aws:iam::313303557381:instance-profile/ec2-ssm" -> null
      - create_date = "2021-12-06T16:16:26Z" -> null
      - id          = "ec2-ssm" -> null
      - name        = "ec2-ssm" -> null
      - path        = "/" -> null
      - role        = "ec2-ssm-role" -> null
      - tags        = {} -> null
      - tags_all    = {
          - "Created_by"  =<EMAIL_ADDRESS>          - "Domain"      = "platform"
          - "Environment" = "staging"
          - "Managed_by"  = "terraform"
          - "Repository"  = "github.com/FundingCircle/shipment_tracker"
          - "Team"        = "platform-engineering"
        } -> null
      - unique_id   = "AIPAUR4SY4UCUVYXNSDXH" -> null
    }

# aws_iam_role.ec2_ssm_iam will be destroyed
- resource "aws_iam_role" "ec2_ssm_iam" {
      - arn                   = "arn:aws:iam::313303557381:role/ec2-ssm-role" -> null
      - assume_role_policy    = jsonencode(
            {
              - Statement = [
                  - {
                      - Action    = "sts:AssumeRole"
                      - Effect    = "Allow"
                      - Principal = {
                          - Service = "ec2.amazonaws.com"
                        }
                      - Sid       = ""
                    },
                ]
              - Version   = "2012-10-17"
            }
        ) -> null
      - create_date           = "2021-12-06T16:16:25Z" -> null
      - force_detach_policies = false -> null
      - id                    = "ec2-ssm-role" -> null
      - managed_policy_arns   = [] -> null
      - max_session_duration  = 3600 -> null
      - name                  = "ec2-ssm-role" -> null
      - path                  = "/" -> null
      - tags                  = {} -> null
      - tags_all              = {
          - "Created_by"  =<EMAIL_ADDRESS>          - "Domain"      = "platform"
          - "Environment" = "staging"
          - "Managed_by"  = "terraform"
          - "Repository"  = "github.com/FundingCircle/shipment_tracker"
          - "Team"        = "platform-engineering"
        } -> null
      - unique_id             = "AROAUR4SY4UCV745YSACX" -> null

      - inline_policy {
          - name   = "ec2-ssm-policy" -> null
          - policy = jsonencode(
                {
                  - Statement = [
                      - {
                          - Action   = [
                              - "ssmmessages:OpenDataChannel",
                              - "ssmmessages:OpenControlChannel",
                              - "ssmmessages:CreateDataChannel",
                              - "ssmmessages:CreateControlChannel",
                              - "ssm:UpdateInstanceInformation",
                            ]
                          - Effect   = "Allow"
                          - Resource = "*"
                          - Sid      = "ssm"
                        },
                      - {
                          - Action   = "s3:GetEncryptionConfiguration"
                          - Effect   = "Allow"
                          - Resource = "*"
                          - Sid      = "s3"
                        },
                    ]
                  - Version   = "2012-10-17"
                }
            ) -> null
        }
    }

# aws_iam_role_policy.ec2_ssm_iam will be destroyed
- resource "aws_iam_role_policy" "ec2_ssm_iam" {
      - id     = "ec2-ssm-role:ec2-ssm-policy" -> null
      - name   = "ec2-ssm-policy" -> null
      - policy = jsonencode(
            {
              - Statement = [
                  - {
                      - Action   = [
                          - "ssmmessages:OpenDataChannel",
                          - "ssmmessages:OpenControlChannel",
                          - "ssmmessages:CreateDataChannel",
                          - "ssmmessages:CreateControlChannel",
                          - "ssm:UpdateInstanceInformation",
                        ]
                      - Effect   = "Allow"
                      - Resource = "*"
                      - Sid      = "ssm"
                    },
                  - {
                      - Action   = "s3:GetEncryptionConfiguration"
                      - Effect   = "Allow"
                      - Resource = "*"
                      - Sid      = "s3"
                    },
                ]
              - Version   = "2012-10-17"
            }
        ) -> null
      - role   = "ec2-ssm-role" -> null
    }

# aws_instance.dump_restore will be destroyed
- resource "aws_instance" "dump_restore" {
      - ami                                  = "ami-05cd35b907b4ffe77" -> null
      - arn                                  = "arn:aws:ec2:eu-west-1:313303557381:instance/i-067d7dcf818d1de6a" -> null
      - associate_public_ip_address          = false -> null
      - availability_zone                    = "eu-west-1c" -> null
      - cpu_core_count                       = 4 -> null
      - cpu_threads_per_core                 = 2 -> null
      - disable_api_termination              = false -> null
      - ebs_optimized                        = false -> null
      - get_password_data                    = false -> null
      - hibernation                          = false -> null
      - iam_instance_profile                 = "ec2-ssm" -> null
      - id                                   = "i-067d7dcf818d1de6a" -> null
      - instance_initiated_shutdown_behavior = "stop" -> null
      - instance_state                       = "running" -> null
      - instance_type                        = "c5.2xlarge" -> null
      - ipv6_address_count                   = 0 -> null
      - ipv6_addresses                       = [] -> null
      - monitoring                           = false -> null
      - primary_network_interface_id         = "eni-0dad7c3c984c6e014" -> null
      - private_dns                          = "ip-10-43-22-37.eu-west-1.compute.internal" -> null
      - private_ip                           = "<IP_ADDRESS>" -> null
      - secondary_private_ips                = [] -> null
      - security_groups                      = [] -> null
      - source_dest_check                    = true -> null
      - subnet_id                            = "subnet-0792430e7728868bc" -> null
      - tags                                 = {
          - "Name" = "pg_dump pg_restore"
        } -> null
      - tags_all                             = {
          - "Created_by"  =<EMAIL_ADDRESS>          - "Domain"      = "platform"
          - "Environment" = "staging"
          - "Managed_by"  = "terraform"
          - "Name"        = "pg_dump pg_restore"
          - "Repository"  = "github.com/FundingCircle/shipment_tracker"
          - "Team"        = "platform-engineering"
        } -> null
      - tenancy                              = "default" -> null
      - vpc_security_group_ids               = [
          - "sg-0b6d951c8a3eb9353",
        ] -> null

      - capacity_reservation_specification {
          - capacity_reservation_preference = "open" -> null
        }

      - enclave_options {
          - enabled = false -> null
        }

      - metadata_options {
          - http_endpoint               = "enabled" -> null
          - http_put_response_hop_limit = 1 -> null
          - http_tokens                 = "required" -> null
        }

      - root_block_device {
          - delete_on_termination = true -> null
          - device_name           = "/dev/xvda" -> null
          - encrypted             = true -> null
          - iops                  = 750 -> null
          - kms_key_id            = "arn:aws:kms:eu-west-1:313303557381:key/32546163-e6ce-4501-be4a-331fe4ceb789" -> null
          - tags                  = {} -> null
          - throughput            = 0 -> null
          - volume_id             = "vol-045ba58f629a3f25f" -> null
          - volume_size           = 250 -> null
          - volume_type           = "gp2" -> null
        }
    }

# aws_security_group.ssm will be destroyed
- resource "aws_security_group" "ssm" {
      - arn                    = "arn:aws:ec2:eu-west-1:313303557381:security-group/sg-02d55e7ebe6900546" -> null
      - description            = "For temporary VPC endpoints for SSM" -> null
      - egress                 = [
          - {
              - cidr_blocks      = [
                  - "<IP_ADDRESS>/16",
                ]
              - description      = "HTTPS"
              - from_port        = 443
              - ipv6_cidr_blocks = []
              - prefix_list_ids  = []
              - protocol         = "tcp"
              - security_groups  = []
              - self             = false
              - to_port          = 443
            },
        ] -> null
      - id                     = "sg-02d55e7ebe6900546" -> null
      - ingress                = [
          - {
              - cidr_blocks      = [
                  - "<IP_ADDRESS>/16",
                ]
              - description      = "HTTPS"
              - from_port        = 443
              - ipv6_cidr_blocks = []
              - prefix_list_ids  = []
              - protocol         = "tcp"
              - security_groups  = []
              - self             = false
              - to_port          = 443
            },
        ] -> null
      - name                   = "terraform-20211206161625074400000001" -> null
      - name_prefix            = "terraform-" -> null
      - owner_id               = "313303557381" -> null
      - revoke_rules_on_delete = false -> null
      - tags                   = {} -> null
      - tags_all               = {
          - "Created_by"  =<EMAIL_ADDRESS>          - "Domain"      = "platform"
          - "Environment" = "staging"
          - "Managed_by"  = "terraform"
          - "Repository"  = "github.com/FundingCircle/shipment_tracker"
          - "Team"        = "platform-engineering"
        } -> null
      - vpc_id                 = "vpc-077587bca5f20ecc4" -> null
    }

# aws_vpc_endpoint.ec2messages will be destroyed
- resource "aws_vpc_endpoint" "ec2messages" {
      - arn                   = "arn:aws:ec2:eu-west-1:313303557381:vpc-endpoint/vpce-0e5c70477abd0e659" -> null
      - cidr_blocks           = [] -> null
      - dns_entry             = [
          - {
              - dns_name       = "vpce-0e5c70477abd0e659-v8wxe4un.ec2messages.eu-west-1.vpce.amazonaws.com"
              - hosted_zone_id = "Z38GZ743OKFT7T"
            },
          - {
              - dns_name       = "vpce-0e5c70477abd0e659-v8wxe4un-eu-west-1c.ec2messages.eu-west-1.vpce.amazonaws.com"
              - hosted_zone_id = "Z38GZ743OKFT7T"
            },
          - {
              - dns_name       = "ec2messages.eu-west-1.amazonaws.com"
              - hosted_zone_id = "Z05042333HR48JY5KJO41"
            },
        ] -> null
      - id                    = "vpce-0e5c70477abd0e659" -> null
      - network_interface_ids = [
          - "eni-0294093fa44668dca",
        ] -> null
      - owner_id              = "313303557381" -> null
      - policy                = jsonencode(
            {
              - Statement = [
                  - {
                      - Action    = "*"
                      - Effect    = "Allow"
                      - Principal = "*"
                      - Resource  = "*"
                    },
                ]
            }
        ) -> null
      - private_dns_enabled   = true -> null
      - requester_managed     = false -> null
      - route_table_ids       = [] -> null
      - security_group_ids    = [
          - "sg-02d55e7ebe6900546",
        ] -> null
      - service_name          = "com.amazonaws.eu-west-1.ec2messages" -> null
      - state                 = "available" -> null
      - subnet_ids            = [
          - "subnet-0792430e7728868bc",
        ] -> null
      - tags                  = {} -> null
      - tags_all              = {
          - "Created_by"  =<EMAIL_ADDRESS>          - "Domain"      = "platform"
          - "Environment" = "staging"
          - "Managed_by"  = "terraform"
          - "Repository"  = "github.com/FundingCircle/shipment_tracker"
          - "Team"        = "platform-engineering"
        } -> null
      - vpc_endpoint_type     = "Interface" -> null
      - vpc_id                = "vpc-077587bca5f20ecc4" -> null
    }

# aws_vpc_endpoint.ssm will be destroyed
- resource "aws_vpc_endpoint" "ssm" {
      - arn                   = "arn:aws:ec2:eu-west-1:313303557381:vpc-endpoint/vpce-00aa733f25a42c6a5" -> null
      - cidr_blocks           = [] -> null
      - dns_entry             = [
          - {
              - dns_name       = "vpce-00aa733f25a42c6a5-wfddufhc.ssm.eu-west-1.vpce.amazonaws.com"
              - hosted_zone_id = "Z38GZ743OKFT7T"
            },
          - {
              - dns_name       = "vpce-00aa733f25a42c6a5-wfddufhc-eu-west-1c.ssm.eu-west-1.vpce.amazonaws.com"
              - hosted_zone_id = "Z38GZ743OKFT7T"
            },
          - {
              - dns_name       = "ssm.eu-west-1.amazonaws.com"
              - hosted_zone_id = "Z1033867VPV01OXFWT7A"
            },
        ] -> null
      - id                    = "vpce-00aa733f25a42c6a5" -> null
      - network_interface_ids = [
          - "eni-02db7da48a0cea3a3",
        ] -> null
      - owner_id              = "313303557381" -> null
      - policy                = jsonencode(
            {
              - Statement = [
                  - {
                      - Action    = "*"
                      - Effect    = "Allow"
                      - Principal = "*"
                      - Resource  = "*"
                    },
                ]
            }
        ) -> null
      - private_dns_enabled   = true -> null
      - requester_managed     = false -> null
      - route_table_ids       = [] -> null
      - security_group_ids    = [
          - "sg-02d55e7ebe6900546",
        ] -> null
      - service_name          = "com.amazonaws.eu-west-1.ssm" -> null
      - state                 = "available" -> null
      - subnet_ids            = [
          - "subnet-0792430e7728868bc",
        ] -> null
      - tags                  = {} -> null
      - tags_all              = {
          - "Created_by"  =<EMAIL_ADDRESS>          - "Domain"      = "platform"
          - "Environment" = "staging"
          - "Managed_by"  = "terraform"
          - "Repository"  = "github.com/FundingCircle/shipment_tracker"
          - "Team"        = "platform-engineering"
        } -> null
      - vpc_endpoint_type     = "Interface" -> null
      - vpc_id                = "vpc-077587bca5f20ecc4" -> null
    }

# aws_vpc_endpoint.ssmmessages will be destroyed
- resource "aws_vpc_endpoint" "ssmmessages" {
      - arn                   = "arn:aws:ec2:eu-west-1:313303557381:vpc-endpoint/vpce-0102ef5a18e613c4c" -> null
      - cidr_blocks           = [] -> null
      - dns_entry             = [
          - {
              - dns_name       = "vpce-0102ef5a18e613c4c-m20j761y.ssmmessages.eu-west-1.vpce.amazonaws.com"
              - hosted_zone_id = "Z38GZ743OKFT7T"
            },
          - {
              - dns_name       = "vpce-0102ef5a18e613c4c-m20j761y-eu-west-1c.ssmmessages.eu-west-1.vpce.amazonaws.com"
              - hosted_zone_id = "Z38GZ743OKFT7T"
            },
          - {
              - dns_name       = "ssmmessages.eu-west-1.amazonaws.com"
              - hosted_zone_id = "Z1034284QL0PAJWQNHUG"
            },
        ] -> null
      - id                    = "vpce-0102ef5a18e613c4c" -> null
      - network_interface_ids = [
          - "eni-05865104bb2e87e92",
        ] -> null
      - owner_id              = "313303557381" -> null
      - policy                = jsonencode(
            {
              - Statement = [
                  - {
                      - Action    = "*"
                      - Effect    = "Allow"
                      - Principal = "*"
                      - Resource  = "*"
                    },
                ]
            }
        ) -> null
      - private_dns_enabled   = true -> null
      - requester_managed     = false -> null
      - route_table_ids       = [] -> null
      - security_group_ids    = [
          - "sg-02d55e7ebe6900546",
        ] -> null
      - service_name          = "com.amazonaws.eu-west-1.ssmmessages" -> null
      - state                 = "available" -> null
      - subnet_ids            = [
          - "subnet-0792430e7728868bc",
        ] -> null
      - tags                  = {} -> null
      - tags_all              = {
          - "Created_by"  =<EMAIL_ADDRESS>          - "Domain"      = "platform"
          - "Environment" = "staging"
          - "Managed_by"  = "terraform"
          - "Repository"  = "github.com/FundingCircle/shipment_tracker"
          - "Team"        = "platform-engineering"
        } -> null
      - vpc_endpoint_type     = "Interface" -> null
      - vpc_id                = "vpc-077587bca5f20ecc4" -> null
    }

Plan: 0 to add, 0 to change, 8 to destroy.

:lock: Prisma Cloud scan details - vulnerabilities :warning:

:white_check_mark: Passed shipment_tracker:latest   Vulnerabilities found. Total: 1, critical: 0, high: 0, medium: 1, low: 0.

Severity
Package
CVE
Fix version

:orange_circle: medium
openssh:8.4_p1-r4OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session.
CVE-2016-20012  Date published: 2021-09-15 20:15:00 +0000 UTC
Vendor status: fixed in 8.8_p1-r1


Custom data

My data is of this shape (6,53,1,100,100). how can i feed it into the models proposed in the OpenSTL.

up

Remove reduplicative issues. Please refer to openstl/examples/tutorial.ipynb.


<EMAIL_ADDRESS>not yet on nuget.org

Pinging @paulvanbrenk from #19179?
Can this be added to the RC release please? I'd love to test RCs out on MSBuild projects as they're released.

Well this is interesting - https://www.nuget.org/packages/Microsoft.TypeScript.MSBuild/2.8.0 is unlisted. :)

I'm pretty sure we only list the stables; RCs (e.g. 2.7.0) aren't there though as you'll notice.

Is there a reason? Nuget allows for beta tagged versions for this reason. It's been useful before for catching flags not her added to the MSBuild logic.

We definitely unlist beta/rc releases after releasing the final version. I think we used to list the preview bits with a preview flag on Nuget, but I think that was always a manual step. I'll figure out how to automate that, since we now sign our NuGet packages and I don't think we can change the version post signing.


production documentation: Suggest people to use Docker for running Zulip alongside other services.

The production requirements doc doesn't explicitly mention Docker as an option if you want to run Zulip alongside other services like Nextcloud, Mediawiki, etc withiin one instance: https://zulip.readthedocs.io/en/latest/production/requirements.html#general.
We should update the documentation to mention this fact. See https://chat.zulip.org/#narrow/stream/3-backend/topic/prod.20req.20docs.20and.20docker.

Yeah, this does seem like a reasonable tweak to help folks figure out a path forward.

@zulipbot claim

Actually https://github.com/zulip/zulip/commit/cc11743047c5f5e7144e887d14ce7b8a7fb65e2f doesn't explicitly say that people can use Docker if they want to use Zulip along with other services. It only says Docker as one among installation options.


Gradle is trying to download the wrong runtime-metamodel since milestone-9 release

Bug Report
Describe the Bug
When trying to build the project, the building process will fail with 121 errors all stating:
Could not resolve org.eclipse.edc:runtime-metamodel:0.0.1-SNAPSHOT
Expected Behavior
Downloading the correct runtime-metamodel and building successfully.
Observed Behavior
Failure of build process with message:
Could not resolve org.eclipse.edc:runtime-metamodel:0.0.1-SNAPSHOT
Steps to Reproduce
Steps to reproduce the behavior:

clone repository
open in IDE (IntelliJ)
build Gradle
See error

Context Information
The new milestone-9 came just out.

Used version: milestone 8
OS: Debian 11

Detailed Description
The current gradle.properties:
groupId=org.eclipse.edc
edcVersion=0.0.1-milestone-8
defaultVersion=0.0.1-SNAPSHOT
javaVersion=11

# configure the build:
annotationProcessorVersion=0.0.1-SNAPSHOT
edcGradlePluginsVersion=0.0.1-SNAPSHOT
metaModelVersion=0.0.1-SNAPSHOT

Possible Implementation
Something seems to broke since the release of milestone-9. A look in the gradle.properties seems to indicate, that the previous way of addressing the metaModelVersion is no longer working and breaks the current building process.

This should have been solved by https://github.com/eclipse-edc/Samples/pull/60 and could be closed, please try it out


[AutoPR containerinstance/resource-manager] Update Microsoft.Containerinstance swagger with DNSConfig and GPU

Created to sync https://github.com/Azure/azure-rest-api-specs/pull/4373

This PR has been merged into https://github.com/Azure/azure-sdk-for-js/pull/385


Abnormal cursor

os: win7 64
php console version:v.<IP_ADDRESS>

Please,  kindly change your font family to another one.

Thanks , only Fira Code  in the same situation


Fix undefined array key errors in ActiveRelationTrait

Q
A

Is bugfix?
✔

New feature?
❌

Breaks BC?
❌

Fixed issues
#19148

I just added checks if array key is declared and this should be covered with other tests.

It definitely isn't covered since tests passed before this change.

@stevekr please add a line for CHANGELOG.

Done

Thanks/


Fix flaky BetterTransformer test

Fixes https://github.com/huggingface/optimum/pull/542#issuecomment-1341205518

The docs for this PR live here. All of your documentation changes will be reflected on that endpoint.


CreateCachedContent -  rpc error: code = InvalidArgument desc = Unsupported MIME type: text/plain; charset=utf-8

Description of the bug:
Getting the error - rpc error: code = InvalidArgument desc = Unsupported MIME type: text/plain; charset=utf-8 for the following for CreateCachedContent
package main

import (
	"context"
	"fmt"
	"github.com/gabriel-vasile/mimetype"
	"google.golang.org/api/option"
	"log"
	"os"
	"time"

	"github.com/google/generative-ai-go/genai"
)

// uploadFile uploads the given file to the service, and returns a [genai.File]
// representing it. mimeType optionally specifies the MIME type of the data in
// the file; if set to "", the service will try to automatically determine the
// type from the data contents.
// To clean up the file, defer a client.DeleteFile(ctx, file.Name)
// call when a file is successfully returned. file.Name will be a uniqely
// generated string to identify the file on the service.
func uploadFile(ctx context.Context, client *genai.Client, path, mimeType string) (*genai.File, error) {
	osf, err := os.Open(path)

	// Determine the MIME type
	mtype, err := mimetype.DetectFile(path)
	fmt.Println("MIME type:", mtype.String())
	if err != nil {
		return nil, err
	}
	defer osf.Close()

	file, err := client.UploadFile(ctx, "", osf, nil)
	if err != nil {
		return nil, err
	}

	for file.State == genai.FileStateProcessing {
		log.Printf("processing %s", file.Name)
		time.Sleep(5 * time.Second)
		var err error
		file, err = client.GetFile(ctx, file.Name)
		if err != nil {
			return nil, err
		}
	}
	if file.State != genai.FileStateActive {
		return nil, fmt.Errorf("uploaded file has state %s, not active", file.State)
	}
	return file, nil
}

func main() {

	ctx := context.Background()
	client, err := genai.NewClient(ctx, option.WithAPIKey("API_KEY"))
	if err != nil {
		log.Fatal(err)
	}
	defer client.Close()

	file, err := uploadFile(ctx, client, "./test.txt", "")
	if err != nil {
		log.Fatal(err)
	}
	defer client.DeleteFile(ctx, file.Name)

	fd := genai.FileData{URI: file.URI}

	argcc := &genai.CachedContent{
		Model:             "gemini-1.5-flash-001",
		SystemInstruction: genai.NewUserContent(genai.Text("You are an expert analyzing transcripts.")),
		Contents:          []*genai.Content{genai.NewUserContent(fd)},
	}
	cc, err := client.CreateCachedContent(ctx, argcc)
	if err != nil {
		log.Fatal(err)
	}
	defer client.DeleteCachedContent(ctx, cc.Name)

	modelWithCache := client.GenerativeModelFromCachedContent(cc)
	prompt := "Please summarize this transcript"
	resp, err := modelWithCache.GenerateContent(ctx, genai.Text(prompt))
	if err != nil {
		log.Fatal(err)
	}

	printResponse(resp)

}

func printResponse(resp *genai.GenerateContentResponse) {
	for _, cand := range resp.Candidates {
		if cand.Content != nil {
			for _, part := range cand.Content.Parts {
				fmt.Println(part)
			}
		}
	}
	fmt.Println("---")
}

Actual vs expected behavior:
Error shouldn't be coming as this is part of the example
Any other information you'd like to share?
for same code if use pdf or images - getting the following error
rpc error: code = InvalidArgument desc = Cached content is too small. total_token_count=9, min_total_token_count=32768

Reproduced. Looking into it.

Set the mime type explicitly.
opts := &genai.UploadFileOptions{MIMEType: "text/plain"}
client.UploadFile(ctx, "", osf, opts

We'll update our example to match.
Regarding the other issue, that is a constraint on cached content: it has to be fairly large (or it's not worth caching it).

We'll update our example to match.
Regarding the other issue, that is a constraint on cached content: it has to be fairly large (or it's not worth caching it).

Thanks working now.
Regarding the token count issue, i doubt it's due to the size.  i gave a big pdf file as input.

I'll look into that as well.

Reopening for token count.

@jba Thanks.
One more question. Can I use this package with vertex ai ?

No, you have to use https://pkg.go.dev/cloud.google.com/go/vertexai/genai.


Ketcher layout looks incorrectly in IE11

Affected Version: Remote, Standalone
Browser: IE 11
Expected result:
App layout should be the same as in other browsers (see attachments)

Actual Result:
Elements (editor and toolbars) are arranged vertically into one column

release/2.2. Issue is closed as fixed

release/2.2. Issue is closed as fixed


使用deepke-llm微调zhixi报错

Describe the bug

A clear and concise description of what the bug is.
ERROR:torch.distributed.elastic.multiprocessing.api:failed (exitcode: 1) local_rank: 0 (pid: 855472) of binary: /share/home/HCI/daizheng/anaconda3/envs/deepke/bin/python
Traceback (most recent call last):
File "/share/home/HCI/daizheng/anaconda3/envs/deepke/bin/torchrun", line 8, in
sys.exit(main())
File "/share/home/HCI/daizheng/anaconda3/envs/deepke/lib/python3.9/site-packages/torch/distributed/elastic/multiprocessing/errors/init.py", line 346, in wrapper
return f(*args, **kwargs)
File "/share/home/HCI/daizheng/anaconda3/envs/deepke/lib/python3.9/site-packages/torch/distributed/run.py", line 794, in main
run(args)
File "/share/home/HCI/daizheng/anaconda3/envs/deepke/lib/python3.9/site-packages/torch/distributed/run.py", line 785, in run
elastic_launch(
File "/share/home/HCI/daizheng/anaconda3/envs/deepke/lib/python3.9/site-packages/torch/distributed/launcher/api.py", line 134, in call
return launch_agent(self._config, self._entrypoint, list(args))
File "/share/home/HCI/daizheng/anaconda3/envs/deepke/lib/python3.9/site-packages/torch/distributed/launcher/api.py", line 250, in launch_agent
raise ChildFailedError(
torch.distributed.elastic.multiprocessing.errors.ChildFailedError:
============================================================
src/finetune.py FAILED

Failures:
<NO_OTHER_FAILURES>
Root Cause (first observed failure):
[0]:
time      : 2024-07-11_15:54:30
host      : gpu03
rank      : 0 (local_rank: 0)
exitcode  : 1 (pid: 855472)
error_file: <N/A>
traceback : To enable traceback see: https://pytorch.org/docs/stable/elastic/errors.html
Environment (please complete the following information):

OS: ubuntu22.04
Python Version=3.9

Screenshots

If applicable, add screenshots to help explain your problem.

Additional context

Add any other context about the problem here.

除了以上的报错信息之外，还有这个问题，请问怎么解决呢？谢谢！

查看命令行中的显卡配置，命令是否正确

查看命令行中的显卡配置，命令是否正确

谢谢，已经解决。修改了/src/model/loader.py line53，加载Tokenizer时增加了一个参数unk_token=""，之后可以成功运行。


Add Simplified Chinese localisation file

add Simplified Chinese localisation files "zh_cn.json" for the mod.

The localisation is incomplete and there is no translation of the tutorial book, so the request is closed for now, sorry!


luci-mod-system: Improve SSH-Keys page grammar, update po/pot files

Improve the grammar of luci/modules/luci-mod-system/htdocs/luci-static/resources/view/system/sshkeys.js
Signed-off-by: Josh Correia<EMAIL_ADDRESS>

Merged, thanks!


Rename repo from python-sso-example to python-flask-sso-example

Could we rename this repo from python-sso-example to python-flask-sso-example? I'm developing a python-django-sso-example app and would like to have the web frameworks present in the repo name.

👍 Good idea
Done!

Awesome, thanks!


cx_limit_integration_test flakes (IpVersions/ConnectionLimitIntegrationTest.TestBothLimits)

2020-07-01T13:04:39.4991615Z [ RUN      ] IpVersions/ConnectionLimitIntegrationTest.TestBothLimits/IPv4
2020-07-01T13:04:39.4992248Z test/integration/cx_limit_integration_test.cc:74: Failure
2020-07-01T13:04:39.4993196Z Value of: fake_upstreams_[0]->waitForRawConnection(raw_conns.back())
2020-07-01T13:04:39.4994095Z   Actual: false (Timed out waiting for raw connection)
2020-07-01T13:04:39.4994618Z Expected: true
2020-07-01T13:04:39.4995531Z Stack trace:
2020-07-01T13:04:39.4996224Z   0x1d3caf5: __llvm_coverage_mapping
2020-07-01T13:04:39.4999246Z   0x1d43958: __llvm_coverage_mapping
2020-07-01T13:04:39.4999853Z   0x59ff1b6: testing::internal::HandleSehExceptionsInMethodIfSupported<>()
2020-07-01T13:04:39.5000495Z   0x59ea751: testing::internal::HandleExceptionsInMethodIfSupported<>()
2020-07-01T13:04:39.5001236Z   0x59d4d82: testing::Test::Run()
2020-07-01T13:04:39.5001716Z   0x59d5888: testing::TestInfo::Run()
2020-07-01T13:04:39.5002321Z ... Google Test internal frames ...
2020-07-01T13:04:39.5002653Z
2020-07-01T13:04:39.5003721Z [  FAILED  ] IpVersions/ConnectionLimitIntegrationTest.TestBothLimits/IPv4, where GetParam() = 4-byte object <00-00 00-00> (16148 ms)

Fails consistently on windows too.  have a PR out for that just to get windows CI green

I'm wondering if there's a race, where the client picks up the disconnect before the server decrements the overload counter, so the next  connection fails.  If so I'm not sure if there's any counters we should explicitly wait for, or if we just try connecting until one gets through?   cc @tonya11en

Another failure on ASAN
2020-07-01T14:08:07.8198111Z [ RUN      ] IpVersions/ConnectionLimitIntegrationTest.TestGlobalLimit/IPv4
2020-07-01T14:08:07.8198489Z test/integration/cx_limit_integration_test.cc:69: Failure
2020-07-01T14:08:07.8198946Z Value of: raw_conns.front()->close()
2020-07-01T14:08:07.8199350Z   Actual: false (The connection disconnected unexpectedly, and allow_unexpected_disconnects_ is false.
2020-07-01T14:08:07.8200325Z  See https://github.com/envoyproxy/envoy/blob/master/test/integration/README.md#unexpected-disconnects)
2020-07-01T14:08:07.8200710Z Expected: true
2020-07-01T14:08:07.8200956Z Stack trace:
2020-07-01T14:08:07.8201486Z   0x168862fa: Envoy::(anonymous namespace)::ConnectionLimitIntegrationTest::doTest()
2020-07-01T14:08:07.8202167Z   0x168978b2: Envoy::(anonymous namespace)::ConnectionLimitIntegrationTest_TestGlobalLimit_Test::TestBody()
2020-07-01T14:08:07.8202655Z   0x2724666a: testing::internal::HandleSehExceptionsInMethodIfSupported<>()
2020-07-01T14:08:07.8203246Z   0x271f4f36: testing::internal::HandleExceptionsInMethodIfSupported<>()
2020-07-01T14:08:07.8203583Z   0x271a1527: testing::Test::Run()
2020-07-01T14:08:07.8203891Z   0x271a4230: testing::TestInfo::Run()
2020-07-01T14:08:07.8204185Z ... Google Test internal frames ...
2020-07-01T14:08:07.8204383Z
2020-07-01T14:08:07.8205367Z [2020-07-01 14:08:02.001][15][critical][assert] [source/common/network/connection_impl.cc:85] assert failure: !ioHandle().isOpen() && delayed_close_timer_ == nullptr. Details: ConnectionImpl was unexpectedly torn down without being closed.
2020-07-01T14:08:07.8205947Z AddressSanitizer:DEADLYSIGNAL
I think this is the double close so I'll fix this one

2020-07-21T00:06:09.0956342Z [ RUN      ] IpVersions/ConnectionLimitIntegrationTest.TestBothLimits/IPv6
2020-07-21T00:06:09.0957118Z TestRandomGenerator running with seed -1566620465
2021-05-28T20:16:05.5739433Z $TEST_TMPDIR defined: output root default is '/build/tmp' and max_idle_secs default is '15'.
2020-05-28T20:16:05.5748004Z WARNING: The following rc files are no longer being read, please transfer their contents or import their path into one of the standard rc files:
2020-07-21T00:06:09.0957678Z test/integration/cx_limit_integration_test.cc:73: Failure
2020-07-21T00:06:09.0958504Z Value of: fake_upstreams_[0]->waitForRawConnection(raw_conns.back())
2020-07-21T00:06:09.0959084Z   Actual: false (Timed out waiting for raw connection)
2020-07-21T00:06:09.0959544Z Expected: true
2020-07-21T00:06:09.0959913Z Stack trace:
2020-07-21T00:06:09.0960452Z   0x1b8aae4: Envoy::(anonymous namespace)::ConnectionLimitIntegrationTest::doTest()
2020-07-21T00:06:09.0961250Z   0x1b8e8bd: Envoy::(anonymous namespace)::ConnectionLimitIntegrationTest_TestBothLimits_Test::TestBody()
2020-07-21T00:06:09.0962010Z   0x40213b4: testing::internal::HandleSehExceptionsInMethodIfSupported<>()
2020-07-21T00:06:09.0962659Z   0x40126ee: testing::internal::HandleExceptionsInMethodIfSupported<>()
2020-07-21T00:06:09.0963228Z   0x3ffccc3: testing::Test::Run()
2020-07-21T00:06:09.0963699Z   0x3ffd8ad: testing::TestInfo::Run()
2020-07-21T00:06:09.0964272Z ... Google Test internal frames ...
2020-07-21T00:06:09.0964581Z
2020-07-21T00:06:09.0965912Z [2020-07-21 00:05:50.632][16][critical][assert] [source/common/network/connection_impl.cc:85] assert failure: !ioHandle().isOpen() && delayed_close_timer_ == nullptr. Details: ConnectionImpl was unexpectedly torn down without being closed.

I was looking into this yesterday and I will continue to look into it today.
I have the debug logs from a repro and I have uploaded them here

This is still broken. I am looking into this further.

This appears to be resolved now on Windows with the work on simtime, proposing to reenable the test on windows with https://github.com/envoyproxy/envoy/pull/12695


feat: add responsiveness to components

Towards #2361

Can you target this branch?
https://github.com/okjodom/fedimint/tree/guardian-ui-hack
@justinmoon @okjodom are at a hackathon working on the Guardian UI and merging all to this branch for a big feature branch merge into master after it's complete. There was a note about it from @okjodom somewhere but I lost it.

closing as outdated


Rename & Reorganize also Files with ending .RDLC

Hello,
Feature Request:
Currently, the RDLC files for reports are not included in the Rename & Reorganize command. But that would make sense somewhere. Possibly as Extra Order Layout, or in the order for the reports...

or

Update :-)... could be a Problem because in the Report you Setup the RDLC File Path/Name...

I keep the layout with report's al file. It does mean the report has to point to the absolute path, but I'll live.

I'm late to the party, but it seems as if this issue is still an open request. By now I saw these three different approaches:

RDLC layout in the base folder
RDLC layout in some static folder (e.h. /layout)
RDLC layout alongside the report

All three options are valid, I personally like the third option the most - but this is only my personal opinion.
In my opinion the layout location should be checked whenever CRS: Reorganize is called for the corresponding report file, since this is the leading document.


Feature Request: Munki module reports server in listings

In the Munki module that reports munki information in Listings such as
Name, Serial Number, Username, IP address, OS Version, Munki Version, Last Seen, Run Type, Errors, Warnings, Manifest Name
It would be very useful to see the munki server (Software Repo URL) as well as we are a large organization with many munki servers and having a single report that told us which server all of our computers were connected to would be very useful

If you have the munkiinfo module enabled, you can sort by SoftwareRepoURL.

We do, but I don't see that field?

And this is the Munki module (confusingly named MunkiReport?) where having the softwarerepo listed would be useful

It's in Munki Info listing https://github.com/munkireport/munkiinfo

Ah yes, we have that enabled. So maybe my ignorance is that I don't understand how to customize the fields that the Munki Info Listing returns? As you can see above we are only seeing Name, Serial Number, username, Key, Value, Last Seen. Is there a way to customize that Listings columns that I am missing?

It looks like it should be the CatalogURL key but it's not populated in my listing either. I do see the address populated on the Client Details page on the Munki section as Software Repo URL so the address is in the DB.

yep - I see it just fine on Client Details, but not Listings where it would be particularly useful for us

it really feels like the munkiinfo listings is .. incomplete? I would have expected all (or at least most) of the filelds to be reported but they aren't

I'm looking in Listings > Munki Info. I can put SoftwareRepoURL in the search box, and it returns the Munki repo URL set via our config profile.
If you're seeing some of those clients are returning empty data, it's possible the module wasn't enabled when you built your MunkiReport client pkg. Try building a new one and deploying it (here's a good method of doing that with AutoPkg).

I see SoftwareRepoURL is populated. I was looking at the wrong key in the listings view

Oh! I had no idea the Key field worked that way!  Wowza - are there other Listings where something like that works?
I thought the search box could only search what was shown in the table (see my earlier screenshot).

OK nvm I see what is going on, ok now it makes sense. I'd still prefer SoftwareRepoURL be in the Munki module as a column just like manifest, but this is better than nothing and allows me to extract the info I need. Thanks

You could gen a report using the API to read this key


1.4.7 & 1.4.8: reason vs error code

Now that we've changed the wording around reason vs error code, things are a bit foggy for me.
How are they different? Without error code being an enum.. I don't really get how that's different than 1.4.8

Requirement 1.4.7

In cases of abnormal execution, the evaluation details structure's error code field MUST contain a string identifying an error occurred during flag evaluation and the nature of the error.

Some example error codes include: "TARGETING_KEY_MISSING", "PROVIDER_NOT_READY", "FLAG_NOT_FOUND", "PARSE_ERROR", "TYPE_MISMATCH", or "GENERAL".
Requirement 1.4.8

In cases of abnormal execution (network failure, unhandled error, etc) the reason field in the evaluation details SHOULD indicate an error.

@justinabrahms reason can (and SHOULD) contain more than just errors. It can also contain something signifying why a flag evaluation occurred the way it did. For example "SPECIFIC_USER_OVERRIDE" or "TARGETING_RULE_MATCH". LD for example has such reasons. The reason should only indicate an error if there was an error. The error code gets specific as to the nature of the error.
See: https://github.com/open-feature/spec/blob/main/specification/flag-evaluation/flag-evaluation.md#requirement-146 (reason in normal execution)

I'm closing this since there's been no further discussion, and it seems (based on the :+1: ) the answer is satisfactory.


Throw error if it exists for dashboard variables

Fixes #101

In the future, we should replace this code and use a custom variable editor.

LGTM - would we be able to add a test for this?

I wouldn't worry that much about it in this case. We should refactor this component and use a proper QueryEditor here so this code won't be used.