Given the immense popularity of Docker and the need to harden it different per platform (see ideas below) - we'd like to start writing a Docker best practices section.

You're welcome to contribute ideas and write best practices - writing and brainstorming will people is an amazing way to deepen your Docker understanding.

At first, we want to collect ideas for best practices, solidify a list

Looks closely related to #779

I'm submitting a...

[ ] Regression
[x] Bug report
[ ] Feature request
[ ] Documentation issue or request
[ ] Support request => Please do not submit support request here, instead post your question on Stack Overflow.

Current behavior

Middleware is being called for every endpoint a request route could potentially match.

Summary

Currently Kong supports writing configuration in a file, in YAML or JSON.
To provide a more flexible configuration, especially for those running Kong in different environments (dev, staging, production), an option to write configuration in lua can be very useful.

Additional Details

There are many use-cases that come to mind:

• Using environment variables inside the d

Currently at 43.2%.

日志

2019-06-12 12:04:59.670|/|WARN |main|o.s.b.c.p.PropertySourcesDeducer|Multiple PropertySourcesPlaceholderConfigurer beans registered [propertySourcesPlaceholderConfigurer, org.springframework.context.support.PropertySourcesPlaceholderConfigurer], falling back to Environment

Apollo Client => ConfigPropertySourcesProcessor

![image](https://user-images.githubusercontent.com/13012417/59

It's not clear to me how auth/casbin is meant to be used. I had a look at the test cases but it looks like that's just using hard-coded values. Are we meant to wrap this with our own middleware that injects the subject & object and populates the context with the model & policy or is this just meant to serve as an example implementation?

Would be good to have a readme to add a little more cont

Reproduce Steps:

1. Deployed a Kubernetes cluster in Azure with AKS-Engine
   https://github.com/Azure/aks-engine/blob/master/docs/tutorials/quickstart.md#aks-engine-the-long-way
   2)Setup Helm and Tiller
   $ kubectl apply -f helm-rbac.yaml
   $ helm init --history-max 200 --service-account tiller --node-selectors "beta.kubernetes.io/os=linux"
   3)Create a static IP and set the dns
   az network public-ip

Hey guys

I am learning and using seata recently, this is a great thing.

Component
spring-cloud-alibaba-seata:0.9.0.RELEASE

Question
I see that the seata source code contains the spring boot web dependency. **Is there a plan to support [sp

Hi there! I wanted to propose adding the following badge to the README to indicate how many TODO comments are in this codebase:

The badge links to tickgit.com which is a free service that indexes and displays TODO comments in publi

Issue Description

Type: bug report

Describe what happened

java.lang.IllegalStateException: failed to req API:/nacos/v1/ns/instance/beat after all servers([minion-register:8848]) tried: failed to req API:minion-register:8848/nacos/v1/ns/instance/beat. code:400 msg: java.lang.IllegalArgumentException: dom name can only have these characters: 0-9a-zA-Z-._:, current: DEFAULT_GROU

Hello,

I found recently that grpc-go was working on an xds implementation for service discovery, which is great.

Using current HEAD, I tried to get both resolver and balancer working. I managed to get something more or less working for resolver by reversing code & tests code on Gist but as for balancer, I didn't.

I unders

Copied from briandealwis/cram#5: @student-06 asked

It would be great if we can supply auth creds for registry using parameters since it removes the dependency on credential helpers.

My exact use case is: We are setting up a CI system for UI projects, where we need to push docker images (without daemon) to a local registry which has auth.

i find the root cause of this issue

see config/Docker.file

HEALTHCHECK --interval=10s --timeout=3s CMD curl -f http://localhost:8888/actuator/health || exit 1

values of 10s for interval and 3s for connect timeout is both too small, when the docker machine have a bit lo

Hello,

We're using etcdv3 with a self-signed cert. so we can't use the default micro binary although etcdv3 support has been built in since v1.11.0

Is there any approach to access it without rebuilding the micro binary?

If the rebuild is needed, where should I put the "tls.Config initialize" code?

micro version: 1.11.0

Thanks.

refer, #210 #178

update:

It seems mi

Prerequisites

• I am running the latest version. (up upgrade)
• I searched to see if the issue already exists.
• I inspected the verbose debug output with the -v, --verbose flag.
• Are you an Up Pro subscriber?

Description

It would be great to add regex capabilities to redirects like so:

redirects: {
  "/folder/:slug(regexhere)": {
    "location": "https

Currently, we ask contributors to strive for consistency with existing code, but it would be helpful to clarify the following regarding docstrings:

• Docstrings should begin with a short (~70 characters or less) summary line that ends in a period.
• The summary line should begin immediately after the opening quotes (do not add a line break before the summary line)
• The summary line should de

The Go documentation states the following on http.Request.RemoteAddr:

The HTTP server in this package sets RemoteAddr to an "IP:port" address before invoking a handler.

Therefore, you could expect that a code like this is correct:

package main

import (
	"fmt"
	"net"
	"net/http"

	"github.com/go-chi/chi"
	"github.com/go-chi/chi/middleware"
)

func main() {
	r

Keep the number of the dependencies maven artifacts to the minimum required and document clearly their usage

At the moment we have in Activiti:

• activiti-dependencies
• [activiti-api-dependencies](https://github.com/Activiti/Activiti/blob/develop/activiti-api/activiti-

as title, add https://dapr.io/ to the description of project.

Many of the ipcache accesses in the datapath use ipcache_lookup4() directly, which does not implement LPM via hash maps on older kernels. This can lead to unexpected behaviour such as what is fixed in PR #11333 .

We should review all existing uses of ipcache_lookup[46]() to ensure that if that code path is enabled on Linux 4.9/4.10, and it relies on identities with prefixes other than the l

**Do you want to request a feature or report a bug?

Feature?

What is the current behavior?
Session object ACLs require both the key and the api_id field of the ACL definition to match.

If they mismatch the API does not throw an error.

What is the expected behavior?

The Gateway API should report the discrepancy to stop the token from being generated.

What happens?

在沙盒环境样式隔离的环境下。子应用document. getElementById 等API因为应用在shadowDOM里面。所以没有办法获取正确数据。建议对document.getElementById等 做打补丁处理（先在shadowDOM查询然后在去document上查询），才能达到子应用完全技术隔离。

A clear and concise description of what the bug is.

Mini Showcase Repository(REQUIRED)

Provide a mini GitHub repository which can reproduce the issue.

https://github.com/umijs/qiankun/blob/v2.0.0/examples/main

when showing the graph of the cluster it shows unmanaged pods and containers with names similar to the name of the cluster

so, what is the main job for those unmanaged pods and containers? and why they keep appears and disappears in a short time?

From RestTemplate.java#L78-L81

The RestTemplate will be deprecated in a future version and will not have major new features added going forward. See the WebClient section of the Spring Framework reference docume