Hello everyone, today I am going to present my paper, Susceptible Weighted Imaging and Effective Auxiliary Sequence that Enhance Insight into the Imaging of the Stroke. Coming to others, it's me Vinay Kumar, President of the D.Y. Partial Medical College and done under the guidance of Dr. Sanjay M. Kalatkarsar, he is a professor, Dr. D.Y. Partial Medical College, Pune and next under Dr. Krishnath Ejasar, Assistant Professor of the D.Y. Partial Medical College, Pune. Coming to introduction, HAKEI 1997 first proposed and patented SWI Imaging which was subsequently implemented after 2004 on commercial scanners. Susceptibility is an expression of paramagnetic components post hemorrhage like ferritin and hemocytrin. In the presence of these paramagnetic components resulting in deterioration of the MR signals from the tissue, suggesting an interpreter of the hemorrhagic incidents. It exhibits susceptibility differences in tissue showing acute hemorrhage, acute thrombus, deoxynated blood in the vein, hemocytrin, calcium and iron which exhibits susceptibility differences from the surrounding. Acute stroke can show acute thrombus, deoxynated blood in the veins and acute hemorrhage and hence is helpful in stroke evaluation. It increases the conspiracy of the hemorrhage nearly 6-folds as compared to G.R.E. Hence it should be included as part of routine imaging of the brain in stroke. Coming to the aim, aim is to evaluate the utility of the SWI sequences in stroke imaging and assess supplemental information provided by SWI in an acute stroke scenario, materials and methods, data collection and patient selection. This was a steady performing tertiary care center among 50 patients who presented with acute neurological symptoms such as limb weakness, loss of consciousness and sudden onset of severe headache. Image acquisition, a 3-T, 3-Tesla MRI machine, Vida Siemens was used. Our routine brain protocol includes T1 weighted image, T2 weighted image, flare in actual sections and diffusion weighted image, apparent diffusion coefficient image, T1 weighted subjectile, T2 weighted coronal, MRV and MRA was done if indicated. SWI sequence, image parameters were repetition time of 27 milliseconds, time to echo 20 milliseconds, fractional nsv property of 10 degrees, 1.8 mm slice thickness, the field of vision of 200 mm square, 270 seconds acquisition time. Image analysis, experienced radiologists interpreted and evaluated all brain MRA images. On phase sequence of SWI, image appears hyperinduence and the calculation appears hyperinduence in the left handed system. Coming to the results, the brain MRA with SWI was obtained in 50 patients, out of the 50 patients, 32 were males and 18 were females. The majority of the age group was more than 60 years, followed by 50 to 60 years. The age range from 28 to 76 years and the majority of the patients were from the age group more than 60 years that is 23% followed by 51 to 60 years that is 22 years. Coming to the MRA findings, the site and location and distribution of the pathology. Most of the patients had bilateral pathology, 20 of them followed by right side, 14 of them and left side and 14 of them and 2 involve the brain system. The majority of the patients had supratentorial lesions, 34 people followed by both supratentorial and infratentorial lesion in 11 patients and 5 patients had infratentorial lesion. Among 50 patients, the majority of the patients had venous sinus thrombosis, 20 patients and arterial stroke, 20 patients followed by cerebral amyloid angiopathy, 5 patients and 5 had, rather patients had hyperinduence and microgrid. This is the same table that was shown. In our study, among 20 patients with arterial stroke, the majority had middle MCA thrombosis and 10 had ACA thrombosis and 6 and posterior cerebral artery thrombosis and 3 and 1 patient had ACA thrombosis. This is the same represented in the table. Hymorrhagic transformation of the arterial stroke was seen in 18 patients. The distribution of the hemorrhage transformation of the infarct was MCA territory 9, ACA territory 5, PCA territory 5, ICA territory 1. Of these 18 patients with hemorrhagic transformation of arterial infarct, 5 had microhemorrhages and 13 had microhemorrhages within the infarct areas. You can see the image here. Here you can see a well-defined grounded hyperinduence area on the magnitude image appearing hyperinduence on the phase image that is seen in the right occipital region, suggestive of microhemorrhage. A large area of diffusion restriction on DWI in corresponding low ADC values also see. This is MCA territory acute infarct with microhemorrhage within the infarct area. In this image, you can see an acute non-hemorrhagic impact in the left cerebral hemisphere showing diffusion restriction on DWI with corresponding low ADC values. On magnitude image, the left anterior inferior cerebellar artery appears hyperinduence and it appears hyperinduence on phase image, suggestive of acute thrombosis. The dark artery sign or the susceptibility sign was seen in three patients. DWI, ADC, magnitude, phase and MR, MRA. Here you can see the SWI shows infarct in the left MCA territory with dark whistle sign in M3 and M4 branches of the right MCA which was confirmed by MRA. You can see the positive here. Cerebral venous sinus thrombosis. Among the 20 patients with cerebral venous sinus thrombosis, the majority of the patients had hemorrhagic infarcts, 8 of them followed by cortical venous thrombosis in 4 and venous sinus thrombosis in 8 cases. This is the same representing the tabular format. Here you can see the magnitude image, phase image, SWI and MIP images where you can see hyperinduence signals in the cortical veins in A and C image, in the bilateral frontal parietal region and left transverse sinus in E and G and appearing hyperinduence on the magnitude and hyperinduence on phase images, suggestive of cortical and ural venous sinus thrombosis. Correlation between CT and SWI. SWI was better as compared to CT in the detection of hemorrhagic venous sinus thrombosis. Hemorrhagic transformation of arterial infarct, cerebral amylodipathy, hypotensive and microhemorrhage. You can see the same table that was described. Coming to the discussion, SWI imaging despits slow flowing blood in small cerebral vessels due to blood oxygen level dependent effect of deoxygenated hemoglobin which is difficult to detect at the time of the flight in phase contrast magnetic resonance angiographic techniques. MIP helps in establishing continuity of the tortuous structures and has a venogram effect, thus differentiating veins from adjacent hemorrhage. Both calcium and iron are commonly deposited substances in the brain. It is distort the local magnetic field producing a low signal on SWI image just mimicking hemorrhage. Calcium can be differentiated from hemorrhage on phase image where the calcium appears dark and the hemorrhage appears bright. Iron is usually seen in the globus pallidus and substantia nigra. Iq thrombiabolism has high iron content and increases in deoxy hemoglobin content and hence is easily picked up on the SWI sequences. SWI has high sensitivity with better contrast resolution in the detection of thromboembolism in both the anterior and posterior circulation. The composition of the thromboembolism can vary. A red thromboembolism that is erythrocyte rich predominantly consists of erythrocyte while a white thromboembolism composed of platelets, fibrin and enthromatous gruel. A red thrombus usually arises from the left atrium in the atrial fibrillation while a white thrombus originates from the volumel atherosclerotic plaques. Red thrombus usually has a higher level of paramagnetic content so it causes blooming on SWI sequences with the diameter of the thrombus vessel exceeding the diameter of the contralateral normal visit. Detection of the red thrombus is a prognostic importance as it is more sensitive to intravenous tissue, plasminogen activated treatment with a better success rate of endovascular recanolation. SWI can detect distally located clots that may not be picked up on routine MRA thrombus is in particularly occluded vessel cannot be picked up in DOF or MRA which shows narrow artery. SWI can pick up thrombus at the site of an occluded vessel seen as dark vessel sign. SWI can pick up venous changes at the site of the infarct multiple prominent hypointense veins can be seen in the vicinity of the infarct due to increased oxygen extraction with a resultant increased concentration of deoxyemoglobin this help in protecting the tissue at the risk in the penumbara and has favorable outcome from the reperfusion strategy. In our study among 20 patients with arterial stroke the majority of the patients are MCI thrombosis followed by ACI PCI thrombosis are findings in favour of bill 1 at L where the SWI detected intra arterial thrombus in 122 patients compared to 97 patients detected by MRA. Extravescent hemoglobin turns into deoxyemoglobin a paramagnetic material that produces inhomogenicity SWI can identify very minute hemorrhage within the infarct because it is extremely sensitive to magnetic field inhomogenicity our study found 5 patients each with hemeloid angiopathy where you can see here the magnet phase SWI MIP images of the SWI sequence shows hypointense areas on the magnet image hyperintense areas on the phase image in the bilateral temporal region suggestive of hemeloid angiopathy our findings co-operated the findings of METAL et al showing increased sensitivity of the SWI to identify numerous micro bleeds that others go undetected on routine imaging in our study among 10 patients with venous sinus thrombosis 7 had hemorrhagic infarct followed by cortical venous thrombosis and superior sagittal thrombosis results are consistent with those of study of 39 patients with cerebral venous thrombi MIP et al which showed that the sensitivity of SWI for detecting the clots in the sinuses was 96% and 71% between the day 1 and day 3 in our study the correlation of CT with SWI detection of cerebral venous sinus thrombosis micro hemorrhage and cerebral amyloid angiopathy showed better results with SWI as compared to CT with the statical significance our findings were co-operated with those of METAL et al coming to conclusion SWI is a useful imaging sequence that provide relevant information in stroke patients and requires only an additional 3 to 4 minutes to perform SWI can identify various features such as hemorrhage intra arterial thrombosis or concomitant microbleed the detection of the micro hemorrhage which is better seen on SWI is of prognostic value and affects therapeutic decision and the use of thrombolectis in this study the detection of the CVST micro hemorrhage and cerebral amyloid angiopathy showed better results with SWI when compared to CT in conclusion SWI is a simple reliable non-invasive imaging technique SWI does not need the use of contrast medium and can be added as an auxiliary sequence in routine stroke protocol without much increase in the scan time these are the references thank you


Not anymore! Let's lock them up, boys and girls. According to these recent articles, 3% of Belgian children are raised vegan, about 1 in 30. So apparently, 3% of the population thinks they are better than everyone else because they care more about animals than humans. Denying the lack of available protein, vitamin B12, vitamin D, calcium, iron, zinc, iodine, omega fatty acids on a plant-based diet is a testament to how far vegans will lie. But for what? I really don't understand how someone can care so much about a pig that would literally eat you if you fell into its feeding tray. Those are the nutrients commonly stated in articles that most people recognize vegan diets are deficient in. But vegan diets are lacking pretty much every single nutrient our body needs. Especially vitamin A in the form of retinol, vitamin K2 in the animal form of MK4, other important fatty acids like arachidonic acid as well as EPA in optimal amounts. Not to mention cholesterol, which is a precursor to so many hormones and processes in our bodies. Yeah, right, imagine a news article talking positively about cholesterol. I think these publications would take that one to the grave. The only thing a vegan diet can provide is caloric energy from carbohydrates and plant fats. The amount of nutrients and protein from a plant-based diet is not suitable for any stage of human life. That is why our indigenous ancestors, hunter-gatherers, used plant foods for their caloric nutrition for energy. They had a base of animal foods in their diets for the actual vitamins, minerals, elements, and fatty acids. What's crazy is that in these articles, there is still a semblance of hope in the vegan diet, saying things along the lines of, oh, if you supplement and have medical supervision, it can be tolerated by children, but otherwise it would be unethical. If a diet needs a laboratory and a team of doctors, maybe you shouldn't be following it. In 2017, two Belgium parents were convicted following the death of their seven-month-old baby who passed away weighing less than 10 pounds. But hey, let's hear what the vegans and the articles have to say. A professor representing the Royal Medical Academy of Belgium warns that a vegan diet would now legally qualify as non-assistance to a person in danger, a crime that would land you two years in jail. A person cannot be convicted of the 1961 offense if he is unaware the person is in danger. But the legal opinion now made it common knowledge that a vegan diet can kill. The pediatrician said, when we are children, the body manufactures brain cells. This implies higher requirements for protein and essential fatty acids. The body does not produce them. It must be brought in via animal proteins. We are talking here about stunted growth and psychomotor delays under nutrition, significant anemia. Some developments must be done at a specific time in life and if they are not done, it is irreversible.  A well-planned vegan diet is perfect for babies and children. Kids, including my own, thrive on a balanced vegan diet, but as with any dietary regimen, it's the parents' responsibility to ensure their child is getting all the necessary nutrients. And yes, that's easier to achieve on a vibrant vegan diet rich in whole grains, vegetables, and pulses. So meat clogs your arteries and a vegan diet is adequate in nutrition? Is that why you guys are killing babies? Heather Russell, dietitian at the Vegan Society said, nutritional planning is important for everyone, not just vegans. It's possible to provide all the nutrients needed for growth and development without animal products. Yuck. There is literally no scientific evidence that meat and dairy, any animal food can lead to heart disease or stroke. This witches interpretation of her kids thriving on a vegan diet means nothing considering the mental state of these lunatics. If you take a look at the Vegan Society, all of them are pasty white ghosts, half of them have facial piercings, and none of them look healthy. Both the British Dietetic Association and American Academy of Nutrition and Dietetics recognize that well-planned vegan diets can support healthy living in people of all ages, including infants, children, teenagers, and pregnant and breastfeeding women, she added. I wonder if the British Dietetic Association has the same background as the American Dietetic Association. The American Dietetic Association was essentially founded by a religious cult that believes in a vegetarian diet. Check out my vegans will go extinct video last week if you want to learn more about that. Since a plant-based diet is not technically prohibited in Belgium, imposing it on children will not necessarily qualify as child neglect, but will make it easier for authorities to remove the child from their parents if his or her poor health is associated with a vegan diet. Well, a lot of things should be illegal yet they are not. We already have malnourished unhealthy children as a result of animal foods in our diet. Humans were well on their way to becoming infertile and extinct on just a standard American diet. A vegan diet just makes things happen a little bit faster. These degenerates, vegans, will literally feed their cats and dogs a vegan diet and think it's okay. Put into context the mental state of these people. They somehow convince themselves to do this literally torturing animals. How much of a hypocrite could you be? This restrictive regimen requires ongoing monitoring of children to avoid deficiencies and often irreversible growth delays. The legal opinion said, it is unsuitable for unborn children, children, teenagers and pregnant and lactating women. It is not medically recommended and even forbidden to subject a child, especially during periods of rapid growth, to a potentially destabilizing diet requiring frequent supplementation and control. This concept of nutrition is similar to a form of treatment that it is not ethical to impose on children. And you know what's comical? The vegans commenting on these news articles saying they're funded by the meat industry. Oh, I'm funded by big egg.  Are these people delusional? How much you wrote this doctor guess from the meat or fish industry? The human body is not meant for meat consumption. Most of people who eat meat carried in their colons up to 12 pounds of putrid leftovers during their lifetimes, which puts tremendous stress on the immune system. One of the causes of cancer in colons. Besides, two more points. Fishes are treated very cool by all means. Every time someone eats an animal cadaver is eating many moments of suffering, including from the cadaver it's eating. And the last point, but not least is the meat loaded with hormones, antibiotics, plastic, pesticides, artificial toxic covers to make the meat last longer in refrigeration and make it look fresh fish is contaminated with mercury, lead and other heavy metals. This most of the oceans are highly contaminated and now with radiation in some areas of the Pacific from detonations of hundreds of nukes from US UK experiments and lately from the Tsukushima leading plant from Japan, the bells and dogs who needs to get informed and stop such crap. We got a real bright one there boys and girls. Let's check out another one. Patrick Bulboumian, Germany's strongest man, vegan, protein deficient is he, Venus Williams, Tony Gonzalez, NFL, boxer David Hay, Lewis Hamilton, MMA fighter Mack Danzig, the list goes on, just google vegan athletes. All of them obviously lacking in nutrients according to this idiotic statement which is based on the incorrect personal opinion of pediatrician, not a nutritionist and not on actual facts. Somehow the British Dietetic Association have recently promoted a vegan diet and stated that veganism can help to control diabetes and cause it to go into remission. Whilst I respect the doctor's ability as a pediatrician, he obviously has not studying nutrition, not surprising as there is no requirement for him to do so. However, he is making a completely incorrect statement and unfortunately will just put people off veganism. It's commonly accepted now that a vegan diet is far more healthy than the class 1 carcinogenic processed meat. It's far better for the environment and most definitely better for the animals who are suffering through what can only be described as an animal holocaust. Frankly, I am disgusted by this ludicrous report. Unfortunately buddy, you got a few contradictions there. That world's strongest man suddenly started getting injured as he went on a vegan diet and if you look up any celebrity they seem to be following a vegan diet. There is a clear agenda going on and for vegans to deny if every single celebrity is following a vegan diet that something's not a little fishy then I really don't know what to tell you. It's ironic that he said oh he's a pediatrician not a nutritionist when a nutritionist is just a blanket term that anyone can use.  If you guys would like to learn more about how many babies vegans have killed I did a video about two weeks ago titled vegan parents arrested for starving child. I think I covered about half a dozen incidences where these parents actually killed their children on vegan diets and there were even more where the children were so malnourished they probably have permanent developmental disabilities. This is something guys I've mentioned in the past that's very close to my heart. I personally believe that one of the reasons my sister is mentally disabled is because of a lack of nutrition during developmental stages of life. This is incredibly important to me and spreading the importance of the nutrient qualities of animal foods you know serves many purposes. Not only does it help people develop optimally physically and mentally it makes human beings the beautiful people they are supposed to be. If anyone is healthy, happy, beautiful it will make the world a better place. Unfortunately there are many forces fighting against our happiness one of them being vegans. So if you guys would like to support my mission of course please like the video subscribe hit that bell icon guys and share the video if you can if you guys would like to support me further just check out some of the other videos on my channel. Recently I have launched Frankie's free range meat my goal being to provide you guys with high quality nutrient dense animal foods at an affordable price hopefully within a few years I mean we're looking to do things like raw dairy high quality canning our own fish making bacon doing a bunch of amazing things and maybe even expanding and providing even more of the world with nutrient dense animal foods. So if you guys want to learn more about our mission check out Frankie's free range meat dot com outside of that thank you guys for joining me today and enjoy the weekend.


Okay, so thank you everybody for coming. So my name is Vishakha Garwal, and I'm working as senior member technical staff at NEC. I'm a Keystone contributor. So unfortunately, my co-presenter, Sian and Lance weren't able to travel. So let's get started. So in this session, we'll talk about the basics of federation and identity federation, which helps us for the consumption of resources without managing separate identities. Though the concept of federation isn't new, but people often struggle to understand this. So we'll discuss this in detail. Starting with the overview. So we have what is federation? Why it is referred as federation? Then what are the needs to meet the federation in which we will be discussing the three phase model that a federation supports? Then we can see how we can achieve federation. We'll discuss a single sign-on authentication problem. Also we'll look for some of the terminologies that are mostly used in federation. I also came up with some use cases that company uses. They use this for the federated environment. Then we'll see how federation works with the keystone and the authentication flows in the keystone. And we will have a quick demonstration of federation in keystone. So until now, we can see the cloud ecosystem always consisting of hundreds of clouds, hundreds of independent heterogeneous clouds that are being supported by the private subjects and providing services to the clients. So these types of clouds does not support any type of federation. Nowadays many clouds have started using these services of another cloud. So here the idea is to not to think about the independent private environment, but to consider as a multi-intercloud scenario in which one cloud will be using these services of another cloud. Like the different clouds belonging to different domains can interact with each other and sharing and gaining access of the resources where they will be becoming users and service providers both at the same time. So why we refer this as federation? Like if we'll see in the political world, so if we first think about the federation, the very first thing that comes into our mind is the federated government. So that is a type of government that is also being made by a union of self-governing parties that is sharing the powers and making a central government. So the concept of federation from the political environment to the IT is kind of the same. So we can consider the federation and IT as one as a home cloud, another cloud as the foreign cloud. So home cloud is the cloud where the home cloud which isn't able to instantiate further or create virtual machines due to the saturation of its resources. And we can see the foreign cloud, the foreign cloud which will rent us the infrastructure, the storage or the computing capabilities to the home cloud. So in this diagram we can see that some of the virtual resources that are placed in the foreign cloud environment of the home cloud. So the foreign cloud has rented its resources to the home cloud. So what are the needs of the federation? The cloud environment should be scalable. Scalability means that our home cloud should be able to find out the right foreign cloud with the help of any discovery mechanisms. Or if the home cloud already knew the foreign cloud, then we don't have to use any discovering algorithm or mechanism. Second, we have interoperability. So in interoperability, a cloud should be able to join the federation without changing its security policies since it might be possible that every cloud using different security policies. So in this, a home cloud can also, it also can be said as interoperable if a home cloud is able to authenticate itself once. With every another cloud. Third is user level satisfaction. So this refers to the on-demand user request to have the good quality of service. Now, how we can achieve federation? So in this, we will discuss three phase model that a federated environment do. So first is the discovery. So in this phase, the discovery process lies like we use several discovery mechanisms or discovery algorithms in order to fetch all the clouds that are ready to provide their services. Second, we have matchmaking. So matchmaking involves the foreign cloud whose requirements matches in both terms of the available resources and supported authentication mechanisms. Then the third is authentication. So the authentication process basically involves some of exchanging the metadata in order for the clouds to trust each other. So the authentication phase can lead us to the problem of single sign-on. So if we'll see a distributed environment, we can have hundreds of clouds for which every cloud had to maintain hundreds of other credentials of every other cloud with whom they want to authenticate themselves. So this type of problem, authentication problem is referred as the single sign-on authentication problem where a cloud should be able to authenticate itself with the another cloud only once. So a technical solution to resolve this kind of problem is using a SAML protocol, which involves one cloud to be configured as IDP and another cloud to be configured as SP. In this model, we also exchange the authentication assertion in order for both the clouds to trust each other. So this is the terminology that I just said about the SAML protocol. So SAML protocol involves first the identity provider. So identity provider is the thing, is where our user exists, or we can say our identity exists. So in identity provider, it responds with the user attributes. So identity provider gives information to the service provider about the user attributes. Whatever the service provider we can say is configured, the another cloud is being configured to get the information. Then we have the service provider. So the service provider is the cloud which is providing services to our IDP, to the identity provider. Then we have SAML protocol. So this is the XML-based federation protocol where the authentication assertion, or we can say an XML sum data is being exchanged between our identity provider cloud and the service provider cloud so that they can trust each other. Then next we have one more protocol, OIDC, that is OpenID Connect. And it is a JSON-based federation protocol. So we'll discuss mostly more about the SAML protocol since it's mostly used in the other organizations and also it is a little difficult to tackle. So next we have a terminology that is assertion. So assertion is basically a statement that is being passed from identity provider to the service provider. That contains some information about the user. So the identity provider always sends the assertion that is encrypted and signed. So the Keystone is able to read that encryption and after reading that encryption, it can, it recreates the local users, also known as the shadow users, which we'll discuss further. So now we'll look what is Keystone federation. So identity federation is basically the ability to share identity information across multiple identity management systems. Like this is basically more helpful when an organization already has a primary source of identity and they does not want to create another set of credentials for the users in the cloud. So this is the one advantage. And another is also like Keystone can be used to connect multiple clouds together since we can use the Keystone of another cloud as our identity source. So Keystone supports basically two types of configuration models. First is Keystone as a service provider, where Keystone will be acting as the service provider, will be giving its services to any external identity provider or to any external identity source where the user exists. Then we have Keystone to Keystone. In this type of setup, one Keystone, one cloud with the one Keystone will act as our identity provider and another Keystone will act as the service provider. We can also configure both as service provider as well as the identity provider. So I came up with two use cases. One is the cloud busting scenario and also one use cases of hybrid cloud that is used by Huawei. So first is by the CERN. So CERN is a European organization everybody must be aware of and it's one of the largest and most respected centers for the scientific research. So CERN has basically many laboratories as well as universities. So it has its own user management system and federation identity helps CERNs to maintain such large authentication system easily and it also help the CERN has also bursted their workloads to the public clouds. Then second we have Huawei use case that it supports the federation identity using SAML same like the way we do in OpenStack. And in this ways the users can connect their any local authentication system whether the user exists in Windows, AD or private cloud. They can connect to the Huawei public cloud via federation without any data leakage. So this is a typical hybrid cloud scenario. Okay, so we'll discuss more about SAML profiles. So we have two types of SAML profiles. One is the WebSSO and second is the ECP. So it will talk in terms of Keystone. Keystone for now, Keystone works on the scenario of ECP but still slightly in a different moderated form. We are planning to support WebSSO in future. So WebSSO is basically where the user exists in the web browser and the request is always being initiated or the user existing in the web browser. So the user actually takes the help of web browser to interact with the identity provider as well as service provider. And the request is always initiated at the service provider side. And if we'll talk in terms of ECP. So ECP follows the same flow that WebSSOs see but the user does not have any kind of web browser. It interacts with the service provider and identity provider with the help of any SDK or CLI. And the request is initiated at the service provider side only. We'll see the authentication flow of WebSSO and Keystone using Federation. But as I told that Keystone follows the ECP but in a modified form. So we'll see the authentication flow for the same. So this is the authentication flow for WebSSO where the first user makes the request to the service provider and service provider since user does not exist in the service provider and service provider does not know the user. So service provider will redirect the request to the identity provider. The identity provider is where our user exists. So identity provider will first authenticate the user and it will generate the SAML response. So SAML response is the same encrypted signed containing some information about the user. And it will send the SAML response to the service provider. The service provider will take the SAML response which will make the service provider believe that the user is authenticated. And the service provider will take the SAML response and it will generate and it will then allow the user to use its services. So this is the WebSSO authentication flows. So we are discussing this just to show the comparison of WebSSO with the authentication flow that Keystone follows. Okay. So for Keystone, we have user agent identity provider, service provider and like in Keystone, first the user starts by authenticating with the identity provider. So like for trusting service provider and identity provider, Keystone follows one-sided trust relationship. For identity provider, so here identity provider does not fetch or does not take any requests directly from the service provider. Only the service provider will know our identity provider in such case. Whereas the user will be aware of both where is the service provider and where its identity provider is. So for our service provider to know our identity provider in Keystone, we generally have to do some basic configuration. So to configure a Keystone as an identity provider, we need to make some entries about our identity provider in the Keystone.con file. So we need to generate a column, SAML, whatever the protocol we are using and some parameters like IDP entity ID. So it's a unique ID that a user has to give to the identity provider. It can be a string, a unique string that a user has to provide to our IDP. Then we have IDP SSO endpoint, which is mostly used for web SSO. And since for now it's irrelevant in our case because Keystone does not support web SSO. Then we have certificate file and key file. These are basically the security files, the encryption, the keys that the IDP uses to encrypt the SAML assertion, which it sends to the service provider. The user has to create the metadata for IDP also and need to provide the metadata path of IDP in this parameter, IDP metadata path. So that was the configuration we did, the user did for the IDP. Then we have, then how the service provider will come to know about our identity provider. So here I am using Apache module Shiblet to configure, to use it as a service provider. The Apache module is the mode ship. Since the Apache is already configured with the Keystone configuration, but the mode ship still needs some, still need to look some entries into the Shiblet 2.xml file. So in that file, we need to do the entry for IDP, the remote ID that we just generated, the entity ID we generated in the previous slide. Then we have the entity ID of service provider. So user has to give a unique ID to our service provider also. Then here we need to mention the URL of identity provider then where the service provider will fetch the metadata about the IDP and will trust our identity provider. Okay, so in Keystone to Keystone workflow, the user first sends request to the identity provider. The IDP will authenticate the user and it will give a token to the user agent. And through that token, the user can request the SAML response with the identity provider. The SAML response will be generated and will be returned to the user. Okay, so for now on, so here we need to understand about the two concepts, the shadow users and mapping rules. So in the previous slide, we can see that the user exists only in the IDP. If the user does not exist in anywhere else, so Keystone cannot do anything other than providing it's an unscoped token. So to give the federated user some sort of authentication over the service provider, we first need to, the Keystone needs to recreate the user by reading the SAML assertion. So Keystone makes an entry in its local database about the user and after that, we need to map that user with any of the local group that already exists in the service provider to give some sort of authorization and authentication to that user in the service provider. Mapping rule is the file that we create to remote that federated user with the local user group or any local group or local user roles. So that the remote user can have the same roles to the user that we have mapped. So there is a sample file, mapping file. So we have a remote user and we have mapped that remote user to the group federated users that we have already created in our setup in the service provider. The remote user will have all the roles and authorization and authentication over the service provider that same as the roles of the federated users group. So we need to create this mapping file in order to give some roles to our federated user because this is what Keystone understands. So after this, the SAML response is being sent to the service provider. The service provider will create the shadow user. It will read the mapping file and according to that mapping file, it will give some authorization to the federated user and then it will authenticate it and it will give the user the token to access the services over it. So we can test our setup. So that was the very basic configuration I just shared. We have a lot of more configuration that we need to do which I'll share the link and I'll show the link where we can read more about the federation and the configuration that we need to do. And after the whole lot of configurations, we can see the CLI. So this is the CLI we can use over the identity provider and we can pass the, if the instance we created over the IDP with the name of Keystone SP, we can pass the service provider name and we can issue the token that for this service provider, we need to access the services. So we can have a quick demonstration. So how all of the configuration in Keystone with Horizon will look like. So we created a user on identity provider, giving some roles to the identity provider, giving some roles to the user on the identity provider, logging in the Horizon in the open stack with the user that we just created. So we can see on the right, on the side, okay, so we'll first check that this is our user created and then we can see the service providers listed with our identity provider and the user can successfully switch to the service provider. We can see the same name of the user is being created, that is shadow user and this user can now list down the networks or any services that he's been authorized to, if he can create instances over it. This is just a sample of how instance the federated user is creating over the service provider. So an instance has been created. So this is the URL where we can read more about the Keystone federation, federated identity, the types of the federations and all of the configuration that we need to do to have a federated environment with Keystone. That's it. Anybody with the questions? So a couple years ago I was implementing not the federated but Keystone but OpenID Connect with Keystone and one of the pain points was that we still needed to have the operators' rights to edit the policy to JSON file so that the mappings are properly set up from whatever is coming back from OpenID, XML, whatever, but that was before the policy API was introduced in Keystone. Have you worked with that and did you try to implement and integrate with the federated setup also to set up the actual roles and groups what can come from the IDP? I haven't set up such kind of the environment we just set but maybe we can have a brief over it and I can try that and we can have the solution or the roles you are talking about. Anybody else? Okay, thank you. Thank you all.


Thunder E here and Happy New Year. This is the first video of 2022 and also this is actually older content. I apologize. I was trying to make this video a while back but it really got busy and also this is something different on the channel. Now this is all about my trip to London using JetBlue's Mint which is their business class offering. I went with the strip with BoredFam. I actually did some content around the Galaxy Z Fold 3 and she did some content on the Galaxy Z Flip 3 so you can definitely go check those videos out. But we arrived at the airport and they had a separate check-in area for Mint which was cool but because JetBlue doesn't have a lounge area yet we decided to head over to the TWA Hotel which is kind of across the street. It's not in the airport. It's basically away from your gate but we wanted to just check out that experience. Really cool seeing the old planes, checking in the restaurant there, having some food before our flight and then we decided to go ahead and head into the gate. Now I'll honestly say the TWA Hotel is a great place to check out. Just got that retro vibe and just kind of brings back the old view of aviation if you want. Now since I don't usually make content like this I want to give a big shout out to the guys that I definitely watch on YouTube and you should definitely check them out. Guys like Jeb Brooks, Sam Chu, as well as also Vicarious Voyager. They make some great aviation content and I think they do a much better job than I do. I just wanted to kind of share my experience here and kind of put something different on the channel. As I mentioned, we headed over to the gate and since again Jeb Blue doesn't have any lounge or any special access for this, I was at the gate shooting my Z4 III content. This is where I kind of showed some stuff here. Our plane was parked. It was an A321neo which is a not a wide body plane but it's good enough to cover that distance. The thing at the gate is we had like a standard checking process. Yes, if you're meant you got it to check in early. It's a little bit disorganized just because I think most people just kind of do that once they hear this board and everyone kind of rushes in but I got to check in and once I walked in I was greeted to this awesome row of Mint's class seats. Now they are 16 Mint's class seats from the flight from JFK to London and these are really great seats. The very first two are the studio seats. Now I'll talk about the studio seats later in this video but it is a very welcoming experience. You've got that blue lighting, very comfortable in general. The seating arrangement is one to one so there's basically one seat per aisle, board frame was sitting on 10A and that was sitting in 10F. Before we actually even jump to the seat tour you are greeted once you get to your seat with a drink of your choice, some warm nuts and just things to nibble on which is great. Honestly, the service on this flight was impeccable. I will talk more about the crew and the service but they did a fantastic job throughout the whole flight.  Now that big pouch is basically your blanket and your pillows for the flight. There is no bedding because the seats are made to be really comfortable and honestly say they are quite comfortable. Now the bedding is made, the blanket is made by Tuff and Needle and then next to your seat on the left hand side you have controls for your seat so you can lay flat, you can put in different positions, whatever you want to do is right next to you on your left and then on the right armrest right below that you do have a power plug and also the ports for your headphones as well as a USB Type-C port which does 10W charging. So again you do have multiple plugs here, I do like the USB Type-C port, that's a big plus. And then we move to the window, next to the window there is a wireless charging pad. Now I didn't expect this on the flight but it was really cool to see the fact that I could just drop my phone. I was kind of worried while in flight while there's turbulence that it might actually slide off but it actually stayed pretty well there so I was able to charge all my different devices including my Z Fold 3.  So right above the left armrest there is a push button below the side table if you will that opens up your tray so you can access the tray right there. I like the fact that it tucks into the side so it's a very clean process, it doesn't necessarily interfere with what you're doing and it's a pretty sizable tray, you can put your laptop on there, I used it to do some work. And then below that, below the tray area you do have access to your IFU remote to use that if you want to but again the IFU system is touchscreen which we'll get to in a second. Now on the left hand side you do have this table space area if you will that you can put stuff on there and you also have some of your many of the kits as well. Next to that is another power plug that has a USB port, headphone jack as well as also you know just plugs where you actually use so there are two plugs on your seat for this flight. And then towards the end of that table area you do have a lamp which you can turn on or off. Now in terms of order storage options within the seating area there is a slide-out drawer right below the IFU where you can put in documents, passport things like that and then towards the bottom right you do have like a cubby holder that has some slippers which were provided for us in this flight which is great and below your footrest there's also some more storage space where you can put your shoes, jackets, whatever. In terms of storage options there's a ton around the seats there is even a hook to hang your headphones which is right next to the window which is great. Now they did provide headphones on this flight from Master and Dynamic which are really great headphones so I'm really impressed to see that in terms of noise cancellation they still don't beat up the Sony XM4s which I use for most of my flights but again a really good offering especially for a long whole flight like this. I honestly can't remember everything specifically in the amenity kit but here it is for you guys to check out. I think all in all you find that there's a lot of seating space within this flight so it is a great package overall. Now let's take a look at the IFA system it is a 17 inch display now you can actually connect your device to the system so you can use the remote control and JetBlue does offer free Wi-Fi on this flight all their flights in general and you've got some really fast speed so that part to me is great again a nice blend of technology for someone like me makes a whole lot of sense with this now they do have some some some decent options I would say it's a vast options of of content but it's enough for you to go around to watch there's also live TV as well but I ended up using the internet to just do some work on there and yes for all the flight enthusiasts they do have a full 3d map which is actually pretty cool to see and I now understand why people like those 3d maps it's a great experience especially sure in the whole flight so not long after we took off we had dinner service this was a late flight leave in JFK and the way dinner is served is you have a menu you can select three out of five items from you also have a cocktail menu as well as also a wine list nothing too extensive but there were absolutely solid options now I can remember specifically what I picked on the menu but I have to tell you that everything I tried on this menu tasted fantastic this is probably one of the best meals I've had in the air and this was impressive for a carrier like JetBlue especially for their first business class product going transatlantic this was really solid I finished everything it was superb I can't state enough how great the meal was so after that scrumptious meal I decided to put on my slippers and went to go check out the bathroom for mint now there's nothing too special a bathroom it's very standard it's a clean bathroom well laid out but nothing in terms of just high amenities so I made my way back to my seat and found that board firm I already had passed out she was gone completely now the cool thing about the seats is that you do have your own privacy so right next to the lamp you can go ahead and press that button and that closes the door so you've got your own privacy area which is nice and no one can see into it unless you're walking past you know and you lean into it so that's actually pretty cool now the bedding was really comfortable this is done by Tough and Needle the bedding is actually the seat itself laid flat I had a lot of space I was able to sleep for about two to three hours on this flight it was a six hour 45 minute flight in total so that was a good amount of time for me on the flight watch some movies of my Z4 3 and then when I woke up I was greeted with breakfast which was an egg tart and a yogurt with some nuts and it tasted great again really good service overall I really enjoyed the service on this flight maybe the next time I will go ahead and try the studio option which is much bigger now the studio as I mentioned earlier is the first first roll on the flight is basically 1am 1f and you do have a larger display at 22 inches you have extra seating if you have a guest someone to sit there with you just more space and room in that on that seating but on this flight though I just had the standard mint and I have to say though I have to give big shout out to the crew who took care of us on this flight Alex Rowland and Cesar they did an amazing job they were absolutely professional they were very attentive honestly one of the best crews that I had actually dealt with I eventually took mint on my way back from London and it was also a great experience again I was able to talk to the staff and you know just the ask me about what I thought about the product now you guys are wondering okay how much did it cost me to take this flight so I bought the flight originally as a mint flight for just one way and it actually cost me $850 so for business class flight $850 from JFK to to London it's quite impressive because the competitors whether it was British Airways or even United I was looking at roughly $1,600 to $2,000 for just that one way flight now I did when I did a round trip I also paid paid around $850 I think it was like $870 back so it cost me $1,600 for this flight just out of pocket and it was a great experience all the way through so there you have it guys that is my look at you know jet blues mint from JFK to London if you like videos like this let me know try make more of these for you I'm gonna be doing more flying this year so try different services and also see some of the cool tech they have I definitely enjoyed seeing the wireless charger on the flight which is pretty cool I also like the fact that the supplied really good headphones from master dynamic and I also like the fact that you know they've got the fat one of the fastest internet speeds and it's free on the flights as well as the IFA system allows you to control it from your smartphone which is also a great thing so thank you very much guys and always enjoy entertainment


And outside Africa, 12 fire-fighting planes and 15 crews of the Fire and Rescue Services were rushed to the scene in an attempt to control the wildfire near Jerusalem. A large fire spreading across 10 hectares has broken out in the forest near Shoresh, a mosaic on the outskirts of Jerusalem on Tuesday, eight fire-fighting planes, a helicopter, and 24 crew of the Fire and Rescue Services were rushed to the scene in an attempt to control the wildfire. In addition, two fire-fighting planes are on standby. Border police officers are evacuating Shoresh residents and sighted seers in the area. In addition, thousands of girls participating in a summer camp near Shoresh Forest were evacuated as a precaution.


Chichester's Northgate Gyratory is changing. New features are being put in to keep cyclists safe. Electronic signs, triggered by sensors, will warn drivers that cyclists are in the cycle lane before they turn off to exit. Whether you're a cyclist or a motorist, Northgate Gyratory is a busy roundabout. Please, take care, pay attention, think bike.


Gone are the days of the basic needs of kids being seen as just food clothing and shelter. We really need to look at the basic needs of students meeting their needs at school holistically as emotionally, mentally, spiritually, physical, well-being, all of them tied in together. Health is so much larger than just physical fitness just because if you have a great mental state then you can achieve anything. When you're happy you feel like you feel very confident.  And a big piece of that is that self-worth and students get that self-worth through having a voice and opportunities within the school to share who they are. Student voice is essential in the school because without students believing and knowing that they're valued, they don't connect. A lot of students feel as though they can't just open up and have conversations with teachers and share their voice or their opinions. You're on this world for purpose, you're not just here because you're here, you're here because the Creator gave you a reason to be here. You have a story to tell, you have an identity. By creating a safe, caring environment where students are free to express themselves those conversations are rich and we also work on providing students with the language they need so they can be very clearly understood. So we thought what's a medium, what's a way for us to have students share the thoughts that they have, the ideas they have with educators. So we looked at photo voice and we talked to a number of students in different high schools within Edmonton Public Schools, First Nations, Métis, and New York students about representing what health and well-being means to them through Indigenous eyes. So the photo voice project was to kind of give a visualization of just what Aboriginal mental wellness means to us. I took one specific picture and my friend going down a set of staircases in the ravine. It was a very gloomy kind of day. My friend was just by herself and it kind of to me represented isolation, the feeling of abandonment, the feeling of just kind of going a downward spiral. So I don't want anybody to ever feel that way. And so I thought if I took that picture people would actually be like, wow, like that's so sad she's walking by herself in this gloomy kind of place and that's how it often feels for a lot of youth, like they don't feel like they have the support around them that they need to have a healthy atmosphere, healthy state of mind, a spiritual guidance. It offered them a voice. It offered them a way to share what's been inside their heart, inside of their head for a long time and to be able to show that to other people that this is what health and well-being means to me. They're really intelligent, intelligent humans and at 12, 13, 14 years old, they're really just exploring their role in the world and they're in this massive transition from child to adult and we get to see this beautiful transition period with them. But they absolutely want to be heard. They have important things to say and they want to shape culture that makes sense to them. Sometimes the kids have tools or even an idea of how they could see life a little bit differently with having these experiences and building on them for future confidence. I think it's important to get involved because I want my voice to be heard. It's really exciting to see our students step up with such pride and commitment to their history and their culture and their willingness to share and teach and be vulnerable and share their own stories. Most of the students walk through the door and they're not speaking and they're just kind of hiding in the back corner and to watch them on their pathway to flourishing is incredible because they find themselves and they find a voice and they step up. I think it's inspirational for them to feel that they're able to share their identity, their culture, their mental well-being. I think we're in the business of hope. We talk about knowing your past is important but it doesn't dictate your future. If you grow up in this environment, it doesn't mean you're going to live in that environment all your life.


I'm a practicing attorney in the Supreme Court in India and I specialize in cyber law, cyber crime law and cyber security law. In fact, we work on the intersection of law and technology and we look at various cutting-edge issues including issues like the dark net and the internet of things. Well, I have been fascinated by the business process and I've come here primarily because I was organizing a workshop on day one which is cyber law and Asian perspective. And I've also been on a couple of panels as a speaker including the panel done by UNESCO. In fact, one of the main recommendations that our session on cyber law and Asian perspective was that countries across the world are finding that they are clueless in terms of having coalition of important common denominators and learnings when it comes to cyber law and cyber security. And consequently, the said session has actually recommended the need for coming up in place with an international convention on cyber law and cyber security and has actually recommended ITU to come up with this working group of subject experts that can actually go ahead and try to identify what are these common minimum denominators that countries can approximately agree to which are relevant in informing national policies when you come up in this field of cyber law and cyber security. So I think it's been a very enjoyable five days that we've been here. Every moment has been a learning moment. You've met large number of new people and your horizons continue to expand of knowledge.


Okay, shall we continue? So Kubernetes and DCS are mesos story So I work for as mentioned for for mesosphere solutions Kubernetes solutions had architect Mesos is widely used by enterprise companies a lot But we started us for Kubernetes as well So right now we have Kubernetes running as framework on DCS Totally upstream Kubernetes with so easy install story. So basically You have your private cloud physical servers Public cloud providers you have our mesos Part and you have Kubernetes in line with Marathon and the rest of frameworks and With Kubernetes on DCS is automation basically So easily easy to scale install create Kubernetes clusters on DCS Right now we support only one this Kubernetes cluster per mesos cluster, but it will soon will be be mutable on so Imagine having big enterprise DCS cluster running on your on-prem like banks all of them and you want to have depth staging production cluster and or some companies using Kubernetes cluster for release sometimes so will be easy be possible So this week we are getting when new DCS dot 11 and that will have as well Kubernetes as GA So that is simple HA cluster provisioning scalable Kubernetes easy way API access with notification CS as well supports CNI as Kubernetes CSI as well Because we involve a lot with CSI's Kubernetes storage interface. So all that's available TLS easy upgrades of Kubernetes and Disaster recovery so we can back up in the story of Kubernetes classes running on DCS. So really simple HA provisioning so Who's familiar with Kelsey Hightower hard Kubernetes hard way cool So you see we have loads of things to install and you have to maintain them as well it changes so We made that only with that this is package install Kubernetes and You get that all Hcd HA Kubernetes HA and Who's familiar mess us basically? more or less so We have called We have framework and Marathon so framework in works a second schedule so Kubernetes framework Chacks for you at CD if you are one at CD pod And down battery restore for you so your API part like Controller went out so we'll restore for you so You don't have to worry about who's big things to animal to maintain and support them Yeah, and so we'll support public out as well so burst your cloud so we were able to burst your Kubernetes work to a public cloud DCS agents So as mentioned totally automated We always can run the latest version of Kubernetes when you want to be zips or install You're running this US Kubernetes as an option. It's not Included by default but easy to install totally open source no forks nothing open shift or something and Basically Max in a week we will have a new version after release of Kubernetes Tested and so how it looks so we have a TCS like mezzo's part and you have your Workers your master you're here. You have all public Workers which are run on public DCS agents so basically you can use traffic expose your Web apps externally easy the way and usual add-ons could this could control Basic client metric server dashboard all we get out by default installed and Regarding CICD pipeline no difference where your Kubernetes running on DCS or some else So provision Kubernetes. Yes. This is a package install Kubernetes So simple provision TLS everywhere so high-level cluster Or defecation to API secure Not this rapid Kubernetes upgrades nicely Upgrade Control plane guys first upgraded and afterwards one couplet by one is you can use ingress for services we support right now Kubernetes on Amazon on Amazon with as a cloud provider and Google cloud and Azure is coming as well So if you have DCS running on Amazon, you can leverage Amazon club of other services for your Kubernetes You can add remove couplets basically Kubernetes nodes disaster recovery So easy to restore backup and restore your clusters or maybe clone your cluster if you need to be using help your help your arc for that and CNI you come through Google as well. You can use Calico or your network policies and things like that Yeah, so upgrading Dumb easy like this this year's Kubernetes update We specify which version of course it has that version has to be released as our framework And you get your Kubernetes upgraded So but before So it checks we check Kubernetes releases closely So even we start with beta versions and alpha versions before you get released so The upgrade does back up just a couple cluster first Restores of the mic if something goes wrong. So Cluster is running and You can you click with click with things. I see allies. Well this is one Specifying like that you can With options you can add more worker nodes to a Kubernetes cluster So explained a Kubernetes expo expose the Kubernetes application. So we thought this Supportable Amazon as co-provider So PVC services effing load balancers of supported out for Any increase control the work Skip so disaster recovery so we I mentioned we adopted the arc from Heptio Which does very nicely backup and restore story So it's natively integrated of the DCS client So what is backup options provided storage as well in this year's cluster and The source symbols this year's Kubernetes store So for current GA offering we have simple provisioning TLS HA for cluster secure IPI server Non-disrupted Kubernetes upgrade dynamic external ingress as for services, which is Even you run on-prem you can never leverage DCS public agents where you can schedule your cublets So disaster coverage and I Yeah, and all that supported as well in our ecosystem helm is to a cuba cuba Cuba dam is basically we're using a lot of things we replace hip server to different metrics Because he was in working interfering with DCS Docker so dashboard as well, so we We use in laws of Sega groups Cryo is coming as well A replacement for Docker He found some issues still not pushing for GA yet, and we hung out a lot of different Kubernetes like channels as well Okay, let's do some real demos so For demos I use all those URLs you can share afterwards So So I'm going to install I already have a Kubernetes. Sorry this was running on Google Cloud basically that's a DCS cluster. So we have ten nodes cluster nine private agents and one public So all totally free and I don't have anything running here. So right now. I'm going to install Cassandra Backhand Yeah, sometimes I do automatic sometimes not so we're getting Cassandra three nodes basically only one instance. So basically that's a For example, we say basically data anything big data running on DCS after you're going to install Kubernetes cluster install helm and we go.  It's a very simple up just up here So basically it shows the node and nothing else, but it allows you to connect both, okay Yeah, green cool, so we need to install So we need to install set up a Cassandra key space and table and we so we can use Cassandra SQL command Yes, so we should see more one more service here We Can exec as well very simple to cook control exec To cause sorry to Cassandra connect to Cassandra server to client and we create a new space Table That's it. Now we have a fully running Cassandra. So back end big data Now we need to install Kubernetes make files or make install Seeds shall I make bigger so that's installing beta version of Kubernetes framework with some options which specify how many cooblets and private public events and which version of Kubernetes into install we can watch nicely in two ways Installs here so we can see at CD. Sorry. Where started pending and one by one the whole Kubernetes Control plane will be installed here and Outchart nodes and the same we can see here as well so all These components we don't land on the same DCS agent so these are spread around so for ha if that one node Sorry this is agent goes down. You won't lose much because you still Each it's a D each cube API server runs on different. We can collocate these things together but not the same kind so So get spread around so it's that we have them Control plane running already. So we just waiting for cooblets We have three cooblets Private ones and one public because public and can be used. Yeah, we go to you even Got coordinates now keep dinners got super replace by coordinates Yeah, we see you more things Okay, only left Still waiting for public node and Add-ons and In simple way very when you do upgrade one by one that will be done Yeah, no, no, no, it's basically it's more like Some features we borrowed but totally upstream Kubernetes. Nothing changed at all. No, but I think bootcube is dead Because it is self-hosted Kubernetes I don't think so it basically with bootcube didn't work well with trying to import to get in could be damn But I'm not sure what stories it's not the easy one. Okay, so I have only Add-ons left Sorry, could be a force in a place in this version. It's coordinates used between interaction between Kubernetes and DCS So Kubernetes understands this was names names so we can access any dissuers up by the nest name from which comes from the form as well So can Yeah, cool, so it's complete So now we have a fully running Kubernetes cluster on top of DCS specify Cube so fetching kube control as well just easiest Like that which uses notification of your user Sorry using cave instead of kube can control it quicker kube get nodes Now we should see the Kubernetes nodes our cooblets Takes a while a bit first time because has to fetch their tillers Certificate over. Yeah, cool. So we have three kublets private and one public Now I already have Helm so in it installs That's my a list is basically show all namespaces see we're getting Tiller installed Russian have a client client server running Now we want to connect Install our front end up Domain yeah, so let's look to this chart so as I mentioned Kubernetes can talk but DCS names didn't end in so I Don't have to specify anything else Every dissuers up talks the same way as Kubernetes framework So we can easy connect. It's no way back to Kubernetes framework yet So dissuers apps cannot cannot talk to Kubernetes apps yet. That's that's a feature basically request Now I'm installing Chart so we see Helm upgrade install specified name namespace That's our public Helm repository And I said ingress enabled through so that creates ingress control and ingress coast it's my private domain and When I mentioned the notes.txt file that's basically spits that Sorry here So to five ideas all detector has started basically you get this command things on Cool, so I have my up running five replicas But of course if that's not exposed yet, I cannot access that and externally So if I follow sample, I Go to use cloud warp ingress controller. Anybody familiar with that stuff? Cool Love that stuff I was a bit a different company, but So I love it. So you have to have Accounted cloudware and you have to fetch your certificate for for your warp and running that command And we'll install another Helm chart basically your ingress control will be used a warp and that's a cool using cloudflare warp You don't have to have a public note at all That makes a tunnel back to the cloud bar, cloudware TLS And you are up accessible Now we should see in my DNS Because it should create them Let's try to show it one second. Let me copy. Okay, we can run again. I'm great. Come on That should fix Okay, I go to delete the release Basically good as well, you know troubleshooting I use purge so fully delete Helm release and Helm release Yeah, so we're right now totally deleting the helm release It's a bit good for for demos. You don't have to Do one by one. Whatever you got installed. I think got deleted now. No just can repeat No error this time to be quick See, I don't even have to create a C name for that It does for you So it detects where what kind of also using and and that's cool as well. You don't I didn't use any load balancer From Amazon or any public agent from disaster using cloud for which is opposite way Cluster creates the connect tunnel to cloud for warp, right? and it's more secure as well and When you're running that on Prem Some companies like that way So we don't have to worry about opening particular ports Of course, the policy has to be a lot of going connections and if we get a start in the Cassandra All that data and all that running to see Cassandra Kubernetes And this is as well this Kubernetes API proxies how I'm exceeding my Kubernetes cluster And that exposes API of Kubernetes is secure way in the secure way, and that's it any questions Yes for port forward and Accessing like dashboard you need you still need SSH tunnel Only for you, whereas it's total problem And it's totally secure. It's based on your user This year's user don't support you to GPU yet, but that will come. Yeah But it's already two different type of nodes. We have a using different constraints of messes So this node only lands on a public agent of messes We have different labels as well or I can do describe maybe this one because I usually have A-lesses cube describe and control so it's of course Cloud for cloud you always prefer chorus, but it's up to wherever you run Because you just can run on red guard sent us chorus chorus or container Linux soon will get to Flavors with red hot kernel and that Yep, we'll have two versions Yeah So we have a red guard base kernel for enterprise Contra Linux and the usual one see labels annotation. So See but it has a label No type public and you can use that label For your ingress If that you know this public it has a public IP address Yeah, or taint Whatever it's up to whatever a label or taint or yourself whatever we want to use and you can even schedule your traffic using that Traffic or way any different ingress controller any more questions.  It's fine. Let's We're using totally what arc supports Full cluster snapshot. I don't think automation is yet. Yeah We have that a little bit manage snapshot yet You can snapshot a total it basically snaps at CD and the source afterwards then Multiplicating clusters to support you can clothe cluster or maybe you want to do upgrade. You're afraid to do upgrade you can clone your clusters Basically and with a restore to a never newer version of Kubernetes and restore your apps and Using git ops version when you're all versions ops versions are starting get you can easily restore a cluster state Or restore for mark whatever No, it's something Yeah So I can can share my slides afterwards and whatever I use it's here our DCS quick start basically you can use Azure GCP or Amazon to boost up Kubernetes cluster on DCS an easy way using this quick start Open source one of course an example apps and Cloud for our link and Charts are used all I think is open source basically nothing hidden Thanks Rimas. Just quickly. I guess we're setting up. We'll let take you Take you along to get running. No already


It's a and it's a deep question because it isn't even obvious whether the question are there things you should value is a reasonable question Or that it can be reasonably answered The thing I can tell you about that that's most closely allied with my own experience. I don't mean personal experience but say experience as a clinician is that Aimless people are in real trouble Now I don't necessarily know why that is and I don't necessarily know What that means for what your aim should be But I've certainly seen for example like if you had to make a choice which all of you will in the next five years or so between pursuing something like diligently and establishing a fixed identity because of that or Remaining bereft of choice and drifting I Can tell you that if you drift by the time you're 30 you're going to be one miserable person Now I'm not sure why that is exactly and I'm not exactly sure that that necessarily means that Picking something and sticking to it, which is a form of apprenticeship is better than drifting It depends on what you mean by better But I can tell you that not catalyzing an identity seems to be a mistake and it's a fatal mistake by the time you're 40 It's very very difficult to recover from it at that point because You're not young anymore at that point and if you try to catalyze an identity at that time Which sometimes can happen you're competing with all these like young shiny people and it's not who are much more full of Potential from the perspective of an employer for example, then you are it gets pretty dismal


They are political thinking for the love and affection they give me. People of why not are like my family.  In one family, brother and sister might have slightly different political views. That does not mean that the brother and sister do not love each other, care for each other, respect each other, look after each other. The point of politics is respect of other human beings. Today, the main fight is against the ideology of the RSS and the ideology of the Congress Party. A little bit about how I see this fight. So the BJP people, the Prime Minister, they say one nation, one people, one language, one leader. And this is a fundamental misunderstanding of our country, which is not something imposed from the top. Language is something that comes out from inside the person, inside the heart of the person. To tell a person from Kerala that your language is inferior to what is coming out of your heart, to what is coming out of the heart of a person in Uttar Pradesh. Malayalam is not just a language, it is your link to your civilization. When he is not just being taught how to speak, he is being taught the history of Kerala, the culture of Kerala, the affection, the respect of Kerala. That is what he is being taught. So he is not just being taught how to speak, he is being taught how to listen, he is being taught how to respect. These are all things that come out of communication of the language. It is the same for history, it is the same for culture, it is the same for religion, it is the same for language. These things emerge from inside a person. It is like looking at a bouquet of flowers and telling the red rose that we don't like, that you are red, we want you to be white. It is like saying to a bouquet of flowers that we want every flower to be white, we don't want red flowers, we don't want purple flowers, we don't want yellow flowers, we just want white flowers. And India is like a bouquet of flowers. And every flower has to be respected because every flower promotes the beauty of the bouquet. And this idea that India should have only one leader is an insult to every single young Indian person. Why cannot a young boy or girl who is in her school not be a leader? Why can one of our brothers who is driving the auto rickshaw not be a leader? Why can one of our police people not be a leader? What does this mean? One leader, why one leader? There should be millions of leaders in India. And that is the main difference between us and them. We want to listen to what is in the heart of our people. We want to love and respect their beliefs, their language, their religion, their culture and they want to impose something from the top. We did not get freedom from the British to be colonised by the ideology of the RSS. I would like to also speak a little bit about the local issues here. The issue of man-animal conflict that is causing huge problems to the people of India. The night traffic ban that is also causing huge amount of distress. And I have already told you that we are committed to resolving these problems. I have written multiple times on these issues to our chief minister to the central government. And we will continue to put pressure on them. It is a complicated issue but we are going to resolve this issue with you together. Thank you very much. I was telling Venugopal when I landed today that whenever I am going towards, why not, I feel I am going to my house. Now I am going to pressurise my mother to come here and stay with you for one week or ten days. Ten days. I would tell her to come for one month but she has slight problem with humidity. But I told her that you are missing the most beautiful place on earth. Finally there is also the issue of Nilampur Railway. And that is very easy when we come to power in Delhi. That is very easy for us to do. The reality is that because we are not in government in Delhi and we are not in government in Kerala, both these governments are doing step motherly treatment to Vaila. This is a fact. And we are going to come to power both in Delhi and in Kerala and we are going to resolve this issue for you. And finally you know one thing I don't understand. I understand that the night man is a complex issue. It's true. I understand man and animal conflict is a complex issue but medical college is a simple issue. It's very easy to resolve. And I have written so many times to the chief minister, please resolve this issue. This is not such a complicated issue but for some reason it just keeps getting postponed, slowed down and this is really not fair. So again it's not a simple issue. It's a serious grave issue. No, it's a very grave issue but it's an easy issue to resolve. But for some reason it's not happening.  And frankly for the Kerala government it is a two minute job. Thank you. Thank you.


So, you do testing for all your projects, right? I usually create a new issue, assign it to you, and then magically overnight my tests get written. It's the most wonderful thing. Yeah, for you. So, we did a previous episode on unit testing with things like Marker, and we looked at a whole other host of other ones. What do you think of when someone says unit testing to you?  Like there's an entire minefield. Yeah, so this is kind of I think the biggest issue that I have a lot of this stuff. Like when I first got into unit testing, it was like Marker and it was in the terminal and you get used to this thing of like this test pass, this one failed. And that was all cool, but it's JavaScript, it's not in the browser. You don't have the browser API, so it's a bit of me that got confused. It was like, well, okay, do I have to edit my code to be separate so it can run in Node even though it's going to run in a browser or what. That's kind of been cleared up because obviously with Marker you can run in the browser, which makes a bit more sense if you're building a browser library and you need those APIs. But there was always this weird tension because a lot of the work I've been doing super recently, I actually got to a point where Node, I was mocking out a lot of the browser APIs, largely to make the test super fast and super reliable because basically nothing was real. Everything was fake in a facade. So you don't have access to Windows, you don't have access to any of those APIs, do you? Yes, you end up kind of doing one or two things. Either you run it inside the browser with the Marker stuff and it will actually use those APIs, which for the most part are fine, it's good because if there's any browser differences, you get them. Or you mock all of them out, which means it's completely fake. It's normally super fast because it's not actually doing any work. You normally go, in this case, pass and this takes through an error and there. But it still kind of always confused me, like, okay, so I have these two things, but it doesn't feel like this is good on an ongoing basis because if I don't run the tests, nothing happens. So that's when we get into the Selenium world and it gets super interesting slash weird depending on how you do it. So for anyone who doesn't know, Selenium WebDriver is a way of launching a browser and controlling it. It's the most generic way of putting it. They have a ton of different versions, but this is the JavaScript Node version I've come to know and love. Let's look at super basic bare bones Selenium script. And this is it. So this is a Node version. Selenium has a ton of different libraries, which also doesn't help because documentation is so much stuff. But in the most bare bones thing, you create what's known as a WebDriver builder. At that point, you can basically say, okay, with the builder, I want it to be a Chrome browser. Or I want to do this and then you can bolt on additional things. You say, build me a driver. And from that point, that is basically, you can kind of think of it as like an instance of a browser. So that's what we got here. At that point, you can just start using it. So if we call get, in this case, I'm going to launch my Mocha test because we want to automate all of that stuff. We don't want to worry about it. And then we are going to say, wait until something happens. In this case, we're going to say, wait until Mocha results becomes a thing on the actual thing inside the window. And then get the Mocha results and do something useful for them. So this is like a really basic kind of Selenium thing, but it's already super helpful. So if you're going to run this, I'm just going to run it with Node, Test Selenium. You're just going to nod along when I'm just talking to myself. I'm just going to nod along. I assume you know what you're doing. Yeah. That's the safest way of doing it. So all it's doing, and you can kind of see it, is Chrome pops off and then it closes. And you briefly see the Mocha test running. This is super basic, but it's super nice because it means that you could put this, like because it's just a Node script, you can put it in MPM run or you could add it to Travis. You can do whatever you want. It's super nice and clean. The problem I always had with this approach is it gets super manual really quick when you want like Chrome and Firefox. So I created this thing called Selenium Assistant. And its entire thing was like, just tell me what browsers are available and then just give me all of those in a WebDriver thingy and then run it. Yeah. So it's kind of weird because you get available browsers and it can give you like stable, beta and unstable. We've done so much stuff with service workers and like brand new APIs that you wanted to test on all those ones because you knew breaking changes were coming in. Oh yeah. It's almost impossible to manually stay on top of testing that stuff. Yeah. So I built this thing and that's all it does is just simplify all those things. And in this case, I've kind of merged the two. So if we do it super raw with just Selenium Assistant, what it's going to do is we're going to get all the available browsers, open them up, go through the same steps of running Chrome and then return it. And that's super cool because you get into this super weird world where suddenly browsers open and close, open and close, open and close. And then you see it go into Firefox and then it's open and close, open and close. There's still one more big issue. It's almost as if you enjoy chaos. Well, it's great when it works. It's getting to that point. You have this mocker environment where everything builds, runs and it either passes or fails. Selenium just gives you the piece that opens up the browser. It doesn't actually give you the pass, fail. Like Selenium can open, do all those things. Things can go horribly wrong and it just goes, well, I don't care. And the worst thing with that is if you have a Selenium test and something goes wrong, Selenium doesn't quit. It doesn't close that browser. So you end up with a desktop full of like 20 different browsers opened simultaneously. The way around that is you kind of end up mashing mocker and Selenium together. And then you get super trippy inception where you've got mocker running your Selenium test, which is running mocker in the browser to then report back to your mocker Selenium thing. Which is what I'm doing here because you know what? That's true chaos and that's what you need. And it's kind of interesting. So you get the available browsers and you say add mocker tests for each individual browser. So we got for each add mocker tests. Inside of this, we're then saying, right, describe a new test suite. And then before each one, get the Selenium driver. So that's doing the builder stuff for me. And then after each, I just want to make sure I call quit on that browser. Because without that, like I say, especially when you start working on this, if you don't exit at the end, it's going to suck. So mocker tests, Selenium mocker system. And this time it's going to open the browser, listen for the results and come back, whether it works or not. But I've also added an additional step to this one where because we're now in mocker, we can do individual tests. I have that bunch of tests. It's like open the browser mocker, run through all the tests, the unit tests, and then I've added one on the end, which is like, okay, load another page, click on the about link, check that it actually went to the about page. And this is kind of the interesting thing with mockers. You start getting into more, which I think you'd class as an integration test. It's like, make sure the behavior is the actual end thing that I'm expecting. And I call them integration tests or kind of label them differently to kind of highlight the fact they're going to be long. Because I think that's part of the point is unit testing is going to be super fast, super reliable, which is why I'm kind of like, you could mock it out and it makes sense. Integration tests are the big, the long, scary, can take a while kind of things. And there's a ton of ways you can skin both of these cats. But I think it makes a lot of sense. So the super basic integration test, in this case, my website, I'm looking for a particular link, which I'm like executing in the page, clicking it, and then at the very end I'm just saying, okay, wait until the document title is actually what I expect it to be. How well does all this stuff play with ServiceWorker? So that's where I ended up getting into Selenium stuff because I was writing a marker test in the browser and that was great because it meant a really repetitive way of running tests against ServiceWorker APIs. And it was the only way of doing it in the same way, especially when you're learning because there's lots of edge cases. It was the then running them in each individual browser and repeatedly doing it, as well as then running it in the CI. You need all of that in a node script, which is why I landed on Mocha afterwards because you kick it off on the node side and then it's just JavaScript. And you're not testing any node stuff. You're only using Selenium to launch the browser, do certain things. And plus having that step where you can then launch it, perform certain tasks on a demo page. Right. And then check what the response is from the browser is insanely helpful, especially for figuring out like any possible browser differences or bugs in each one, of which there was many back in the day. So that's where I'm at. And I think I'm now starting to try and delineate between unit testing and integration tests because with Selenium, you are instantly in flaky territory. Like, WebDriver just does random stuff because of roles and funsies. Define random stuff. It will just... So the worst thing with a lot of this stuff is you will randomly get one browser updating and it will not work with its current version of its WebDriver equivalent. Your CI kind of goes out the window at that point. But it will often come up with a fix sooner or later. And it's very rare that that will land on stable releases. But there are just times where, let's say you're using Express or some other node modules start a local server. If for whatever reason the browser talking to Express causes an issue and something breaks, it breaks. And that may be a once-in-a-lifetime opportunity on the CI that you will never see again. So I'm finding I'm adding retries a lot for Selenium WebDriver tests. And generally that weeds out a lot of issues to the point where you're like, this is actually a bug on my code. What's the typical number of retries? I've been landing on like three. Okay. And that's just largely because nine times out of ten it's because I'm using like... I'm even going so far with integration tests of like testing against real-life networks. Like, you think of push. You need the browser to talk to like, whatever push servers they're going to talk to and then get a network response. And if that, like, if for whatever reason the CI's internet connection is broken that means my test is going to fail. It's going to get so far and then die. I think you've been tackling some of the sort of bleeding edge around unit testing dealing with service worker dealing with push and all of those other newer platform APIs. I don't think it's bleeding edge testing. I think it's just I've been testing a lot of bleeding edge which is why I'm reaching a lot of these weird situations and it's also the reason why I'm finding it so useful. Because the main thing is if I build these things I also don't want to babysit them. Because you just lumber me with an issue that I then don't want to have to keep on looking after. I just want you to deal with it. That's not going to happen. Yeah, I know. But it's interesting, I think everyone should be looking at this stuff and playing around with it. I definitely, like the next step for me is looking at like services like browser stack and Source Labs which I think now that I understand Selenium I'm at that point where I can appreciate what Source Labs does for me. But I think that's the interesting thing is I feel like everyone who does this starts off raw Selenium goes through the pain, realizes there's abstractions that exist and they want to use. And then they get to this point where they can do like follow up totally tooling tips episode on that topic. Boom.


Autistic meltdowns can happen for many reasons, but this has to be one of the worst ones I've experienced. Being forced into a meltdown by a partner, and yes, you can be forced into a meltdown.