Abstract: A Custom Resource (CR) is generated within a code repository of a legacy application based on intercepted Application Programming Interface (API) calls to an imperative API of the legacy application. The intercepted API calls relate to a particular type of entity. The CR is defined by a Custom Resource Definition (CRD) associated with the particular type of entity. The CR is one of a plurality of CRs of the code repository that collectively define a correct state of the legacy application. Responsive to a difference between a current state of the legacy application and the correct state of the legacy application, an automated operator makes an imperative API call to the imperative API of the legacy application that modifies the current state of the legacy application to match the correct state of the legacy application.

Abstract: A remote station including a transceiver, a memory, and a control module. The memory is configured to store baseline static paths and dynamic paths of vehicles through an intersection. The baseline static paths refer to at least one of previous predetermined paths, averaged paths or historical paths. The dynamic paths refer to current detected paths. The control module is configured to: (i) compare the dynamic paths to the baseline static paths; (ii) determine whether there is a statistical significance between the dynamic paths and the baseline static paths; and (iii) when there is a statistical significance between the dynamic paths and the baseline static paths, broadcast via the transceiver an alert message indicating that the intersection may include an obstruction.

Abstract: A shim layer can be incorporated into a container image for intercepting calls between an upper layer and a lower layer of the container image according to some aspects described herein. For example, a system can build an image file that includes a stacked arrangement of layers configured for deploying a software program within a container. The stacked arrangement of layers can include a lower layer including one or more objects. The stacked arrangement of layers can include an upper layer positioned above the lower layer, where the upper layer includes the software program. And the stacked arrangement of layers can include a shim layer positioned between the lower layer and the upper layer. The shim layer can include a shim, which is configured to intercept calls involving the one or more objects from the software program and responsively allow or reject the calls based on control data.

Abstract: The technology relates in part to a segmented pipette tip adapter that includes a plurality of plate segments and a junction between adjacent plate segments. Each of the plate segments often includes a proximal surface, a distal surface, edges, one or more nozzles disposed on the proximal surface, and one or more tubular projections disposed on the distal surface. Each of the nozzles often includes a nozzle bore, each of the tubular projections often includes a tubular projection bore, each of the plate segments often includes a plate bore disposed at each of the nozzles, and each nozzle bore often is aligned with a tubular projection bore and a plate bore. Each junction often is between adjacent edges of a pair of adjacent plate segments.

Abstract: Systems and methods of the disclosure include: identifying, by a cloud resource management system, a cloud resource consumption model associated with one or more cloud resources; generating, by the cloud resource management system, a sequence of instructions implementing a smart contract based on the cloud resource consumption model; sending, to a distributed ledger network, the smart contract; receiving, by the cloud resource management system, cloud resource usage data associated with the one or more cloud resources; and causing, by transmitting a message reflecting the cloud resource usage data to the distributed ledger, the smart contract to be executed.

Abstract: A system can be provided for modifying cluster configuration settings using machine learning. For example, the system can determine a numerical value representative of a configuration setting at an active computing cluster. The system can further compute a set of similarity scores using the numerical value. Each similarity score in the set of similar scores can be indicative of a level of similarity of the active computing cluster to each of a set of computing clusters with respect to the configuration setting. The system can further select, based on the set of similarity scores and using a machine learning model, a subset of computing clusters from the set of computing clusters. The system can then generate a recommended modification to the configuration setting based on the subset of computing clusters. Additionally, the system can execute a modification operation to implement the recommended modification to the configuration setting.

Abstract: Systems and methods for implementing an annotation driven just in time and state-based RBAC policy control are disclosed. The method inserts an annotation into a code base that includes a function. The annotation identifies a resource corresponding to the function. The method compiles the code base into compiled code, which includes inserting, based on the annotation, a first request prior to the function that requests permission to access the resource; and inserting, based on the annotation, a second request subsequent to the function to turn off permission to access the resource. The method then deploys the compiled code to a target environment.

Abstract: A path prediction system includes a transceiver, a memory and a control module. The transceiver is configured to receive a map message at a host vehicle, the map message comprising path information of vehicles through an intersection. The memory is configured to store map data including global navigation satellite system information. The control module is configured to (i) determine if the host vehicle is approaching, at or in an intersection based on the map data, (ii) in response to determining that the host vehicle is approaching, at or in the intersection, predict a path of the host vehicle through the intersection based on the path information, and (iii) based on the predicted path of the host vehicle, perform at least one collision warning operation.

Abstract: Some examples of the present disclosure relate to configuration validation for container deployments in a computing environment. In one particular example, a system can receive a request for a deployment of a container. A specification that is associated with the deployment can include a set of resources for running the container and an indicator for a repository storing source code associated with the container. Prior to running the container, the system can access the repository to determine a set of configuration requirements for running the container. The system can then determine a match or a mismatch between the set of resources and the set of configuration requirements. Based on the match or the mismatch, the system can perform an action.

Abstract: A remote station includes a transceiver, a memory and a control module. The memory is configured to store (i) baseline static paths of vehicles moving through an intersection, and (ii) map data. The control module is configured to obtain road obstruction information, based on the baseline static paths and the map data, determine whether the road obstruction information affects one or more of the baseline static paths of the vehicles through the intersection and update the one or more baseline static paths based on the road obstruction information, and broadcast, via the transceiver, a map message indicating the updated one or more baseline static paths.

Abstract: A system can be provided for controlling software application deployment based on resource data for an associated software extension. For example, the system can extract first resource data for a software extension from a code base of the software extension. The software extension can be used to deploy a software application. The system can further install the software extension at one or more computing clusters and can detect resource requests transmitted by the software extension during installation. The system may then generate second resource data for the software extension based on the resource requests. Additionally, the system can deploy, using the software extension, the software application at a computing cluster. The computing cluster can be selected based on the first resource data and the second resource data and the computing cluster can be separate from the one or more computing clusters.

Abstract: A computing system comprising one or more computing devices accesses a container build file comprising a plurality of instructions for building a container image based at least in part on an instruction file that defines an application. The computing system identifies a programming language in which the instruction file was written. The computing system determines that the programming language is a member of a set of programming languages that can be compiled into a WebAssembly (WASM) binary code format. The computing system causes the instruction file to be compiled into the WASM binary code format.

Abstract: The sizes of image files for deploying software in a computing environment can be reduced according to some examples described herein. In one example, a system can identify base image files that each include at least a predefined amount of dependencies relied upon by target software. The system can then select a particular base image file, from the base image files, having a smallest size as compared to a remainder of the base image files. The system can then build a customized image file from the base image file, where the customized image file is configured for deploying the target software to a computing environment.

Abstract: The technology relates in part to a segmented pipette tip adapter that includes a plurality of plate segments and a junction between adjacent plate segments. Each of the plate segments often includes a proximal surface, a distal surface, edges, one or more nozzles disposed on the proximal surface, and one or more tubular projections disposed on the distal surface. Each of the nozzles often includes a nozzle bore, each of the tubular projections often includes a tubular projection bore, each of the plate segments often includes a plate bore disposed at each of the nozzles, and each nozzle bore often is aligned with a tubular projection bore and a plate bore. Each junction often is between adjacent edges of a pair of adjacent plate segments.

Abstract: Aspects of the present disclosure provide systems, methods, apparatus, and computer-readable storage media that support securing code by dynamically inserting digital signatures in target code and maintaining the digital signatures in a linked structure (e.g., a blockchain-type structure).

Abstract: Systems and methods comprising at least one node comprising an application container; a container image associated with the application container; a static analyzer module deployed to analyze the container image, with instructions configured to autonomously parse, code of an application, during compile time of the application, wherein the application is to be deployed in the application container; determine, based on the parsing, for at least one section of the code, at least one module necessary for execution of the at least one section; annotate, the at least one section of the code, based on the determined at least one module; and inject, at least one wrapper around the at least one section of the code, wherein the wrapper adds at least one restriction to an execution of the at least one section at runtime, wherein the restrictions are based on at least one condition.

Abstract: Systems and methods of the disclosure include: broadcasting, by a cloud resource provisioning component, to a cryptographically-protected distributed ledger, a first transaction comprising a cloud resource request for provisioning a cloud resource; transmitting, to one or more cloud providers, the cloud resource request; receiving, from a first cloud provider of the one or more cloud providers, a first cloud resource offer responsive to the cloud resource request; and broadcasting, to the cryptographically-protected distributed ledger, a second transaction comprising the first cloud resource offer.

Abstract: Disclosed are systems and methods for scanning a client codebase for vulnerabilities without exposing the client information. An example method includes receiving, from a client computing device, a scan request to scan a set of encrypted client information to identify vulnerabilities applicable to the client information. The method also includes responsive to the scan request, analyzing, by a processing device, the encrypted client information to generate scan results that identify vulnerabilities applicable to the client information, wherein the analyzing is performed without decrypting the client information. The method also includes returning the scan results to the client, wherein the scan results are in encrypted form when the scan results are generated.

Abstract: A roll-over alert system for a vehicle when navigating a curve in a road. The system includes a transceiver, a memory, and a control module. The transceiver is configured to receive a map message including a general curve speed recommendation for the curve. The memory is configured to store the map message and vehicle-specific data relevant to safely navigating the curve. The control module is configured to: (i) calculate a vehicle-specific curve speed based on the vehicle-specific data and the general curve speed recommendation included in the map message; and (ii) generate an alert to an operator of the vehicle when an actual vehicle speed exceeds the vehicle-specific curve speed during navigation of the curve by the vehicle.