Abstract: A method of generating container image snapshots includes scanning one or more worker nodes of a container cluster to generate an image set describing container images loaded onto the one or more worker nodes. The method also includes analyzing, by a processing device, the image set to generate an image manifest comprising at least some of the container images in the image set. The method also includes generating a snapshot from the image manifest, wherein the snapshot describes a set of container images to be used to build a new worker node. The method also includes storing the snapshot in a local memory of the container cluster. The method also includes, responsive to an instruction to provision the new worker node, loading the set of container images from the local memory to the new worker node and building a container for each of the container images in the set.

Abstract: A system for generating virtual lane markers of an intersection so that the virtual lane markers are visible to an operator of a vehicle at the intersection. The system includes a remote station having a transceiver, a remote memory module configured to store map data and baseline static paths of vehicles moving through the intersection, and a remote control module configured to broadcast via the transceiver a map message indicating the baseline static paths. A vehicle transceiver is configured to receive the map message. A vehicle control module is configured to generate virtual lane markers through the intersection based on the baseline static paths included with the received map message.

Abstract: Systems and methods for implementing an annotation driven just in time and state-based RBAC policy control are disclosed. The method inserts an annotation into a code base that includes a function. The annotation identifies a resource corresponding to the function. The method compiles the code base into compiled code, which includes inserting, based on the annotation, a first request prior to the function that requests permission to access the resource; and inserting, based on the annotation, a second request subsequent to the function to turn off permission to access the resource. The method then deploys the compiled code to a target environment.

Abstract: The sizes of image files for deploying software in a computing environment can be reduced according to some examples described herein. In one example, a system can identify base image files that each include at least a predefined amount of dependencies relied upon by target software. The system can then select a particular base image file, from the base image files, having a smallest size as compared to a remainder of the base image files. The system can then build a customized image file from the base image file, where the customized image file is configured for deploying the target software to a computing environment.

Abstract: Systems and methods of the disclosure include: identifying, by a cloud resource management system, a cloud resource consumption model associated with one or more cloud resources; generating, by the cloud resource management system, a sequence of instructions implementing a smart contract based on the cloud resource consumption model; sending, to a distributed ledger network, the smart contract; receiving, by the cloud resource management system, cloud resource usage data associated with the one or more cloud resources; and causing, by transmitting a message reflecting the cloud resource usage data to the distributed ledger, the smart contract to be executed.

Abstract: Excessive polling that may result in wasted computing resources and unnecessary network traffic can be avoided using some techniques described herein. In one example, a method can include obtaining historical data indicating execution times associated with computing operations. The method can also include determining polling times to assign to the computing operations by applying a model to the historical data. The method may also include configuring a software application to implement the polling times in relation to polling processes for transmitting requests to execute the computing operations to one or more destinations.

Abstract: Task permissions for software services can be set in a distributed computing environment according to some examples described herein. In one example, a system can determine software services that are included in software products deployable to a user account of a distributed computing environment. The system can determine task permissions to be set in the user account for allowing the software services to execute tasks in the distributed computing environment. The system can generate a list of task permissions by consolidating the task permissions based on predefined rules. The system can then transmit an output indicating the list of task permissions for causing the user account to be configured based on the list of task permissions, to permit the software services to execute the tasks in the distributed computing environment.

Abstract: A roll-over alert system for a vehicle when navigating a curve in a road. The system includes a transceiver, a memory, and a control module. The transceiver is configured to receive a map message including a general curve speed recommendation for the curve. The memory is configured to store the map message and vehicle-specific data relevant to safely navigating the curve. The control module is configured to: (i) calculate a vehicle-specific curve speed based on the vehicle-specific data and the general curve speed recommendation included in the map message; and (ii) generate an alert to an operator of the vehicle when an actual vehicle speed exceeds the vehicle-specific curve speed during navigation of the curve by the vehicle.

Abstract: A remote station including a transceiver, a memory, and a control module. The memory is configured to store baseline static paths and dynamic paths of vehicles through an intersection. The baseline static paths refer to at least one of previous predetermined paths, averaged paths or historical paths. The dynamic paths refer to current detected paths. The control module is configured to: (i) compare the dynamic paths to the baseline static paths; (ii) determine whether there is a statistical significance between the dynamic paths and the baseline static paths; and (iii) when there is a statistical significance between the dynamic paths and the baseline static paths, broadcast via the transceiver an alert message indicating that the intersection may include an obstruction.

Abstract: A system for generating virtual lane markers of an intersection so that the virtual lane markers are visible to an operator of a vehicle at the intersection. The system includes a remote station having a transceiver, a remote memory module configured to store map data and baseline static paths of vehicles moving through the intersection, and a remote control module configured to broadcast via the transceiver a map message indicating the baseline static paths. A vehicle transceiver is configured to receive the map message. A vehicle control module is configured to generate virtual lane markers through the intersection based on the baseline static paths included with the received map message.

Abstract: A shim layer can be incorporated into a container image for intercepting calls between an upper layer and a lower layer of the container image according to some aspects described herein. For example, a system can build an image file that includes a stacked arrangement of layers configured for deploying a software program within a container. The stacked arrangement of layers can include a lower layer including one or more objects. The stacked arrangement of layers can include an upper layer positioned above the lower layer, where the upper layer includes the software program. And the stacked arrangement of layers can include a shim layer positioned between the lower layer and the upper layer. The shim layer can include a shim, which is configured to intercept calls involving the one or more objects from the software program and responsively allow or reject the calls based on control data.

Abstract: Disclosed are systems and methods for scanning a client codebase for vulnerabilities without exposing the client information. An example method includes receiving, from a client computing device, a scan request to scan a set of encrypted client information to identify vulnerabilities applicable to the client information. The method also includes responsive to the scan request, analyzing, by a processing device, the encrypted client information to generate scan results that identify vulnerabilities applicable to the client information, wherein the analyzing is performed without decrypting the client information. The method also includes returning the scan results to the client, wherein the scan results are in encrypted form when the scan results are generated.

Abstract: Systems and methods of the disclosure include: broadcasting, by a cloud resource provisioning component, to a cryptographically-protected distributed ledger, a first transaction comprising a cloud resource request for provisioning a cloud resource; transmitting, to one or more cloud providers, the cloud resource request; receiving, from a first cloud provider of the one or more cloud providers, a first cloud resource offer responsive to the cloud resource request; and broadcasting, to the cryptographically-protected distributed ledger, a second transaction comprising the first cloud resource offer.

Abstract: A path prediction system includes a transceiver, a memory and a control module. The transceiver is configured to receive a map message at a host vehicle, the map message comprising path information of vehicles through an intersection. The memory is configured to store map data including global navigation satellite system information. The control module is configured to (i) determine if the host vehicle is approaching, at or in an intersection based on the map data, (ii) in response to determining that the host vehicle is approaching, at or in the intersection, predict a path of the host vehicle through the intersection based on the path information, and (iii) based on the predicted path of the host vehicle, perform at least one collision warning operation.

Abstract: A pedestrian collision warning system includes a transceiver, a memory and a control module. The transceiver receives a PSM and a map message at a vehicle. The memory stores map data. The control module: based on the messages, determines possible conflict boxes in which the vehicle and a pedestrian are predicted to be in at a same time; based on the map data and the map message, determines a most likely path of the vehicle through the intersection from possible intersection paths; based on the most likely path of the vehicle and the possible conflict boxes, determines whether the vehicle and the pedestrian will be in a possible conflict box at a same time; and in response to determining that the vehicle and the pedestrian will be in a possible conflict box at a same time, alerts an occupant of the vehicle or the pedestrian of a potential collision.

Abstract: A remote station includes a transceiver, a memory and a control module. The memory is configured to store (i) baseline static paths of vehicles moving through an intersection, and (ii) map data. The control module is configured to obtain road obstruction information, based on the baseline static paths and the map data, determine whether the road obstruction information affects one or more of the baseline static paths of the vehicles through the intersection and update the one or more baseline static paths based on the road obstruction information, and broadcast, via the transceiver, a map message indicating the updated one or more baseline static paths.

Abstract: A remote station includes a transceiver, a memory and a control module. The memory is configured to store first path data of vehicles through an intersection. The control module is configured to (i) receive at least one of road obstruction information or current vehicle path information, (ii) update the first path data based on the at least one of the road obstruction information or the current vehicle path information, and (iii) broadcast via the transceiver a first map message including the updated first path data, the map message includes a first plurality of data elements, wherein the first plurality of data elements defining a vehicle path through the intersection.

Abstract: Processing logic may generate metadata in view of monitoring a response of each of a plurality of components of an application to past maintenance tasks, wherein the metadata comprises an expected downtime of a first of the plurality of components of the application and a second expected downtime of a second of the plurality of components of the application in response to the expected downtime of the first of the plurality of components. Processing logic may obtain a notification to perform a maintenance task for a first of the plurality of components. In view of the metadata, processing logic may schedule the maintenance task for the first of the plurality of components to coincide with a second maintenance task of the second of the plurality of components.

Abstract: Excessive polling that may result in wasted computing resources and unnecessary network traffic can be avoided using some techniques described herein. In one example, a method can include obtaining historical data indicating execution times associated with computing operations. The method can also include determining polling times to assign to the computing operations by applying a model to the historical data. The method may also include configuring a software application to implement the polling times in relation to polling processes for transmitting requests to execute the computing operations to one or more destinations.

Abstract: Systems and methods of the disclosure include: receiving, by a cloud resource provisioning component via a cloud provisioning request application programming interface (API), a cloud resource request; storing the cloud resource request on a cryptographically-protected distributed ledger; receiving, from a first cloud provider, a first cloud resource offer responsive to the cloud resource request; and responsive to receiving, from a node of the cryptographically-protected distributed ledger, a notification of validation of the first cloud resource offer with respect to the cloud resource request, causing the first cloud provider to provision a cloud resource specified by the first cloud resource offer.