Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions .github/workflows/ci.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -693,6 +693,9 @@ jobs:
env:
EXTRA: cpu
HF_TOKEN: ${{ secrets.HF_TOKEN }}
NMP_FILES_HF_RETRY_ATTEMPTS: "7"
NMP_FILES_HF_RETRY_INITIAL_DELAY_SECONDS: "1"
NMP_FILES_HF_RETRY_MAX_DELAY_SECONDS: "30"
PYTEST_WORKERS: "4"
_TYPER_FORCE_DISABLE_TERMINAL: "1"
- name: Upload test artifacts
Expand Down Expand Up @@ -855,6 +858,9 @@ jobs:
E2E_SERVICES_LOG_DIR: ${{ runner.temp }}/e2e-services-logs
NGC_API_KEY: ${{ secrets.NGC_REGISTRY_READ_TOKEN }}
HF_TOKEN: ${{ secrets.HF_TOKEN }}
NMP_FILES_HF_RETRY_ATTEMPTS: "7"
NMP_FILES_HF_RETRY_INITIAL_DELAY_SECONDS: "1"
NMP_FILES_HF_RETRY_MAX_DELAY_SECONDS: "30"
- name: Dump server logs
if: always()
run: |
Expand Down
6 changes: 6 additions & 0 deletions docs/set-up/config-reference.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -188,6 +188,12 @@ files:
file_lock_ttl_seconds: 300
# Maximum concurrent downloads during cache warming | default: 3
cache_warming_max_concurrent: 3
# Maximum Hugging Face request attempts for transient failures. | default: 4
hf_retry_attempts: 4
# Initial Hugging Face retry delay in seconds before exponential backoff. | default: 0.5
hf_retry_initial_delay_seconds: 0.5
# Maximum Hugging Face retry delay in seconds. | default: 5.0
hf_retry_max_delay_seconds: 5.0
```

### `inference_gateway`
Expand Down
2 changes: 2 additions & 0 deletions sdk/python/nemo-platform/.nmpcontext/stainless.yaml

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

This file was deleted.

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 2 additions & 0 deletions sdk/stainless.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -927,3 +927,5 @@ resources:
experiment_session_responses_page: ExperimentSessionResponsesPage
methods:
list: get /apis/intake/v2/workspaces/{workspace}/experiments/{name}/sessions
methods:
create: post /apis/auth/v2/authz/{entrypoint}
Original file line number Diff line number Diff line change
Expand Up @@ -321,6 +321,7 @@ authz:
description: "Read and write access to workspace resources"
includes: ["Viewer"]
permissions:
- auth.authz.create

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Undeclared permission key in role grant.

Editor now grants auth.authz.create, but authz.permissions has no auth.authz.create entry. This breaks the policy’s own registry contract and can make the grant ineffective or inconsistent at evaluation time.

Suggested fix
 authz:
   permissions:
+    auth:
+      authz:
+        create:
+          description: "Create authorization resources"
+          # set explicitly based on enforcement path:
+          # has_endpoint: false
     entities:
       create:
         description: "Create entities"
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@services/core/auth/src/nmp/core/auth/assets/static-authz.yaml` at line 324,
The permission key `auth.authz.create` is being granted in the `Editor` role but
is not declared in the `authz.permissions` registry section of the YAML file.
Add a declaration for the `auth.authz.create` permission in the
`authz.permissions` section to ensure consistency with the policy's registry
contract and prevent evaluation-time issues. The new permission entry should
follow the same format and structure as existing permission declarations in that
section.

- filesets.create
- filesets.delete
- filesets.update
Expand Down
Loading
Loading