Secret metadata: name: {{ template "minio.secretName" . }} namespace: {{ .Release.Namespace | quote }} labels: app: {{ template "minio.name" . }} chart: {{ template "minio.chart" . }} release: {{ .Release.Name }} heritage: {{ .Release.Service }} type: Opaque data: rootUser: {{ include "minio.root.username" . | b64enc | quote }} rootPassword: {{ include "minio.root.password" . | b64enc | quote }} {{- if .Values.etcd.clientCert }} etcd_client.crt: {{ .Values.etcd.clientCert | toString | b64enc | quote }}...

.Values.existingSecret }} apiVersion: v1 kind: Secret metadata: name: {{ template "minio.secretName" . }} labels: app: {{ template "minio.name" . }} chart: {{ template "minio.chart" . }} release: {{ .Release.Name }} heritage: {{ .Release.Service }} type: Opaque data: rootUser: {{ include "minio.root.username" . | b64enc | quote }} rootPassword: {{ include "minio.root.password" . | b64enc | quote }} {{- if .Values.etcd.clientCert }} etcd_client.crt: {{ .Values.etcd.clientCert | toString | b64enc | quote }}...

- Added alpha field storageVersionHash to the discovery document for each resource. Its value must be treated as opaque by clients. Only equality comparison on the value is valid. ([#73191](https://github.com/kubernetes/kubernetes/pull/73191), [@caesarxuchao](https://github.com/caesarxuchao))

////

Si celui-ci montre le binaire `pip` à `env/bin/pip`, alors ça a fonctionné. 🎉



/// tip

Chaque fois que vous installez un nouveau paquet avec `pip` sous cet environnement, activez à nouveau l'environnement.

Cela permet de s'assurer que si vous utilisez un programme terminal installé par ce paquet (comme `flit`), vous utilisez celui de votre environnement local et pas un autre qui pourrait être installé globalement.

///

    # Return some error
    ...
```

Porém, ao utilizar o `secrets.compare_digest()`, isso estará seguro contra um tipo de ataque chamado "timing attacks" (ataques de temporização).

### Ataques de Temporização

Mas o que é um "timing attack" (ataque de temporização)?

Vamos imaginar que alguns invasores estão tentando adivinhar o usuário e a senha.

pkg image, method (*Uniform) Opaque() bool
pkg image, method (*Uniform) RGBA() (uint32, uint32, uint32, uint32)
pkg image, method (*YCbCr) At(int, int) color.Color
pkg image, method (*YCbCr) Bounds() Rectangle
pkg image, method (*YCbCr) COffset(int, int) int
pkg image, method (*YCbCr) ColorModel() color.Model
pkg image, method (*YCbCr) Opaque() bool
pkg image, method (*YCbCr) SubImage(Rectangle) Image

                        rule: duration(self) >= duration('1ms')
                  type: object
                type: array
              tcp:
                description: An ordered list of route rules for opaque TCP traffic.
                items:
                  properties:
                    match:
                      description: Match conditions to be satisfied for the rule to

- The `storageVersionHash` feature is now beta. `StorageVersionHash` is a field in the discovery document of each resource. It enables clients to detect whether the storage version of that resource has changed. Its value must be treated as opaque by clients. Only equality comparison on the value is valid. ([#78325](https://github.com/kubernetes/kubernetes/pull/78325), [@caesarxuchao](https://github.com/caesarxuchao))

*   Opaque integer resources (OIR), which were (deprecated in v1.8.), have been removed. ([#55103](https://github.com/kubernetes/kubernetes/pull/55103),[ @ConnorDoyle](https://github.com/ConnorDoyle))

### **Storage**

Então, durante esse tempo, o computador pode ir e fazer outro trabalho, enquanto o "arquivo lento" 📝 termine.

Então o computador / programa 🤖 irá voltar toda hora que tiver uma chance porquê ele ainda está esperando o "arquivo lento", ou ele 🤖 nunca irá terminar todo o trabalho que tem até esse ponto. E ele 🤖 irá ver se alguma das tarefas que estava esperando já terminaram, fazendo o que quer que tinham que fazer.