-
Notifications
You must be signed in to change notification settings - Fork 174
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Secure Content from server pod of nvflare==2.1.2 #2420
Comments
@Writam18 that warning show up when users modify the content of fed_server.json AFTER the provision. It is meant to protect users from bad people modifying the content, kind of like a checksum stuff. Right now users need to follow the following steps for a version upgrade:
We will enhance it to be backward compatible in the future releases. |
@YuanTingHsieh Is there a way to resolve this issue without upgrading the nvflare version? This nvflare==2.1.2 was running fine for me for over a year and suddenly this warning started coming up. And upgrading it to nvflare==2.4 will force me to change my scripts everywhere and that will be an overhead. So, is there a way to work with nvflare==2.1.2 and resolve this issue? |
@Writam18 thanks for raising the issue. @IsaacYangSLA @yhwen Do you know is there any way the user can resolve this issue when upgrading from 2.1.2 to 2.4? |
@Writam18 ok, so you want to keep using 2.1.2 for all your servers and clients, I don't see any problems with that. That warning show up when users modify the content of fed_server.json AFTER the provision. You just need to make sure that, your server, clients, overseer and admin client that you are using they are generated using the same version of NVFlare and same project.yml |
The certificates generated by provisioning tools expire after 360 days. @Writam18 , I guess the root CA certificate expired and when server loaded the secure contents and built the certificate chains, the entire chain of trust could not be established. One way to resolve this issue is to re-generate the startup kits of all participants (server, overseer, client and admin). |
I am trying to stimulate an experiment with the NVIDIA FLARE framework on Kubernetes(K8s). I am trying this on a private cluster. I have installed nvflare==2.1.2 on the container used by K8s to create pods.
After creating the overseer, server, and client using provision API the job submission is failing. And I am getting the following error from the server pod.
The following files are not secure content
fed_server.json
This is the following part is added as spec in the server pod.
spec:
containers:
command:
The text was updated successfully, but these errors were encountered: