Platform For AI:FAQ about FeatureStore

• 1. What do I do if the prompt Make sure that you complete authorization before you create a Hologres data store appears when creating a Hologres data store?

• 2. What do I do if the prompt indicating that PrivateLink is not activated when I configure VPC direct connection during the creation of a FeatureDB data source?

• 3. What do I do if the error "Access denied by project vpc white list: vpc:'vpc-xxx' not in vpc white list, ip: 'xxxx'. project: xxx" appears when I perform a MaxCompute-related operation?

• 4. What do I do if the error password authentication failed for user "paifsslr$STS.**********" appears when creating a feature view?

• 5. When creating a feature view, the error "dial tcp: lookup hgpostcn-cn-xxx-cn-xxx.hologres.aliyuncs.com on 192.xxx.x.xx:xx: no such host" appears. How to resolve this issue?

• 6. When creating a feature view, the error "Connect to FE failed, permission denied for database 'ttx'" appears. How to resolve this issue?

• 7. What do I do if the error "ODPS-0110061: Failed to run ddltask - xxxx. ExceptionBase: Schema evolution DDLs is not enabled in current project:xxxx" appears when I delete the feature field during model feature modification?

• 8. How do I push offline feature data to an online data store?

• 9. What do I do if a permission error occurs when I execute the FeatureStore synchronization script in DataWorks?

1. What do I do if the prompt Make sure that you complete authorization before you create a Hologres data store appears when creating a Hologres data store?

Example

Causes:

The following situations may cause the problem:

• The RAM user using FeatureStore is not authorized to use the Hologres instance.

• The RAM user using FeatureStore is not authorized to use the corresponding Hologres database.

• The Hologres instance version is lower than 2.0.18

Solutions:

1. Log on to the Hologres Console.

   1. In the left-side navigation bar, click Instances.

   2. Click the name of the instance to go to the instance details page.

   3. Click Account Management.

   4. On the User Management page, click Add User in the upper right corner.

   5. Select the RAM user using FeatureStore. Then, select Examples of the Super Administrator (SuperUser) or Regular User, and click OK.

2. If the user is granted the Regular User permissions, you need to grant the permission to access the corresponding database.

   1. Go to the instance details page.

   2. Click Database Management.

   3. On the Database Authorization page, click Authorize User in the Actions column of the database.

   4. Click Grant Permissions in the upper right corner.

      

   5. Select the RAM user using FeatureStore and set it as a Developer. Then, click OK.

3. If the problem persists, check whether the Hologres instance version is lower than 2.0.18. If so, upgrade the instance to the latest version.

2. What do I do if the prompt indicating that PrivateLink is not activated when I configure VPC direct connection during the creation of a FeatureDB data source?

Causes:

The virtual private cloud (VPC) direct connection feature relies on PrivateLink. However, PrivateLink is not activated.

Solutions:

To configure VPC direct connection, click Activate Now on the prompt page or activate PrivateLink by referring to Create and manage endpoints.

3. What do I do if the error "Access denied by project vpc white list: vpc:'vpc-xxx' not in vpc white list, ip: 'xxxx'. project: xxx" appears when I perform a MaxCompute-related operation?

Example:

Causes:

The whitelist feature is enabled in the MaxCompute project, and the ID of the VPC in which FeatureStore resides is not added to the whitelist.

Solutions:

1. Log on the MaxCompute console.

2. In the left-side navigation pane, choose Workspace > Projects.

3. Click Manage to the right of the target to access the project details page.

4. In the IP Address Whitelist section of the Parameter Configuration tab, click Edit.

5. Add the ID of the VPC in which FeatureStore resides to the VPC IP Address editor. For more information, see Manage IP address whitelists. The following table describes the mappings between the regions in which FeatureStore resides and the IDs of the VPCs in which FeatureStore resides.

   Region	VPC ID
   China (Hangzhou)	vpc-bp1vacu28qkj1fv6zpkq1
   China (Shanghai)	vpc-uf6rcto3hlh9wjkgcqfbf
   China (Beijing)	vpc-2zexf99g0maxm8jgx3se0
   China (Shenzhen)	vpc-wz96kdcavm40pi6158ibd
   China (Hong Kong)	vpc-j6cr1dmfkjuhu5cz61cl7
   Singapore	vpc-t4nflw68k7pitfq0oe0oh
   US (Silicon Valley)	vpc-rj9suctodeems1xwk6xo9
   US (Virginia)	vpc-0xitg4loq1mi9bjb57em7

4. What do I do if the error password authentication failed for user "paifsslr$STS.**********" appears when creating a feature view?

Example:

password authentication failed for user "paifsslr$STS.**********"

Causes:

The RAM user using FeatureStore is not authorized to use the Hologres instance.

Solutions:

Authorize the RAM user to use the Hologres instance. For more information, see Create a data store.

1. Log on to the Hologres Console.

2. In the left-side navigation bar, click Instances.

3. Click the name of the instance to go to the instance details page.

4. Click Account Management.

5. On the User Management page, click Add User in the upper right corner.

6. Select the RAM user using FeatureStore. Then, select Examples of the Super Administrator (SuperUser) or Regular User, and click OK

7. (Optional) If the user is granted the Regular User permissions, you need to grant the permission to access the corresponding database.

   1. Go to the instance details page.

   2. Click Database Management.

   3. On the Database Authorization page, click Authorize User in the Actions column of the database.

   4. Click Grant Permissions in the upper right corner.

   5. 

   6. Select the RAM user using FeatureStore and set it as a Developer. Then, click OK.

8. (Optional) If the error persists, check whether the RAM user is granted the AliyunHologresFullAccess permission and upgrade the Hologres instance to the latest version.

5. What do I do if the dial tcp: lookup hgpostcn-cn-xxx-cn-xxx.hologres.aliyuncs.com on 192.xxx.x.xx:xx: no such host error appears when creating a feature view?

Example:

Causes:

The following situations may cause the error:

• Public network access is not enabled for the Hologres instance.

• The Hologres instance is not running normally, causing the created data source to be unavailable. For example, the instance may have expired.

Solutions:

1. Log on to the Hologres Console and check whether the Hologres instance is available.

   1. If the instance is available, go to Step 2.

   2. If the instance is not available, go to Step 3.

2. Enable public network access.

   1. In the left-side navigation bar, click Instances.

   2. Click the name of the instance to go to the instance details page.

   3. In the Network Information section, enable Public Network.

      

3. Perform one of the following operations based on the status of the instance.

   1. If the instance has expired, renew the instance and try again. For more information, see Renewal management.

   2. If the instance has been released, create a new Hologres instance first. Then, create a Hologres data store in FeatureStore or update the original data store.

      • If you create a new Hologres data store, you need to create a new FeatureStore project.

      • If you update the original Hologres data store, you can continue using the original FeatureStore project, but the previously created feature views and the associated model features are no longer available. You can delete them if you want to.

6. What do I do if the Connect to FE failed,permission denied for database "ttx" error appears when creating a feature view?

Example:

Causes:

The Hologres database is not authorized.

Solutions:

Authorize the Hologres database. For more information, see Create a data store.

1. Log on to the Hologres Console.

2. In the left-side navigation bar, click Instances.

3. Click the name of the instance to go to the instance details page.

4. Click Database Management.

5. On the Database Authorization page, click Authorize User in the Actions column of the database.

6. Click Grant Permissions in the upper right corner.

7. Select the RAM user using FeatureStore and set it as a Developer. Then, click OK.

7. What do I do if the error "ODPS-0110061: Failed to run ddltask - xxxx. ExceptionBase: Schema evolution DDLs is not enabled in current project:xxxx" appears when I delete the feature field during model feature modification?

Example:

Causes:

To delete the feature field, you must delete the corresponding field from the MaxCompute table. The current MaxCompute project does not support schema evolution.

Solutions:

Run the setproject odps.schema.evolution.enable=true; command based on the prompt information by referring to Error message 1: Schema evolution DDLs is not enabled in current project:xxxx to enable the schema evolution feature. Then, delete the model feature field after 10 minutes.

8. How do I push offline feature data to an online data store?

1. If you only need to push data from a single partition, you can use the data synchronization feature on the Feature View page. Take the following steps:

   1. On the Feature View tab of the Project Details page, click Data Synchronization in the Actions column.

   2. On the page that appears, specify the partition information.

   3. Click Submit and the Synchronization History tab appears, where you can view the status of the data synchronization task.

2. If you need to perform routine data synchronization task daily, take the following steps:

   1. On the Feature View tab of the Project Details page, click Data Synchronization in the Actions column.

   2. On the page that appears, copy the code in the Synchronize Code field.

   3. Log on to the DataWorks Console. In the left-side navigation bar, click Data Development and O&M > Data Development.

   4. Select the DataWorks workspace, and click Go to Data Development.

   5. Move the pointer over Create, and choose Create Node > MaxCompute > PyODPS 3.

   6. Copy the code in the Synchronize Code box to the code editor.

   7. Click Properties on the right side of the tab. In the Properties panel, configure the scheduling parameters that are described in the following table.

      Parameter		Recommended value
      Scheduling Parameter	Parameter Name	dt
      	Parameter Value	$[yyyymmdd-1]
      Resource Group	Resource Group	Select the created exclusive resource group.
      Dependencies		Select the offline table corresponding to the Feature View.

   8. After the node is configured and tested, save and submit the node configurations.

   9. Backfill data for the node. For more information, see Synchronize data tables.

9. What do I do if a permission error occurs when I execute the FeatureStore synchronization script in DataWorks?

Example:

  File "/home/tops/lib/python3.7/site-packages/alibabacloud_tea_openapi/client.py", line 1442, in do_request
    'accessDeniedDetail': self.default_any(err.get('AccessDeniedDetail'), err.get('accessDeniedDetail'))
Tea.exceptions.TeaException: Error: Forbidden.NoPermission code: 403, You are not authorized to do this operation. Action: featurestore:ListInstances;Resource: acs:featurestore:cn-beijing:${ID of the Alibaba Cloud account}:* request id: 2AF6CF28-B894-5119-A677-BE619341F497 Response: {'AccessDeniedDetail': {'AuthAction': 'featurestore:ListInstances', 'AuthPrincipalType': 'SubUser', 'AuthPrincipalOwnerId': '${ID of the Alibaba Cloud account}', 'AuthPrincipalDisplayName': '209226141687598727', 'PolicyType': 'AccountLevelIdentityBasedPolicy', 'NoPermissionType': 'ImplicitDeny', 'EncodedDiagnosticMessage': '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'}, 'RequestId': '2AF6CF28-B894-5119-A677-BE619341F497', 'Message': 'You are not authorized to do this operation. Action: featurestore:ListInstances;Resource: acs:featurestore:cn-beijing:${ID of the Alibaba Cloud account}:*', 'Recommend': 'https://api.aliyun.com/troubleshoot?q=Forbidden.NoPermission&product=PaiFeatureStore&requestId=2AF6CF28-B894-5119-A677-BE619341F497', 'HostId': 'paifeaturestore-vpc.cn-beijing.aliyuncs.com', 'Code': 'Forbidden.NoPermission', 'statusCode': 403}

Causes:

During the routine execution of the FeatureStore synchronization script or export script in DataWorks, the temporarily generated AccessKey ID and AccessKey secret are used. If the DataWorks account does not have the permissions on FeatureStore, the temporarily generated AccessKey ID and AccessKey secret does not have the permissions on FeatureStore. In this case, the permission error will occur when you execute the FeatureStore-related script.

Solutions:

1. Log on to the DataWorks console. In the left-side navigation pane, click Workspace. On the Workspaces page, find the desired workspace and click Manage in the Actions column.

2. In the left-side navigation pane, click Data Sources. Then, find the default MaxCompute data source associated with DataWorks and click Modify in the Operation column to view the default access identity (the account used to run DataWorks).

   

3. Attach the AliyunPAIFeatureStoreFullAccess policy to the corresponding account.

   • Alibaba Cloud account: When you activate Platform for AI (PAI), the Alibaba Cloud account is automatically granted the permissions.

   • RAM user: Use the Alibaba Cloud account to grant the RAM user the permissions.

4. Ensure that the associated cloud services, such as MaxCompute, DataWorks, and Hologres, have the permissions on FeatureStore.

5. (Optional) Add the ID of the VPC in which FeatureStore resides to the whitelist of the associated cloud service.

   • If a cloud service does not configure the whitelist, ignore this step.

   • If the associated cloud services, such as MaxCompute, configure the whitelist, add the ID of the VPC in which FeatureStore resides to the whitelist.

     Region	VPC ID
     cn-beijing	vpc-2zexf99g0maxm8jgx3se0
     cn-hangzhou	vpc-bp1vacu28qkj1fv6zpkq1
     cn-shanghai	vpc-uf6rcto3hlh9wjkgcqfbf
     cn-shenzhen	vpc-wz96kdcavm40pi6158ibd
     cn-hongkong	vpc-j6cr1dmfkjuhu5cz61cl7