cwielenb/CNCF-Dataset huggingface dataset:
Project: ArangoDB (App Definition and Development / Database)
File: is_error_type.md

+++ title = "`iserrortype<E>`" description = "A customisable integral constant type true for `E` types which are to receive error throwing no-value policies." +++ A customisable integral constant type true for `E` types which are to receive error throwing no-value policies. Special weakened implicit construction enable is available for integral `T` types when combined with `E` types in this whitelist -- this permits `boostresult<int, boost::system::errc::errct` to retain its implicit constructors, despite the fact that `errc_t` as a C enum has an implicit conversion to `int`. Overridable: By template specialisation into the `trait` namespace. Default: False. Specialisations to true exist for: `<boost/outcome/boost_result.hpp>` `boost::system::error_code` `boost::system::errc::errc_t` `boost::exception_ptr` `<boost/outcome/std_result.hpp>` `std::error_code` `std::errc` `std::exception_ptr` Namespace: `BOOSTOUTCOMEV2_NAMESPACE::trait` Header: `<boost/outcome/trait.hpp>`
Project: KubeBlocks by ApeCloud (App Definition and Development / Database)
File: kbcli_report.md

title: kbcli report report kubeblocks or cluster info. ``` -h, --help help for report ``` ``` --as string Username to impersonate for the operation. User could be a regular user or a service account in a namespace. --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups. --as-uid string UID to impersonate for the operation. --cache-dir string Default cache directory (default "$HOME/.kube/cache") --certificate-authority string Path to a cert file for the certificate authority --client-certificate string Path to a client certificate file for TLS --client-key string Path to a client key file for TLS --cluster string The name of the kubeconfig cluster to use --context string The name of the kubeconfig context to use --disable-compression If true, opt-out of response compression for all requests to the server --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure --kubeconfig string Path to the kubeconfig file to use for CLI requests. --match-server-version Require server version to match client version -n, --namespace string If present, the namespace scope for this CLI request --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0") -s, --server string The address and port of the Kubernetes API server --tls-server-name string Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used --token string Bearer token for authentication to the API server --user string The name of the kubeconfig user to use ``` - Report Cluster information - Report KubeBlocks information, including deployments, events, logs, etc.
Project: Numaflow (App Definition and Development / Streaming & Messaging)
File: releases.md

You can find the most recent version under . Versions are expressed as `vx.y.z` (for example, `v0.5.3`), where `x` is the major version, `y` is the minor version, and `z` is the patch version, following Semantic Versioning terminology. Numaflow does not use Semantic Versioning. Minor versions may contain breaking changes. Patch versions only contain bug fixes and minor features. There's a `stable` tag, pointing to a latest stable release, usually it is the latest patch version. TBD as Numaflow is under active development. If you want to try out the new features on `main` branch, Numaflow provides nightly build images from `main`, the images are available in the format of `quay.io/numaproj/numaflow:nightly-yyyyMMdd`. Nightly build images expire in 30 days.
Project: Meshery (Provisioning / Automation & Configuration)
File: k3s.md

layout: integration title: K3s subtitle: Collaborative and visual infrastructure as code for K3s image: /assets/img/integrations/k3s/icons/color/k3s-color.svg permalink: extensibility/integrations/k3s docURL: https://docs.meshery.io/extensibility/integrations/k3s description: integrations-category: Platform integrations-subcategory: Kubernetes registrant: Artifact Hub components: featureList: [ "Drag-n-drop cloud native infrastructure designer to configure, model, and deploy your workloads.", "Invite anyone to review and make changes to your private designs.", "Ongoing synchronization of Kubernetes configuration and changes across any number of clusters." ] howItWorks: "Collaborative Infrastructure as Code" howItWorksDetails: "Collaboratively manage infrastructure with your coworkers synchronously sharing the same designs." language: en list: include type: extensibility category: integrations
Project: KubeVela (App Definition and Development / Application Definition & Image Build)
File: lifecycle.eg.md

```yaml apiVersion: core.oam.dev/v1beta1 kind: Application metadata: name: application-with-lifecycle spec: components: name: busybox-runner type: worker properties: image: busybox cmd: sleep '1000' traits: type: lifecycle properties: postStart: exec: command: echo 'hello world' preStop: httpGet: host: "www.aliyun.com" scheme: "HTTPS" port: 443 ```
Project: KICS (Provisioning / Security & Compliance)
File: ffe0fd52-7a8b-4a5c-8fc7-49844418e6c9.md

title: No Stack Policy hide: toc: true navigation: true <style> .highlight .hll { background-color: #ff171742; } .md-content { max-width: 1100px; margin: 0 auto; } </style> Query id: ffe0fd52-7a8b-4a5c-8fc7-49844418e6c9 Query name: No Stack Policy Platform: Ansible Severity: <span style="color:#ff7213">Medium</span> Category: Resource Management URL: AWS CloudFormation Stack should have a stack policy in order to protect stack resources from update actions<br> ```yaml title="Positive test num. 1 - yaml file" hl_lines="2" name: create a stack, pass in the template via an URL amazon.aws.cloudformation: stack_name: "ansible-cloudformation" state: present region: us-east-1 disable_rollback: true template_url: https://s3.amazonaws.com/my-bucket/cloudformation.template template_parameters: KeyName: jmartin DiskType: ephemeral InstanceType: m1.small ClusterSize: 3 tags: Stack: ansible-cloudformation ``` ```yaml title="Negative test num. 1 - yaml file" name: create a stack, pass in the template via an URL amazon.aws.cloudformation: stack_name: ansible-cloudformation stack_policy: wowowowoowow state: present region: us-east-1 disable_rollback: true template_url: https://s3.amazonaws.com/my-bucket/cloudformation.template template_parameters: KeyName: jmartin DiskType: ephemeral InstanceType: m1.small ClusterSize: 3 tags: Stack: ansible-cloudformation ```
Project: Meshery (Provisioning / Automation & Configuration)
File: v0.6.175.md

layout: release date: 2023-11-13 tag: v0.6.175 [Docker-Compose] Update playground docker-compose to include cilium adapter @MUzairS15 (#9342) Fix Setting page crash when adapter is deployed. @MUzairS15 (#9353) [connections] - UI enhancements @senali-d (#9349) [Connections] Fix events for K8S context receipt @MUzairS15 (#9345) [docs] Update Application Management @theBeginner86 (#9335) Thank you to our contributors for making this release possible: @MUzairS15, @leecalcote, @senali-d and @theBeginner86
Project: KubeBlocks by ApeCloud (App Definition and Development / Database)
File: kbcli_cluster_revoke-role.md

title: kbcli cluster revoke-role Revoke role from account ``` kbcli cluster revoke-role [flags] ``` ``` kbcli cluster revoke-role CLUSTERNAME --component COMPNAME --name USERNAME --role ROLENAME kbcli cluster revoke-role CLUSTERNAME --name USERNAME --role ROLENAME kbcli cluster revoke-role --instance INSTANCE --name USERNAME --role ROLENAME ``` ``` --component string Specify the name of component to be connected. If not specified, pick the first one. -h, --help help for revoke-role -i, --instance string Specify the name of instance to be connected. --name string Required user name, please specify it. -r, --role string Role name should be one of [SUPERUSER, READWRITE, READONLY]. ``` ``` --as string Username to impersonate for the operation. User could be a regular user or a service account in a namespace. --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups. --as-uid string UID to impersonate for the operation. --cache-dir string Default cache directory (default "$HOME/.kube/cache") --certificate-authority string Path to a cert file for the certificate authority --client-certificate string Path to a client certificate file for TLS --client-key string Path to a client key file for TLS --cluster string The name of the kubeconfig cluster to use --context string The name of the kubeconfig context to use --disable-compression If true, opt-out of response compression for all requests to the server --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure --kubeconfig string Path to the kubeconfig file to use for CLI requests. --match-server-version Require server version to match client version -n, --namespace string If present, the namespace scope for this CLI request --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0") -s, --server string The address and port of the Kubernetes API server --tls-server-name string Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used --token string Bearer token for authentication to the API server --user string The name of the kubeconfig user to use ``` - Cluster command.
Project: Operator Framework (App Definition and Development / Application Definition & Image Build)
File: max_concurrent_reconciles.md

title: Maximum Concurrent Reconciles in Helm-based Operators linkTitle: Maximum Concurrent Reconciles weight: 200 description: Increase concurrency of custom reconciliation to scale your operator to large clusters. Depending on the number of CRs your operator is managing, it might be necessary to tune the maximum number of concurrent reconciles to ensure timely reconciliations. The `--max-concurrent-reconciles` flag can be used to override the default max concurrent reconciles, which by default is the number of CPUs on the node on which the operator is running. For example: ```sh $ cat config/manager/manager.yaml ... spec: containers: args: manager --max-concurrent-reconciles=10 ... ``` While running locally, this flag can also be added to the helm binary. For example, running `helm-operator` binary with the above mentioned flag would give us a similar result: ``` helm-operator --max-concurrent-reconciles=10 ``` NOTE: If you're using the default scaffolding, it is necessary to also apply this change to the `config/default/managerauthproxy_patch.yaml` file. This file is a `kustomize` patch to the operator deployment that configures to require authorization for accessing your operator metrics. When `kustomize` applies this patch, it overrides the args defined in `config/manager/manager.yaml`
Project: KubeBlocks by ApeCloud (App Definition and Development / Database)
File: kbcli_alert_list-smtpserver.md

title: kbcli alert list-smtpserver List alert smtp servers config. ``` kbcli alert list-smtpserver [flags] ``` ``` kbcli alert list-smtpserver ``` ``` -h, --help help for list-smtpserver ``` ``` --as string Username to impersonate for the operation. User could be a regular user or a service account in a namespace. --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups. --as-uid string UID to impersonate for the operation. --cache-dir string Default cache directory (default "$HOME/.kube/cache") --certificate-authority string Path to a cert file for the certificate authority --client-certificate string Path to a client certificate file for TLS --client-key string Path to a client key file for TLS --cluster string The name of the kubeconfig cluster to use --context string The name of the kubeconfig context to use --disable-compression If true, opt-out of response compression for all requests to the server --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure --kubeconfig string Path to the kubeconfig file to use for CLI requests. --match-server-version Require server version to match client version -n, --namespace string If present, the namespace scope for this CLI request --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0") -s, --server string The address and port of the Kubernetes API server --tls-server-name string Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used --token string Bearer token for authentication to the API server --user string The name of the kubeconfig user to use ``` - Manage alert receiver, include add, list and delete receiver.
Project: KOTS (App Definition and Development / Application Definition & Image Build)
File: PULL_REQUEST_TEMPLATE.md

<!-- Thanks for sending a pull request! Here are some tips for you: If this is your first time, please read our contributor guidelines here: https://github.com/replicatedhq/kots/blob/main/CONTRIBUTING.md. Ensure you have added appropriate tests for your PR. For more information read here: https://github.com/replicatedhq/kots/blob/main/CONTRIBUTING.md#testing If the PR is unfinished, please mark it as a draft. --> <!-- *Automatically closes linked issue when PR is merged. Usage: `Fixes #<issue number>`, or `Fixes (paste link of issue)`. --> Fixes # <!-- Any additional special notes for your reviewer. --> <! Please provide minimum instructions for how someone can view/test/verify your changes. --> <!-- If no, just write "NONE" in the release-note block below. If yes, a release note is required: --> ```release-note ``` <!-- If no, just write "NONE" below. If yes, link to the related https://github.com/replicatedhq/kots.io documentation PR: -->
Project: Meshery (Provisioning / Automation & Configuration)
File: v0.5.44.md

layout: release date: 2021-08-09 tag: v0.5.44 Revert "Changed docker compose default location" @navendu-pottekkat (#3824) [UI] Implement proxying for websocket requests in development server @sudo-NithishKarthik (#3822) [UI]] [Graphql] Use a single web socket connection for all graphql subscriptions @sudo-NithishKarthik (#3819) Added the unit test for mesheryctl system reset command @sayantan1413 (#3738) [GraphQL] Performance API - Integration frontend react relay @bariqhibat (#3785) Open Test Result Modal by Clicking Calendar Event @CipherGirl (#3815) [mesheryctl] Fix for `mesheryctl start` platform preflight checks @piyushsingariya (#3707) fix syntax error @suhaniii (#3810) Add lint pre-commit check with husky @sudo-NithishKarthik (#3704) Thank you to our contributors for making this release possible: @CipherGirl, @bariqhibat, @dhruv0000, @leecalcote, @navendu-pottekkat, @piyushsingariya, @sayantan1413, @sudo-NithishKarthik and @suhaniii
Project: KubeBlocks by ApeCloud (App Definition and Development / Database)
File: kbcli_cluster_list.md

title: kbcli cluster list List clusters. ``` kbcli cluster list [NAME] [flags] ``` ``` kbcli cluster list kbcli cluster list mycluster kbcli cluster list mycluster -o yaml kbcli cluster list mycluster -o json kbcli cluster list mycluster -o wide ``` ``` -A, --all-namespaces If present, list the requested object(s) across all namespaces. Namespace in current context is ignored even if specified with --namespace. -h, --help help for list -o, --output format prints the output in the specified format. Allowed values: table, json, yaml, wide (default table) -l, --selector string Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints. --show-labels When printing, show all labels as the last column (default hide labels column) ``` ``` --as string Username to impersonate for the operation. User could be a regular user or a service account in a namespace. --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups. --as-uid string UID to impersonate for the operation. --cache-dir string Default cache directory (default "$HOME/.kube/cache") --certificate-authority string Path to a cert file for the certificate authority --client-certificate string Path to a client certificate file for TLS --client-key string Path to a client key file for TLS --cluster string The name of the kubeconfig cluster to use --context string The name of the kubeconfig context to use --disable-compression If true, opt-out of response compression for all requests to the server --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure --kubeconfig string Path to the kubeconfig file to use for CLI requests. --match-server-version Require server version to match client version -n, --namespace string If present, the namespace scope for this CLI request --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0") -s, --server string The address and port of the Kubernetes API server --tls-server-name string Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used --token string Bearer token for authentication to the API server --user string The name of the kubeconfig user to use ``` - Cluster command.
Project: Grafeas (Provisioning / Security & Compliance)
File: DEVELOPMENT.md

This doc explains the development workflow so you can get started to Grafeas! First, you will need to setup your GitHub account and create a fork: Create Setup [GitHub access via SSH](https://help.github.com/articles/connecting-to-github-with-ssh/) Once you have those, you can iterate on Grafeas: When you're ready, you can ! The Go tools require that you clone the repository to the `src/github.com/grafeas/grafeas` directory in your . To check out this repository: Create your own [fork of this repo](https://help.github.com/articles/fork-a-repo/) Clone it to your machine: ```shell mkdir -p ${GOPATH}/src/github.com/grafeas cd ${GOPATH}/src/github.com/grafeas git clone git@github.com:${YOURGITHUBUSERNAME}/grafeas.git cd grafeas git remote add upstream git@github.com:grafeas/grafeas.git git remote set-url --push upstream no_push ``` _Adding the `upstream` remote sets you up nicely for regularly [syncing your fork](https://help.github.com/articles/syncing-a-fork/)._ Grafeas has unit tests, which can be run with: ```shell make test ``` :warning: These tests will not run correctly unless you have . :warning: Ensure that . :warning: These test require either a running Postgres instance (with appropriate credentials) or having the Postgres bin directory on your system `PATH`. When you have changes you would like to propose to Grafeas, you will need to: Ensure the commit message(s) describe what issue you are fixing and how you are fixing it (include references to if appropriate) Each PR must be reviewed by a maintainer. You may be asked to meet with a member of the core Grafeas team to discuss the PR at high level, before they start the detailed review.
Project: KICS (Provisioning / Security & Compliance)
File: 38c71c00-c177-4cd7-8d36-cd1007cdb190.md

title: Vault Auditing Disabled hide: toc: true navigation: true <style> .highlight .hll { background-color: #ff171742; } .md-content { max-width: 1100px; margin: 0 auto; } </style> Query id: 38c71c00-c177-4cd7-8d36-cd1007cdb190 Query name: Vault Auditing Disabled Platform: Terraform Severity: <span style="color:#ff7213">Medium</span> Category: Observability URL: Ensure that logging for Azure KeyVault is 'Enabled'<br> ```tf title="Positive test num. 1 - tf file" hl_lines="16" provider "azurerm" { features { key_vault { purgesoftdeleteondestroy = true } } } data "azurermclientconfig" "current" {} resource "azurermresourcegroup" "example" { name = "resourceGroup1" location = "West US" } resource "azurermkeyvault" "example1" { name = "testvault" location = azurermresourcegroup.example.location resourcegroupname = azurermresourcegroup.example.name enabledfordisk_encryption = true tenantid = data.azurermclientconfig.current.tenantid softdeleteenabled = true softdeleteretention_days = 7 purgeprotectionenabled = false sku_name = "standard" access_policy { tenantid = data.azurermclientconfig.current.tenantid objectid = data.azurermclientconfig.current.objectid key_permissions = [ "get", ] secret_permissions = [ "get", ] storage_permissions = [ "get", ] } network_acls { default_action = "Deny" bypass = "AzureServices" } tags = { environment = "Testing" } } ``` ```tf title="Negative test num. 1 - tf file" provider "azurerm" { features { key_vault { purgesoftdeleteondestroy = true } } } data "azurermclientconfig" "current" {} resource "azurermresourcegroup" "example" { name = "resourceGroup1" location = "West US" } resource "azurermmonitordiagnostic_setting" "example" { name = "example" targetresourceid = data.azurermkeyvault.example.id storageaccountid = data.azurermstorageaccount.example.id log { category = "AuditEvent" enabled = false retention_policy { enabled = false } } metric { category = "AllMetrics" retention_policy { enabled = false } } } resource "azurermkeyvault" "example" { name = "testvault" location = azurermresourcegroup.example.location resourcegroupname = azurermresourcegroup.example.name enabledfordisk_encryption = true tenantid = data.azurermclientconfig.current.tenantid softdeleteenabled = true softdeleteretention_days = 7 purgeprotectionenabled = false sku_name = "standard" access_policy { tenantid = data.azurermclientconfig.current.tenantid objectid = data.azurermclientconfig.current.objectid key_permissions = [ "get", ] secret_permissions = [ "get", ] storage_permissions = [ "get", ] } network_acls { default_action = "Deny" bypass = "AzureServices" } tags = { environment = "Testing" } } ```