cwielenb/CNCF-Dataset huggingface dataset:
Project: Salt Project (Provisioning / Automation & Configuration)
File: 3005.1.md

(_release-3005-1)= Version 3005.1 is a bug fix release for . Fix arch parsing issue in apt source files (#62247) Fixed parsing CDROM apt sources (#62474) Use str() method instead of repo_line for when python3-apt is installed or not in aptpkg.py. (#62546) Remove the connectiontimeout from netmikoconnectionargs before netmikoconnectionargs is added to context_ which is passed along to the Netmiko library. (#62547) fixes #62553 by checking for disabled master_type before starting master connection and skipping it if set. (#62553) Fix runas with cmd module when using the onedir bundled packages (#62565) Fix the Pyinstaller hooks to preserve the environment if None is passed. (#62567, #62628) pkgrepo.managed sets wrong permissions on keys installed to /etc/apt/keyring (#62569) pkgrepo.managed creates zero byte gpg files when dearmoring contents to the same filename (#62570) Ensure default values for IPC Buffers are correct type (#62591) Fix a hang on salt-ssh when using sudo. (#62603) Renderers now have access to the correct set of salt functions. (#62610, #62620) Fix including Jinja template from absolute path (#62611) include jmespath in package requirements (#62613) Fix pkgrepo.managed signed-by in test=true mode (#62662) Ensure the status of the service is captured when the beacon function is called, even when the event is not being emitted. (#62675) The sub proxies controlled by Deltaproxy need to have their own reqchannel otherwise there are timeout exceptions when the masterreqchannelpayload is fired and reacted on. (#62708)
Project: KICS (Provisioning / Security & Compliance)
File: 77c1fa3f-83dc-4c9d-bfed-e1d0cc8fd9dc.md

title: Cloud Storage Bucket Is Publicly Accessible hide: toc: true navigation: true <style> .highlight .hll { background-color: #ff171742; } .md-content { max-width: 1100px; margin: 0 auto; } </style> Query id: 77c1fa3f-83dc-4c9d-bfed-e1d0cc8fd9dc Query name: Cloud Storage Bucket Is Publicly Accessible Platform: GoogleDeploymentManager Severity: <span style="color:#ff7213">Medium</span> Category: Access Control URL: Cloud Storage Bucket is anonymously or publicly accessible<br> ```yaml title="Positive test num. 1 - yaml file" hl_lines="5" resources: name: bucket-access-control type: storage.v1.bucketAccessControl properties: entity: allUsers ``` ```yaml title="Positive test num. 2 - yaml file" hl_lines="5" resources: name: bucket-access-control type: storage.v1.bucketAccessControl properties: entity: allAuthenticatedUsers ``` ```yaml title="Negative test num. 1 - yaml file" resources: name: bucket-access-control type: storage.v1.bucketAccessControl properties: storageClass: STANDARD location: EUROPE-WEST3 ``` ```yaml title="Negative test num. 2 - yaml file" resources: name: bucket-access-control type: storage.v1.bucketAccessControl properties: storageClass: STANDARD location: EUROPE-WEST3 entity: user-liz@example.com ```
Project: Tremor (App Definition and Development / Streaming & Messaging)
File: script.md

The `Script` rule defines the logical entry point into Tremor's expression oriented scripting language. The scripting langauge can be embedded into queries via the `script` operator. The scripting language is also used to specify configuration of connectors, pipelines, flows, and operators in the query language. A legal script is composed of: An optional set of module comments A sequence of top level expressions. There must be at least one defined. An optional end of stream token This is the top level of the tremor scripting language `tremor`
Project: KICS (Provisioning / Security & Compliance)
File: performance.md

The values below were obtained after scanning 150 open source projects with KICS (1.2.x) covering the supported IaC technologies (c.f., Terraform, Ansible, Kubernetes, Docker, AWS Cloudformation). | IaC Technology | Query Accuracy<sup>1</sup> | Query Coverage<sup>2</sup> | Scanned IaC files | Number of Results | Average Scan Time (s) | Average Project Size (MB) | | : | : | : | : | : | :| : | | Terraform | 99.7% | 46% | 1176 | 709 | 6.6 | 33.4 | | Docker | 98.8% | 68% | 1017 | 5109 | 11 | 0.7 | | Kubernetes | 99.3% | 88.7% | 6089 | 21753 | 7 | 90 | | CloudFormation | 95% | 73% | 1769 | 5343 | 10.2 | 4.8 | | Ansible | 100% | 54% | 3367 | 1320 | 23.3 | 4.1 | <sup>1</sup> Query Accuracy = TP results / results <sup>2</sup> Query Coverage = Query with results / Queries <br/> |Measure | Value | | : | : | | Average Accuracy | 98.6% | | Total Number of Results | 34234 | | Average Query Coverage | 66.4% | | Total Scanned IaC Files | 13418 | | Average Scan Time (s) | 11.2 | | Average Project Size (MB) | 26.6 | Running Kics with `--profiling` flag will log the CPU/MEM metrics used for: Getting Queries Parsing Files Scanning Vulnerabilities Generating Reports Keep in mind that profiling will periodically stop KICS to retrieve the wanted metrics, meaning KICS execution time will increase substantially. Flag: `--profiling CPU` ```text 9:43AM INF Scanning with Keeping Infrastructure as Code Secure dev 9:43AM INF Total CPU usage for get_queries: 6.56s <- 9:43AM INF Inspector initialized, number of queries=1385 9:43AM INF Total CPU usage for get_sources: 200.00ms <- 9:43AM INF Total CPU usage for inspect: 15.43s <- 9:43AM INF Results saved to file results/results.json fileName=results.json 9:43AM INF Results saved to file results/results.sarif fileName=results.sarif 9:43AM INF Results saved to file results/results.html fileName=results.html 9:43AM INF Total CPU usage for generate_report: 290.00ms <- 9:43AM INF Files scanned: 221 9:43AM INF Parsed files: 221 9:43AM INF Queries loaded: 1385 9:43AM INF Queries failed to execute: 0 9:43AM INF Inspector stopped 9:43AM INF Scan duration: 21.1476197s ``` Flag: `--profiling MEM` ```text 9:43AM INF Scanning with Keeping Infrastructure as Code Secure dev 9:43AM INF Total MEM usage for get_queries: 237.96MB <- 9:43AM INF Inspector initialized, number of queries=1385 9:43AM INF Total MEM usage for get_sources: 280.53MB <- 9:43AM INF Total MEM usage for inspect: 335.44MB <- 9:43AM INF Results saved to file results/results.json fileName=results.json 9:43AM INF Results saved to file results/results.sarif fileName=results.sarif 9:43AM INF Results saved to file results/results.html fileName=results.html 9:43AM INF Total MEM usage for generate_report: 333.38MB <- 9:43AM INF Files scanned: 221 9:43AM INF Parsed files: 221 9:43AM INF Queries loaded: 1385 9:43AM INF Queries failed to execute: 0 9:43AM INF Inspector stopped 9:43AM INF Scan duration: 21.1476197s ```
Project: Open Policy Agent (OPA) (Provisioning / Security & Compliance)
File: optoggles.md

title: OPToggles (Open Policy Toggles) labels: category: updates layer: application inventors: permitio code: https://github.com/permitio/OPToggles tutorials: https://optoggles.opal.ac/tutorials/demo OPToggles uses OPA and OPAL to sync open-policy to your frontend with the help of feature flag solutions. OPToggles creates user-targeted feature flags based on the policy rules you defined in OPA and keeps the users updated in real-time with OPAL's real-time policy and policy-data change detection. OPToggles already supports launchdarkly.com and a generic REST API.
Project: DevSpace (App Definition and Development / Application Definition & Image Build)
File: devspace_restart.md

title: "Command - devspace restart" sidebar_label: devspace restart Restarts containers where the sync restart helper is injected ``` devspace restart [flags] ``` ``` Restarts containers where the sync restart helper is injected: devspace restart devspace restart -n my-namespace ``` ``` -c, --container string Container name within pod to restart -h, --help help for restart -l, --label-selector string Comma separated key=value selector list (e.g. release=test) --name string The sync path name to restart --pick Select a pod (default true) --pod string Pod to restart ``` ``` --config string The devspace config file to use --debug Prints the stack trace if an error occurs --disable-profile-activation If true will ignore all profile activations --inactivity-timeout int Minutes the current user is inactive (no mouse or keyboard interaction) until DevSpace will exit automatically. 0 to disable. Only supported on windows and mac operating systems (default 180) --kube-context string The kubernetes context to use -n, --namespace string The kubernetes namespace to use --no-warn If true does not show any warning when deploying into a different namespace or kube-context than before -p, --profile strings The DevSpace profiles to apply. Multiple profiles are applied in the order they are specified --profile-parent strings One or more profiles that should be applied before the specified profile (e.g. devspace dev --profile-parent=base1 --profile-parent=base2 --profile=my-profile) --profile-refresh If true will pull and re-download profile parent sources --restore-vars If true will restore the variables from kubernetes before loading the config --save-vars If true will save the variables to kubernetes after loading the config --silent Run in silent mode and prevents any devspace log output except panics & fatals -s, --switch-context DEPRECATED: Switches and uses the last kube context and namespace that was used to deploy the DevSpace project --var strings Variables to override during execution (e.g. --var=MYVAR=MYVALUE) --vars-secret string The secret to restore/save the variables from/to, if --restore-vars or --save-vars is enabled (default "devspace-vars") ```
Project: SPIRE (Provisioning / Key Management)
File: plugin_agent_workloadattestor_systemd.md

The `systemd` plugin generates selectors based on unit properties of the workloads calling the agent. This plugin does not accept any configuration options. General selectors: | Selector | Value | |-|-| | `systemd:id` | The unit Id of the workload (e.g. `systemd:id:nginx.service`) | | `systemd:fragmentpath` | The unit file path this workload unit was read from (e.g. `systemd:fragmentpath:/lib/systemd/system/nginx.service`) | A sample configuration: ```hcl WorkloadAttestor "systemd" { } ``` This plugin is only supported on Unix systems.
Project: Numaflow (App Definition and Development / Streaming & Messaging)
File: grafana.md

Numaflow provides prometheus metrics on top of which you can build Grafana dashboard to monitor your pipeline. (Pre-requisite) Follow to set up prometheus operator. Follow to install Grafana and visualize metrics. You can customize your own dashboard by selecting metrics that best describe the health of your pipeline. Below is a sample dashboard which includes some basic metrics. To use the sample dashboard, download the corresponding , import(before importing change the uid of the datasource in json, issue ) it to Grafana and use the dropdown menu at top-left of the dashboard to choose which pipeline/vertex/buffer metrics to display.
Project: Apache Spark (App Definition and Development / Streaming & Messaging)
File: sql-ref-syntax-aux-resource-mgmt.md

layout: global title: Resource Management displayTitle: Resource Management license: | Licensed to the Apache Software Foundation (ASF) under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to You under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. * * *
Project: ClickHouse (App Definition and Development / Database)
File: v22.3.14.23-lts.md

sidebar_position: 1 sidebar_label: 2022 Backported in : Fix issue with passing MySQL timeouts for MySQL database engine and MySQL table function. Closes ?notificationreferrerid=NT_kwDOAzsV57MzMDMxNjAzNTY5OjU0MjAzODc5. (). Backported in : - Choose correct aggregation method for LowCardinality with BigInt. (). Backported in : Update cctz to the latest master, update tzdb to 2020e. (). Backported in : Update tzdata to 2022e to support the new timezone changes. Palestine transitions are now Saturdays at 02:00. Simplify three Ukraine zones into one. Jordan and Syria switch from +02/+03 with DST to year-round +03. (https://data.iana.org/time-zones/tzdb/NEWS). This closes . (). Backported in : Fix a bug with projections and the `aggregatefunctionsnullforempty` setting. This bug is very rare and appears only if you enable the `aggregatefunctionsnullforempty` setting in the server's config. This closes . (). Backported in : This closes . (). Add a warning message to release.py script, require release type (). Revert ().
Project: ArangoDB (App Definition and Development / Database)
File: app-go.md

+++ title = "In use" weight = 50 +++ This is how you might now write application code using these three libraries: {{% snippet "finale.cpp" "app_go" %}} The curiosity will be surely the `ext()` markup function, which needs explaining. It was felt important during Outcome's design that `valueorerror` conversions never be implicit, as they almost always represent a transition across an ABI or semantic boundary. They are also usually non-trivial to implement and compile, and it was felt important that the programmer ought to always mark the semantic boundary transition at the point of every use, as considerable amounts of code may execute. How the end user chooses to mark up their code is up to them, however above we use a simple `ext()` function to mark up that the function being called is external to the application. This ticks our box of requiring the documentation, at the point of use, of every transition in failure handling boundaries. Note that we are able to use `TRY` as normal throughout this function. Everything "just works". And most especially note that we never, at any stage, needed to modify the source code of `httplib`, `tidylib` nor `filelib`, nor inject custom things into their namespaces. This entire worked example was achieved solely by `app` based customisation points, and via `convert`.
Project: KCL (Provisioning / Automation & Configuration)
File: E1002.md

KCL will report `KCLTabError` when KCL has a tab and white space syntax error. In KCL, it is forbidden to mix tabs and four spaces in one indentation block. And we recommend only using white spaces or tabs for indentation in the entire KCL project, dont mix them. For example: ```python schema Person: name: str # begin with a tab age: int # begin with four white spaces, ``` The KCL program will cause the following error message. ```shell error[E1001]: InvalidSyntax --> File /syntaxerror/tab/taberror_0/main.k:6:5 | 3 | age: int = 1 | ^ inconsistent use of tabs and spaces in indentation | ``` Possible resolution: Only use a tab or four white spaces in KCL, do not mix them.
Project: KubeDB by AppsCode (App Definition and Development / Database)
File: kubedb-operator_operator.md

title: Kubedb-Operator Operator menu: docs_{{ .version }}: identifier: kubedb-operator-operator name: Kubedb-Operator Operator parent: reference-operator menuname: docs{{ .version }} sectionmenuid: reference Launch KubeDB Provisioner Launch KubeDB Provisioner ``` kubedb-operator operator [flags] ``` ``` --burst int The maximum burst for throttle (default 1000000) --health-probe-bind-address string The address the probe endpoint binds to. (default ":8081") -h, --help help for operator --image-pull-secrets strings Name of image pull secret --insecure-registries strings List of registries to be used without TLS --kubeconfig string Path to kubeconfig file with authorization information (the master location is set by the master flag). --leader-elect Enable leader election for controller manager. Enabling this will ensure there is only one active controller manager. --license-file string Path to license file --master string The address of the Kubernetes API server (overrides any value in kubeconfig) --max-concurrent-reconciles int The maximum number of concurrent reconciles which can be run (default 2) --metrics-bind-address string The address the metric endpoint binds to. (default ":8080") --qps float The maximum QPS to the master from this client (default 1e+06) --readiness-probe-interval duration The time between two consecutive health checks that the operator performs to the database. (default 10s) --resync-period duration If non-zero, will re-list this often. Otherwise, re-list will be delayed aslong as possible (until the upstream source closes the watch or times out. (default 10m0s) ``` ``` --default-seccomp-profile-type string Default seccomp profile --use-kubeapiserver-fqdn-for-aks if true, uses kube-apiserver FQDN for AKS cluster to workaround https://github.com/Azure/AKS/issues/522 (default true) ``` -
Project: Meshery (Provisioning / Automation & Configuration)
File: v0.7.13.md

layout: release date: 2024-01-25 tag: v0.7.13 Add new entry for AYA Innovation Labs as adopter @Yashsharma1911 (#10092) [chore] run `gofmt` on server. @MUzairS15 (#10084) feat: responsive pagination for mesheryctl exp list cmd @RipulHandoo (#10069) [bug/mesheryctl] Fix Import/Onboard @theBeginner86 (#10065) [UI] Update publish catalog request payload @Yashsharma1911 (#10091) [General] - Dark mode issue in transfer modal @senali-d (#10088) add missing tooltip and refactor its styling @sudhanshutech (#10086) Fix CASL typo from actions to action in performance page @Yashsharma1911 (#10087) [Components] Improve default field descriptions @leecalcote (#10067) [bug/mesheryctl] Fix Import/Onboard @theBeginner86 (#10065) Revert "Update error-codes-updater.yaml" @MUzairS15 (#10090) Update error-codes-updater.yaml @MUzairS15 (#10089) add conditional to use token only on master branch for `error-code-util` @MUzairS15 (#10085) use GitHub PAT for checkoing out repo @MUzairS15 (#10083) Bump Screenshot Service version @theBeginner86 (#10081) Update generate_keys.yml @MUzairS15 (#10064) Update generate_keys.yml @MUzairS15 (#10063) [CI] Enhance Keys workflow with published CSV @leecalcote (#10062) [Docs] Error Code Reference Layout @leecalcote (#10075) [CI] Enhance Keys workflow with published CSV @leecalcote (#10062) Thank you to our contributors for making this release possible: @MUzairS15, @RipulHandoo, @Yashsharma1911, @l5io, @leecalcote, @senali-d, @sudhanshutech and @theBeginner86
Project: Meshery (Provisioning / Automation & Configuration)
File: litmus-core.md

layout: integration title: Litmus Chaos subtitle: Collaborative and visual infrastructure as code for Litmus Chaos image: /assets/img/integrations/litmus-core/icons/color/litmus-core-color.svg permalink: extensibility/integrations/litmus-core docURL: https://docs.meshery.io/extensibility/integrations/litmus-core description: integrations-category: Observability and Analysis integrations-subcategory: Chaos Engineering registrant: Artifact Hub components: name: chaos-engine colorIcon: assets/img/integrations/litmus-core/components/chaos-engine/icons/color/chaos-engine-color.svg whiteIcon: assets/img/integrations/litmus-core/components/chaos-engine/icons/white/chaos-engine-white.svg description: name: chaos-result colorIcon: assets/img/integrations/litmus-core/components/chaos-result/icons/color/chaos-result-color.svg whiteIcon: assets/img/integrations/litmus-core/components/chaos-result/icons/white/chaos-result-white.svg description: name: chaos-experiment colorIcon: assets/img/integrations/litmus-core/components/chaos-experiment/icons/color/chaos-experiment-color.svg whiteIcon: assets/img/integrations/litmus-core/components/chaos-experiment/icons/white/chaos-experiment-white.svg description: featureList: [ "Drag-n-drop cloud native infrastructure designer to configure, model, and deploy your workloads.", "Invite anyone to review and make changes to your private designs.", "Ongoing synchronization of Kubernetes configuration and changes across any number of clusters." ] howItWorks: "Collaborative Infrastructure as Code" howItWorksDetails: "Collaboratively manage infrastructure with your coworkers synchronously sharing the same designs." language: en list: include type: extensibility category: integrations
Project: KubeDB by AppsCode (App Definition and Development / Database)
File: CHANGELOG-v2022.08.04-rc.1.md

title: Changelog | KubeDB description: Changelog menu: docs_{{.version}}: identifier: changelog-kubedb-v2022.08.04-rc.1 name: Changelog-v2022.08.04-rc.1 parent: welcome weight: 20220804 product_name: kubedb menuname: docs{{.version}} sectionmenuid: welcome url: /docs/{{.version}}/welcome/changelog-v2022.08.04-rc.1/ aliases: /docs/{{.version}}/CHANGELOG-v2022.08.04-rc.1/ Configure health checker default value (#954) Prepare for release v0.13.0-rc.1 (#98) Update db-client-go (#97) Update .kodiak.toml Update health checker (#96) Prepare for release v0.28.0-rc.1 (#673) Update health checker (#672) Prepare for release v0.4.0-rc.1 (#35) Update health checker (#33) Prepare for release v0.28.0-rc.1 (#596) Update db-client-go (#595) Set default values during reconcile cycle (#594) Update health checker (#593) Prepare for release v2022.08.04-rc.1 (#524) Prepare for release v0.12.0-rc.1 (#163) Update health checker (#162) Prepare for release v0.8.0-rc.1 (#52) Update health checker (#51) Prepare for release v0.21.0-rc.1 (#362) Update health checker (#361) Prepare for release v0.21.0-rc.1 (#500) Update db-client-go (#499) SetDefaults when adding the finalizer (#498) Update health checker (#497) Prepare for release v0.21.0-rc.1 (#487) refactor mysql health checker (#486) Update health checker (#485) Prepare for release v0.6.0-rc.1 (#46) update labels (#45) Update health checker (#43) Prepare for release v0.15.0-rc.1 (#336) Fix Upgrade | Volume Expansion ops request MySQL (#335) Update db-client-go (#334) Update health checker (#332) Fix multiple recommendation creation for same cause for empty phase (#333) Prepare for release v0.15.0-rc.1 (#266) Update health checker (#265) Prepare for release v0.1.0-rc.1 (#9) Update health checker (#8) Acquire license from license-proxyserver if available (#7) Add Percona XtraDB Coordinator (#3) Update to k8s 1.24 toolchain (#5) Update to k8s 1.24 toolchain (#4) Use Go 1.18 (#2) make fmt (#1) Prepare for release v0.12.0-rc.1 (#88) Update health checker (#86) Prepare for release v0.15.0-rc.1 (#232) Update health checker (#231) Prepare for release v0.28.0-rc.1 (#585) Set default values during reconcile cycle (#584) Update health checker (#583) Prepare for release v0.28.0-rc.1 (#10) Update db-client-go (#9) Update health checker (#8) Prepare for release v0.15.0-rc.1 (#245) Update health checker (#244) Prepare for release v0.21.0-rc.1 (#415) Update Health Checker (#414) Update health checker (#413) Prepare for release v0.7.0-rc.1 (#40) Update health checker (#39) Prepare for release v0.15.0-rc.1 (#203) Update db-client-go (#202) Update health checker (#201) Prepare for release v0.4.0-rc.1 (#39) Update db-client-go (#38) Update health checker (#37) Prepare for release v0.13.0-rc.1 (#186) Update db-client-go (#185) Update health checker (#184) Prepare for release v0.4.0-rc.1 (#43) Update db-client-go (#42) Update health checker (#41) Prepare for release v0.4.0-rc.1 (#25) Add Clsuter Topology in PerconaXtraDB (#24)