cwielenb/CNCF-Dataset huggingface dataset:
Project: external-secrets (Provisioning / Security & Compliance)
File: components.md

hide: toc Exernal Secrets comes with three components: `Core Controller`, `Webhook` and `Cert Controller`. This is due to the need to implement conversion webhooks in order to convert custom resources between api versions and to provide a ValidatingWebhook for the `ExternalSecret` and `SecretStore` resources. These features are optional but highly recommended. You can disable them with helm chart values `certController.create=false` and `webhook.create=false`. <br/> Cert-controller is responsible for (1) generating TLS credentials which will be used by the webhook component and (2) injecting the certificate as `caBundle` into `Kind=CustomResourceDefinition` for conversion webhooks and `Kind=ValidatingWebhookConfiguration` for validating admission webhook. The TLS credentials are stored in a `Kind=Secret` which is consumed by the webhook. {: style="width:70%;"}
Project: Meshery (Provisioning / Automation & Configuration)
File: mesheryctl-exp-workspace-create.md

layout: default title: mesheryctl-exp-workspace-create permalink: reference/mesheryctl/exp/workspace/create redirect_from: reference/mesheryctl/exp/workspace/create/ type: reference display-title: "false" language: en command: exp subcommand: workspace Create a new workspace Create a new workspace by providing the name, description, and organization ID. <pre class='codeblock-pre'> <div class='codeblock'> mesheryctl exp workspace create [flags] </div> </pre> Create a new workspace <pre class='codeblock-pre'> <div class='codeblock'> mesheryctl exp workspace create --orgId [orgId] --name [name] --description [description] </div> </pre> Documentation for workspace can be found at: <pre class='codeblock-pre'> <div class='codeblock'> https://docs.layer5.io/cloud/spaces/workspaces/ </div> </pre> <pre class='codeblock-pre'> <div class='codeblock'> -d, --description string Description of the workspace -h, --help help for create -n, --name string Name of the workspace -o, --orgId string Organization ID </div> </pre> <pre class='codeblock-pre'> <div class='codeblock'> --config string path to config file (default "/home/runner/.meshery/config.yaml") -v, --verbose verbose output </div> </pre> Go back to , if you want to add content manually to the CLI documentation, please refer to the for guidance.
Project: StarRocks (App Definition and Development / Database)
File: var_samp.md

displayed_sidebar: "English" Returns the sample variance of an expression. Since v2.5.10, this function can also be used as a window function. ```Haskell VAR_SAMP(expr) ``` `expr`: the expression. If it is a table column, it must evaluate to TINYINT, SMALLINT, INT, BIGINT, LARGEINT, FLOAT, DOUBLE, or DECIMAL. Returns a DOUBLE value. ```plaintext MySQL > select varsamp(scanrows) from log_statis group by datetime; +--+ | varsamp(`scanrows`) | +--+ | 5.6227132145741789 | +--+ ``` VARSAMP,VARIANCESAMP,VAR,SAMP,VARIANCE
Project: ShardingSphere (App Definition and Development / Database)
File: show-rules-used-storage-unit.en.md

+++ title = "SHOW RULES USED STORAGE UNIT" weight = 12 +++ The `SHOW RULES USED STORAGE UNIT` syntax is used to query the rules for using the specified storage unit in specified database. {{< tabs >}} {{% tab name="Grammar" %}} ```sql ShowRulesUsedStorageUnit ::= 'SHOW' 'RULES' 'USED' 'STORAGE' 'UNIT' storageUnitName ('FROM' databaseName)? storageUnitName ::= identifier databaseName ::= identifier ``` {{% /tab %}} {{% tab name="Railroad diagram" %}} <iframe frameborder="0" name="diagram" id="diagram" width="100%" height="100%"></iframe> {{% /tab %}} {{< /tabs >}} | Columns | Description | |-|| | type | rule type | | name | rule name | When `databaseName` is not specified, the default is the currently used `DATABASE`. If `DATABASE` is not used, `No database selected` will be prompted. Query the rules for using the specified storage unit in specified database ```sql SHOW RULES USED STORAGE UNIT ds1 FROM shardingdb; ``` ```sql mysql> SHOW RULES USED STORAGE UNIT ds1 FROM shardingdb; +++ | type | name | +++ | readwritesplitting | msgroup_0 | | readwritesplitting | msgroup_0 | +++ 2 rows in set (0.01 sec) ``` Query the rules for using the specified storage unit in current database ```sql SHOW RULES USED STORAGE UNIT ds_1; ``` ```sql mysql> SHOW RULES USED STORAGE UNIT ds_1; +++ | type | name | +++ | readwritesplitting | msgroup_0 | | readwritesplitting | msgroup_0 | +++ 2 rows in set (0.01 sec) ``` `SHOW`, `RULES`, `USED`, `STORAGE`, `UNIT`, `FROM`
Project: Podman (App Definition and Development / Application Definition & Image Build)
File: security-opt.image.md

Security Options `apparmor=unconfined` : Turn off apparmor confinement for the container `apparmor=alternate-profile` : Set the apparmor confinement profile for the container `label=user:USER` : Set the label user for the container processes `label=role:ROLE` : Set the label role for the container processes `label=type:TYPE` : Set the label process type for the container processes `label=level:LEVEL` : Set the label level for the container processes `label=filetype:TYPE` : Set the label file type for the container files `label=disable` : Turn off label separation for the container `no-new-privileges` : Not supported `seccomp=unconfined` : Turn off seccomp confinement for the container `seccomp=profile.json` : JSON file to be used as the seccomp filter for the container.
Project: YugabyteDB (App Definition and Development / Database)
File: monitor.md

title: MONITOR linkTitle: MONITOR description: MONITOR menu: preview: parent: api-yedis weight: 2218 aliases: /preview/api/yedis/monitor type: docs `MONITOR` is a debugging tool to see all requests that are being processed by a Yugabyte YEDIS API server. `MONITOR` is a debugging tool to see all requests that are being processed by a Yugabyte YEDIS API server. If there are multiple YEDIS API servers in the system, the command only captures the requests being processed by the server that the client is connected to. A client can issue the `MONITOR` command through the redis-cli. Once the command is issued the server will stream all requests (except `config` commands) that are processed at the server. Returns a status string, followed by an unending stream of commands that are being executed by the YEDIS server. To exit, the client is expected to `Control-C` out. ```sh $ MONITOR ``` ``` "OK" ``` ``` 15319400354.989768 [0 127.0.0.1:37106] "set" "k1" "v1" 15319400357.741004 [0 127.0.0.1:37106] "get" "k1" 15319400361.280308 [0 127.0.0.1:37106] "set" "k2" "v2" 15319400363.819526 [0 127.0.0.1:37106] "get" "v2" 15319400386.887508 [0 127.0.0.1:37106] "select" "2" 15319400392.983032 [2 127.0.0.1:37106] "get" "k1" 15319400405.534111 [2 127.0.0.1:37106] "set" "k1" ```
Project: KubeDB by AppsCode (App Definition and Development / Database)
File: kubectl_plugin.md

title: Uninstall KubeDB kubectl Plugin description: Uninstallation guide for KubeDB kubectl Plugin menu: docs_{{ .version }}: identifier: uninstall-kubedb-kubectl-plugin name: KubeDB kubectl Plugin parent: uninstallation-guide weight: 30 product_name: kubedb menuname: docs{{ .version }} sectionmenuid: setup To uninstall KubeDB `kubectl` plugin, run the following command: ```bash kubectl krew uninstall dba ```
Project: KICS (Provisioning / Security & Compliance)
File: 165aae3b-a56a-48f3-b76d-d2b5083f5b8f.md

title: Serverless Function Without Unique IAM Role hide: toc: true navigation: true <style> .highlight .hll { background-color: #ff171742; } .md-content { max-width: 1100px; margin: 0 auto; } </style> Query id: 165aae3b-a56a-48f3-b76d-d2b5083f5b8f Query name: Serverless Function Without Unique IAM Role Platform: ServerlessFW Severity: <span style="color:#bb2124">High</span> Category: Insecure Configurations URL: Serverless Function should not share IAM Role to ensure it will have the minimum privileges needed to perform the required tasks<br> ```yml title="Positive test num. 1 - yml file" hl_lines="8" service: service frameworkVersion: '2' provider: name: aws runtime: nodejs12.x functions: hello: handler: handler.hello onError: arn:aws:sns:us-east-1:XXXXXX:test tags: foo: bar ``` ```yml title="Positive test num. 2 - yml file" hl_lines="8" service: service frameworkVersion: '2' provider: name: aws runtime: nodejs12.x functions: hello: handler: handler.hello onError: arn:aws:sns:us-east-1:XXXXXX:test tags: foo: bar ``` ```yml title="Negative test num. 1 - yml file" service: service frameworkVersion: '2' provider: name: aws runtime: nodejs12.x functions: hello: handler: handler.hello onError: arn:aws:sns:us-east-1:XXXXXX:test tags: foo: bar role: arn:aws:iam::XXXXXX:role/role ``` ```yml title="Negative test num. 2 - yml file" service: service frameworkVersion: '2' provider: name: aws runtime: nodejs12.x functions: hello: handler: handler.hello onError: arn:aws:sns:us-east-1:XXXXXX:test tags: foo: bar role: arn:aws:iam::XXXXXX:role/role ```
Project: KubeVirt (App Definition and Development / Application Definition & Image Build)
File: RELEASING.md

A Gomega release is a tagged sha and a GitHub release. To cut a release: Ensure CHANGELOG.md is up to date. Use ```bash LAST_VERSION=$(git tag --sort=version:refname | tail -n1) CHANGES=$(git log --pretty=format:'- %s [%h]' HEAD...$LAST_VERSION) echo -e "## NEXT\n\n$CHANGES\n\n### Features\n\n### Fixes\n\n### Maintenance\n\n$(cat CHANGELOG.md)" > CHANGELOG.md ``` to update the changelog Categorize the changes into Breaking Changes (requires a major version) New Features (minor version) Fixes (fix version) Maintenance (which in general should not be mentioned in `CHANGELOG.md` as they have no user impact) Update GOMEGAVERSION in `gomegadsl.go` Commit, push, and release: ``` git commit -m "vM.m.p" git push gh release create "vM.m.p" git fetch --tags origin master `````
Project: Redpanda (App Definition and Development / Streaming & Messaging)
File: 02_feature_request.md

name: Feature request about: Suggest an enhancement to Redpanda labels: "kind/enhance" <!-- Describe the user and relevant workflows Describe the current pain points the user has --> <!-- Describe what the desired outcome looks like Focus on user requirements, not technical implementation Note any requirements specifically out of scope --> <!-- Describe benefit and urgency for the user and Redpanda --> <!-- Relevant GH issues and pull requests Dependencies on other features or components Link to PRD or Eng Proposal as needed -->
Project: VoltDB (App Definition and Development / Database)
File: README.md

ZKDU tool Usage: ./zkdu.sh [optional arguments] Optional Arguments: -h print help only -H connectstring connect to the specified hostname:port (default: 127.0.0.1:7181) -d depth print summary to specified depth -v print the complete list of all znodes and their size Example: ./zkdu.sh Jul 12, 2019 11:25:15 AM org.voltcore.logging.VoltUtilLoggingLogger log INFO: Initiating client connection, connectString=127.0.0.1:7181 sessionTimeout=2000 watcher=org.voltdb.tools.ZKDU$1@4617c264 Jul 12, 2019 11:25:15 AM org.voltcore.logging.VoltUtilLoggingLogger log INFO: Opening socket connection to server /127.0.0.1:7181 Jul 12, 2019 11:25:16 AM org.voltcore.logging.VoltUtilLoggingLogger log INFO: Socket connection established to localhost/127.0.0.1:7181, initiating session Jul 12, 2019 11:25:16 AM org.voltcore.logging.VoltUtilLoggingLogger log INFO: Session establishment complete on server localhost/127.0.0.1:7181, sessionid = 0x2a5a120a3c800000, negotiated timeout = 6000 Connected to 127.0.0.1:7181 ZooKeeper branch sizes (in bytes) to depth 2: ZNODE BYTES -- /core/hostids/ 52 /core/hosts/ 86 /core/instance_id/ 76 /core/readyhosts/ 31 /core/readyjoininghosts/ 23 /db/action_blockers/ 19 /db/action_lock/ 15 /db/buildstring/ 50 /db/catalogbytes/ 36527 /db/catalogbytes_previous/ 695 /db/cl_replay/ 13 /db/clreplaybarrier/ 21 /db/clreplaycomplete/ 48 /db/cluster_metadata/ 433 /db/commmandloginitbarrier/ 32 /db/completed_snapshots/ 735 /db/drconsumerpartition_migration/ 35 /db/elastic_join/ 242 /db/fault_log/ 13 /db/hostidsbe_stopped/ 23 /db/init_completed/ 18 /db/iv2appointees/ 188 /db/iv2masters/ 176 /db/iv2mpi/ 47 /db/lastKnownLiveNodes/ 22 /db/leaders/ 384 /db/mailboxes/ 13 /db/nodescurrentlysnapshotting/ 32 /db/operation_mode/ 18 /db/replicationconfig/ 37 /db/requesttruncationsnapshot/ 39 /db/restore/ 40 /db/restore_barrier/ 19 /db/restore_barrier2/ 20 /db/settings/ 126 /db/start_action/ 29 /db/sync_snapshots/ 18 /db/synchronized_states/ 23 /db/topology/ 403 /db/unfaulted_hosts/ 19 /zookeeper/quota/ 16 -- Total 40856
Project: Meshery (Provisioning / Automation & Configuration)
File: cilium.md

layout: integration title: Cilium subtitle: The easiest way to get production-grade Kubernetes clusters with Cilium up and running image: /assets/img/integrations/cilium/icons/color/cilium-color.svg permalink: extensibility/integrations/cilium docURL: https://docs.meshery.io/extensibility/adapters/cilium description: integrations-category: Cloud Native Network integrations-subcategory: Service Mesh registrant: Artifact Hub components: featureList: [ "Ensure Cilium Service Mesh daemonset operation", "Define microservice isolation using eBPF", "Visually configure and explore your Cilium Service Mesh topology" ] howItWorks: "Collaborative Infrastructure as Code" howItWorksDetails: "Collaboratively manage infrastructure with your coworkers synchronously sharing the same designs." language: en list: include type: extensibility category: integrations
Project: KICS (Provisioning / Security & Compliance)
File: 35ccf766-0e4d-41ed-9ec4-2dab155082b4.md

title: Role With Privilege Escalation By Actions 'iam:UpdateLoginProfile' hide: toc: true navigation: true <style> .highlight .hll { background-color: #ff171742; } .md-content { max-width: 1100px; margin: 0 auto; } </style> Query id: 35ccf766-0e4d-41ed-9ec4-2dab155082b4 Query name: Role With Privilege Escalation By Actions 'iam:UpdateLoginProfile' Platform: Terraform Severity: <span style="color:#ff7213">Medium</span> Category: Access Control URL: Role with privilege escalation by actions 'iam:UpdateLoginProfile' and Resource set to '*'. For more information see https://rhinosecuritylabs.com/aws/aws-privilege-escalation-methods-mitigation/.<br> ```tf title="Positive test num. 1 - tf file" hl_lines="1" resource "awsiamrole" "cosmic" { name = "cosmic" } resource "awsiamrolepolicy" "testinline_policy" { name = "testinlinepolicy" role = awsiamrole.cosmic.name policy = jsonencode({ Version = "2012-10-17" Statement = [ { Action = [ "iam:UpdateLoginProfile", ] Effect = "Allow" Resource = "*" }, ] }) } ``` ```tf title="Negative test num. 1 - tf file" resource "awsiamuser" "cosmic2" { name = "cosmic2" } resource "awsiamuserpolicy" "inlinepolicyruninstances2" { name = "inlinepolicyrun_instances" user = awsiamuser.cosmic2.name policy = jsonencode({ Version = "2012-10-17" Statement = [ { Action = [ "ec2:Describe*", ] Effect = "Allow" Resource = "*" }, ] }) } ```
Project: EMQ Technologies (App Definition and Development / Streaming & Messaging)
File: feat-12114.en.md

Added the `peerport` field to ClientInfo. Added the `peerport` field to the messages `ClientInfo` and `ConnInfo` in ExHook. ExHook Proto changed. The `qos` field in message `TopicFilter` was deprecated. ExHook Server will now receive full subscription options: `qos`, `rh`, `rap`, `nl` in message `SubOpts`
Project: ClickHouse (App Definition and Development / Database)
File: v21.8.10.19-lts.md

sidebar_position: 1 sidebar_label: 2022 Backported in : Allow symlinks to files in user_files directory for file table function. (). Backported in : Fix null deference for `GROUP BY WITH TOTALS HAVING` (when the column from `HAVING` wasn't selected). (). Backported in : Fix INSERT SELECT incorrectly fills MATERIALIZED column based of Nullable column. (). Backported in : Allow identifiers staring with numbers in multiple joins. (). Backported in : fix replaceRegexpAll bug. (). Fix ca-bundle.crt in kerberized_hadoop/Dockerfile ().
Project: KusionStack (Provisioning / Automation & Configuration)
File: kusion_destroy.md

Destroy resources within the stack. Destroy resources within the stack. Please note that the destroy command does NOT perform resource version checks. Therefore, if someone submits an update to a resource at the same time you execute a destroy command, their update will be lost along with the rest of the resource. ``` kusion destroy [flags] ``` ``` kusion destroy ``` ``` -D, --argument stringToString Specify the top-level argument (default []) -C, --backend-config strings backend-config config state storage backend --backend-type string backend-type specify state storage backend -d, --detail Automatically show preview details after previewing it -h, --help help for destroy --operator string Specify the operator -Y, --setting strings Specify the command line setting files -w, --workdir string Specify the work directory -y, --yes Automatically approve and perform the update after previewing it ``` ``` --profile string Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex) (default "none") --profile-output string Name of the file to write the profile to (default "profile.pprof") ``` - Kusion is the Platform Orchestrator of Internal Developer Platform
Project: Apache Hadoop (App Definition and Development / Database)
File: RELEASENOTES.0.24.0.md

<! --> These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements. | Minor | Fix the warning in writable classes.[ WritableComparable is a raw type. References to generic type WritableComparable\<T\> should be parameterized ]* WARNING: No release note provided for this change. | Major | jvm metrics all use the same namespace* JVM metrics published to Ganglia now include the process name as part of the gmetric name. | Minor | Add a NetUtils method that can tell if an InetAddress belongs to local host* closing again | Major | hadoop-setup-conf.sh should be modified to enable task memory manager* Enable task memory management to be configurable via hadoop config setup script.
Project: KubeBlocks by ApeCloud (App Definition and Development / Database)
File: kbcli_version.md

title: kbcli version Print the version information, include kubernetes, KubeBlocks and kbcli version. ``` kbcli version [flags] ``` ``` -h, --help help for version --verbose print detailed kbcli information ``` ``` --as string Username to impersonate for the operation. User could be a regular user or a service account in a namespace. --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups. --as-uid string UID to impersonate for the operation. --cache-dir string Default cache directory (default "$HOME/.kube/cache") --certificate-authority string Path to a cert file for the certificate authority --client-certificate string Path to a client certificate file for TLS --client-key string Path to a client key file for TLS --cluster string The name of the kubeconfig cluster to use --context string The name of the kubeconfig context to use --disable-compression If true, opt-out of response compression for all requests to the server --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure --kubeconfig string Path to the kubeconfig file to use for CLI requests. --match-server-version Require server version to match client version -n, --namespace string If present, the namespace scope for this CLI request --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0") -s, --server string The address and port of the Kubernetes API server --tls-server-name string Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used --token string Bearer token for authentication to the API server --user string The name of the kubeconfig user to use ```
Project: Kubescape (Provisioning / Security & Compliance)
File: MAINTAINERS.md

The following table lists the Kubescape project core maintainers: | Name | GitHub | Organization | Added/Renewed On | | | | | | | | | | 2023-01-01 | | | | | 2022-10-31 | | | | | 2021-09-01 | | | | | 2021-10-11 | | | | | 2021-09-01 |
Project: ArangoDB (App Definition and Development / Database)
File: exception_ptr.md

+++ title = "`decltype(auto) exception_ptr(T &&)`" description = "Extracts a `boost::exceptionptr` or `std::exceptionptr` from the input via ADL discovery of a suitable `makeexceptionptr(T)` function." +++ Extracts a `boost::exceptionptr` or {{% api "std::exceptionptr" %}} from the input via ADL discovery of a suitable `makeexceptionptr(T)` function. Overridable: Argument dependent lookup. Requires: Always available. Namespace: `BOOSTOUTCOMEV2_NAMESPACE::policy` Header: `<boost/outcome/std_result.hpp>`
Project: StarRocks (App Definition and Development / Database)
File: brokerDataFlow.md

Broker Load supports data transformation, UPSERT, and DELETE operations during loading. Broker Load runs in the background and clients don't need to stay connected for the job to continue. Broker Load is preferred for long running jobs, the default timeout is 4 hours. Broker Load supports Parquet, ORC, and CSV file format. The user creates a load job The frontend (FE) creates a query plan and distributes the plan to the backend nodes (BE) The backend (BE) nodes pull the data from the source and load the data into StarRocks
Project: KICS (Provisioning / Security & Compliance)
File: cicd-queries.md

This page contains all queries from CICD. Below are listed queries related to CICD GITHUB: | Query |Severity|Category|More info| ||--|--|--| |Script Block Injection<br/><sup><sub>62ff6823-927a-427f-acf9-f1ea2932d616</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../cicd-queries/62ff6823-927a-427f-acf9-f1ea2932d616" target="_blank">Query details</a><br><a href="https://securitylab.github.com/research/github-actions-untrusted-input/">Documentation</a><br/>| |Run Block Injection<br/><sup><sub>20f14e1a-a899-4e79-9f09-b6a84cd4649b</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../cicd-queries/20f14e1a-a899-4e79-9f09-b6a84cd4649b" target="_blank">Query details</a><br><a href="https://securitylab.github.com/research/github-actions-untrusted-input/">Documentation</a><br/>| |Unsecured Commands<br/><sup><sub>60fd272d-15f4-4d8f-afe4-77d9c6cc0453</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../cicd-queries/60fd272d-15f4-4d8f-afe4-77d9c6cc0453" target="_blank">Query details</a><br><a href="https://0xn3va.gitbook.io/cheat-sheets/ci-cd/github/actions#misuse-of-the-events-related-to-incoming-prs">Documentation</a><br/>| |Unpinned Actions Full Length Commit SHA<br/><sup><sub>555ab8f9-2001-455e-a077-f2d0f41e2fb9</sub></sup>|<span style="color:#edd57e">Low</span>|Supply-Chain|<a href="../cicd-queries/555ab8f9-2001-455e-a077-f2d0f41e2fb9" target="_blank">Query details</a><br><a href="https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-third-party-actions">Documentation</a><br/>|