cwielenb/CNCF-Dataset huggingface dataset:
Project: ShardingSphere (App Definition and Development / Database)
File: show-authority-rule.en.md

+++ title = "SHOW AUTHORITY RULE" weight = 1 +++ The `SHOW AUTHORITY RULE` syntax is used to query authority rule configuration. {{< tabs >}} {{% tab name="Grammar" %}} ```sql ShowAuthorityRule ::= 'SHOW' 'AUTHORITY' 'RULE' ``` {{% /tab %}} {{% tab name="Railroad diagram" %}} <iframe frameborder="0" name="diagram" id="diagram" width="100%" height="100%"></iframe> {{% /tab %}} {{< /tabs >}} | Column | Description | |-|-| | users | users | | provider | privilege provider type | | props | privilege properties | Query authority rule configuration ```sql SHOW AUTHORITY RULE; ``` ```sql mysql> SHOW AUTHORITY RULE; +--++-+ | users | provider | props | +--++-+ | root@%; sharding@% | ALL_PERMITTED | | +--++-+ 1 row in set (0.07 sec) ``` `SHOW`, `AUTHORITY`, `RULE`
Project: Harbor (Provisioning / Container Registry)
File: 7-08-Proj-replication-jobs-filter.md

Test 7-08 Project replication jobs filter ======= To verify replication jobs filter works correctly. User guide This test requires at least two Harbor instance are running and available, and a project with a few jobs. Login as admin user. In `Administration->Replications` page, click a rule which has replication jobs. Input some characters in jobs log filter, and then clear the filter. Repeat steps 1-3 under `Projects->Project_Name->Replication` page. In step3, jobs can be filtered, and after clear filter, all jobs are shown again. None
Project: Lagoon (App Definition and Development / Application Definition & Image Build)
File: varnish.md

The . Based on the 5 \(available for compatibility only, no longer officially supported\) - `uselagoon/varnish-5` 6.0 LTS - `uselagoon/varnish-6` 7 - `uselagoon/varnish-7` - Dynamic backends from DNS lookups and service discovery from SRV records. - Varnish `vmod` that lets you access the request body. This image is prepared to be used on Lagoon. There are therefore some things already done: Folder permissions are automatically adapted with , so this image will work with a random user. The image ships a default `vcl` configuration file, optimized to work on Lagoon. Some options are configurable via environments variables \(see \). Some options are configurable via [environment variables](../concepts-advanced/environment-variables.md). | Environment Variable | Default | Description | | :- | :-- | :-- | | VARNISHBACKENDHOST | NGINX | Default backend host. | | VARNISHBACKENDPORT | 8080 | Default listening Varnish port. | | VARNISHSECRET | lagoondefault_secret | Varnish secret used to connect to management. | | LIBVMODDYNAMICVERSION | 5.2 | Default version of `vmod-dynamic` module. | | LIBVMODBODYACCESSVERSION | 5.0 | Default version of `vmod-bodyaccess` module. | | HTTPRESPHDR_LEN | 8k | Maximum length of any HTTP backend response header. | | HTTPRESPSIZE | 32k | Maximum number of bytes of HTTP backend response we will deal with. | | NUKE_LIMIT | 150 | Maximum number of objects we attempt to nuke in order to make space for an object body. | | CACHE_TYPE | malloc | Type of varnish cache. | | CACHE_SIZE | 100M | Cache size. | | LISTEN | 8080 | Default backend server port. | | MANAGEMENT_LISTEN | 6082 | Default management listening port. |
Project: Meshery (Provisioning / Automation & Configuration)
File: cert-manager.md

layout: integration title: Cert Manager subtitle: Cloud native certificate management with Cert Manager and Meshery image: /assets/img/integrations/cert-manager/icons/color/cert-manager-color.svg permalink: extensibility/integrations/cert-manager docURL: https://docs.meshery.io/extensibility/integrations/cert-manager description: integrations-category: Security & Compliance integrations-subcategory: Security & Compliance registrant: Artifact Hub components: featureList: [ "Simplifies the process of obtaining, renewing and using those certificates.", "Supports issuing certificates from a variety of sources.", "Ensures certificates remain valid and up to date." ] howItWorks: "Cloud native certificate management" howItWorksDetails: "X.509 certificate management for Kubernetes and OpenShift" language: en list: include type: extensibility category: integrations
Project: KICS (Provisioning / Security & Compliance)
File: 034d0aee-620f-4bf7-b7fb-efdf661fdb9e.md

title: Group With Privilege Escalation By Actions 'lambda:CreateFunction' And 'iam:PassRole' And 'lambda:InvokeFunction' hide: toc: true navigation: true <style> .highlight .hll { background-color: #ff171742; } .md-content { max-width: 1100px; margin: 0 auto; } </style> Query id: 034d0aee-620f-4bf7-b7fb-efdf661fdb9e Query name: Group With Privilege Escalation By Actions 'lambda:CreateFunction' And 'iam:PassRole' And 'lambda:InvokeFunction' Platform: Terraform Severity: <span style="color:#ff7213">Medium</span> Category: Access Control URL: Group with privilege escalation by actions 'lambda:CreateFunction' and 'iam:PassRole' and 'lambda:InvokeFunction' and Resource set to '*'. For more information see https://rhinosecuritylabs.com/aws/aws-privilege-escalation-methods-mitigation/.<br> ```tf title="Positive test num. 1 - tf file" hl_lines="1" resource "awsiamgroup" "cosmic" { name = "cosmic" } resource "awsiamgrouppolicy" "testinline_policy" { name = "testinlinepolicy" group = awsiamgroup.cosmic.name policy = jsonencode({ Version = "2012-10-17" Statement = [ { Action = [ "lambda:CreateFunction", "lambda:InvokeFunction" ] Effect = "Allow" Resource = "*" }, ] }) } resource "awsiampolicy_attachment" "test-attach" { name = "test-attachment" groups = [awsiamgroup.cosmic.name] policyarn = awsiam_policy.policy.arn } resource "awsiampolicy" "policy" { name = "test-policy" description = "A test policy" policy = jsonencode({ Version = "2012-10-17" Statement = [ { Action = [ "iam:PassRole", ] Effect = "Allow" Resource = "*" }, ] }) } ``` ```tf title="Negative test num. 1 - tf file" resource "awsiamuser" "cosmic2" { name = "cosmic2" } resource "awsiamuserpolicy" "inlinepolicyruninstances2" { name = "inlinepolicyrun_instances" user = awsiamuser.cosmic2.name policy = jsonencode({ Version = "2012-10-17" Statement = [ { Action = [ "ec2:Describe*", ] Effect = "Allow" Resource = "*" }, ] }) } ```
Project: ClickHouse (App Definition and Development / Database)
File: integrations.md

slug: /en/interfaces/third-party/integrations sidebar_position: 27 sidebar_label: Integrations :::note Disclaimer ClickHouse, Inc. does not maintain the tools and libraries listed below and havent done extensive testing to ensure their quality. ::: Relational database management systems - - - - (uses ) - - Message queues - (uses ) Batch processing - Stream processing - Object storages - Container orchestration - Configuration management - Monitoring - - - optimizes staled partitions in if rules from could be applied - - - (uses ) - - - Logging - - (for ) - Geo - AutoML - - Integrates with ClickHouse, making data from ClickHouse accessible to a diverse range of AI/ML models. Python - (uses ) - PHP - R - (uses ) Java - (uses ) Scala - C# - - - Elixir - Ruby - -
Project: Kui (App Definition and Development / Application Definition & Image Build)
File: kui_shell_core.REPL.md

/ / REPL .REPL click(`command`, `evt`): `Promise`<`void`\> Execute a command in response to an in-view click in a sidecar view. This is helpful if you wish to participate in the view nesting logic, e.g. where clicking on a link in a sidecar allows the user to return to the previous view. In contrast, `pexec` calls will not participate in view stacking. | Name | Type | | :-- | :- | | `command` | `string` \| () => `Promise`<`string`\> | | `evt` | `MouseEvent` | `Promise`<`void`\> encodeComponent(`component`, `quote?`): `string` Prepare a string to be part of a `command` argument to the \*exec functions, quoting and escaping as necessary. | Name | Type | | :- | :-- | | `component` | `string` \| `number` \| `boolean` | | `quote?` | `string` | `string` pexec<`T`\>(`command`, `execOptions?`): `Promise`<`T`\> Programmatic eval. Useful to execute one command from another, e.g. as the result of a click handler where you would like the REPL interaction to appear on the console. | Name | Type | | : | :-- | | `T` | extends <`any`\> | | Name | Type | | :- | : | | `command` | `string` | | `execOptions?` | | `Promise`<`T`\> qexec<`T`\>(`command`, `block?`, `contextChangeOK?`, `execOptions?`, `nextBlock?`): `Promise`<`T`\> Quiet eval. Useful to execute one command from another, without emitting output to the console. | Name | Type | | : | :-- | | `T` | extends <`any`\> | | Name | Type | | :-- | : | | `command` | `string` | | `block?` | `boolean` \| `HTMLElement` | | `contextChangeOK?` | `boolean` | | `execOptions?` | | | `nextBlock?` | `HTMLElement` | `Promise`<`T`\> reexec<`T`\>(`command`, `execOptions`): `Promise`<`T`\> Evaluate a command and place the result in the current active view for the given tab | Name | Type | | : | :-- | | `T` | extends <`any`\> | | Name | Type | | : | : | | `command` | `string` | | `execOptions` | | `Promise`<`T`\> rexec<`Raw`\>(`command`, `execOptions?`): `Promise`<<`Raw`\>\> Raw eval. Useful to execute one command from another, where you want the original model back, not the view-oriented model. | Name | Type | | :- | :- | | `Raw` | extends `unknown` | | Name | Type | | :- | : | | `command` | `string` | | `execOptions?` | | `Promise`<<`Raw`\>\> split(`str`, `removeOuterQuotes?`, `removeInlineOuterQuotes?`): `string`[] Split the given string into an argv | Name | Type | | :- | :-- | | `str` | `string` | | `removeOuterQuotes?` | `boolean` | | `removeInlineOuterQuotes?` | `boolean` | `string`[]
Project: Monokle (App Definition and Development / Application Definition & Image Build)
File: cluster-integration.md

Although Monokle Desktop is mainly geared toward working with manifest files, it also has the capability to connect to a cluster and show all contained resources, providing a convenient and easy way to inspect cluster resources. Monokle Desktop will automatically detect the default Kubeconfig file or it can be declared in Settings: Choose a cluster to work with by using the Cluster Selector: If the Cluster Selector does not appear, ensure that the Show Cluster Selector option is checked in the Settings menu on the Monokle home screen: Selecting the Load button will attempt to populate the Resource Navigator with objects from the configured cluster: Monokle Desktop is now in Cluster Mode (as indicated by the header at the top): The File Explorer has been disabled if a folder had been previously selected. The Navigator contains all resources retrieved from the configured cluster: Resource navigation works as with files; selecting a resource shows its content in the source editor. Resource links are shown as before with corresponding popups/links/etc. Selecting Exit in the top right restores the contents of the Resource Navigator to the currently selected folder.
Project: Cadence Workflow (Provisioning / Automation & Configuration)
File: POSTGRES_SETUP.md

This document describes how to install latest Postgre locally with Docker. Note: Install the docker on your machine before installing the MySQL. Make sure any MySQL containers are terminated and removed ``` docker ps -a docker kill <containerid> && docker rm <containerid> # remove any Postgres containers. ``` Fetch docker image ``` docker pull postgres ``` Run docker container (note the port mapping so that 5432 is exposed locally) ``` mkdir -p ~/docker/volumes/postgres docker run --rm --name pg-docker -e POSTGRES_PASSWORD=cadence -d -p 5432:5432 -v ~/docker/volumes/postgres:/var/lib/postgresql/data postgres ``` Log into the container (when prompted for password use the password gotten from last step). ``` psql -h localhost -U postgres -d cadence ```
Project: KubeBlocks by ApeCloud (App Definition and Development / Database)
File: kbcli_migration_terminate.md

title: kbcli migration terminate Delete migration task. ``` kbcli migration terminate NAME [flags] ``` ``` kbcli migration terminate mytask ``` ``` -A, --all-namespaces If present, list the requested object(s) across all namespaces. Namespace in current context is ignored even if specified with --namespace. --auto-approve Skip interactive approval before deleting --force If true, immediately remove resources from API and bypass graceful deletion. Note that immediate deletion of some resources may result in inconsistency or data loss and requires confirmation. --grace-period int Period of time in seconds given to the resource to terminate gracefully. Ignored if negative. Set to 1 for immediate shutdown. Can only be set to 0 when --force is true (force deletion). (default -1) -h, --help help for terminate --now If true, resources are signaled for immediate shutdown (same as --grace-period=1). -l, --selector string Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints. ``` ``` --as string Username to impersonate for the operation. User could be a regular user or a service account in a namespace. --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups. --as-uid string UID to impersonate for the operation. --cache-dir string Default cache directory (default "$HOME/.kube/cache") --certificate-authority string Path to a cert file for the certificate authority --client-certificate string Path to a client certificate file for TLS --client-key string Path to a client key file for TLS --cluster string The name of the kubeconfig cluster to use --context string The name of the kubeconfig context to use --disable-compression If true, opt-out of response compression for all requests to the server --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure --kubeconfig string Path to the kubeconfig file to use for CLI requests. --match-server-version Require server version to match client version -n, --namespace string If present, the namespace scope for this CLI request --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0") -s, --server string The address and port of the Kubernetes API server --tls-server-name string Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used --token string Bearer token for authentication to the API server --user string The name of the kubeconfig user to use ``` - Data migration between two data sources.
Project: YDB (App Definition and Development / Database)
File: staticzip.md

Merges structures or tuples element-by-element. All arguments (one or more) must be either structures with the same set of fields or tuples of the same length. The result will be a structure or tuple, respectively. Each item of the result is a tuple comprised of items taken from arguments. Examples: ```yql $one = <|k1:1, k2:2.0|>; $two = <|k1:3.0, k2:4|>; -- Adding two structures item-by-item SELECT StaticMap(StaticZip($one, $two), ($tuple)->($tuple.0 + $tuple.1)) AS sum; ```
Project: StarRocks (App Definition and Development / Database)
File: hll_cardinality.md

displayed_sidebar: "English" Calculates the cardinality of a single HLL type value. ```Haskell HLL_CARDINALITY(hll) ``` ```plain text MySQL > select HLLCARDINALITY(uvset) from test_uv; ++ | hllcardinality(`uvset`) | ++ | 3 | ++ ``` HLL,HLL_CARDINALITY
Project: ArangoDB (App Definition and Development / Database)
File: hook_outcome.md

+++ title = "Hook outcome" description = "" weight = 50 +++ The final step is to add event hooks for the very specific case of when our localised `outcome` is copy or move constructed from our localised `result`. You ought to be very careful that the `noexcept`-ness of these matches the `noexcept`-ness of the types in the `outcome`. You may have noticed that `poke_exception()` creates a `std::string` and appends to it. This can throw an exception. If the copy and/or move constructors of `T`, `EC` and `EP` are `noexcept`, then so will be `outcome`'s copy and/or move constructor. Thus if `poke_exception()` throws, instant program termination would occur, which is bad. We avoid that problem in this case by wrapping `poke_exception()` in a `try...catch` which throws away any exceptions thrown. For Outcome before v2.2, these specially named free functions must be placed into a namespace which is ADL searched: {{% snippet "errorcodeextended.cpp" "errorcodeextended5" %}} For Outcome v2.2 and later, these functions must be placed into a custom no value policy with the names `onoutcomecopyconstruction()` and `onoutcomemoveconstruction()` respectively. As with before, the implementation of the functions is identical, just the name and location has changed.
Project: Meshery (Provisioning / Automation & Configuration)
File: mesheryctl_bug.md

name: mesheryctl Bug Report about: Report a bug in Meshery's CLI title: '[mesheryctl]' labels: component/mesheryctl, language/go, kind/bug assignees: '' <!-- Please update the mesheryctl Command Tracker spreadsheet --> See for current status of commands. <!-- A brief description of what the problem is. (e.g. I need to be able to...) --> <!-- A brief description of the enhancement. --> <!-- Add screenshots, if applicable, to help explain your problem. --> Host OS: Mac Linux Windows Meshery Server Version: stable-v Meshery Client Version: stable-v Platform: Docker Kubernetes Questions: and
Project: kube-hunter (Provisioning / Security & Compliance)
File: SECURITY.md

| Version | Supported | | | | | 0.4.x | :whitecheckmark: | | 0.3.x | :whitecheckmark: | We encourage you to find vulnerabilities in kube-hunter. The process is simple, just report a Bug issue. and we will take a look at this. If you prefer to disclose privately, you can write to one of the security maintainers at: | Name | Email | | -- | | | Daniel Sagi | daniel.sagi@aquasec.com |
Project: ArangoDB (App Definition and Development / Database)
File: has_error_is_errno.md

+++ title = "`static bool haserroriserrno(Impl &&) noexcept`" description = "Returns true if the error code in the implementation passed in has a domain or category matching that of POSIX `errno`. Constexpr, never throws." categories = ["observers"] weight = 240 +++ Returns true if the error code in the implementation passed in has a domain or category matching that of POSIX `errno`. Constexpr where possible. Requires: Always available. Complexity: Constant time. Guarantees: Never throws an exception.
Project: Kui (App Definition and Development / Application Definition & Image Build)
File: kui_shell_core.ElementMimic.md

/ / ElementMimic .ElementMimic new ElementMimic() `Private` \_attrs: `Object` = `{}` `Private` `Readonly` \_isFakeDom: `true` cells: [] = `[]` children: [] = `[]` classList: `ClassList` className: `string` = `''` innerHTML: `string` = `''` innerText: `string` = `''` nodeType: `string` = `''` rows: [] = `[]` style: `Object` = `{}` value: `string` = `''` addEventListener(): `boolean` `boolean` appendChild(`c`): `number` | Name | Type | | : | :-- | | `c` | | `number` cloneNode(): focus(): `void` `void` getAttribute(`k`): `string` | Name | Type | | : | :- | | `k` | `string` | `string` hasStyle(`style`, `desiredValue?`): `string` \| `boolean` | Name | Type | | :-- | :- | | `style` | `string` | | `desiredValue?` | `string` \| `number` | `string` \| `boolean` insertCell(`idx`): | Name | Type | | :- | :- | | `idx` | `number` | insertRow(`idx`): | Name | Type | | :- | :- | | `idx` | `number` | querySelector(): querySelectorAll(`selector`): [] | Name | Type | | : | :- | | `selector` | `string` | [] recursiveInnerTextLength(): `number` `number` remove(): `void` `void` removeAttribute(`k`): `string` | Name | Type | | : | :- | | `k` | `string` | `string` setAttribute(`k`, `v`): `string` | Name | Type | | : | :- | | `k` | `string` | | `v` | `string` | `string` `Static` isFakeDom(`dom`): dom is ElementMimic | Name | Type | | :- | :- | | `dom` | `any` | dom is ElementMimic
Project: CDK for Kubernetes (CDK8s) (Provisioning / Automation & Configuration)
File: escape-hatches.md

An "escape hatch" is an intentional leak in the abstraction layer. It allows users to "escape the abstraction" and reach out to a lower layer. Similarly, in CDKs, escape hatches are mechanisms that allow users to tweak the synthesized output when the abstraction they use does not "hold water". You may need to use an escape hatch in the following cases: You are using an imported API object (e.g. `KubeDeployment`) and there is an issue with the schema or a bug in "import" which results in an invalid manifest or missing fields (as an example see ). You are using a high-level API (e.g. cdk8s+) which does not expose some functionality which exists in the lower-level resources. The class, which is the base of all objects synthesized into a Kubernetes manifest offers an API for patching the synthesized output at the wire level using JSON Patch (): ```ts import { JsonPatch } from 'cdk8s'; apiObject.addJsonPatch(JsonPatch.replace('/foo', 'bar')); apiObject.addJsonPatch(JsonPatch.add('/foo/bar/0', { bar: 123 })); ``` During synthesis, patches are applied in-order after the API object synthesized itself. All classes generated using the CLI command extend `ApiObject`, and therefore include the `addJsonPatch()` method. The second use case for using escape hatches is when you are working against a higher-level construct which, for some reason, does not allow you to achieve what you need. For example, let's say you are using the `Pod` class from cdk8s+ and you wish to set [`enableServiceLinks`] to `true`. This feature is currently not supported in the cdk8s+ `Pod` API, so you'll want to patch the underlying `KubePod` and set this value. To do that, you will need to "peak" into the construct tree and find the underlying API object, so you can apply the patch to it: ```ts import { Pod } from 'cdk8s-plus-29'; import { ApiObject } from 'cdk8s'; const pod = new Pod(...); const kubePod = ApiObject.of(pod); kubePod.addJsonPatch(...); ``` The `ApiObject.of()` method uses capabilities of the [constructs programming model](./constructs.md) to find the "default child" of a construct (`Node.of(c).defaultChild`). When a construct is initialized, it can either explicitly assign the value of `Node.of(this).defaultChild = xxx` or it can use the identity `Default` for one of its child constructs. This will automatically identify it as the default child. !!! tip The `ApiObject.of()` method recursively searches down the construct tree through child constructs called `Default` until it finds a child of type `ApiObject`. This means, for example, that `ApiObject.of(apiObject)` returns the same object. There could be situations where a default child is not recorded by a high-level construct. This still does not mean you are blocked from patching the underlying API objects. You can still use `Node.of(x)` to traverse the construct tree to obtain the child. For example, you can use `Node.of(x).findChild(id)` to retrieve any child by its ID.