cwielenb/CNCF-Dataset huggingface dataset:
Project: Meshery (Provisioning / Automation & Configuration)
File: v0.7.16.md

layout: release date: 2024-02-05 tag: v0.7.16 [Relationship] Support chaining of inventory items. @MUzairS15 (#10218) [server] Server policy eval improvements. @MUzairS15 (#10216) [Policies] Add support for building incomplete json paths @MUzairS15 (#10182) [Connection] Add Connection definition for Github. @MUzairS15 (#10186) add pencil component @aabidsofi19 (#10169) Add rtk client for meshSync api's @sudhanshutech (#10217) add info and replace tooltips @sudhanshutech (#10214) [Typo] - Environments and workspaces @senali-d (#10211) [Extension] Add Info Icon on Export Design Modal @AjaxAueleke (#10008) Migrate dashboard to rtk and cleanups @sudhanshutech (#10122) Bump github.com/docker/go-connections from 0.4.0 to 0.5.0 @dependabot (#10150) Bump fortio.org/fortio from 1.60.3 to 1.63.2 @dependabot (#10147) Bump google.golang.org/api from 0.154.0 to 0.161.0 in /scripts/component_generation @dependabot (#10152) Bump github.com/prometheus/client_golang from 1.17.0 to 1.18.0 @dependabot (#10149) Bump github.com/layer5io/meshkit from 0.7.2 to 0.7.11 in /scripts/component_generation @dependabot (#10154) [Feat Docs] Added Contributing to docs using Gitpod @MonalikaPatnaik (#10196) docs: fix broken image on models contributing page @shravan562 (#10200) Thank you to our contributors for making this release possible: @AjaxAueleke, @MUzairS15, @MonalikaPatnaik, @Yashsharma1911, @aabidsofi19, @dependabot, @dependabot[bot], @l5io, @leecalcote, @senali-d, @shravan562, @sudhanshutech and l5io
Project: StarRocks (App Definition and Development / Database)
File: Hex.md

displayed_sidebar: "English" If `x` is a numerical value, this function returns a hexadecimal string representation of the value. If `x` is a string, this function returns a hexadecimal string representation of the string where each character in the string is converted into two hexadecimal digits. ```Haskell HEX(x); ``` `x`: the string or number to convert. The supported data types are BIGINT, VARCHAR, and VARBINARY (v3.0 and later). Returns a value of the VARCHAR type. ```Plain Text mysql> select hex(3); +--+ | hex(3) | +--+ | 3 | +--+ 1 row in set (0.00 sec) mysql> select hex('3'); +-+ | hex('3') | +-+ | 33 | +-+ 1 row in set (0.00 sec) mysql> select hex('apple'); +--+ | hex('apple') | +--+ | 6170706C65 | +--+ -- The input is a binary value. mysql> select hex(x'abab'); +-+ | hex('ABAB') | +-+ | ABAB | +-+ 1 row in set (0.01 sec) ``` HEX
Project: Meshery (Provisioning / Automation & Configuration)
File: v0.5.53.md

layout: release date: 2021-09-07 tag: v0.5.53 fix: Handle undefined title case @sudo-NithishKarthik (#4100) [Extension] remove description on tooltip @bariqhibat (#4098) fix(ui): use createTheme import instead of createMuiTheme - #4087 @K-Kumar-01 (#4095) [chore] Update in roadmap for mesheryctl code-coverage @piyushsingariya (#4092) added a tooltip to patterns icon @warunicorn19 (#4094) Enhancement for MeshSync Settings Page @dhruv0000 (#3875) feat(ui): eslint-ui - #4078 @K-Kumar-01 (#4086) [UI] [Connection Wizard] Scrolling issues in Adapter @sudo-NithishKarthik (#4015) Added tests for `mesheryctl/internal/cli/root/config` @shikharvashistha (#4047) [UI] Improved UI in Performance Profile test results @Meghana-12 (#4040) [UI] add help tooltip to icon @bariqhibat (#4045) [UI] The SMP vertical divider is now aligned properly @Hardikag17 (#4046) system context @suhaniii (#4023) [<Navigator/>]: Navigation highlight fix on subsections under Management section @nishit-prasad (#3271) update in meshery-chart title format @veerreshr (#4006) [CI] bundle seed content into Docker image @DelusionalOptimist (#4082) Bump caniuse-lite from 1.0.30001248 to 1.0.30001252 in /ui @dependabot (#4052) Bump @rjsf/core from 3.0.0 to 3.1.0 in /ui @dependabot (#4062) Bump mui-datatables from 3.7.7 to 3.7.8 in /ui @dependabot (#4057) correct typo in roadmap.md @shreyaansjain (#4081) Bump next from 11.1.0 to 11.1.1 in /provider-ui @dependabot (#4073) Bump cypress from 8.1.0 to 8.3.1 in /provider-ui @dependabot (#4053) Bump eslint-config-next from 11.0.1 to 11.1.2 in /provider-ui @dependabot (#4054) Bump react-big-calendar from 0.33.2 to 0.35.0 in /ui @dependabot (#4058) Bump github.com/go-openapi/strfmt from 0.20.1 to 0.20.2 @dependabot (#4072) Bump gorm.io/gorm from 1.21.12 to 1.21.14 @dependabot (#4069) Bump husky from 7.0.1 to 7.0.2 in /ui @dependabot (#4066) Bump eslint-plugin-react from 7.24.0 to 7.25.1 in /provider-ui @dependabot (#4061) Bump google.golang.org/grpc from 1.39.0 to 1.40.0 @dependabot (#4067) Bump @fortawesome/fontawesome-svg-core from 1.2.35 to 1.2.36 in /ui @dependabot (#4065) Bump relay-compiler from 11.0.2 to 12.0.0 in /ui @dependabot (#4055) Bump styled-jsx from 4.0.0 to 4.0.1 in /provider-ui @dependabot (#4056) Bump github.com/layer5io/meshsync from 0.1.23 to 0.1.24 @dependabot (#4068) Bump @fortawesome/free-brands-svg-icons from 5.15.3 to 5.15.4 in /ui @dependabot (#4064) Bump notistack from 1.0.9 to 1.0.10 in /ui @dependabot (#4063) Bump github.com/go-openapi/runtime from 0.19.29 to 0.19.31 @dependabot (#4070) Bump github.com/layer5io/meshkit from 0.2.20 to 0.2.24 @dependabot (#4071) [CI]Updated the issue/remind label to run on PR's @sayantan1413 (#4048) Thank you to our contributors for making this release possible: @DelusionalOptimist, @Hardikag17, @K-Kumar-01, @Meghana-12, @bariqhibat, @dependabot, @dependabot[bot], @dhruv0000, @l5io, @leecalcote, @nishit-prasad, @piyushsingariya, @sayantan1413, @shikharvashistha, @shreyaansjain, @sudo-NithishKarthik, @suhaniii, @veerreshr, @warunicorn19 and l5io
Project: KICS (Provisioning / Security & Compliance)
File: b26d2b7e-60f6-413d-a3a1-a57db24aa2b3.md

title: SNS Topic is Publicly Accessible hide: toc: true navigation: true <style> .highlight .hll { background-color: #ff171742; } .md-content { max-width: 1100px; margin: 0 auto; } </style> Query id: b26d2b7e-60f6-413d-a3a1-a57db24aa2b3 Query name: SNS Topic is Publicly Accessible Platform: Terraform Severity: <span style="color:#ff0000">Critical</span> Category: Access Control URL: SNS Topic Policy should not allow any principal to access<br> ```tf title="Positive test num. 1 - tf file" hl_lines="2" resource "awssnstopic" "positive1" { policy = <<EOF { "Version": "2012-10-17", "Statement": [ { "Action": "*", "Principal": { "AWS": "*" }, "Effect": "Allow", "Sid": "" } ] } EOF } ``` ```tf title="Negative test num. 1 - tf file" resource "awssnstopic" "negative1" { policy = <<EOF { "Version": "2012-10-17", "Statement": [ { "Action": "*", "Principal": { "AWS": "arn:aws:iam::##account_number##:root" }, "Effect": "Allow", "Sid": "" } ] } EOF } ```
Project: Devfile (App Definition and Development / Application Definition & Image Build)
File: LICENSE.md

The MIT License (MIT) Copyright (c) 2013 Fatih Arslan Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
Project: Numaflow (App Definition and Development / Streaming & Messaging)
File: monitoring-and-observability.md

. Numaflow as the stream-processing solution in Using Numaflow for fast incident detection: Implementing anomaly detection with Numaflow: Monitoring and observability are two critical concepts in software engineering that help developers ensure the health and performance of their applications. Monitoring refers to the process of collecting and analyzing data about an application's performance. This data can include metrics such as CPU usage, memory usage, network traffic, and response times. Monitoring tools allow developers to track these metrics over time and set alerts when certain thresholds are exceeded. This enables them to quickly identify and respond to issues before they become critical. Observability, on the other hand, is a more holistic approach to monitoring that focuses on understanding the internal workings of an application. Observability tools provide developers with deep insights into the behavior of their applications, allowing them to understand how different components interact with each other and how changes in one area can affect the overall system. This includes collecting data on things like logs, traces, and events, which can be used to reconstruct the state of the system at any given point in time. Together, monitoring and observability provide developers with a comprehensive view of their applications' performance, enabling them to quickly identify and respond to issues as they arise. By leveraging these tools, software engineers can ensure that their applications are running smoothly and efficiently, delivering the best possible experience to their users.
Project: ORY Hydra (Provisioning / Key Management)
File: IsReady200Response.md

Name | Type | Description | Notes | - | - | - Status | Pointer to string | Always \&quot;ok\&quot;. | [optional] `func NewIsReady200Response() *IsReady200Response` NewIsReady200Response instantiates a new IsReady200Response object This constructor will assign default values to properties that have it defined, and makes sure properties required by API are set, but the set of arguments will change when the set of required properties is changed `func NewIsReady200ResponseWithDefaults() *IsReady200Response` NewIsReady200ResponseWithDefaults instantiates a new IsReady200Response object This constructor will only assign default values to properties that have it defined, but it doesn't guarantee that properties required by API are set `func (o *IsReady200Response) GetStatus() string` GetStatus returns the Status field if non-nil, zero value otherwise. `func (o IsReady200Response) GetStatusOk() (string, bool)` GetStatusOk returns a tuple with the Status field if it's non-nil, zero value otherwise and a boolean to check if the value has been set. `func (o *IsReady200Response) SetStatus(v string)` SetStatus sets Status field to given value. `func (o *IsReady200Response) HasStatus() bool` HasStatus returns a boolean if a field has been set.
Project: KubeDB by AppsCode (App Definition and Development / Database)
File: kubectl-dba_exec_mysql.md

title: Kubectl-Dba Exec Mysql menu: docs_{{ .version }}: identifier: kubectl-dba-exec-mysql name: Kubectl-Dba Exec Mysql parent: reference-cli menuname: docs{{ .version }} sectionmenuid: reference Execute SQL commands to a mysql resource Use this cmd to execute sql commands to a mysql object's primary pod. Examples: kubectl dba exec my my-demo -n demo -f demo.sql kubectl dba exec my my-demo -c 'describe pet' -d kubedb" ``` kubectl-dba exec mysql [flags] ``` ``` -c, --command string command to execute -d, --dbName string name of the database inside mysql to execute command (default "mysql") -f, --file string path to command file -h, --help help for mysql ``` ``` --as string Username to impersonate for the operation. User could be a regular user or a service account in a namespace. --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups. --as-uid string UID to impersonate for the operation. --cache-dir string Default cache directory (default "/home/runner/.kube/cache") --certificate-authority string Path to a cert file for the certificate authority --client-certificate string Path to a client certificate file for TLS --client-key string Path to a client key file for TLS --cluster string The name of the kubeconfig cluster to use --context string The name of the kubeconfig context to use --default-seccomp-profile-type string Default seccomp profile --disable-compression If true, opt-out of response compression for all requests to the server --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure --kubeconfig string Path to the kubeconfig file to use for CLI requests. --match-server-version Require server version to match client version -n, --namespace string If present, the namespace scope for this CLI request --password string Password for basic authentication to the API server --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0") -s, --server string The address and port of the Kubernetes API server --tls-server-name string Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used --token string Bearer token for authentication to the API server --user string The name of the kubeconfig user to use --username string Username for basic authentication to the API server ``` - Execute script or command to a database.
Project: Pluto (Provisioning / Security & Compliance)
File: faq.md

meta: name: description content: "Fairwinds Pluto | Documentation FAQ" See above in the section of this doc. Kubectl is likely lying to you because it only tells you what the default is for the given kubernetes version even if an object was deployed with a newer API version. Currently, the only in-cluster check we are confident in supporting is helm. If your deployment method can generate yaml manifests for kubernetes, you should be able to use the `detect` or `detect-files` functionality described below after the manifest files have been generated. Pluto looks at the API Versions of objects in releases that are in a `Deployed` state, and Helm has an issue where it might list old revisions of a release as still being in a `Deployed` state. To fix this, look at the release revision history with `helm history <release name>`, and determine if older releases still show a `Deployed` state. If so, delete the Helm release secret(s) associated with the revision number(s). For example, `kubectl delete secret sh.helm.release.v1.my-release.v10` where `10` corresponds to the release number. Then run Pluto again to see if the object has been removed from the report. When using `--detect-api-resources` or `--detect-all-in-cluster`, there are some potential issues to be aware of: The annotation `kubectl.kubernetes.io/last-applied-configuration` on an object in your cluster holds the API version by which it was created. In fact, others have pointed out that updating the same object with `kubectl patch` will remove* the annotation. Hence this is not a reliable method to detect deprecated API's from a live cluster. You may get false positives in the first change after fixing the apiVersion. Please see for more details.
Project: YugabyteDB (App Definition and Development / Database)
File: managed-cli-network-allow-list.md

title: ybm CLI etwork-allow-list resource headerTitle: ybm network-allow-list linkTitle: network-allow-list description: YugabyteDB Managed CLI reference Network allow list resource. headcontent: Manage account IP allow lists menu: preview_yugabyte-cloud: identifier: managed-cli-network-allow-list parent: managed-cli-reference weight: 20 type: docs Use the `network-allow-list` resource to perform operations on , including the following: create and delete allow lists get information about an IP allow list ```text Usage: ybm network-allow-list [command] [flags] ``` Create a single address allow list: ```sh ybm network-allow-list create \ --name=my-computer \ --description="my IP address" \ --ip-addr=$(curl ifconfig.me) ``` Create an allow list. | Flag | Description | | : | : | | --name | Required. Name for the IP allow list. | | --description | Description of the IP allow list.<br>If the description includes spaces, enclose the description in quotes ("). | | --ip-addr | IP addresses to add to the allow list. | Delete the specified allow list. | Flag | Description | | : | : | | --name | Required. Name of the IP allow list to delete. | List the allow lists configured for your account. | Flag | Description | | : | : | | --name | Name of an IP allow list. |
Project: Paladin Cloud (Provisioning / Security & Compliance)
File: pull_request_template.md

Please include a summary of the changes and the related issues. Please also include relevant motivation and context. List any dependencies that are required for this change. Please delete options that are not relevant. [ ] Bug fix (non-breaking change which fixes an issue) [ ] New feature (non-breaking change which adds functionality) [ ] Chore (no code changes) [ ] Breaking change (fix or feature that would cause existing functionality to not work as expected) [ ] This change requires a documentation update Please describe the tests that you ran to verify your changes. Provide instructions so we can reproduce. Please also list any relevant details for your test configuration [ ] Test A [ ] Test B [ ] My code follows the style guidelines of this project [ ] My commit message/PR follows the contribution guidelines of this project [ ] I have performed a self-review of my code [ ] I have commented my code, particularly in hard-to-understand areas [ ] I have added tests that prove my fix is effective or that my feature works [ ] New and existing unit tests pass locally with my changes
Project: YugabyteDB (App Definition and Development / Database)
File: explore-ycql.md

Run `ycqlsh` to connect to the service. You can do this as shown below. ```sh $ ./bin/ycqlsh ``` ```output Connected to local cluster at 127.0.0.1:9042. [ycqlsh 5.0.1 | Cassandra 3.9-SNAPSHOT | CQL spec 3.4.2 | Native protocol v4] Use HELP for help. ycqlsh> ``` Run a YCQL command to verify it is working. ```cql ycqlsh> describe keyspaces; ``` ```output systemschema systemauth system ``` ``` ```output systemschema systemauth system ycqlsh> ```
Project: Operator Framework (App Definition and Development / Application Definition & Image Build)
File: v1.11.0.md

title: v1.11.0 weight: 998989000 If you would like to run your operator locally using `make run`, modify the `run` target in the `Makefile` to: `ANSIBLEROLESPATH="$(ANSIBLEROLESPATH):$(shell pwd)/roles" $(ANSIBLE_OPERATOR) run` See for more details. In `go/v3` projects, after installing `setup-envtest` binary, the path to `KUBEBUILDER_ASSETS` needs to be exported. In `Makefile`, add the following: ```diff +# ENVTESTK8SVERSION refers to the version of kubebuilder assets to be downloaded by envtest binary. +ENVTESTK8SVERSION = 1.21 test: manifests generate fmt vet envtest ## Run tests. go test ./... -coverprofile cover.out KUBEBUILDERASSETS="$(shell $(ENVTEST) use $(ENVTESTK8S_VERSION) -p path)" go test ./... -coverprofile cover.out ``` See for more details. In `go/v3`, `ansible/v1`, `helm/v1` projects, specify the `containerPort` protocol in the following files: - `config/default/managerauthproxypatch.yaml` - `config/rbac/authproxy_service.yaml` ```diff ports: containerPort: 8443 protocol: TCP name: https ``` Additionally, in `go/v3` projects, add the `containerPort` protocol to `config/webhook/service.yaml`: ```diff ports: port: 443 protocol: TCP targetPort: 9443 ``` See for more details. In `go/v3`, `ansible/v1`, `helm/v1` projects, increase the `cpu` and `memory` resource limits to `200m` and `100Mi` respectively in `config/manager/manager.yaml`. ```diff resources: limits: cpu: 100m memory: 30Mi cpu: 200m memory: 100Mi ``` See for more details.
Project: KICS (Provisioning / Security & Compliance)
File: 16cc87d1-dd47-4f46-b3ce-4dfcac8fd2f5.md

title: KMS Crypto Key is Publicly Accessible hide: toc: true navigation: true <style> .highlight .hll { background-color: #ff171742; } .md-content { max-width: 1100px; margin: 0 auto; } </style> Query id: 16cc87d1-dd47-4f46-b3ce-4dfcac8fd2f5 Query name: KMS Crypto Key is Publicly Accessible Platform: Terraform Severity: <span style="color:#bb2124">High</span> Category: Encryption URL: KMS Crypto Key should not be publicly accessible. In other words, the KMS Crypto Key policy should not set 'allUsers' or 'allAuthenticatedUsers' in the attribute 'member'/'members'<br> ```tf title="Positive test num. 1 - tf file" hl_lines="24" resource "googlekmskey_ring" "positive1" { name = "keyring-example" location = "global" } resource "googlekmscrypto_key" "positive1" { name = "crypto-key-example" keyring = googlekmskeyring.positive1.id rotation_period = "100000s" lifecycle { prevent_destroy = true } } data "googleiampolicy" "positive1" { binding { role = "roles/cloudkms.cryptoKeyEncrypter" member = "allUsers" } } resource "googlekmscryptokeyiam_policy" "positive1" { cryptokeyid = googlekmscrypto_key.positive1.id policydata = data.googleiampolicy.positive1.policydata } ``` ```tf title="Positive test num. 2 - tf file" hl_lines="24" resource "googlekmskey_ring" "positive2" { name = "keyring-example" location = "global" } resource "googlekmscrypto_key" "positive2" { name = "crypto-key-example" keyring = googlekmskeyring.positive2.id rotation_period = "100000s" lifecycle { prevent_destroy = true } } data "googleiampolicy" "positive2" { binding { role = "roles/cloudkms.cryptoKeyEncrypter" member = "allAuthenticatedUsers" } } resource "googlekmscryptokeyiam_policy" "positive2" { cryptokeyid = googlekmscrypto_key.keyyy.id policydata = data.googleiampolicy.positive2.policydata } ``` ```tf title="Negative test num. 1 - tf file" resource "googlekmskey_ring" "negative" { name = "negative-example" location = "global" } resource "googlekmscrypto_key" "negative" { name = "crypto-key-example" keyring = googlekmskeyring.negative.id rotation_period = "100000s" lifecycle { prevent_destroy = true } } data "googleiampolicy" "negative" { binding { role = "roles/cloudkms.cryptoKeyEncrypter" members = [ "user:jane@example.com", ] } } resource "googlekmscryptokeyiam_policy" "negative" { cryptokeyid = googlekmscrypto_key.negative.id policydata = data.googleiampolicy.negative.policydata } ```
Project: Meshery (Provisioning / Automation & Configuration)
File: v0.6.162.md

layout: release date: 2023-10-17 tag: v0.6.162 [MeshSync] Update MeshSync Tables + GO pkgs @theBeginner86 (#9127) Bump @babel/traverse from 7.17.3 to 7.23.2 in /install/docker-extension/ui @dependabot (#9132) Update kubernetes components styles @aabidsofi19 (#9066) Update Dockerfile @leecalcote (#9120) Bump @babel/traverse from 7.20.13 to 7.23.2 in /provider-ui @dependabot (#9131) [UI] Add ordering in metadata @aabidsofi19 (#9121) Bump @babel/traverse from 7.21.3 to 7.23.2 in /ui @dependabot (#9133) Bump @babel/traverse from 7.20.13 to 7.23.2 in /provider-ui @dependabot (#9131) Bump @babel/traverse from 7.21.3 to 7.23.2 in /ui @dependabot (#9133) Update load-generators.md @ValGrace (#9116) feat:New endpoint for registrants w/signoff @Jougan-0 (#9040) Thank you to our contributors for making this release possible: @Jougan-0, @ValGrace, @aabidsofi19, @dependabot, @dependabot[bot], @l5io, @leecalcote and @theBeginner86