cwielenb/CNCF-Dataset huggingface dataset:
Project: Trivy-Operator (Provisioning / Security & Compliance)
File: faq.md

Docker image reference is not a first class citizen in Kubernetes. It's a property of the container definition. Trivy-operator relies on label selectors to associate VulnerabilityReports with corresponding Kubernetes workloads, not particular image references. For example, we can get all reports for the wordpress Deployment with the following command: ```text kubectl get vulnerabilityreports \ -l trivy-operator.resource.kind=Deployment \ -l trivy-operator.resource.name=wordpress ``` Beyond that, for each instance of the VulnerabilityReports we set the owner reference pointing to the corresponding pods controller. By doing that we can manage orphaned VulnerabilityReports and leverage Kubernetes garbage collection. For example, if the `wordpress` Deployment is deleted, all related VulnerabilityReports are automatically garbage collected. The idea is to partition VulnerabilityReports generated for a particular Kubernetes workload by containers is to mitigate the risk of exceeding the etcd request payload limit. By default, the payload of each Kubernetes object stored etcd is subject to 1.5 MiB.
Project: YugabyteDB (App Definition and Development / Database)
File: python-ycql.md

title: Build Python applications using Apache Spark and YugabyteDB YCQL headerTitle: Build a Python application using Apache Spark and YugabyteDB linkTitle: YCQL description: Learn how to build a Python application using Apache Spark and YugabyteDB YCQL aliases: /preview/integrations/apache-spark/python/ menu: preview_integrations: identifier: apache-spark-3-python-ycql parent: apache-spark weight: 576 type: docs <ul class="nav nav-tabs-alt nav-tabs-yb"> <li > <a href="../java-ycql/" class="nav-link"> <i class="fa-brands fa-java" aria-hidden="true"></i> Java </a> </li> <li > <a href="../scala-ycql/" class="nav-link"> <i class="icon-scala" aria-hidden="true"></i> Scala </a> </li> <li > <a href="../python-ycql/" class="nav-link active"> <i class="icon-python" aria-hidden="true"></i> Python </a> </li> </ul> To build your Python application using the YugabyteDB Spark Connector for YCQL, start PySpark with the following for Scala 2.11: ```sh $ pyspark --packages com.yugabyte.spark:spark-cassandra-connector_2.11:2.4-yb-3 ```
Project: Meshery (Provisioning / Automation & Configuration)
File: mesheryctl-registry-update.md

layout: default title: mesheryctl-registry-update permalink: reference/mesheryctl/registry/update redirect_from: reference/mesheryctl/registry/update/ type: reference display-title: "false" language: en command: registry subcommand: update Update the registry with latest data. `Updates the component metadata (SVGs, shapes, styles and other) by referring from a Google Spreadsheet.` <pre class='codeblock-pre'> <div class='codeblock'> mesheryctl registry update [flags] </div> </pre> Update models from Meshery Integration Spreadsheet <pre class='codeblock-pre'> <div class='codeblock'> mesheryctl registry update --spreadsheet-id [id] --spreadsheet-cred [base64 encoded spreadsheet credential] -i [path to the directory containing models]. </div> </pre> Updating models in the meshery/meshery repo <pre class='codeblock-pre'> <div class='codeblock'> mesheryctl registry update --spreadsheet-id 1DZHnzxYWOlJ69Oguz4LkRVTFM79kC2tuvdwizOJmeMw --spreadsheet-cred $CRED </div> </pre> <pre class='codeblock-pre'> <div class='codeblock'> -h, --help help for update -i, --input string relative or absolute input path to the models directory (default "../server/meshmodel") --spreadsheet-cred string base64 encoded credential to download the spreadsheet --spreadsheet-id string spreadsheet it for the integration spreadsheet </div> </pre> <pre class='codeblock-pre'> <div class='codeblock'> --config string path to config file (default "/home/runner/.meshery/config.yaml") -v, --verbose verbose output </div> </pre> Go back to , if you want to add content manually to the CLI documentation, please refer to the for guidance.
Project: YugabyteDB (App Definition and Development / Database)
File: select_start,window_clause,fn_over_window.grammar.md

```output.ebnf select_start ::= SELECT [ ALL | DISTINCT [ ON { ( expression [ , ... ] ) } ] ] [ * | { { expression | fnoverwindow | ordinaryaggregatefn_invocation | withingroupaggregatefninvocation } [ [ AS ] name ] } [ , ... ] ] windowclause ::= WINDOW { { name AS windowdefinition } [ , ... ] } fnoverwindow ::= name ( [ expression [ , ... ] | * ] [ FILTER ( WHERE boolean_expression ) ] OVER { window_definition | name } ```
Project: Meshery (Provisioning / Automation & Configuration)
File: v0.6.168.md

layout: release date: 2023-10-31 tag: v0.6.168 Added permaLink to the data.js json @aboobakersiddiqr63 (#9252) [chore] Upgrade MeshKit 0.6.79 @theBeginner86 (#9250) fix typos in governance.md @404Nikhil (#9241) [content] Migrate Apps -> Designs @theBeginner86 (#9185) [UI] Dark mode issue in connections table @senali-d (#9249) Added the go command to generate docs @aboobakersiddiqr63 (#9247) Temporary WF for Integration Docs Generator @aboobakersiddiqr63 (#9242) [content] Migrate Apps -> Designs @theBeginner86 (#9185) [Docs] TOC: Add section describing the use of children and grandchildren @coder12git (#9172) [Docs] Page for all integrations @leecalcote (#9248) One time Docs generation @aboobakersiddiqr63 (#9244) Thank you to our contributors for making this release possible: @404Nikhil, @Aisuko, @MUzairS15, @aabidsofi19, @aboobakersiddiqr63, @coder12git, @leecalcote, @senali-d and @theBeginner86
Project: StarRocks (App Definition and Development / Database)
File: regexp.md

displayed_sidebar: "English" Checks whether a given expression matches the regular expression specified by `pattern`. If yes, 1 is returned. Otherwise, 0 is returned. NULL is returned if any of the input parameter is NULL. regexp() supports more complex matching conditions than . ```Haskell BOOLEAN regexp(VARCHAR expr, VARCHAR pattern); ``` `expr`: the string expression. The supported data type is VARCHAR. `pattern`: the pattern to match. The supported data type is VARCHAR. Returns a BOOLEAN value. ```Plain Text mysql> select regexp("abc123","abc*"); +--+ | regexp('abc123', 'abc*') | +--+ | 1 | +--+ 1 row in set (0.06 sec) select regexp("abc123","xyz*"); +--+ | regexp('abc123', 'xyz*') | +--+ | 0 | +--+ ``` regexp, regular
Project: KICS (Provisioning / Security & Compliance)
File: fb5a5df7-6d74-4243-ab82-ff779a958bfd.md

title: ECR Repository Is Publicly Accessible hide: toc: true navigation: true <style> .highlight .hll { background-color: #ff171742; } .md-content { max-width: 1100px; margin: 0 auto; } </style> Query id: fb5a5df7-6d74-4243-ab82-ff779a958bfd Query name: ECR Repository Is Publicly Accessible Platform: Ansible Severity: <span style="color:#ff0000">Critical</span> Category: Access Control URL: Amazon ECR image repositories shouldn't have public access<br> ```yaml title="Positive test num. 1 - yaml file" hl_lines="17 4" name: set-policy as object community.aws.ecs_ecr: name: needs-policy-object policy: Version: '2008-10-17' Statement: Sid: read-only Effect: Allow Principal: '*' Action: ecr:GetDownloadUrlForLayer ecr:BatchGetImage ecr:BatchCheckLayerAvailability name: set-policy as string community.aws.ecs_ecr: name: needs-policy-string policy: > { "Id": "id113", "Version": "2012-10-17", "Statement": [ { "Action": [ "s3:put" ], "Effect": "Allow", "Resource": "arn:aws:s3:::S3B_181355/*", "Principal": "*" } ] } ``` ```yaml title="Negative test num. 1 - yaml file" name: set-policy as object community.aws.ecs_ecr: name: needs-policy-object policy: Version: '2008-10-17' Statement: Sid: read-only Effect: Allow Action: ecr:GetDownloadUrlForLayer ecr:BatchGetImage ecr:BatchCheckLayerAvailability ```
Project: Athenz (Provisioning / Key Management)
File: example.md

Use the service cert present locally on the box to talk to ZMS, find out if the current principal has "Access" to a specified resource, in a given domain. Principal Domain: home.userid Principal identity: home.userid.helloworld Target Domain: home.userid.movies Target Role: home.userid.movies:role.editors Target Resource: home.userid:rec.movie cert: TLS cert to use key: key for the TLS cert zms: ZMS endpoint domain: domain the principal is from (example: home.userid) action: action to be checked for resource: fully qualified resource name (example: home.userid.movies:role.editors) zms: optional role for which the roletoken needs to be fetched Granted status for get-access call Use the ZMS Go client provide a http.Transport option with TLSClientConfig object set with TLS cert read from the x509 cert. Use a domain/service that you wish to use. For trial run, you can use your personal domain, home.{userid} and create a service and obtain the TLS certificate in Athenz UI Sample commands for generating key pairs openssl genrsa -out service_private.key 2048 openssl rsa -in serviceprivate.key -pubout > servicepublic.key Sample Command for fetching CSR zts-svccert -csr -domain home.palakas -service helloworld -private-key ./service_private.key -key-version 0 -dns-domain zts.oath.cloud Setup role/policy in target domain zms-cli -d home.userid.movies add-regular-role editors home.userid.helloworld zms-cli -d home.userid.movies add-policy editors_policy grant read to editors on rec.movie go build ./get-access -zms https://<zms-endpoint-domain>:<port>/zms/v1 -cert /path/to/cert -key /path/to/key -domain home.userid -resource "home.userid:rec.movie" -action read Copyright The Athenz Authors Licensed under the
Project: KICS (Provisioning / Security & Compliance)
File: 17d5ba1d-7667-4729-b1a6-b11fde3db7f7.md

title: Stack Retention Disabled hide: toc: true navigation: true <style> .highlight .hll { background-color: #ff171742; } .md-content { max-width: 1100px; margin: 0 auto; } </style> Query id: 17d5ba1d-7667-4729-b1a6-b11fde3db7f7 Query name: Stack Retention Disabled Platform: Ansible Severity: <span style="color:#ff7213">Medium</span> Category: Backup URL: Make sure that retain_stack is enabled to keep the Stack and it's associated resources during resource destruction<br> ```yaml title="Positive test num. 1 - yaml file" hl_lines="2 23" name: Create a stack set with instances in two accounts community.aws.cloudformationstackset: name: my-stack2 description: Test stack in two accounts state: present template_url: https://s3.amazonaws.com/my-bucket/cloudformation.template accounts: [1234567890, 2345678901] regions: us-east-1 name: on subsequent calls, templates are optional but parameters and tags can be altered community.aws.cloudformationstackset: name: my-stack3 state: present parameters: InstanceName: mystackedinstance tags: foo: bar test: stack accounts: [1234567890, 2345678901] regions: us-east-1 purge_stacks: true ``` ```yaml title="Negative test num. 1 - yaml file" name: Create a stack set with instances in two accounts community.aws.cloudformationstackset: name: my-stack description: Test stack in two accounts state: present template_url: https://s3.amazonaws.com/my-bucket/cloudformation.template accounts: [1234567890, 2345678901] regions: us-east-1 purge_stacks: false ```
Project: ClickHouse (App Definition and Development / Database)
File: v21.8.2.19-prestable.md

sidebar_position: 1 sidebar_label: 2022 Backported in : Improve latency of short queries, that require reading from tables with large number of columns. (). Backported in : Fix `optimizeskipunusedshardsrewrite_in` for non-UInt64 types (may select incorrect shards eventually or throw `Cannot infer type of an empty tuple` or `Function tuple requires at least one argument`). (). Backported in : Fixed `Not found column ...` and `Missing column ...` errors when selecting from `MaterializeMySQL`. Fixes , , . (). Backported in : Fix sharding_key from column w/o function for remote() (before `select from remote('127.1', system.one, dummy)` leads to `Unknown column: dummy, there are only columns .` error). (). Backported in : Fix possible mismatched header when using normal projection with prewhere. This fixes . (). Backported in : Fixed incorrect `sequence_id` in MySQL protocol packets that ClickHouse sends on exception during query execution. It might cause MySQL client to reset connection to ClickHouse server. Fixes . (). Backported in : Fix potential crash if more than one `untuple` expression is used. (). Backported in : Remove excessive newline in `threadname` column in `system.stacktrace` table. This fixes . (). Backported in : Fix logical error on join with totals, close . (). Backported in : Fix zstd decompression in case there are escape sequences at the end of internal buffer. Closes . (). Backported in : Fixed rare bug in lost replica recovery that may cause replicas to diverge. (). Backported in : Fix `optimizedistributedgroupbyshardingkey` for multiple columns (leads to incorrect result w/ `optimizeskipunusedshards=1`/`allownondeterministicoptimizeskipunused_shards=1` and multiple columns in sharding key expression). (). Backported in : Fix possible crash when login as dropped user. This PR fixes . (). Backported in : Fix infinite non joined block stream in `partialmergejoin` close . (). Backported in : Fix some fuzzed msan crash. Fixes . (). Backported in : Fix broken name resolution after rewriting column aliases. This fixes . (). Backported in : Fix issues with `CREATE DICTIONARY` query if dictionary name or database name was quoted. Closes . (). Backported in : Fix crash in rabbitmq shutdown in case rabbitmq setup was not started. Closes . (). Backported in : Update `chown` cmd check in clickhouse-server docker entrypoint. It fixes the bug that cluster pod restart failed (or timeout) on kubernetes. (). Backported in : Fix incorrect function names of groupBitmapAnd/Or/Xor. This fixes. (). Backported in : Fix history file conversion if file is empty. (). Backported in : Fix potential nullptr dereference in window functions. This fixes . (). Backported in : Sometimes SET ROLE could work incorrectly, this PR fixes that. (). Remove misleading stderr output (). Less logging in AsynchronousMetrics (). Remove MySQLWireContext (). Update link to dpkg-deb in dockerfiles ().
Project: Meshery (Provisioning / Automation & Configuration)
File: brew.md

layout: default title: Brew permalink: installation/linux-mac/brew type: installation category: mesheryctl redirect_from: installation/platforms/brew display-title: "true" language: en list: include image: /assets/img/platforms/homebrew.png abstract: Install Meshery CLI on Linux or MacOS with Brew {% include mesheryctl/installation-brew.md %}
Project: KICS (Provisioning / Security & Compliance)
File: 68a51e22-ae5a-4d48-8e87-b01a323605c9.md

title: Using Unnamed Build Stages hide: toc: true navigation: true <style> .highlight .hll { background-color: #ff171742; } .md-content { max-width: 1100px; margin: 0 auto; } </style> Query id: 68a51e22-ae5a-4d48-8e87-b01a323605c9 Query name: Using Unnamed Build Stages Platform: Dockerfile Severity: <span style="color:#edd57e">Low</span> Category: Build Process URL: This query is used to ensure that build stages are named. This way even if the Dockerfile is re-ordered, the COPY instruction doesn't break.<br> ```dockerfile title="Positive test num. 1 - dockerfile file" hl_lines="10" FROM golang:1.16 WORKDIR /go/src/github.com/foo/href-counter/ RUN go get -d -v golang.org/x/net/html COPY app.go ./ RUN CGO_ENABLED=0 GOOS=linux go build -a -installsuffix cgo -o app . FROM alpine:latest RUN apk --no-cache add ca-certificates WORKDIR /root/ COPY --from=0 /go/src/github.com/foo/href-counter/app ./ CMD ["./app"] ``` ```dockerfile title="Negative test num. 1 - dockerfile file" FROM golang:1.7.3 AS builder WORKDIR /go/src/github.com/foo/href-counter/ RUN go get -d -v golang.org/x/net/html COPY app.go . RUN CGO_ENABLED=0 GOOS=linux go build -a -installsuffix cgo -o app . FROM alpine:latest RUN apk --no-cache add ca-certificates WORKDIR /root/ COPY --from=builder /go/src/github.com/foo/href-counter/app . CMD ["./app"] ```
Project: Meshery (Provisioning / Automation & Configuration)
File: nginx-past-results.md

layout: past-results-layout title: Meshery-Nginx Past Results permalink: installation/compatibility-matrix/meshery-nginx-sm-past-results abstract: a complete compatibility matrix and project test status dashboard. language: en display-title: "false" list: exclude type: "project" service-mesh: "meshery-nginx-sm" subheading: Meshery-Nginx
Project: Meshery (Provisioning / Automation & Configuration)
File: ps-operator.md

layout: integration title: Percona Operator for MySQL subtitle: Collaborative and visual infrastructure as code for Percona Operator for MySQL image: /assets/img/integrations/ps-operator/icons/color/ps-operator-color.svg permalink: extensibility/integrations/ps-operator docURL: https://docs.meshery.io/extensibility/integrations/ps-operator description: integrations-category: Database integrations-subcategory: App Definition and Development registrant: Artifact Hub components: name: percona-server-my-sql-backup colorIcon: assets/img/integrations/ps-operator/components/percona-server-my-sql-backup/icons/color/percona-server-my-sql-backup-color.svg whiteIcon: assets/img/integrations/ps-operator/components/percona-server-my-sql-backup/icons/white/percona-server-my-sql-backup-white.svg description: name: percona-server-my-sql-restore colorIcon: assets/img/integrations/ps-operator/components/percona-server-my-sql-restore/icons/color/percona-server-my-sql-restore-color.svg whiteIcon: assets/img/integrations/ps-operator/components/percona-server-my-sql-restore/icons/white/percona-server-my-sql-restore-white.svg description: name: percona-server-my-sql colorIcon: assets/img/integrations/ps-operator/components/percona-server-my-sql/icons/color/percona-server-my-sql-color.svg whiteIcon: assets/img/integrations/ps-operator/components/percona-server-my-sql/icons/white/percona-server-my-sql-white.svg description: featureList: [ "Drag-n-drop cloud native infrastructure designer to configure, model, and deploy your workloads.", "Invite anyone to review and make changes to your private designs.", "Ongoing synchronization of Kubernetes configuration and changes across any number of clusters." ] howItWorks: "Collaborative Infrastructure as Code" howItWorksDetails: "Collaboratively manage infrastructure with your coworkers synchronously sharing the same designs." language: en list: include type: extensibility category: integrations
Project: Presto (App Definition and Development / Database)
File: t-digest.md

The implementation of t-digest in this library is based on . It has been modified to support Slice serialization. Unless otherwise noted, all values are little-endian. The t-digest algorithm uses a set of centroids to store a distribution of values. A centroid is a data structure that has an associated mean and weight. In this format, the centroids that make up the t-digest are serialized by storing the two metrics mentioned. format: byte value which represents the format used for serialization (currently just one format exists, `0`) type: byte value which represents the data type of the values in the distribution min: represents the minimum value of the distribution represented as a double max: represents the maximum value of the distribution represented as a double compression: the compression factor used when creating the t-digest total weight: the total number of values in the t-digest activeCentroids: the number of centroids used by the t-digest centroids: the sequence of centroids which represent the t-digest, ordered by ascending mean The centroids section in the t-digest consists of two arrays of length `activeCentroids`: weight[]: an array with the number of values contained in each centroid mean[]: an array with the average value of each centroid
Project: ClickHouse (App Definition and Development / Database)
File: v22.7.3.5-stable.md

sidebar_position: 1 sidebar_label: 2022 Backported in : Former packages used to install systemd.service file to `/etc`. The files there are marked as `conf` and are not cleaned out, and not updated automatically. This PR cleans them out. (). Backported in : Former packages used to install systemd.service file to `/etc`. The files there are marked as `conf` and are not cleaned out, and not updated automatically. This PR cleans them out. (). Backported in : Fix big memory usage during fetches. Fixes . (). Backported in : Fix big memory usage during fetches. Fixes . ().
Project: ShardingSphere (App Definition and Development / Database)
File: register-migration-source-storage-unit.en.md

+++ title = "REGISTER MIGRATION SOURCE STORAGE UNIT" weight = 3 +++ The `REGISTER MIGRATION SOURCE STORAGE UNIT` syntax is used to register migration source storage unit for the currently connection. {{< tabs >}} {{% tab name="Grammar" %}} ```sql RegisterStorageUnit ::= 'REGISTER' 'MIGRATION' 'SOURCE' 'STORAGE' 'UNIT' storageUnitDefinition (',' storageUnitDefinition)* storageUnitDefinition ::= StorageUnitName '(' 'URL' '=' url ',' 'USER' '=' user (',' 'PASSWORD' '=' password)? (',' propertiesDefinition)?')' storageUnitName ::= identifier url ::= string user ::= string password ::= string propertiesDefinition ::= 'PROPERTIES' '(' ( key '=' value ) ( ',' key '=' value )* ')' key ::= string value ::= literal ``` {{% /tab %}} {{% tab name="Railroad diagram" %}} <iframe frameborder="0" name="diagram" id="diagram" width="100%" height="100%"></iframe> {{% /tab %}} {{< /tabs >}} Confirm that the registered migration source storage unit can be connected normally, otherwise it will not be added successfully; `storageUnitName` is case-sensitive; `storageUnitName` needs to be unique within the current connection; `storageUnitName` name only allows letters, numbers and `_`, and must start with a letter; `poolProperty` is used to customize connection pool parameters, `key` must be the same as the connection pool parameter name, `value` supports int and String types; When `password` contains special characters, it is recommended to use the string form; For example, the string form of `password@123` is `"password@123"`. The data migration source storage unit currently only supports registration using `URL`, and temporarily does not support using `HOST` and `PORT`. Register migration source storage unit ```sql REGISTER MIGRATION SOURCE STORAGE UNIT ds_0 ( URL="jdbc:mysql://127.0.0.1:3306/migrationds0?serverTimezone=UTC&useSSL=false", USER="root", PASSWORD="root" ); ``` Register migration source storage unit and set connection pool parameters ```sql REGISTER MIGRATION SOURCE STORAGE UNIT ds_0 ( URL="jdbc:mysql://127.0.0.1:3306/migrationds0?serverTimezone=UTC&useSSL=false", USER="root", PASSWORD="root", PROPERTIES("minPoolSize"="1","maxPoolSize"="20","idleTimeout"="60000") ); ``` `REGISTER`, `MIGRATION`, `SOURCE`, `STORAGE`, `UNIT`, `USER`, `PASSWORD`, `PROPERTIES`, `URL`