cwielenb/CNCF-Dataset huggingface dataset:
Project: Apache Hadoop (App Definition and Development / Database)
File: RELEASENOTES.2.6.2.md

<! --> These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements. | Major | Followup fixes after YARN-2019 regarding RM behavior when state-store error occurs* Set YARN\FAIL\FAST to be false by default. If HA is enabled and if there's any state-store error, after the retry operation failed, we always transition RM to standby state.
Project: ClickHouse (App Definition and Development / Database)
File: v23.3.6.7-lts.md

sidebar_position: 1 sidebar_label: 2023 Backported in : Improve the progress bar for file/s3/hdfs/url table functions by using chunk size from source data and using incremental total size counting in each thread. Fix the progress bar for Cluster functions. This closes . (). Backported in : Split huge `RUN` in Dockerfile into smaller conditional. Install the necessary tools on demand in the same `RUN` layer, and remove them after that. Upgrade the OS only once at the beginning. Use a modern way to check the signed repository. Downgrade the base repo to ubuntu:20.04 to address the issues on older docker versions. Upgrade golang version to address golang vulnerabilities. (). Fix type of LDAP server params hash in cache entry ().
Project: Trivy (Provisioning / Security & Compliance)
File: c.md

Trivy supports Conan C/C++ Package Manager ( and with limitations). The following scanners are supported. | Package manager | SBOM | Vulnerability | License | |--|:-:|:-:|:-:| | Conan | | | [^1] | The following table provides an outline of the features Trivy offers. | Package manager | File | Transitive dependencies | Dev dependencies | | Position | |--|-|:--:|:-:|::|:--:| | Conan (lockfile v1) | conan.lock[^2] | | Excluded | | | | Conan (lockfile v2) | conan.lock[^2] | [^3] | Excluded | - | | In order to detect dependencies, Trivy searches for `conan.lock`[^1]. The Conan lock file doesn't contain any license information. To obtain licenses we parse the `conanfile.py` files from the . To correctly detection licenses, ensure that the cache directory contains all dependencies used. . .
Project: zot (Provisioning / Container Registry)
File: README_fuzz.md

This project makes use of native Go 1.18 fuzzing. An in-depth tutorial for fuzzing in Go can be found . As language specifies, fuzz tests are included among unit-tests, inside the the same `*_test.go files`, in the packages they intend to fuzz. See Zot doesn't store the test data for fuzzing in the same repo, nor it is added before fuzzing with `(*testing.F).Add` . Instead, it is stored in a separate repo called . To start fuzzing locally, one can use the Make target . The default runtime for each fuzz test is 10s, which can be overriden with the fuzztime variable ``` make fuzz-all fuzztime=20 ``` By running this target, testdata for fuzzing gets downloaded from the previously mentioned repo and the fuzzing begins for every fuzz function that is found.
Project: KICS (Provisioning / Security & Compliance)
File: 4d32780f-43a4-424a-a06d-943c543576a5.md

title: IoT Policy Allows Action as Wildcard hide: toc: true navigation: true <style> .highlight .hll { background-color: #ff171742; } .md-content { max-width: 1100px; margin: 0 auto; } </style> Query id: 4d32780f-43a4-424a-a06d-943c543576a5 Query name: IoT Policy Allows Action as Wildcard Platform: CloudFormation Severity: <span style="color:#ff7213">Medium</span> Category: Access Control URL: IoT Policy should not allow Action to be set as *<br> ```yaml title="Positive test num. 1 - yaml file" hl_lines="7" AWSTemplateFormatVersion: 2010-09-09 Description: A sample template Resources: IoTPolicy: Type: AWS::IoT::Policy Properties: PolicyDocument: Version: '2012-10-17' Statement: Effect: Allow Action: "*" Resource: arn:aws:iot:us-east-1:123456789012:client/client Effect: Deny Action: sqs:* NotResource: my-hardcoded-arn PolicyName: PolicyName ``` ```json title="Positive test num. 2 - json file" hl_lines="6" { "Resources": { "IoTPolicy": { "Type": "AWS::IoT::Policy", "Properties": { "PolicyDocument": { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": "*", "Resource": [ "arn:aws:iot:us-east-1:123456789012:client/client" ] }, { "Effect": "Deny", "Action": [ "sqs:*" ], "NotResource": "my-hardcoded-arn" } ] }, "PolicyName": "PolicyName" } } }, "AWSTemplateFormatVersion": "2010-09-09T00:00:00Z", "Description": "A sample template" } ``` ```yaml title="Negative test num. 1 - yaml file" AWSTemplateFormatVersion: 2010-09-09 Description: A sample template Resources: IoTPolicy: Type: AWS::IoT::Policy Properties: PolicyDocument: Version: '2012-10-17' Statement: Effect: Allow Action: iot:Connect Resource: arn:aws:iot:us-east-1:123456789012:client/client1 PolicyName: PolicyName ``` ```json title="Negative test num. 2 - json file" { "AWSTemplateFormatVersion": "2010-09-09T00:00:00Z", "Description": "A sample template", "Resources": { "IoTPolicy": { "Type": "AWS::IoT::Policy", "Properties": { "PolicyDocument": { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "iot:Connect" ], "Resource": [ "arn:aws:iot:us-east-1:123456789012:client/client1" ] } ] }, "PolicyName": "PolicyName" } } } } ```
Project: Kui (App Definition and Development / Application Definition & Image Build)
File: kui_shell_plugin_client_common.TextWithIconWidgetOptions.md

/ / TextWithIconWidgetOptions .TextWithIconWidgetOptions End-user options `TextWithIconWidgetOptions` `Optional` className: `string` `Optional` position: `"bottom"` \| `"top-end"` \| `"top"` \| `"top-start"` \| `"left"` \| `"right"` \| `"auto"` popover position override specified by container (not client)?
Project: YugabyteDB (App Definition and Development / Database)
File: dcl_alter_policy.md

title: ALTER POLICY statement [YSQL] headerTitle: ALTER POLICY linkTitle: ALTER POLICY description: Use the ALTER POLICY statement to change the definition of a row level security policy. menu: v2.18: identifier: dclalterpolicy parent: statements type: docs Use the `ALTER POLICY` statement to change the definition of a row level security policy. It can be used to change the roles that the policy applies to and the `USING` and `CHECK` expressions of the policy. {{%ebnf%}} alter_policy, alterpolicyrename {{%/ebnf%}} Where `name` is the name of the policy being updated. `table_name` is the name of the table on which the policy applies. `new_name` is the new name of the policy. `role_name` is the role(s) to which the policy applies. Use `PUBLIC` if the policy should be applied to all roles. `using_expression` is a SQL conditional expression. Only rows for which the condition returns to true will be visible in a `SELECT` and available for modification in an `UPDATE` or `DELETE`. `check_expression` is a SQL conditional expression that is used only for `INSERT` and `UPDATE` queries. Only rows for which the expression evaluates to true will be allowed in an `INSERT` or `UPDATE`. Note that unlike `using_expression`, this is evaluated against the proposed new contents of the row. Rename a policy. ```plpgsql yugabyte=# ALTER POLICY p1 ON table_foo RENAME TO p2; ``` Apply policy to all roles. ```plpgsql yugabyte=# ALTER POLICY p1 ON table_foo TO PUBLIC; ```
Project: ClickHouse (App Definition and Development / Database)
File: v21.12.3.32-stable.md

sidebar_position: 1 sidebar_label: 2022 Backported in : - ClickHouse Keeper handler should remove operation when response sent. (). Backported in : Fix LOGICAL_ERROR when the target of a materialized view is a JOIN or a SET table. (). Backported in : Server might fail to start if database with `MySQL` engine cannot connect to MySQL server, it's fixed. Fixes . (). Backported in : `MergeTree` table engine might silently skip some mutations if there are too many running mutations or in case of high memory consumption, it's fixed. Fixes . (). Backported in : Fix optimization with lazy seek for async reads from remote fs. Closes . (). Backported in : Close . (). Backported in : Fix a regression in `replaceRegexpAll` function. The function worked incorrectly when matched substring was empty. This closes . This closes . (). Backported in : Fix hdfs url check that didn't allow using HA namenode address. Bug was introduced in https://github.com/ClickHouse/ClickHouse/pull/31042. (). Backported in : Fix Context leak in case of cancelhttpreadonlyqueriesonclientclose (i.e. leaking of external tables that had been uploaded the the server and other resources). (). Backported in : Fix error `Invalid version for SerializationLowCardinality key column` in case of reading from `LowCardinality` column with `localfilesystemreadprefetch` or `remotefilesystemreadprefetch` enabled. (). Improve quota's end-of-interval calculations. (). Fix race in skipping index of type `hypothesis` (). Always apply const-condition-if optimization. (). Merge (). Merge (). Merge ().
Project: KICS (Provisioning / Security & Compliance)
File: 2a901825-0f3b-4655-a0fe-e0470e50f8e6.md

title: MySQL SSL Connection Disabled hide: toc: true navigation: true <style> .highlight .hll { background-color: #ff171742; } .md-content { max-width: 1100px; margin: 0 auto; } </style> Query id: 2a901825-0f3b-4655-a0fe-e0470e50f8e6 Query name: MySQL SSL Connection Disabled Platform: Ansible Severity: <span style="color:#ff7213">Medium</span> Category: Encryption URL: Make sure that for MySQL Database Server, 'Enforce SSL connection' is enabled<br> ```yaml title="Positive test num. 1 - yaml file" hl_lines="3 23" name: Create (or update) MySQL Server azure.azcollection.azurermmysqlserver: resource_group: myResourceGroup name: testserver sku: name: BGen51 tier: Basic location: eastus storage_mb: 1024 version: 5.6 admin_username: cloudsa admin_password: password name: Create (or update) MySQL Server2 azure.azcollection.azurermmysqlserver: resource_group: myResourceGroup name: testserver sku: name: BGen51 tier: Basic location: eastus storage_mb: 1024 enforce_ssl: false version: 5.6 admin_username: cloudsa admin_password: password ``` ```yaml title="Negative test num. 1 - yaml file" name: Create (or update) MySQL Server azure.azcollection.azurermmysqlserver: resource_group: myResourceGroup name: testserver sku: name: BGen51 tier: Basic location: eastus storage_mb: 1024 enforce_ssl: true version: 5.6 admin_username: cloudsa admin_password: password ```
Project: KICS (Provisioning / Security & Compliance)
File: 192fe40b-b1c3-448a-aba2-6cc19a300fe3.md

title: CronJob Deadline Not Configured hide: toc: true navigation: true <style> .highlight .hll { background-color: #ff171742; } .md-content { max-width: 1100px; margin: 0 auto; } </style> Query id: 192fe40b-b1c3-448a-aba2-6cc19a300fe3 Query name: CronJob Deadline Not Configured Platform: Kubernetes Severity: <span style="color:#edd57e">Low</span> Category: Resource Management URL: Cronjobs must have a configured deadline, which means the attribute 'startingDeadlineSeconds' must be defined<br> ```yaml title="Positive test num. 1 - yaml file" hl_lines="6" apiVersion: batch/v1beta1 kind: CronJob metadata: name: hello spec: schedule: "/1 *" jobTemplate: spec: template: spec: containers: name: hello image: busybox args: /bin/sh -c date; echo Hello from the Kubernetes cluster restartPolicy: OnFailure ``` ```yaml title="Negative test num. 1 - yaml file" apiVersion: batch/v1beta1 kind: CronJob metadata: name: hello spec: schedule: "/1 *" startingDeadlineSeconds: 100 jobTemplate: spec: template: spec: containers: name: hello image: busybox args: /bin/sh -c date; echo Hello from the Kubernetes cluster restartPolicy: OnFailure ```
Project: Podman (App Definition and Development / Application Definition & Image Build)
File: image-volume.md

Tells Podman how to handle the builtin image volumes. Default is bind. bind: An anonymous named volume is created and mounted into the container. tmpfs: The volume is mounted onto the container as a tmpfs, which allows the users to create content that disappears when the container is stopped. ignore: All volumes are just ignored and no action is taken.
Project: ArangoDB (App Definition and Development / Database)
File: implicit_failure_make_error_code_copy_constructor.md

+++ title = "`basicresult(const failuretype<T> &)`" description = "Implicit error-from-failure-type-sugar copy constructor. Available if `predicate::enablemakeerrorcodecompatible_conversion<void, T, void>` is true, or `T` is `void`. Constexpr, triviality and noexcept propagating." categories = ["constructors", "implicit-constructors", "tagged-constructors"] weight = 531 +++ Implicit error-from-failure-type-sugar copy constructor used to disambiguate the construction of the error type. Note that if `T = void`, `errortype` will be default constructed. Calls {{% api "void onresultcopyconstruction(T *, U &&) noexcept" %}} with `this` and `const failure_type<T> &`. Requires: `predicate::enablemakeerrorcodecompatible_conversion<void, T, void>` is true, or `T` is `void`. Complexity: Same as for the `errortype` constructor which accepts `T`, or the `errortype` default constructor if `T` is `void`. Constexpr, triviality and noexcept of underlying operations is propagated.
Project: ClickHouse (App Definition and Development / Database)
File: v23.6.3.87-stable.md

sidebar_position: 1 sidebar_label: 2023 Backported in : Fix incorrect projection analysis which invalidates primary keys. This issue only exists when `queryplanoptimizeprimarykey = 1, queryplanoptimize_projection = 1` . This fixes . This fixes . (). Backported in : Add `clickhouse-keeper-client` symlink to the clickhouse-server package. (). Backported in : Packing inline cache into docker images sometimes causes strange special effects. Since we don't use it at all, it's good to go. (). Backported in : The compiler's profile data (`-ftime-trace`) is uploaded to ClickHouse Cloud., the second attempt after . (). Backported in : Preserve environment parameters in `clickhouse start` command. Fixes . (). Fix for moving 'IN' conditions to PREWHERE (). Fix binary arithmetic for Nullable(IPv4) (). Support IPv4 and IPv6 as dictionary attributes (). Check refcount in `RemoveManyObjectStorageOperation::finalize` instead of `execute` (). Fix ORDER BY tuple of WINDOW functions (). Fix error in `groupArrayMoving` functions (). Disable expression templates for time intervals (). Fix `countSubstrings()` hang with empty needle and a column haystack (). Fixed inserting into Buffer engine (). The implementation of AnyHash was non-conformant. (). Fix abort in function `transform` (). Fix possible error "Cannot drain connections: cancel first" (). init and destroy ares channel on demand.. (). Fix crash in function `tuple` with one sparse column argument (). clickhouse-keeper: fix implementation of server with poll() (). Fix password leak in show create mysql table (). Not-ready Set (). Fix incorrect normal projection AST format (). Fix loading lazy database during system.table select query (). Fix: interpolate expression takes source column instead of same name aliased from select expression. (). Correctly handle totals and extremes with `DelayedSource` (). Fix: sorted distinct with sparse columns (). Fix fuzzer crash in parseDateTime() (). Fix: logical error in grace hash join (). Pin rust nightly (to make it stable) (). Fix crash in comparison functions due to incorrect query analysis (). Less replication errors (). Improve logging macros (). Fix deadlocks in StorageTableFunctionProxy (). Increase min protocol version for sparse serialization (). Docker improvements (). Disable testreversedns_query/test.py (). Disable testhostregexpmultipleptr_records/test.py (). Get rid of describe_parameters for the best robot token ().
Project: KICS (Provisioning / Security & Compliance)
File: d53323be-dde6-4457-9a43-42df737e71d2.md

title: BOM - AWS Kinesis hide: toc: true navigation: true <style> .highlight .hll { background-color: #ff171742; } .md-content { max-width: 1100px; margin: 0 auto; } </style> Query id: d53323be-dde6-4457-9a43-42df737e71d2 Query name: BOM - AWS Kinesis Platform: CloudFormation Severity: <span style="color:#CCCCCC">Trace</span> Category: Bill Of Materials URL: A list of Kinesis resources found. Amazon Kinesis is a real-time streaming service that provides collection, processing, and analysis of video and data streams in real-time<br> ```yaml title="Positive test num. 1 - yaml file" hl_lines="3" Description: Kinesis Resources: MyStream: Type: AWS::Kinesis::Stream Properties: Name: MyKinesisStream1 RetentionPeriodHours: 168 ShardCount: 3 StreamEncryption: EncryptionType: KMS KeyId: !Ref myKey ``` ```json title="Positive test num. 2 - json file" hl_lines="4" { "Description": "Kinesis", "Resources": { "MyStream2": { "Type": "AWS::Kinesis::Stream", "Properties": { "Name": "MyKinesisStream2", "RetentionPeriodHours": 168, "ShardCount": 3 } } } } ``` ```yaml title="Negative test num. 1 - yaml file" AWSTemplateFormatVersion: '2010-09-09' Resources: myDistribution: Type: AWS::CloudFront::Distribution Properties: DistributionConfig: Enabled: true ``` ```json title="Negative test num. 2 - json file" { "AWSTemplateFormatVersion": "2010-09-09", "Resources": { "myDistribution": { "Type": "AWS::CloudFront::Distribution", "Properties": { "DistributionConfig": { "Enabled": "true" } } } } } ```
Project: DevSpace (App Definition and Development / Application Definition & Image Build)
File: devspace_remove_image.md

title: "Command - devspace remove image" sidebar_label: devspace remove image Removes one or all images from the devspace ``` devspace remove image [flags] ``` ``` Removes one or all images from a devspace: devspace remove image default devspace remove image --all ``` ``` --all Remove all images -h, --help help for image ``` ``` --config string The devspace config file to use --debug Prints the stack trace if an error occurs --kube-context string The kubernetes context to use -n, --namespace string The kubernetes namespace to use --no-warn If true does not show any warning when deploying into a different namespace or kube-context than before -p, --profile string The devspace profile to use (if there is any) --silent Run in silent mode and prevents any devspace log output except panics & fatals -s, --switch-context Switches and uses the last kube context and namespace that was used to deploy the DevSpace project --var strings Variables to override during execution (e.g. --var=MYVAR=MYVALUE) ```
Project: Operator Framework (App Definition and Development / Application Definition & Image Build)
File: v1.13.0.md

title: v1.13.0 weight: 998987000 `ansible-runner` 2.0+ includes a backwards incompatible change in the command signature, so in order to use `make run` with Ansible-based operators, users will need to upgrade their local version of `ansible-runner` to 2.0.2+ See for more details.
Project: Apache Spark (App Definition and Development / Streaming & Messaging)
File: sql-ref-syntax-qry-select-sampling.md

layout: global title: Sampling Queries displayTitle: Sampling Queries license: | Licensed to the Apache Software Foundation (ASF) under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to You under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. The `TABLESAMPLE` statement is used to sample the table. It supports the following sampling methods: `TABLESAMPLE`(x `ROWS`): Sample the table down to the given number of rows. `TABLESAMPLE`(x `PERCENT`): Sample the table down to the given percentage. Note that percentages are defined as a number between 0 and 100. `TABLESAMPLE`(`BUCKET` x `OUT OF` y): Sample the table down to a `x` out of `y` fraction. Note: `TABLESAMPLE` returns the approximate number of rows or fraction requested. ```sql TABLESAMPLE ({ integerexpression | decimalexpression } PERCENT) | TABLESAMPLE ( integer_expression ROWS ) | TABLESAMPLE ( BUCKET integerexpression OUT OF integerexpression ) ``` ```sql SELECT * FROM test; +--+-+ |id|name| +--+-+ | 5|Alex| | 8|Lucy| | 2|Mary| | 4|Fred| | 1|Lisa| | 9|Eric| |10|Adam| | 6|Mark| | 7|Lily| | 3|Evan| +--+-+ SELECT * FROM test TABLESAMPLE (50 PERCENT); +--+-+ |id|name| +--+-+ | 5|Alex| | 2|Mary| | 4|Fred| | 9|Eric| |10|Adam| | 3|Evan| +--+-+ SELECT * FROM test TABLESAMPLE (5 ROWS); +--+-+ |id|name| +--+-+ | 5|Alex| | 8|Lucy| | 2|Mary| | 4|Fred| | 1|Lisa| +--+-+ SELECT * FROM test TABLESAMPLE (BUCKET 4 OUT OF 10); +--+-+ |id|name| +--+-+ | 8|Lucy| | 2|Mary| | 9|Eric| | 6|Mark| +--+-+ ```
Project: ShardingSphere (App Definition and Development / Database)
File: show-readwrite-splitting-rule.en.md

+++ title = "SHOW READWRITE_SPLITTING RULE" weight = 1 +++ The `SHOW READWRITE_SPLITTING RULE` syntax is used to query specified readwrite-splitting rules for specified database. {{< tabs >}} {{% tab name="Grammar" %}} ```sql ShowReadWriteSplittingRule::= 'SHOW' 'READWRITE_SPLITTING' ('RULE' ruleName | 'RULES') ('FROM' databaseName)? ruleName ::= identifier databaseName ::= identifier ``` {{% /tab %}} {{% tab name="Railroad diagram" %}} <iframe frameborder="0" name="diagram" id="diagram" width="100%" height="100%"></iframe> {{% /tab %}} {{< /tabs >}} When `databaseName` is not specified, the default is the currently used `DATABASE`. If `DATABASE` is not used, `No database selected` will be prompted. | Column | Description | |--|| | name | Readwrite-splitting rule name | | writedatasource_name | Write data source name | | readdatasource_names | Read data source name list | | transactionalreadquery_strategy | Routing strategy for read query within a transaction | | loadbalancertype | Load balance algorithm type | | loadbalancerprops | Load balance algorithm parameter | Query readwrite-splitting rules for specified database. ```sql SHOW READWRITESPLITTING RULES FROM readwritesplitting_db; ``` ```sql mysql> SHOW READWRITESPLITTING RULES FROM readwritesplitting_db; ++-+-+--+--++ | name | writestorageunitname | readstorageunitnames | transactionalreadquerystrategy | loadbalancertype | loadbalancer_props | ++-+-+--+--++ | msgroup0 | writeds | readds0,readds_1 | DYNAMIC | random | | ++-+-+--+--++ 1 row in set (0.01 sec) ``` Query readwrite-splitting rules for current database. ```sql SHOW READWRITE_SPLITTING RULES; ``` ```sql mysql> SHOW READWRITE_SPLITTING RULES; ++-+-+--+--++ | name | writestorageunitname | readstorageunitnames | transactionalreadquerystrategy | loadbalancertype | loadbalancer_props | ++-+-+--+--++ | msgroup0 | writeds | readds0,readds_1 | DYNAMIC | random | | ++-+-+--+--++ 1 row in set (0.01 sec) ``` Query specified readwrite-splitting rule for specified database. ```sql SHOW READWRITESPLITTING RULE msgroup0 FROM readwritesplitting_db; ``` ```sql mysql> SHOW READWRITESPLITTING RULE msgroup0 FROM readwritesplitting_db; ++-+-+--+--++ | name | writestorageunitname | readstorageunitnames | transactionalreadquerystrategy | loadbalancertype | loadbalancer_props | ++-+-+--+--++ | msgroup0 | writeds | readds0,readds_1 | DYNAMIC | random | | ++-+-+--+--++ 1 row in set (0.01 sec) ``` Query specified readwrite-splitting rule for current database. ```sql SHOW READWRITESPLITTING RULE msgroup_0; ``` ```sql mysql> SHOW READWRITESPLITTING RULE msgroup_0; ++-+-+--+--++ | name | writestorageunitname | readstorageunitnames | transactionalreadquerystrategy | loadbalancertype | loadbalancer_props | ++-+-+--+--++ | msgroup0 | writeds | readds0,readds_1 | DYNAMIC | random | | ++-+-+--+--++ 1 row in set (0.01 sec) ``` `SHOW`, `READWRITE_SPLITTING`, `RULE`, `RULES`, `FROM`