Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
couchbase-index-manager
Advanced tools
Provides a command-line interface to manage Couchbase indexes, synchronizing them to index definitions provided in files. It is intended to be used as part of a CI/CD pipeline, or to assist with local development.
It also provides an API which may be used by importing a node module.
The sync command executes an index synchronization
couchbase-index-manager [common-options] sync [sync-options] <bucketName> <path...>
bucketName
should be the name of the bucket to sync, and path
is the path to the index definitions. path
may be either a single YAML or JSON file, or a directory containing multiple files. Multiple paths may also be provided, they will be processed in order.
Supply "-" as the path to process definitions from stdin. JSON input will be assumed if it starts with a curly brace, otherwise it will be parsed as YAML.
cat definitions.yaml | couchbase-index-manager -c couchbase://node -u Administrator -p password sync beer-sample -
Note: --force is assumed if processing from stdin.
couchbase-index-manager -c couchbase://localhost -u Administrator -p password sync beer-sample ./directory/
couchbase-index-manager -c couchbase://localhost -u Administrator -p password sync beer-sample ./directory/file.yaml
couchbase-index-manager -c couchbase://localhost -u Administrator -p password sync beer-sample ./directory/file.json
Definition files may be written in either JSON or YAML. The define the name of the index, the columns to be index, and may also contain other options.
When YAML is used, multiple definitions may be provided in a single file, separated by a line of dashes.
name: beer_primary
is_primary: true
---
name: BeersByAbv
index_key:
- abv
condition: (`type` = 'beer')
num_replica: 0
---
name: BeersByIbu
index_key:
- ibu
condition: (`type` = 'beer')
num_replica: 0
---
name: OldIndex
lifecycle:
drop: true
Field | Required | Description |
---|---|---|
type | N | If present, must be "index" |
name | Y | Name of the index. |
is_primary | N | True for a primary index. |
index_key | N | Array of index keys. May be attributes of documents deterministic functions. |
condition | N | Condition for the WHERE clause of the index. |
manual_replica | N | Force manual replica management, rather than using Couchbase 5.X automatic replicas. Automatically set to true for Couchbase 4.X. |
num_replica | N | Defaults to 0, number of index replicas to create. |
nodes | N | List of nodes for index placement. Automatic placement is used if not present. |
lifecycle.drop | N | If true, drops the index if it exists. |
A primary index must not have index_key or condition properties. A secondary index must have values in the index_key array. Additionally, there may not be more than one primary index in the set of definitions.
If nodes
and num_replica
are both present, then num_replica
must be the number of nodes minus one.
When deploying to multiple environments, there may be variations in index definitions. For example, you may have a different number of replicas or a different list of node assignments. To support this, you may also apply overrides to the index definitions.
Overrides are processed in the order they are found, and can only override index definitions that with the same name. The index definition must also be found before the override. Any field which is not supplied on the override will be skipped, leaving the original value unchanged. The exception is nodes
and num_replica
, updating one will automatically adjust the other field.
Field | Required | Description |
---|---|---|
type | Y | Always "override". |
name | Y | Name of the index. |
is_primary | N | True for a primary index. |
index_key | N | Array of index keys. May be attributes of documents deterministic functions. |
condition | N | Condition for the WHERE clause of the index. |
manual_replica | N | Force manual replica management, rather than using Couchbase 5.X automatic replicas. Automatically set to true for Couchbase 4.X. |
num_replica | N | Number of index replicas to create. |
nodes | N | List of nodes for index placement. |
lifecycle.drop | N | If true, drops the index if it exists. |
post_process | N | Optional Javascript function body which may further alter the index definition. "this" will be the index definition. |
When deploying to multiple environments, the names and IPs of nodes in the clusters probably vary. You may use node maps to provide aliases for nodes to support these different environments. Even for a single environment it may be useful to help reduce repetition. For example, you may define several indexes referencing "node1" and "node2" in the nodes
attribute. Then add a node map which maps "node1" to "172.21.0.2" and "node2" to "127.21.0.3".
Node maps are processed in the order they are encountered, and values defined in later node maps will override or append to earlier node maps. Any node not found in the node map will be unchanged and treated as a fully qualified name.
Field | Required | Description |
---|---|---|
type | Y | Always "nodeMap". |
map | Y | A hashmap keyed by alias, with the value being the fully qualified node name. |
name: BeersByIbu
index_key:
- ibu
condition: (`type` = 'beer')
nodes:
- node1
- node2
---
type: nodeMap
map:
node1: 172.21.0.2
node2: 172.21.0.3
It is important that couchbase-index-manager be able to recognize when indexes are updated. Couchbase Server performs certain normalizations on both index_key and condition, meaning that the values in Couchbase may be slightly different than the values submitted when the index is created.
Therefore, it is important that the definition files be created with normalization in mind. Make sure the definitions include the already normalized version of the keys and condition, otherwise couchbase-index-manager may drop and recreate the index on each run.
If an index is removed from the definition files, it is not dropped. This prevents different CI/CD processes from interfering with each other as they manage different indexes. To drop an index, leave the definition in place but set lifecycle.drop
to true
.
Replicas are emulated on Couchbase Server 4.X by creating multiple indexes. If num_replica
is greater than 0, the additional indexes are named with the suffix _replicaN
, where N starts at 1. For example, an index with 2 replicas named MyIndex
will have 3 indexes, MyIndex
, MyIndex_replica1
, and MyIndex_replica2
.
This approach may also be enabled on Couchbase Server 5.X by settings manual_replica
to true on the index definition.
Note that the nodes
list is only respected during index creation, indexes will not be moved between nodes if they already exist.
On Couchbase Server 5.X, automatic index replica managemnet is the default. In this case, replicas are managed by Couchbase Server directly, rather than by couchbase-index-manager.
Currently, it isn't possible to detect replicas via queries to "system:indexes". Therefore, num_replica
is only respected during index creation. Changes to num_replica
on existing indexes will be ignored.
Note that the nodes
list is only respected during index creation, indexes will not be moved between nodes if they already exist.
A Docker image for running couchbase-index-manager is available at Docker Hub.
docker run --rm -it -v ./:/definitions btburnett3/couchbase-index-manager -c couchbase://cluster -u Administrator -p password sync beer-sample /definitions
FAQs
Manage Couchbase indexes during the CI/CD process
The npm package couchbase-index-manager receives a total of 7 weekly downloads. As such, couchbase-index-manager popularity was classified as not popular.
We found that couchbase-index-manager demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.