Tessera
Folgen

Johannes Schnatterer

@schnatterer.info

Software engineer, author, speaker. Field CTO of Cloudogu. My particular interests are #k8s, #GitOps, #PlatformEngineering, #o11y, #IaC, #DevOps technical leadership and of course #FLOSS/ #FOSS/ #OSS. I like owning my data and devices.

54 Posts30 Follower15 Folgt
Josh Junon@bad-at-computer.bsky.social · 11mo ago

Yep, I've been pwned. 2FA reset email, looked very legitimate. Only NPM affected. I've sent an email off to @npmjs.bsky.social to see if I can get access again. Sorry everyone, I should have paid more attention. Not like me; have had a stressful week. Will work to get this cleaned up.

@charlieeriksen.bsky.social · 11mo ago

@bad-at-computer.bsky.social Hey. Your npm account seems to have been compromised. 1 hour ago it started posting packages with backdoors to all your popular packages.

Johannes Schnatterer@schnatterer.info · 11mo ago

Just patched Argo CD CVE-2025-55190, scoring 9.9 😱 github.com/argoproj/arg... nvd.nist.gov/vuln/detail/... I am impressed that the argo project fixed this in so many versions 🙏 2.13.9, 2.14.16, 3.0.14 and 3.1.2. #argocd #cve #CVE202555190

Project API Token Exposes Repository Credentials

### Summary Argo CD API tokens with project-level permissions are able to retrieve sensitive repository credentials (usernames, passwords) through the project details API endpoint, even when the t...

github.com

Johannes Schnatterer@schnatterer.info · 12mo ago

An important building block of many cloud-native architectures just had to stop maintenance: #ExternalSecretsOperator #ESO. github.com/external-sec... The unfortunate fate of so many open source projects: We all use them, but we don't support them. Maintainers burn out.

Health of External Secrets project · Issue #5084 · external-secrets/external-secrets

Update 2: OMG thank you all for signing up. We weren't expecting such a positive response from the community <3 Update We've decided to stop releases until more long-term maintainers join our team....

github.com

GrapheneOS@grapheneos.org · last yr.

For our next release after 2025030800, we've added support for the Android 15 QPR2 Terminal for running other operating systems using hardware virtualization. It's currently only a terminal but Android is adding support for graphics and GPU acceleration for a future release.

Matthias Parbel@mapheise.bsky.social · last yr.

Du hast spannende Neuigkeiten oder möchtest Deine Erfahrungen teilen – rund um #PlatformEngineering #DeveloperExperience & Co? Dann freuen wir uns auf Deine Vorschläge beim #CallforProposals für die #CLC_Conf im November! @ixmagazin.bsky.social @dpunkt.bsky.social

heise Developer@heisedeveloper.bsky.social · last yr.

Für die Vor-Ort-Konferenz zu Developer Experience, Platform Engineering und Software Delivery suchen die Veranstalter bis 27. April Vorträge und Workshops. #Softwareentwicklung

Johannes Schnatterer@schnatterer.info · 2y ago

Heads up #ingressNginx users! Controller version 1.12 / chart 4.12, contains breaking changes. Even though a minor release, one change blocks risky annotations like the 'snippet' annotations. These are often used to block access to specific URLs, like /metrics.

Johannes Schnatterer@schnatterer.info · 2y ago

In 2024 #GitOps reached the peak of inflated expectations. It could be reaching the plateau of productivity in less than two years, so Gartner predicts. That's some major progress after being stuck in the lower left corner for as far as I can remember. Which is 2021 😅

Gartner Hype Cycle Diagram for Emerging Technologies 2024, showing, among other things, GitOps almost in the center, almost at the top of the Peak of inflated expectations, color-coded in white, which means Plateau will be reached in <2 years. Gartner Hype Cycle Diagram for Emerging Technologies 2023, showing, among other things, GitOps in the lower left corner, in the innovation trigger section, color-coded in light blue, which means Plateau will be reached in 2-5 years. Gartner Hype Cycle Diagram for Software Engineering 2022, showing, among other things, GitOps in the lower left corner, in the innovation trigger section, color coded in light blue, which means Plateau will be reached in 2-5 years. Gartner Hype Cycle Diagram for Agile and DevOps 2021, showing, among other things, GitOps in the lower left corner, in the innovation trigger section, color coded in light blue, which means Plateau will be reached in 2-5 years.