Johannes Schnatterer
LightNews LightNews
banner
schnatterer.info
Johannes Schnatterer
@schnatterer.info
25 followers 14 following 54 posts
Software engineer, author, speaker.
Field CTO of Cloudogu.

My particular interests are #k8s, #GitOps, #PlatformEngineering, #o11y, #IaC, #DevOps technical leadership and of course #FLOSS/ #FOSS/ #OSS.

I like owning my data and devices.
Posts Replies Media Videos
schnatterer.info
TIL the term #VibeEngineering" as opposite of #VibeCoding, proposed by @simonwillison.net

While the term does not feel intuitive to me, the idea does:
Vibe engineering | Hacker News
news.ycombinator.com
October 9, 2025 at 10:00 AM
schnatterer.info
TLDR recent #npm supply chain attacks

🗓️ 26 Aug: #nx packages compromised stealing SSH keys, npm tokens, and .gitconfig files and weaponized AI CLI tools 😱 upload to repo named #S1ngularity

HackerNews: news.ycombinator.com/item?id=4503...
GHSA: github.com/nrwl/nx/secu...
Image of sandworm Shai-Hulud of the Dune saga. Namesake of the supply chain campaign.
September 18, 2025 at 4:46 PM
Reposted by Johannes Schnatterer
bad-at-computer.bsky.social
Yep, I've been pwned. 2FA reset email, looked very legitimate.

Only NPM affected. I've sent an email off to @npmjs.bsky.social to see if I can get access again.

Sorry everyone, I should have paid more attention. Not like me; have had a stressful week. Will work to get this cleaned up.
charlieeriksen.bsky.social charlieeriksen.bsky.social @charlieeriksen.bsky.social · Sep 8
@bad-at-computer.bsky.social Hey. Your npm account seems to have been compromised. 1 hour ago it started posting packages with backdoors to all your popular packages.
September 8, 2025 at 3:15 PM
schnatterer.info
Shouldn't this be opt in? 🧐😱

Now is the time to opt out.

#linkedin #ai #gdpr
LinkedIn settings showing settings where this setting is enabled: Data for Generative AI Improvement Can LinkedIn use your personal data and content you create on LinkedIn to train generative AI models that create content? Use my data for training content creation AI models
September 18, 2025 at 1:45 PM
schnatterer.info
Anyone still using #powerlevel10k #zsh theme?
It has been on "life support" > 1 year.

I had been using it for almost 5 years because of instant prompt.
Now switched to #starship, which I already had an eye on back then.

Is there a reason not to use starship?
What common (zsh) themes are there?
Terminal window showing zsh with tmux and starship and a prompt that shows the time. Command "sleep 3" returns "took 3s"
September 16, 2025 at 7:46 AM
schnatterer.info
#docker or #podman?

A polarised discussion 👇
news.ycombinator.com/item?id=4513...

Does not motivate me to give podman another go.
I like being efficient and not struggle with things I wouldn't have to with docker 😐

Can anyone share podman success stories?
September 5, 2025 at 6:46 PM
schnatterer.info
Just patched Argo CD CVE-2025-55190, scoring 9.9 😱

github.com/argoproj/arg...

nvd.nist.gov/vuln/detail/...

I am impressed that the argo project fixed this in so many versions 🙏
2.13.9, 2.14.16, 3.0.14 and 3.1.2.

#argocd #cve #CVE202555190
Project API Token Exposes Repository Credentials
### Summary Argo CD API tokens with project-level permissions are able to retrieve sensitive repository credentials (usernames, passwords) through the project details API endpoint, even when the t...
github.com
September 5, 2025 at 9:17 AM
schnatterer.info
As a longtime fan of local #k8s clusters for fast feedback (especially #k3d ),I've just faced my first real challenge: deploying #LDAP 😅
(caused by apparmor and nested containerization)
Featured graphic: k3d LDAP deployment challenges
September 3, 2025 at 12:43 PM
schnatterer.info
TIL: #helm image plugin shows all images for a chart, even respecting dependencies 🧐

github.com/nikhilsbhat/...
Terminal showing command "helm images get prometheus-community/kube-prometheus-stack" and a list of images as output
August 18, 2025 at 5:33 PM
schnatterer.info
#ArgoCD 3.1 brings OCI support for generic #OCI artifacts 🥳

I had a first look 👇️

gitops-book.dev/blog/2025-08...
Argo CD 3.1 brings OCI support
Entdecken Sie das deutsche GitOps Buch. Lernen Sie Best Practices für Continuous Deployment, Kubernetes und sichere GitOps Workflows kennen.
gitops-book.dev
August 14, 2025 at 2:23 PM
schnatterer.info
An important building block of many cloud-native architectures just had to stop maintenance:
#ExternalSecretsOperator #ESO.

github.com/external-sec...

The unfortunate fate of so many open source projects: We all use them, but we don't support them. Maintainers burn out.
Health of External Secrets project · Issue #5084 · external-secrets/external-secrets
Update 2: OMG thank you all for signing up. We weren't expecting such a positive response from the community <3 Update We've decided to stop releases until more long-term maintainers join our team....
github.com
August 13, 2025 at 8:15 PM
schnatterer.info
#GitOpsPlayground (GOP) version 0.11.0 finally facilitates running in air-gapped environments:

It can provide standardized #IDP​s,
even when are they are #airgapped,
even when they run on #OpenShift.
🥳

github.com/cloudogu/git...

1/x
Diagram showing all parts of GOP K8s-Cluster containing Vault, External Secrets Operator, Grafana, Prometheus, Ingress-nginx, Argo CD. Next to it, Cloudogu Ecosystem containing SCM-Manager and Jenkins. Air-Gapped presenting the challenges: Argo CD: No fetching helm charts from the internet K8s Cluster: No fetching images from the internet Jenkins: No fetching plugins, images, libs, packages, build packs, maven wrapper, etc. from the internet Diagram depicting Multi-tenant Architecture. One Management Cluster/NS and two Tenant Cluster/NS. Inside of each are Management/Tenant Git Repos and Cluster Resources: Argo CD, Vault, Grafana, External Secrets Operator. Inside the Management Cluster/NS is also GOP. Inste the Tenanat Cluster/NS are also Tenant Applications written in Typescritp, PHP, Python, NodeJS, C#, GO or Java. Arrows show a sequence: 1. Platform Admin Creates, Updates or Deletes Tenant in Management Git Repos 2. Management Argo CD Reads Management Git Repos 3. Argo CD Runs GOP 4. GOP inits Management and Tenant Repos 5. Management Argo Deploys Cluster Resources 6. Tenant Argo CDs read Tenant Git Repos 7. Tenant Argo CDs deploy Tenant Applications
May 15, 2025 at 9:48 AM
schnatterer.info
ArgoCon: Upgrade on the future experience of UI promotion

@crenshaw-dev.bsky.social and Zach Aller give a sneak peek on how automatic promotion between envs could look like in the future with Argo Project CD.

www.youtube.com/watch?v=Usi3...
No More Pipelines: Reconciling Environment Promotion Via Commit Statuses W... M. Crenshaw & Z. Aller
YouTube video by CNCF [Cloud Native Computing Foundation]
www.youtube.com
April 4, 2025 at 8:15 AM
schnatterer.info
Who writes #unittests for #helm #charts? 🙋

Same as for code, they speed up development and prevent recursions.

The helm-unittest plugin makes them easy to use.
github.com/helm-unittes...

I found helm-unittest easy to read, write and execute. See for yourself 👇️
Terminal emulator showing this command: helm unittest . -f unittests/prometheus/scrape_config_selector_test.yaml And its output PASS test scrapeConfigSelector unittests/prometheus/scrape_config_selector_test.yaml Charts: 1 passed, 1 total Test Suites: 1 passed, 1 total Tests: 4 passed, 4 total Snapshot: 0 passed, 0 total Time: 152.612251ms YAML definition of a Helm unit test. Test file can be found at this URL https://github.com/prometheus-community/helm-charts/blob/1251b0/charts/kube-prometheus-stack/unittests/prometheus/scrape_config_selector_test.yaml
March 24, 2025 at 2:37 PM
Reposted by Johannes Schnatterer
grapheneos.org
For our next release after 2025030800, we've added support for the Android 15 QPR2 Terminal for running other operating systems using hardware virtualization. It's currently only a terminal but Android is adding support for graphics and GPU acceleration for a future release.
March 9, 2025 at 2:27 PM
Reposted by Johannes Schnatterer
mapheise.bsky.social
Du hast spannende Neuigkeiten oder möchtest Deine Erfahrungen teilen – rund um #PlatformEngineering #DeveloperExperience & Co?
Dann freuen wir uns auf Deine Vorschläge beim #CallforProposals für die #CLC_Conf im November!

@ixmagazin.bsky.social @dpunkt.bsky.social
February 28, 2025 at 1:52 PM
schnatterer.info
Heads up #ingressNginx users!

Controller version 1.12 / chart 4.12, contains breaking changes.

Even though a minor release, one change blocks risky annotations like the 'snippet' annotations.

These are often used to block access to specific URLs, like /metrics.
January 13, 2025 at 5:03 PM
schnatterer.info
Wait, did #Bitnami remove their charts from #ArtifactHub? 😱

I understand they launched premium, introducing rate limit and DockerHub and stopped supporting non-LTS versions in their free tier.

But leaving ArtifactHub? Why?

Can someone share insights here?
ArtifactHub Page of Helm Chart bitnami/mongodb showing: "Sorry, the package you requested was not found." ArtifactHub Page of Bitnami organization, showing only one reamining helm chart.
January 13, 2025 at 9:53 AM
schnatterer.info
In 2024 #GitOps reached the peak of inflated expectations.

It could be reaching the plateau of productivity in less than two years, so Gartner predicts.

That's some major progress after being stuck in the lower left corner for as far as I can remember. Which is 2021 😅
Gartner Hype Cycle Diagram for Emerging Technologies 2024, showing, among other things, GitOps almost in the center, almost at the top of the Peak of inflated expectations, color-coded in white, which means Plateau will be reached in <2 years. Gartner Hype Cycle Diagram for Emerging Technologies 2023, showing, among other things, GitOps in the lower left corner, in the innovation trigger section, color-coded in light blue, which means Plateau will be reached in 2-5 years. Gartner Hype Cycle Diagram for Software Engineering 2022, showing, among other things, GitOps in the lower left corner, in the innovation trigger section, color coded in light blue, which means Plateau will be reached in 2-5 years. Gartner Hype Cycle Diagram for Agile and DevOps 2021, showing, among other things, GitOps in the lower left corner, in the innovation trigger section, color coded in light blue, which means Plateau will be reached in 2-5 years.
January 9, 2025 at 2:32 PM
schnatterer.info
#Bitnami rate limit for DockerHub became effective on January 6. What to do about it?

On rather short notice, bitnami introduced rate limits on their DockerHub Account, "due to business and partner requirements".

github.com/bitnami/cont...
bitnami by VMware Tanzu logo
January 8, 2025 at 10:24 AM
schnatterer.info
Great improvement for #GitOps #promotions ahead:
gitops-promoter and argocd-diff-preview

Just watched two talks recorded at #ArgoCon by Zach Aller and Michael Crenshaw as well as Regina Voloshin and Dag Bjerre Andersen.

1/
November 22, 2024 at 4:46 PM