Johannes Schnatterer
LightNews LightNews
banner
schnatterer.info
Johannes Schnatterer
@schnatterer.info
25 followers 14 following 54 posts
Software engineer, author, speaker.
Field CTO of Cloudogu.

My particular interests are #k8s, #GitOps, #PlatformEngineering, #o11y, #IaC, #DevOps technical leadership and of course #FLOSS/ #FOSS/ #OSS.

I like owning my data and devices.
Posts Replies Media Videos
schnatterer.info
TLDR recent #npm supply chain attacks

🗓️ 26 Aug: #nx packages compromised stealing SSH keys, npm tokens, and .gitconfig files and weaponized AI CLI tools 😱 upload to repo named #S1ngularity

HackerNews: news.ycombinator.com/item?id=4503...
GHSA: github.com/nrwl/nx/secu...
Image of sandworm Shai-Hulud of the Dune saga. Namesake of the supply chain campaign.
September 18, 2025 at 4:46 PM
schnatterer.info
Shouldn't this be opt in? 🧐😱

Now is the time to opt out.

#linkedin #ai #gdpr
LinkedIn settings showing settings where this setting is enabled: Data for Generative AI Improvement Can LinkedIn use your personal data and content you create on LinkedIn to train generative AI models that create content? Use my data for training content creation AI models
September 18, 2025 at 1:45 PM
schnatterer.info
Anyone still using #powerlevel10k #zsh theme?
It has been on "life support" > 1 year.

I had been using it for almost 5 years because of instant prompt.
Now switched to #starship, which I already had an eye on back then.

Is there a reason not to use starship?
What common (zsh) themes are there?
Terminal window showing zsh with tmux and starship and a prompt that shows the time. Command "sleep 3" returns "took 3s"
September 16, 2025 at 7:46 AM
schnatterer.info
As a longtime fan of local #k8s clusters for fast feedback (especially #k3d ),I've just faced my first real challenge: deploying #LDAP 😅
(caused by apparmor and nested containerization)
Featured graphic: k3d LDAP deployment challenges
September 3, 2025 at 12:43 PM
schnatterer.info
TIL: #helm image plugin shows all images for a chart, even respecting dependencies 🧐

github.com/nikhilsbhat/...
Terminal showing command "helm images get prometheus-community/kube-prometheus-stack" and a list of images as output
August 18, 2025 at 5:33 PM
schnatterer.info
#GitOpsPlayground (GOP) version 0.11.0 finally facilitates running in air-gapped environments:

It can provide standardized #IDP​s,
even when are they are #airgapped,
even when they run on #OpenShift.
🥳

github.com/cloudogu/git...

1/x
Diagram showing all parts of GOP K8s-Cluster containing Vault, External Secrets Operator, Grafana, Prometheus, Ingress-nginx, Argo CD. Next to it, Cloudogu Ecosystem containing SCM-Manager and Jenkins. Air-Gapped presenting the challenges: Argo CD: No fetching helm charts from the internet K8s Cluster: No fetching images from the internet Jenkins: No fetching plugins, images, libs, packages, build packs, maven wrapper, etc. from the internet Diagram depicting Multi-tenant Architecture. One Management Cluster/NS and two Tenant Cluster/NS. Inside of each are Management/Tenant Git Repos and Cluster Resources: Argo CD, Vault, Grafana, External Secrets Operator. Inside the Management Cluster/NS is also GOP. Inste the Tenanat Cluster/NS are also Tenant Applications written in Typescritp, PHP, Python, NodeJS, C#, GO or Java. Arrows show a sequence: 1. Platform Admin Creates, Updates or Deletes Tenant in Management Git Repos 2. Management Argo CD Reads Management Git Repos 3. Argo CD Runs GOP 4. GOP inits Management and Tenant Repos 5. Management Argo Deploys Cluster Resources 6. Tenant Argo CDs read Tenant Git Repos 7. Tenant Argo CDs deploy Tenant Applications
May 15, 2025 at 9:48 AM
schnatterer.info
Who writes #unittests for #helm #charts? 🙋

Same as for code, they speed up development and prevent recursions.

The helm-unittest plugin makes them easy to use.
github.com/helm-unittes...

I found helm-unittest easy to read, write and execute. See for yourself 👇️
Terminal emulator showing this command: helm unittest . -f unittests/prometheus/scrape_config_selector_test.yaml And its output PASS test scrapeConfigSelector unittests/prometheus/scrape_config_selector_test.yaml Charts: 1 passed, 1 total Test Suites: 1 passed, 1 total Tests: 4 passed, 4 total Snapshot: 0 passed, 0 total Time: 152.612251ms YAML definition of a Helm unit test. Test file can be found at this URL https://github.com/prometheus-community/helm-charts/blob/1251b0/charts/kube-prometheus-stack/unittests/prometheus/scrape_config_selector_test.yaml
March 24, 2025 at 2:37 PM
schnatterer.info
A more secure alternative would be to get rid of the annotation.

The best I could come up with is an additional ingress that only allows access to the path from within the cluster.

𝗪𝗵𝗼 𝗰𝗮𝗻 𝗽𝗿𝗼𝘃𝗶𝗱𝗲 𝗮𝗻 𝗲𝗮𝘀𝗶𝗲𝗿 𝘀𝗼𝗹𝘂𝘁𝗶𝗼𝗻?
An example for blocking access to a path via ingress apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: example-metrics-blocker namespace: my-ns labels: annotations: acme.cert-manager.io/http01-ingress-class: nginx kubernetes.io/ingress.class: nginx kubernetes.io/tls-acme: "true" # Allow access from within the cluster only nginx.ingress.kubernetes.io/whitelist-source-range: 10.0.0.0/8 spec: tls: - hosts: - "example.com" secretName: example-certificate rules: - host: "example.com" http: paths: - path: /metrics pathType: Prefix backend: service: name: my-svc port: number: 8080
January 13, 2025 at 5:03 PM
schnatterer.info
Wait, did #Bitnami remove their charts from #ArtifactHub? 😱

I understand they launched premium, introducing rate limit and DockerHub and stopped supporting non-LTS versions in their free tier.

But leaving ArtifactHub? Why?

Can someone share insights here?
ArtifactHub Page of Helm Chart bitnami/mongodb showing: "Sorry, the package you requested was not found." ArtifactHub Page of Bitnami organization, showing only one reamining helm chart.
January 13, 2025 at 9:53 AM
schnatterer.info
In 2024 #GitOps reached the peak of inflated expectations.

It could be reaching the plateau of productivity in less than two years, so Gartner predicts.

That's some major progress after being stuck in the lower left corner for as far as I can remember. Which is 2021 😅
Gartner Hype Cycle Diagram for Emerging Technologies 2024, showing, among other things, GitOps almost in the center, almost at the top of the Peak of inflated expectations, color-coded in white, which means Plateau will be reached in <2 years. Gartner Hype Cycle Diagram for Emerging Technologies 2023, showing, among other things, GitOps in the lower left corner, in the innovation trigger section, color-coded in light blue, which means Plateau will be reached in 2-5 years. Gartner Hype Cycle Diagram for Software Engineering 2022, showing, among other things, GitOps in the lower left corner, in the innovation trigger section, color coded in light blue, which means Plateau will be reached in 2-5 years. Gartner Hype Cycle Diagram for Agile and DevOps 2021, showing, among other things, GitOps in the lower left corner, in the innovation trigger section, color coded in light blue, which means Plateau will be reached in 2-5 years.
January 9, 2025 at 2:32 PM
schnatterer.info
#Bitnami rate limit for DockerHub became effective on January 6. What to do about it?

On rather short notice, bitnami introduced rate limits on their DockerHub Account, "due to business and partner requirements".

github.com/bitnami/cont...
bitnami by VMware Tanzu logo
January 8, 2025 at 10:24 AM