Puppet: Open Source Stewards team

 

Meet our Open Source Stewards

Many of you know Lucy Wyman, software engineer for Bolt, for her many contributions including answering questions in our Bolt Slack channel and running PDX CoffeeOps. She also leads our Open Source Stewards team alongside Molly Waggett and Ben Ford. We asked Lucy to share what our Open Source Stewards are up to.

Puppet Enterprise 2019.8 LTS

 

Puppet Enterprise 2019.8 LTS

This release gives teams access to more powerful orchestration capabilities with shared content from the Puppet Forge, out-of-the-box workflows for patch management, and greater flexibility to manage infrastructure using both imperative (work-flow based) and declarative (model-based) automation types.

[USN-4334-1] Git vulnerability

---------- Forwarded message ---------

From: Marc Deslauriers
Date: Apr 21, 2020 9:01PM

Carlo Arenas discovered that Git incorrectly handled certain URLs
containing newlines, empty hosts, or lacking a scheme. A remote attacker
could possibly use this issue to trick Git into returning credential
information for a wrong host.

References:
  https://usn.ubuntu.com/4334-1
  CVE-2020-11008

Keep a journal of your activities with this Python program

Image credits : 

Pexels, via Pixabay. CC0.

REF: https://opensource.com/article/20/1/python-journal

ADMIN: GitLab 12.3 Brings More Security to DevOps Engineers

With the release of version 12.3, GitLab has added a new security focused feature called Web Application Firewall for Kubernetes Ingress.

“In GitLab 12.3 we are shipping our first iteration of a Web Application Firewall built into the GitLab SDLC platform. Its focus is on monitoring and reporting of security concerns related to your Kubernetes clusters,” said GitLab in a press announcement.

REF: http://www.admin-magazine.com/News/GitLab-12.3-Brings-More-Security-to-DevOps-Engineers

TrendLabs: Hiding in Plain Text: Jenkins Plugin Vulnerabilities

Figure 3. Storing credentials using the Jenkins Credentials reference

REF: https://blog.trendmicro.com/trendlabs-security-intelligence/hiding-in-plain-text-jenkins-plugin-vulnerabilities/

2018 Market Guide for AIOps Platforms

Gartner describes how AIOps has expanded, lays out the key steps for IT departments looking to gain the benefits of AIOps and provides crucial information for selecting tools and vendors.

• The difference betweens AIOps features and AIOps platforms
• The most important data categories for AIOps
• Gartner’s recommendations for how to get started in AIOps

[USN-3791-1] Git vulnerability

---------- Forwarded message ---------
From: Steve Beattie
Date: 2018年10月12日 週五 上午10:42

It was discovered that git did not properly validate git submodule
urls or paths. A remote attacker could possibly use this to craft a
git repository that causes arbitrary code execution when recursive
operations are used.

References:
  https://usn.ubuntu.com/usn/usn-3791-1
  CVE-2018-17456

Trello: Why Flexibility With Where, When, And How You Work Boosts Productivity

Many of us have access to freedom in our personal lives, but how often do we feel like our job is constraining us from doing what we want, when we want, and where we want? When it comes to flexibility at work, it’s common to feel like you’re in a constant battle. And thanks to micromanaging bosses and high expectations, productivity and happiness can fall by the wayside.

REF: https://blog.trello.com/fast-lane-to-freedom-why-flexibility-with-work-boosts-productivity

Trello: How To Give Negative Feedback Beyond The Compliment Sandwich

“We need to talk.”

Those words strike fear into the heart of every employee. The minute we sense that our flaws are about to be pointed out, a deluge of worries fills our mind: Am I doing something wrong? Will I lose my job?

REF: https://blog.trello.com/how-to-give-negative-feedback-beyond-the-compliment-sandwich

Trello: Tweak These 5-Minute Productivity Tricks To Make Your Workdays More Organized

via GIPHY

Start Your Morning Routine The Night Before

Mastering productive morning routines has become an art over the years. Olympic Gold medalists, movie stars, and millionaires all share their strategies on how to maximize the early hours of their days in order to set themselves up for a productive workday. It’s true that people who wake up earlier are often more productive, but you can get an additional boost the night before. 

REF: https://blog.trello.com/tweak-5-minute-productivity-tricks-make-workdays-more-organized

Trello: The 'Coffee Shop Effect'

The 'Coffee Shop Effect': Why Changing Your Location Boosts Your Productivity

REF: https://blog.trello.com/coffee-shop-effect-boosts-productivity

Using Trello At Home

The official Trello Playbook for Home rounds up five essential boards that you can copy and customize for everything from vacation planning and chores to meal prep and more:

Trello: 5 Future Lessons To Learn From Today’s Remote Workers

REF: https://blog.trello.com/5-future-lessons-to-learn-from-todays-remote-workers

WordPress plans

Upgrading to a plan unlocks a ton of features that can help you get more visitors to your site and drive business. Plans include a custom domain, customizable CSS, responsive customer service, and additional storage for photos and documents. One of our plans even offers the ability to import any WordPress theme or plugin of your choice. Watch this video to find out more about what features you can add to your site.

REF:

Introducing The New Trello Power-Ups Directory

To access the directory, on your Trello board go to Menu > Power-Ups, and you are instantly taken to a whole new integrated world. 

REF: https://blog.trello.com/trello-power-ups-directory

How To Beat Decision Fatigue With Better Brain Habits

You wake up every morning with decisions to make: What to wear, what to eat, and of course the perennially difficult decision of heading to the gym or remaining burrowed in your warm bed. These are all important decisions that set the tone of a productive morning and day. And once you clock into work, the decision flood gates open. By the time you’re winding down for the night, you’ve made an average of 35,000 decisions!

REF: https://blog.trello.com/beat-decision-fatigue-with-better-brain-habits

Application Debugging and Troubleshooting

Start saving your time today and find out how useful skills you can learn with Carlos. In this workshop you will see real life situations, where debugging skills will save your time, headaches and possibly find a solution with minimal amount of effort. Debugging/Troubleshooting is a really useful skill when you are working in maintaining legacy applications, doing some small incremental changes to an old code base, where the code has been touched by so many hands over the years and it is becoming really a mess. So, management has decided that the code works as it is and you are not allowed to change it all over “the right way ™”. INSIDE Introduction to the GDB debugger Advanced inspection of data structures and variables Introduction to the jdb debugger Working with core dumps in GDB Introduction to Dtrace Course Materials

REF: https://bsdmag.org/course/application-debugging-and-troubleshooting-2/

Puppet highlights in 2017

New year, exciting new products, resources and more! 2017 was an incredible year! Let’s take a look back at some highlights from Puppet’s best year yet. View infographic

The Best Advice For Remote Work Success From 10 Global Teams

REF: https://blog.trello.com/remote-work-team-success-guide