UNCLASSIFIED - NO CUI

Skip to content
Snippets Groups Projects
Select Git revision
  • update-gitlab-tag-8.10.1-bb.0
  • update-nexus-tag-77.1.0-bb.0
  • update-elasticsearch-kibana-tag-1.28.0-bb.2
  • 2623-remove-holocron-from-bb-packages
  • update-fortify-tag-1.1.2320154-bb.23
  • update-elasticsearch-kibana-tag-1.28.0-bb.1
  • update-fortify-tag-1.1.2320154-bb.24
  • update-thanos-tag-15.9.1-bb.3
  • update-mimir-tag-5.5.1-bb.11
  • update-kyverno-reporter-tag-3.0.3-bb.1
  • update-velero-tag-8.4.0-bb.1
  • master default protected
  • update-twistlock-tag-0.19.0-bb.5
  • update-grafana-tag-8.10.4-bb.1
  • update-fluentbit-tag-0.48.9-bb.0
  • update-kiali-tag-2.6.0-bb.1
  • test-nexus
  • TEST-ONLY-DO-NOT_MERGE-Kyvern0-test
  • update-nexus-tag-77.1.0-bb.1
  • update-elasticsearch-kibana-tag-1.28.0-bb.0
  • 2.49.0 protected
  • 2.49.0-rc.2 protected
  • 2.49.0-rc.1 protected
  • 2.49.0-rc.0 protected
  • 2.48.0 protected
  • 2.48.0-rc.4 protected
  • 2.48.0-rc.3 protected
  • 2.48.0-rc.2 protected
  • 2.48.0-rc.1 protected
  • 2.47.0 protected
  • 2.47.0-rc.2 protected
  • 2.47.0-rc.1 protected
  • 2.47.0-rc.0 protected
  • 2.46.0 protected
  • 2.46.0-rc.0 protected
  • 2.45.1 protected
  • 2.45.1-rc.0 protected
  • 2.45.0 protected
  • 2.45.0-rc.0 protected
  • 2.44.0 protected
40 results
Blame Permalink
Code owners
Assign users and groups as approvers for specific file changes. Learn more.
BigBangPackages.md 12.76 KiB

Big Bang Packages

Each Big Bang Package is present in the Big Bang Package repository and broken up into several sub-groupings.

Each package has at least two CODEOWNERS. Responsibilities are outlined here.

Dependencies

graph TB
  subgraph "Core"
  subgraph "Logging"
  LoggingElastic(Elasticsearch)
  LoggingKibana(Kibana)
  LoggingECK(ECK)
  LoggingElastic  --> LoggingECK
  LoggingKibana  --> LoggingECK
  LoggingKibana --> LoggingElastic
  Fluentd --> LoggingElastic
  end
  subgraph "Monitoring"
  Grafana --> Prometheus
  Thanos
  end
  ServiceMesh
  ArgoCD
  
  ClusterAuditor --> LoggingECK
  ClusterAuditor --> OPA(Policy Enforcement)
  end      

  subgraph "Package Utilities"
    Postgres
    MinIO(S3 Compatible Storage)
    Redis
    MySQL
    MongoDB
  end

  subgraph "Security"
  Keycloak --> Postgres
  Anchore(Anchore Enterprise) --> Postgres
  Twistlock
  end

  subgraph "Developer Tools"
    GitLab --> GitLabRunners(GitLab Runners)
    GitLab --> MinIO
    GitLab --> Redis
    GitLab --> Postgres
    Sonarqube --> Postgres
  end

  subgraph "Collaboration Tools"
    Jira --> Postgres
    Confluence --> Postgres
    MatterMost --> MinIO
  end

Core

Core packages are supported Big Bang packages that have to be enabled and are located at Big Bang Core. Core packages are platform/admin level packages that are leveraged by other packages.

graph TB
  subgraph "Core"
  subgraph "Logging"
  LoggingElastic(Elasticsearch)
  LoggingKibana(Kibana)
  LoggingECK(ECK)
  LoggingElastic  --> LoggingECK
  LoggingKibana  --> LoggingECK
  LoggingKibana --> LoggingElastic
  Fluentd --> LoggingElastic
  end
  subgraph "Monitoring"
  Grafana --> Prometheus
  Thanos
  end
  ServiceMesh
  ArgoCD
  Twistlock
  
  ClusterAuditor --> LoggingECK
  ClusterAuditor --> OPA(Policy Enforcement)
  end

ArgoCD

Product:

Repository:

Dependency: None

Owners:

Understudy:

Service Mesh

Current implementation of Service Mesh is provided by Istio. Service Mesh should be the first Package deployed to ensure other applications are operating with visibility and security.

Product:

Repository:

Dependency: None

Owners:

Understudy:

Auth Service

authservice helps delegate the OIDC Authorization Code Grant Flow to the Istio mesh. authservice is compatible with any standard OIDC Provider as well as other Istio End-user Auth features, including Authentication Policy and RBAC. Together, they allow developers to protect their APIs and web apps without any application code required.

Product:

Repository:

Dependency: None

Owners:

Understudy:

Logging

The logging package is responsible for deploying Elasticsearch, Kibana, and Fluentd. It is also responsible for configuring the logging pipelines to aggregate all running containers logs for viewing by both Cluster Owners and Application Operators.

The logging capability is comprised of:

  • Elastic Cloud on Kubernetes (ECK) Operator
  • Elasticsearch
  • Kibana
  • Fluentd
  • Logging Operator

Repository:

Dependencies:

  • RWO StorageClass

Owners:

Understudy:

Policy Enforcement

The Policy Enforcement Package installs the Open Policy Agent Gatekeeper Operator.

Product:

Repository:

Dependencies: None

Owners:

Understudy

Monitoring

Monitoring is provided by Prometheus, Grafana and Thanos.

Product:

Repository:

Dependencies: None

Owners:

Cluster Auditor

Cluster Auditor is an internal tool that provides compliance information to Cluster Owners and Application Developers for insight into Reference DevSecOps compliance

Product:

Repository: Cluster Auditor

Dependencies:

Owners:

Understudy:

Repository:

Twistlock

Twistlock provides runtime vulnerability detection

Product:

Repository: Twistlock Repo

Dependencies:

  • RWO StorageClass

Owners:

Addons

Addons are supported Big Bang packages that come disabled by default.

Security Tools

Security Tools are hosted here: Security Tools

graph TB  

  subgraph "Package Utilities"
    Postgres
  end

  subgraph "Security"
  Keycloak --> Postgres
  Anchore(Anchore Enterprise) --> Postgres
  end

Keycloak

Keycloak provides SSO to applications.

Product:

Repository: Keycloak

Dependencies:

  • Postgres

Owners:

Understudy:

Anchore Enterprise

Product:

Repository: Anchore Enterprise Repo

Dependencies:

  • postgres

Owners:

Developer Tools

Developer Tools are hosted here: Developer Tools

graph TB

  subgraph "Application Utilities"
    Postgres
    MinIO(S3 Compatible Storage)
    Redis
  end


  subgraph "Package Tools"
    GitLab --> GitLabRunners(GitLab Runners)
    GitLab --> MinIO
    GitLab --> Redis
    GitLab --> Postgres
    Sonarqube --> Postgres
  end

GitLab

GitLab is a product for providing DevOps including planning, code hosting, and CICD

Product:

Repository:

Dependencies:

  • postgres
  • S3 compatible object store (ex: Minio)
  • Redis
  • RWO StorageClass

Owners:

GitLab Runners

GitLab Runners are pods that run jobs for GitLab CI/CD

Product:

Repository:

Dependencies:

Owners:

Understudies

Sonarqube

Sonarqube provides code reviews for code quality and security

Product:

Repository:

Dependencies:

  • postgres
  • RWO StorageClass

Owners:

Fortify

Fortify provides code

Product:

Repository:

Dependencies:

Owners:

Nexus

Nexus provides a robust artifact repository, supporting artifacts of multiple programming languages

Product:

  • Nexus
  • Scope:
    • The Nexus OSS will not be supported as the licenced pro version is required for HA and SAML SSO capabilities
    • Only Licended Nexus Repository Pro will be supported

Repository:

Dependencies:

Owners:

UNCLASSIFIED - NO CUI