diff --git a/CHANGELOG.md b/CHANGELOG.md
index 54f04aca1f0aa0bd7cd86e70bd60c95867d17e16..8b9b3cba14b360819924f9f753f0e8f6f20d1c70 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,10 @@
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
---
+## [2.43.0]
+
+- [!2.43.0](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests?scope=all&utf8=%E2%9C%93&state=merged&milestone_title=2.43.0); List of merge requests in this release.
+
## [2.42.0]
- [!2.42.0](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests?scope=all&utf8=%E2%9C%93&state=merged&milestone_title=2.42.0); List of merge requests in this release.
diff --git a/base/gitrepository.yaml b/base/gitrepository.yaml
index 8a3d8b2971288c2ebe6c76e533bfa71e375e0734..5befc45fb5574e24a07eb3793b1b9d1fad5953d9 100644
--- a/base/gitrepository.yaml
+++ b/base/gitrepository.yaml
@@ -11,4 +11,4 @@ spec:
interval: 10m
url: https://repo1.dso.mil/big-bang/bigbang.git
ref:
- tag: 2.42.0
+ tag: 2.43.0
diff --git a/chart/Chart.yaml b/chart/Chart.yaml
index c28b1f47c4613e217452b981283895db887d383c..aefd1ddbdb47d430954223b73dafb624ef0dec0f 100644
--- a/chart/Chart.yaml
+++ b/chart/Chart.yaml
@@ -1,6 +1,6 @@
apiVersion: v2
name: bigbang
-version: 2.42.0
+version: 2.43.0
kubeVersion: '>=1.29.0-0'
description: Big Bang is a declarative, continuous delivery tool for core DoD hardened and approved packages into a Kubernetes cluster.
type: application
diff --git a/chart/templates/mattermost/values.yaml b/chart/templates/mattermost/values.yaml
index 22de01391717f7fef1b9a79a43c4304c3f1deb9c..ee7c488af53f68c8b4313028f6a428316624478b 100644
--- a/chart/templates/mattermost/values.yaml
+++ b/chart/templates/mattermost/values.yaml
@@ -164,12 +164,4 @@ mattermostEnvs:
# required for Keycloak >= 20.X to work with gitlab auth pointed to Keycloak
MM_GITLABSETTINGS_SCOPE: openid
-existingSecretEnvs:
- # Forces mattermost to use the DB_CONNECTION_STRING in the secret and respect changes in that value
- - name: MM_SQLSETTINGS_DATASOURCE
- valueFrom:
- secretKeyRef:
- key: DB_CONNECTION_STRING
- name: "mattermost-dbcreds"
-
{{- end -}}
diff --git a/docs/understanding-bigbang/configuration/base-config.md b/docs/understanding-bigbang/configuration/base-config.md
index e7a1a2117d938ded39ce155a73ace132447d0ad9..185ed57d726884c659c152d16931a00766b07cdb 100644
--- a/docs/understanding-bigbang/configuration/base-config.md
+++ b/docs/understanding-bigbang/configuration/base-config.md
@@ -1,6 +1,6 @@
# bigbang
- 
+ 
Big Bang is a declarative, continuous delivery tool for core DoD hardened and approved packages into a Kubernetes cluster.
@@ -144,10 +144,10 @@ Kubernetes: `>=1.29.0-0`
| gatekeeper.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" |
| gatekeeper.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/policy.git"` | |
| gatekeeper.git.path | string | `"./chart"` | |
-| gatekeeper.git.tag | string | `"3.17.1-bb.2"` | |
+| gatekeeper.git.tag | string | `"3.18.1-bb.0"` | |
| gatekeeper.helmRepo.repoName | string | `"registry1"` | |
| gatekeeper.helmRepo.chartName | string | `"gatekeeper"` | |
-| gatekeeper.helmRepo.tag | string | `"3.17.1-bb.2"` | |
+| gatekeeper.helmRepo.tag | string | `"3.18.1-bb.0"` | |
| gatekeeper.flux | object | `{"install":{"crds":"CreateReplace"},"upgrade":{"crds":"CreateReplace"}}` | Flux reconciliation overrides specifically for the OPA Gatekeeper Package |
| gatekeeper.values | object | `{}` | Values to passthrough to the gatekeeper chart: https://repo1.dso.mil/big-bang/product/packages/policy.git |
| gatekeeper.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md |
@@ -188,10 +188,10 @@ Kubernetes: `>=1.29.0-0`
| elasticsearchKibana.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" |
| elasticsearchKibana.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/elasticsearch-kibana.git"` | |
| elasticsearchKibana.git.path | string | `"./chart"` | |
-| elasticsearchKibana.git.tag | string | `"1.23.0-bb.0"` | |
+| elasticsearchKibana.git.tag | string | `"1.24.0-bb.1"` | |
| elasticsearchKibana.helmRepo.repoName | string | `"registry1"` | |
| elasticsearchKibana.helmRepo.chartName | string | `"elasticsearch-kibana"` | |
-| elasticsearchKibana.helmRepo.tag | string | `"1.23.0-bb.0"` | |
+| elasticsearchKibana.helmRepo.tag | string | `"1.24.0-bb.1"` | |
| elasticsearchKibana.flux | object | `{"timeout":"20m"}` | Flux reconciliation overrides specifically for the Logging (EFK) Package |
| elasticsearchKibana.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". |
| elasticsearchKibana.sso.enabled | bool | `false` | Toggle OIDC SSO for Kibana/Elasticsearch on and off. Enabling this option will auto-create any required secrets. |
@@ -239,10 +239,10 @@ Kubernetes: `>=1.29.0-0`
| loki.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" |
| loki.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/loki.git"` | |
| loki.git.path | string | `"./chart"` | |
-| loki.git.tag | string | `"6.23.0-bb.0"` | |
+| loki.git.tag | string | `"6.23.0-bb.1"` | |
| loki.helmRepo.repoName | string | `"registry1"` | |
| loki.helmRepo.chartName | string | `"loki"` | |
-| loki.helmRepo.tag | string | `"6.23.0-bb.0"` | |
+| loki.helmRepo.tag | string | `"6.23.0-bb.1"` | |
| loki.flux | object | `{}` | Flux reconciliation overrides specifically for the Loki Package |
| loki.strategy | string | `"monolith"` | Loki architecture. Options are monolith and scalable |
| loki.clusterName | string | `""` | Loki clusterName identifier for Promtail and Dashboards |
@@ -347,10 +347,10 @@ Kubernetes: `>=1.29.0-0`
| addons.argocd.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" |
| addons.argocd.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/argocd.git"` | |
| addons.argocd.git.path | string | `"./chart"` | |
-| addons.argocd.git.tag | string | `"7.7.5-bb.0"` | |
+| addons.argocd.git.tag | string | `"7.7.5-bb.1"` | |
| addons.argocd.helmRepo.repoName | string | `"registry1"` | |
| addons.argocd.helmRepo.chartName | string | `"argocd"` | |
-| addons.argocd.helmRepo.tag | string | `"7.7.5-bb.0"` | |
+| addons.argocd.helmRepo.tag | string | `"7.7.5-bb.1"` | |
| addons.argocd.flux | object | `{}` | Flux reconciliation overrides specifically for the ArgoCD Package |
| addons.argocd.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". |
| addons.argocd.redis.host | string | `""` | Hostname of a pre-existing Redis to use for ArgoCD. Entering connection info will enable external Redis and will auto-create any required secrets. |
@@ -389,10 +389,10 @@ Kubernetes: `>=1.29.0-0`
| addons.minio.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" |
| addons.minio.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/minio.git"` | |
| addons.minio.git.path | string | `"./chart"` | |
-| addons.minio.git.tag | string | `"6.0.4-bb.4"` | |
+| addons.minio.git.tag | string | `"6.0.4-bb.5"` | |
| addons.minio.helmRepo.repoName | string | `"registry1"` | |
| addons.minio.helmRepo.chartName | string | `"minio-instance"` | |
-| addons.minio.helmRepo.tag | string | `"6.0.4-bb.4"` | |
+| addons.minio.helmRepo.tag | string | `"6.0.4-bb.5"` | |
| addons.minio.flux | object | `{}` | Flux reconciliation overrides specifically for the Minio Package |
| addons.minio.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". |
| addons.minio.accesskey | string | `""` | Default access key to use for minio. |
@@ -405,10 +405,10 @@ Kubernetes: `>=1.29.0-0`
| addons.gitlab.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" |
| addons.gitlab.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/gitlab.git"` | |
| addons.gitlab.git.path | string | `"./chart"` | |
-| addons.gitlab.git.tag | string | `"8.6.1-bb.0"` | |
+| addons.gitlab.git.tag | string | `"8.6.2-bb.0"` | |
| addons.gitlab.helmRepo.repoName | string | `"registry1"` | |
| addons.gitlab.helmRepo.chartName | string | `"gitlab"` | |
-| addons.gitlab.helmRepo.tag | string | `"8.6.1-bb.0"` | |
+| addons.gitlab.helmRepo.tag | string | `"8.6.2-bb.0"` | |
| addons.gitlab.flux | object | `{}` | Flux reconciliation overrides specifically for the Gitlab Package |
| addons.gitlab.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". |
| addons.gitlab.sso.enabled | bool | `false` | Toggle OIDC SSO for Gitlab on and off. Enabling this option will auto-create any required secrets. |
@@ -437,10 +437,10 @@ Kubernetes: `>=1.29.0-0`
| addons.gitlabRunner.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" |
| addons.gitlabRunner.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/gitlab-runner.git"` | |
| addons.gitlabRunner.git.path | string | `"./chart"` | |
-| addons.gitlabRunner.git.tag | string | `"0.68.1-bb.2"` | |
+| addons.gitlabRunner.git.tag | string | `"0.70.4-bb.0"` | |
| addons.gitlabRunner.helmRepo.repoName | string | `"registry1"` | |
| addons.gitlabRunner.helmRepo.chartName | string | `"gitlab-runner"` | |
-| addons.gitlabRunner.helmRepo.tag | string | `"0.68.1-bb.2"` | |
+| addons.gitlabRunner.helmRepo.tag | string | `"0.70.4-bb.0"` | |
| addons.gitlabRunner.flux | object | `{}` | Flux reconciliation overrides specifically for the Gitlab Runner Package |
| addons.gitlabRunner.values | object | `{}` | Values to passthrough to the gitlab runner chart: https://repo1.dso.mil/big-bang/product/packages/gitlab-runner.git |
| addons.gitlabRunner.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md |
@@ -448,10 +448,10 @@ Kubernetes: `>=1.29.0-0`
| addons.nexusRepositoryManager.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" |
| addons.nexusRepositoryManager.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/nexus.git"` | |
| addons.nexusRepositoryManager.git.path | string | `"./chart"` | |
-| addons.nexusRepositoryManager.git.tag | string | `"74.0.0-bb.0"` | |
+| addons.nexusRepositoryManager.git.tag | string | `"75.0.0-bb.1"` | |
| addons.nexusRepositoryManager.helmRepo.repoName | string | `"registry1"` | |
| addons.nexusRepositoryManager.helmRepo.chartName | string | `"nexus-repository-manager"` | |
-| addons.nexusRepositoryManager.helmRepo.tag | string | `"74.0.0-bb.0"` | |
+| addons.nexusRepositoryManager.helmRepo.tag | string | `"75.0.0-bb.1"` | |
| addons.nexusRepositoryManager.license_key | string | `""` | Base64 encoded license file. |
| addons.nexusRepositoryManager.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". |
| addons.nexusRepositoryManager.sso.enabled | bool | `false` | Toggle SAML SSO for NXRM. -- handles SAML SSO, a Client must be configured in Keycloak or IdP -- to complete setup. -- https://support.sonatype.com/hc/en-us/articles/1500000976522-SAML-integration-for-Nexus-Repository-Manager-Pro-3-and-Nexus-IQ-Server-with-Keycloak#h_01EV7CWCYH3YKAPMAHG8XMQ599 |
@@ -469,10 +469,10 @@ Kubernetes: `>=1.29.0-0`
| addons.sonarqube.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" |
| addons.sonarqube.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/sonarqube.git"` | |
| addons.sonarqube.git.path | string | `"./chart"` | |
-| addons.sonarqube.git.tag | string | `"10.6.1-bb.2"` | |
+| addons.sonarqube.git.tag | string | `"10.6.1-bb.3"` | |
| addons.sonarqube.helmRepo.repoName | string | `"registry1"` | |
| addons.sonarqube.helmRepo.chartName | string | `"sonarqube"` | |
-| addons.sonarqube.helmRepo.tag | string | `"10.6.1-bb.2"` | |
+| addons.sonarqube.helmRepo.tag | string | `"10.6.1-bb.3"` | |
| addons.sonarqube.flux | object | `{}` | Flux reconciliation overrides specifically for the Sonarqube Package |
| addons.sonarqube.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". |
| addons.sonarqube.sso.enabled | bool | `false` | Toggle SAML SSO for SonarQube. Enabling this option will auto-create any required secrets. |
@@ -518,10 +518,10 @@ Kubernetes: `>=1.29.0-0`
| addons.anchore.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" |
| addons.anchore.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/anchore-enterprise.git"` | |
| addons.anchore.git.path | string | `"./chart"` | |
-| addons.anchore.git.tag | string | `"3.1.1-bb.3"` | |
+| addons.anchore.git.tag | string | `"3.2.0-bb.1"` | |
| addons.anchore.helmRepo.repoName | string | `"registry1"` | |
| addons.anchore.helmRepo.chartName | string | `"anchore"` | |
-| addons.anchore.helmRepo.tag | string | `"3.1.1-bb.3"` | |
+| addons.anchore.helmRepo.tag | string | `"3.2.0-bb.1"` | |
| addons.anchore.flux | object | `{"upgrade":{"disableWait":true}}` | Flux reconciliation overrides specifically for the Anchore Package |
| addons.anchore.adminPassword | string | `""` | Initial admin password used to authenticate to Anchore. |
| addons.anchore.enterprise | object | `{"licenseYaml":"FULL LICENSE\n"}` | Anchore Enterprise functionality. |
@@ -557,10 +557,10 @@ Kubernetes: `>=1.29.0-0`
| addons.mattermost.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" |
| addons.mattermost.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/mattermost.git"` | |
| addons.mattermost.git.path | string | `"./chart"` | |
-| addons.mattermost.git.tag | string | `"10.2.0-bb.0"` | |
+| addons.mattermost.git.tag | string | `"10.2.0-bb.1"` | |
| addons.mattermost.helmRepo.repoName | string | `"registry1"` | |
| addons.mattermost.helmRepo.chartName | string | `"mattermost"` | |
-| addons.mattermost.helmRepo.tag | string | `"10.2.0-bb.0"` | |
+| addons.mattermost.helmRepo.tag | string | `"10.2.0-bb.1"` | |
| addons.mattermost.flux | object | `{}` | Flux reconciliation overrides specifically for the Mattermost Package |
| addons.mattermost.enterprise | object | `{"enabled":false,"license":""}` | Mattermost Enterprise functionality. |
| addons.mattermost.enterprise.enabled | bool | `false` | Toggle the Mattermost Enterprise. This must be accompanied by a valid license unless you plan to start a trial post-install. |
@@ -618,10 +618,10 @@ Kubernetes: `>=1.29.0-0`
| addons.vault.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" |
| addons.vault.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/vault.git"` | |
| addons.vault.git.path | string | `"./chart"` | |
-| addons.vault.git.tag | string | `"0.29.1-bb.0"` | |
+| addons.vault.git.tag | string | `"0.29.1-bb.2"` | |
| addons.vault.helmRepo.repoName | string | `"registry1"` | |
| addons.vault.helmRepo.chartName | string | `"vault"` | |
-| addons.vault.helmRepo.tag | string | `"0.29.1-bb.0"` | |
+| addons.vault.helmRepo.tag | string | `"0.29.1-bb.2"` | |
| addons.vault.flux | object | `{}` | Flux reconciliation overrides specifically for the Vault Package |
| addons.vault.ingress | object | `{"cert":"","gateway":"","key":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". |
| addons.vault.ingress.key | string | `""` | Certificate/Key pair to use as the certificate for exposing Vault Setting the ingress cert here will automatically create the volume and volumemounts in the Vault package chart |
@@ -702,11 +702,11 @@ Kubernetes: `>=1.29.0-0`
| addons.externalSecrets.enabled | bool | `false` | Toggle deployment of external secrets |
| addons.externalSecrets.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" |
| addons.externalSecrets.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/external-secrets.git"` | |
-| addons.externalSecrets.git.tag | string | `"0.11.0-bb.0"` | |
+| addons.externalSecrets.git.tag | string | `"0.11.0-bb.2"` | |
| addons.externalSecrets.git.path | string | `"./chart"` | |
| addons.externalSecrets.helmRepo.repoName | string | `"registry1"` | |
| addons.externalSecrets.helmRepo.chartName | string | `"external-secrets"` | |
-| addons.externalSecrets.helmRepo.tag | string | `"0.11.0-bb.0"` | |
+| addons.externalSecrets.helmRepo.tag | string | `"0.11.0-bb.2"` | |
| addons.externalSecrets.flux | object | `{}` | Override flux settings for this package |
| addons.externalSecrets.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". |
| addons.externalSecrets.values | object | `{}` | |