From 2616c9f9e58081ba94addad67a05ea17c18e0eff Mon Sep 17 00:00:00 2001 From: Brendon Lloyd <blloyd@revacomm.com> Date: Mon, 14 Mar 2022 21:29:56 +0000 Subject: [PATCH] Release 1.29.x --- CHANGELOG.md | 6 ++++- Packages.md | 1 + README.md | 54 ++++++++++++++++++++++++++--------------- base/gitrepository.yaml | 2 +- chart/Chart.yaml | 2 +- 5 files changed, 42 insertions(+), 23 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index fca784eabc..1ec76ab144 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -3,9 +3,13 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). --- +## [1.29.0] + +- [!1.29.0](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests?scope=all&utf8=%E2%9C%93&state=merged&milestone_title=1.29.0); List of merge requests in this release. + ## [1.28.0] -- [!1.28.0](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests?scope=all&utf8=%E2%9C%93&state=merged&milestone_title=1.27.0); List of merge requests in this release. +- [!1.28.0](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests?scope=all&utf8=%E2%9C%93&state=merged&milestone_title=1.28.0); List of merge requests in this release. ## [1.27.1] diff --git a/Packages.md b/Packages.md index 38d1e956bb..4d01c43e4b 100644 --- a/Packages.md +++ b/Packages.md @@ -25,6 +25,7 @@ Columns: | [Argocd](https://repo1.dso.mil/platform-one/big-bang/apps/core/argocd) | | No | No | No | [Yes](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/572) | Yes (PERMISSIVE) | No | | [Cluster Auditor](https://repo1.dso.mil/platform-one/big-bang/apps/core/cluster-auditor) |  | No | No | No | [Yes](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/565) | Yes (PERMISSIVE) | No | | [Kyverno](https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/kyverno) |  | No | No | No | Yes | No | No | +| [Kyverno Policies](https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/kyverno-policies) |  | No | No | No | Yes | No | No | | [Promtail](https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/promtail)  |  | No | No | No | Yes | Yes (PERMISSIVE) | No | | [Loki](https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/loki)  |  | No | No | No | Yes | Yes (PERMISSIVE) | No | | [Tempo](https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/tempo)  |  | No | Yes | Yes | No | Yes (PERMISSIVE) | No | diff --git a/README.md b/README.md index 670b05daf9..11c1682ca4 100644 --- a/README.md +++ b/README.md @@ -1,6 +1,6 @@ # bigbang -  +  Big Bang is a declarative, continuous delivery tool for core DoD hardened and approved packages into a Kubernetes cluster. @@ -69,7 +69,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t | istio.enabled | bool | `true` | Toggle deployment of Istio. | | istio.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/istio-controlplane.git"` | | | istio.git.path | string | `"./chart"` | | -| istio.git.tag | string | `"1.11.5-bb.2"` | | +| istio.git.tag | string | `"1.13.1-bb.1"` | | | istio.ingressGateways.public-ingressgateway.type | string | `"LoadBalancer"` | | | istio.ingressGateways.public-ingressgateway.kubernetesResourceSpec | object | `{}` | | | istio.gateways.public.ingressGateway | string | `"public-ingressgateway"` | | @@ -83,7 +83,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t | istiooperator.enabled | bool | `true` | Toggle deployment of Istio Operator. | | istiooperator.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/istio-operator.git"` | | | istiooperator.git.path | string | `"./chart"` | | -| istiooperator.git.tag | string | `"1.11.5-bb.1"` | | +| istiooperator.git.tag | string | `"1.13.1-bb.0"` | | | istiooperator.flux | object | `{}` | Flux reconciliation overrides specifically for the Istio Operator Package | | istiooperator.values | object | `{}` | Values to passthrough to the istio-operator chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/istio-operator.git | | istiooperator.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | @@ -101,7 +101,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t | kiali.enabled | bool | `true` | Toggle deployment of Kiali. | | kiali.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/kiali.git"` | | | kiali.git.path | string | `"./chart"` | | -| kiali.git.tag | string | `"1.45.0-bb.3"` | | +| kiali.git.tag | string | `"1.47.0-bb.0"` | | | kiali.flux | object | `{}` | Flux reconciliation overrides specifically for the Kiali Package | | kiali.ingress.gateway | string | `""` | | | kiali.sso.enabled | bool | `false` | Toggle SSO for Kiali on and off | @@ -112,14 +112,14 @@ To start using Big Bang, you will need to create your own Big Bang environment t | clusterAuditor.enabled | bool | `true` | Toggle deployment of Cluster Auditor. | | clusterAuditor.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/cluster-auditor.git"` | | | clusterAuditor.git.path | string | `"./chart"` | | -| clusterAuditor.git.tag | string | `"1.2.0-bb.1"` | | +| clusterAuditor.git.tag | string | `"1.4.0-bb.0"` | | | clusterAuditor.flux | object | `{}` | Flux reconciliation overrides specifically for the Cluster Auditor Package | | clusterAuditor.values | object | `{}` | Values to passthrough to the cluster auditor chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/cluster-auditor.git | | clusterAuditor.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | | gatekeeper.enabled | bool | `true` | Toggle deployment of OPA Gatekeeper. | | gatekeeper.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/policy.git"` | | | gatekeeper.git.path | string | `"./chart"` | | -| gatekeeper.git.tag | string | `"3.7.0-bb.9"` | | +| gatekeeper.git.tag | string | `"3.7.1-bb.0"` | | | gatekeeper.flux | object | `{"install":{"crds":"CreateReplace"},"upgrade":{"crds":"CreateReplace"}}` | Flux reconciliation overrides specifically for the OPA Gatekeeper Package | | gatekeeper.values | object | `{}` | Values to passthrough to the gatekeeper chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/policy.git | | gatekeeper.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | @@ -130,6 +130,13 @@ To start using Big Bang, you will need to create your own Big Bang environment t | kyverno.flux | object | `{}` | Flux reconciliation overrides specifically for the Kyverno Package | | kyverno.values | object | `{}` | Values to passthrough to the kyverno chart: https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/kyverno.git | | kyverno.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | +| kyvernopolicies.enabled | bool | `false` | Toggle deployment of Kyverno policies | +| kyvernopolicies.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/kyverno-policies.git"` | | +| kyvernopolicies.git.path | string | `"./chart"` | | +| kyvernopolicies.git.tag | string | `"1.0.0-bb.7"` | | +| kyvernopolicies.flux | object | `{}` | Flux reconciliation overrides specifically for the Kyverno Package | +| kyvernopolicies.values | object | `{}` | Values to passthrough to the kyverno policies chart: https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/kyverno-policies.git | +| kyvernopolicies.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | | logging.enabled | bool | `true` | Toggle deployment of Logging (EFK). | | logging.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/elasticsearch-kibana.git"` | | | logging.git.path | string | `"./chart"` | | @@ -152,7 +159,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t | fluentbit.enabled | bool | `true` | Toggle deployment of Fluent-Bit. | | fluentbit.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/fluentbit.git"` | | | fluentbit.git.path | string | `"./chart"` | | -| fluentbit.git.tag | string | `"0.19.19-bb.0"` | | +| fluentbit.git.tag | string | `"0.19.19-bb.3"` | | | fluentbit.flux | object | `{}` | Flux reconciliation overrides specifically for the Fluent-Bit Package | | fluentbit.values | object | `{}` | Values to passthrough to the fluentbit chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/fluentbit.git | | fluentbit.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | @@ -164,21 +171,21 @@ To start using Big Bang, you will need to create your own Big Bang environment t | loki.enabled | bool | `false` | Toggle deployment of Loki. | | loki.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/loki.git"` | | | loki.git.path | string | `"./chart"` | | -| loki.git.tag | string | `"2.5.1-bb.3"` | | +| loki.git.tag | string | `"2.10.1-bb.1"` | | | loki.flux | object | `{}` | Flux reconciliation overrides specifically for the Loki Package | | loki.values | object | `{}` | Values to passthrough to the Loki chart: https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/loki.git | | loki.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | | tempo.enabled | bool | `false` | Toggle deployment of Tempo. | | tempo.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/tempo.git"` | | | tempo.git.path | string | `"./chart"` | | -| tempo.git.tag | string | `"0.12.2-bb.3"` | | +| tempo.git.tag | string | `"0.14.1-bb.0"` | | | tempo.flux | object | `{}` | Flux reconciliation overrides specifically for the Tempo Package | | tempo.values | object | `{}` | Values to passthrough to the Tempo chart: https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/tempo.git | | tempo.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | | monitoring.enabled | bool | `true` | Toggle deployment of Monitoring (Prometheus, Grafana, and Alertmanager). | | monitoring.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring.git"` | | | monitoring.git.path | string | `"./chart"` | | -| monitoring.git.tag | string | `"30.0.1-bb.8"` | | +| monitoring.git.tag | string | `"32.2.1-bb.2"` | | | monitoring.flux | object | `{"install":{"crds":"CreateReplace"},"upgrade":{"crds":"CreateReplace"}}` | Flux reconciliation overrides specifically for the Monitoring Package | | monitoring.ingress.gateway | string | `""` | | | monitoring.sso.enabled | bool | `false` | Toggle SSO for monitoring components on and off | @@ -204,9 +211,11 @@ To start using Big Bang, you will need to create your own Big Bang environment t | addons.argocd.enabled | bool | `false` | Toggle deployment of ArgoCD. | | addons.argocd.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/argocd.git"` | | | addons.argocd.git.path | string | `"./chart"` | | -| addons.argocd.git.tag | string | `"3.33.5-bb.1"` | | +| addons.argocd.git.tag | string | `"3.33.5-bb.6"` | | | addons.argocd.flux | object | `{}` | Flux reconciliation overrides specifically for the ArgoCD Package | | addons.argocd.ingress.gateway | string | `""` | | +| addons.argocd.redis.host | string | `""` | Hostname of a pre-existing Redis to use for ArgoCD. Entering connection info will enable external Redis and will auto-create any required secrets. | +| addons.argocd.redis.port | string | `""` | Port of a pre-existing Redis to use for ArgoCD. | | addons.argocd.sso.enabled | bool | `false` | Toggle SSO for ArgoCD on and off | | addons.argocd.sso.client_id | string | `""` | ArgoCD OIDC client ID | | addons.argocd.sso.client_secret | string | `""` | ArgoCD OIDC client secret | @@ -217,7 +226,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t | addons.authservice.enabled | bool | `false` | Toggle deployment of Authservice. if enabling authservice, a filter needs to be provided by either enabling sso for monitoring or istio, or manually adding a filter chain in the values here: values: chain: minimal: callback_uri: "https://somecallback" | | addons.authservice.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/authservice.git"` | | | addons.authservice.git.path | string | `"./chart"` | | -| addons.authservice.git.tag | string | `"0.4.0-bb.24"` | | +| addons.authservice.git.tag | string | `"0.4.0-bb.25"` | | | addons.authservice.flux | object | `{}` | Flux reconciliation overrides specifically for the Authservice Package | | addons.authservice.values | object | `{}` | Values to passthrough to the authservice chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/authservice.git | | addons.authservice.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | @@ -225,14 +234,14 @@ To start using Big Bang, you will need to create your own Big Bang environment t | addons.minioOperator.enabled | bool | `false` | Toggle deployment of minio operator and instance. | | addons.minioOperator.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/application-utilities/minio-operator.git"` | | | addons.minioOperator.git.path | string | `"./chart"` | | -| addons.minioOperator.git.tag | string | `"4.4.3-bb.2"` | | +| addons.minioOperator.git.tag | string | `"4.4.10-bb.1"` | | | addons.minioOperator.flux | object | `{}` | Flux reconciliation overrides specifically for the Minio Operator Package | | addons.minioOperator.values | object | `{}` | Values to passthrough to the minio operator chart: https://repo1.dso.mil/platform-one/big-bang/apps/application-utilities/minio-operator.git | | addons.minioOperator.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | | addons.minio.enabled | bool | `false` | Toggle deployment of minio. | | addons.minio.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/application-utilities/minio.git"` | | | addons.minio.git.path | string | `"./chart"` | | -| addons.minio.git.tag | string | `"4.4.3-bb.3"` | | +| addons.minio.git.tag | string | `"4.4.10-bb.0"` | | | addons.minio.flux | object | `{}` | Flux reconciliation overrides specifically for the Minio Package | | addons.minio.ingress.gateway | string | `""` | | | addons.minio.accesskey | string | `""` | Default access key to use for minio. | @@ -244,13 +253,17 @@ To start using Big Bang, you will need to create your own Big Bang environment t | addons.gitlab.hostnames.registry | string | `"registry"` | | | addons.gitlab.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/gitlab.git"` | | | addons.gitlab.git.path | string | `"./chart"` | | -| addons.gitlab.git.tag | string | `"5.6.2-bb.5"` | | +| addons.gitlab.git.tag | string | `"5.8.2-bb.1"` | | | addons.gitlab.flux | object | `{}` | Flux reconciliation overrides specifically for the Gitlab Package | | addons.gitlab.ingress.gateway | string | `""` | | | addons.gitlab.sso.enabled | bool | `false` | Toggle OIDC SSO for Gitlab on and off. Enabling this option will auto-create any required secrets. | | addons.gitlab.sso.client_id | string | `""` | Gitlab OIDC client ID | | addons.gitlab.sso.client_secret | string | `""` | Gitlab OIDC client secret | | addons.gitlab.sso.label | string | `""` | Gitlab SSO login button label | +| addons.gitlab.sso.scopes | list | `["Gitlab"]` | Gitlab SSO Scopes, default is ["Gitlab"] | +| addons.gitlab.sso.issuer_uri | string | `""` | GitLab SSO Issuer URI, Only needed if your SSO is non-Keycloak | +| addons.gitlab.sso.end_session_uri | string | `""` | GitLab SSO End Session URI, Only needed if your SSO is non-Keycloak | +| addons.gitlab.sso.uid_field | string | `"preferred_username"` | Gitlab SSO UID field | | addons.gitlab.database.host | string | `""` | Hostname of a pre-existing PostgreSQL database to use for Gitlab. Entering connection info will disable the deployment of an internal database and will auto-create any required secrets. | | addons.gitlab.database.port | int | `5432` | Port of a pre-existing PostgreSQL database to use for Gitlab. | | addons.gitlab.database.database | string | `""` | Database name to connect to on host. | @@ -263,12 +276,13 @@ To start using Big Bang, you will need to create your own Big Bang environment t | addons.gitlab.objectStorage.accessSecret | string | `""` | Secret key for connecting to object storage endpoint. Unencoded string data. This should be placed in the secret values and then encrypted | | addons.gitlab.objectStorage.bucketPrefix | string | `""` | Bucket prefix to use for identifying buckets. Example: "prod" will produce "prod-gitlab-bucket" | | addons.gitlab.objectStorage.iamProfile | string | `""` | NOTE: Current bug with AWS IAM Profiles and Object Storage where only artifacts are stored. Fixed in Gitlab 14.5 -- Name of AWS IAM profile to use. -- If using an AWS IAM profile, the accessKey and accessSecret values must be left as empty strings eg: "" | +| addons.gitlab.redis.password | string | `""` | Redis plain text password to connect to the redis server. If empty (""), the gitlab charts will create the gitlab-redis-secret with a random password. -- This needs to be set to a non-empty value in order for the Grafana Redis Datasource and Dashboards to be installed. | | addons.gitlab.values | object | `{}` | Values to passthrough to the gitlab chart: https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/gitlab.git | | addons.gitlab.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | | addons.gitlabRunner.enabled | bool | `false` | Toggle deployment of Gitlab Runner | | addons.gitlabRunner.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/gitlab-runner.git"` | | | addons.gitlabRunner.git.path | string | `"./chart"` | | -| addons.gitlabRunner.git.tag | string | `"0.36.0-bb.2"` | | +| addons.gitlabRunner.git.tag | string | `"0.37.2-bb.1"` | | | addons.gitlabRunner.flux | object | `{}` | Flux reconciliation overrides specifically for the Gitlab Runner Package | | addons.gitlabRunner.values | object | `{}` | Values to passthrough to the gitlab runner chart: https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/gitlab-runner.git | | addons.gitlabRunner.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | @@ -293,7 +307,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t | addons.sonarqube.enabled | bool | `false` | Toggle deployment of SonarQube. | | addons.sonarqube.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/sonarqube.git"` | | | addons.sonarqube.git.path | string | `"./chart"` | | -| addons.sonarqube.git.tag | string | `"9.6.3-bb.16"` | | +| addons.sonarqube.git.tag | string | `"9.6.3-bb.17"` | | | addons.sonarqube.flux | object | `{}` | Flux reconciliation overrides specifically for the Sonarqube Package | | addons.sonarqube.ingress.gateway | string | `""` | | | addons.sonarqube.sso.enabled | bool | `false` | Toggle SAML SSO for SonarQube. Enabling this option will auto-create any required secrets. | @@ -351,7 +365,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t | addons.mattermost.enabled | bool | `false` | Toggle deployment of Mattermost. | | addons.mattermost.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/collaboration-tools/mattermost.git"` | | | addons.mattermost.git.path | string | `"./chart"` | | -| addons.mattermost.git.tag | string | `"0.6.0-bb.0"` | | +| addons.mattermost.git.tag | string | `"0.7.0-bb.0"` | | | addons.mattermost.flux | object | `{}` | Flux reconciliation overrides specifically for the Mattermost Package | | addons.mattermost.enterprise | object | `{"enabled":false,"license":""}` | Mattermost Enterprise functionality. | | addons.mattermost.enterprise.enabled | bool | `false` | Toggle the Mattermost Enterprise. This must be accompanied by a valid license unless you plan to start a trial post-install. | @@ -380,7 +394,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t | addons.velero.enabled | bool | `false` | Toggle deployment of Velero. | | addons.velero.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/cluster-utilities/velero.git"` | | | addons.velero.git.path | string | `"./chart"` | | -| addons.velero.git.tag | string | `"2.27.3-bb.1"` | | +| addons.velero.git.tag | string | `"2.28.0-bb.0"` | | | addons.velero.flux | object | `{}` | Flux reconciliation overrides specifically for the Velero Package | | addons.velero.plugins | list | `[]` | Plugin provider for Velero - requires at least one plugin installed. Current supported values: aws, azure, csi | | addons.velero.values | object | `{}` | Values to passthrough to the Velero chart: https://repo1.dso.mil/platform-one/big-bang/apps/cluster-utilities/velero/-/blob/main/chart/values.yaml | @@ -403,7 +417,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t | addons.vault.enabled | bool | `false` | Toggle deployment of Vault. | | addons.vault.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/vault.git"` | | | addons.vault.git.path | string | `"./chart"` | | -| addons.vault.git.tag | string | `"0.18.0-bb.7"` | | +| addons.vault.git.tag | string | `"0.19.0-bb.2"` | | | addons.vault.flux | object | `{}` | Flux reconciliation overrides specifically for the Vault Package | | addons.vault.ingress.gateway | string | `""` | | | addons.vault.values | object | `{}` | Values to passthrough to the vault chart: https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/vault.git | diff --git a/base/gitrepository.yaml b/base/gitrepository.yaml index cfd29f3c47..980f708e6c 100644 --- a/base/gitrepository.yaml +++ b/base/gitrepository.yaml @@ -11,4 +11,4 @@ spec: interval: 10m url: https://repo1.dso.mil/platform-one/big-bang/bigbang.git ref: - tag: 1.28.0 + tag: 1.29.0 diff --git a/chart/Chart.yaml b/chart/Chart.yaml index 5c5cab2a1c..1101cbe108 100644 --- a/chart/Chart.yaml +++ b/chart/Chart.yaml @@ -1,6 +1,6 @@ apiVersion: v2 name: bigbang -version: 1.28.0 +version: 1.29.0 description: Big Bang is a declarative, continuous delivery tool for core DoD hardened and approved packages into a Kubernetes cluster. type: application -- GitLab