release 1.5.0 backports
| # bigbang | # bigbang | ||
|   |   | ||
| Big Bang is a declarative, continuous delivery tool for core DoD hardened and approved packages into a Kubernetes cluster. | Big Bang is a declarative, continuous delivery tool for core DoD hardened and approved packages into a Kubernetes cluster. | ||
| > _This is a mirror of a government repo hosted on [Repo1](https://repo1.dso.mil/) by [DoD Platform One](http://p1.dso.mil/). Please direct all code changes, issues and comments to https://repo1.dso.mil/platform-one/big-bang/bigbang_ | |||
|
|||
| **Homepage:** <https://p1.dso.mil/#/products/big-bang> | **Homepage:** <https://p1.dso.mil/#/products/big-bang> | ||
| Big Bang follows a [GitOps](#gitops) approach to configuration management, using [Flux v2](#flux-v2) to reconcile Git with the cluster. Environments (e.g. dev, prod) and packages (e.g. istio) can be fully configured to suit the deployment needs. | Big Bang follows a [GitOps](#gitops) approach to configuration management, using [Flux v2](#flux-v2) to reconcile Git with the cluster. Environments (e.g. dev, prod) and packages (e.g. istio) can be fully configured to suit the deployment needs. | ||
| ... | @@ -44,13 +42,15 @@ To start using Big Bang, you will need to create your own Big Bang environment t | ... | @@ -44,13 +42,15 @@ To start using Big Bang, you will need to create your own Big Bang environment t |
| | git.credentials | object | `{"knownHosts":"","password":"","privateKey":"","publicKey":"","username":""}` | Chart created secrets with user defined values | | | git.credentials | object | `{"knownHosts":"","password":"","privateKey":"","publicKey":"","username":""}` | Chart created secrets with user defined values | | ||
| | git.credentials.username | string | `""` | HTTP git credentials, both username and password must be provided | | | git.credentials.username | string | `""` | HTTP git credentials, both username and password must be provided | | ||
| | git.credentials.privateKey | string | `""` | SSH git credentials, privateKey, publicKey, and knownHosts must be provided | | | git.credentials.privateKey | string | `""` | SSH git credentials, privateKey, publicKey, and knownHosts must be provided | | ||
| | sso | object | `{"certificate_authority":"","client_id":"","client_secret":"","jwks":"","oidc":{"host":"login.dso.mil","realm":"baby-yoda"}}` | Global SSO values used for BigBang deployments when sso is enabled, can be overridden by individual packages. | | | sso | object | `{"auth_url":"https://{{ .Values.sso.oidc.host }}/auth/realms/{{ .Values.sso.oidc.realm }}/protocol/openid-connect/auth","certificate_authority":"","client_id":"","client_secret":"","jwks":"","oidc":{"host":"login.dso.mil","realm":"baby-yoda"},"token_url":"https://{{ .Values.sso.oidc.host }}/auth/realms/{{ .Values.sso.oidc.realm }}/protocol/openid-connect/token"}` | Global SSO values used for BigBang deployments when sso is enabled, can be overridden by individual packages. | | ||
| | sso.oidc.host | string | `"login.dso.mil"` | Domain for keycloak used for configuring SSO | | | sso.oidc.host | string | `"login.dso.mil"` | Domain for keycloak used for configuring SSO | | ||
| | sso.oidc.realm | string | `"baby-yoda"` | Keycloak realm containing clients | | | sso.oidc.realm | string | `"baby-yoda"` | Keycloak realm containing clients | | ||
| | sso.certificate_authority | string | `""` | Keycloak's certificate authority (unencoded) used by authservice to support SSO for various packages | | | sso.certificate_authority | string | `""` | Keycloak's certificate authority (unencoded) used by authservice to support SSO for various packages | | ||
| | sso.jwks | string | `""` | Keycloak realm's json web key uri, obtained through https://<keycloak-server>/auth/realms/<realm>/.well-known/openid-configuration | | | sso.jwks | string | `""` | Keycloak realm's json web key uri, obtained through https://<keycloak-server>/auth/realms/<realm>/.well-known/openid-configuration | | ||
| | sso.client_id | string | `""` | OIDC client ID used for packages authenticated through authservice | | | sso.client_id | string | `""` | OIDC client ID used for packages authenticated through authservice | | ||
| | sso.client_secret | string | `""` | OIDC client secret used for packages authenticated through authservice | | | sso.client_secret | string | `""` | OIDC client secret used for packages authenticated through authservice | | ||
| | sso.token_url | string | `"https://{{ .Values.sso.oidc.host }}/auth/realms/{{ .Values.sso.oidc.realm }}/protocol/openid-connect/token"` | OIDC token URL template string (to be used as default) | | |||
| | sso.auth_url | string | `"https://{{ .Values.sso.oidc.host }}/auth/realms/{{ .Values.sso.oidc.realm }}/protocol/openid-connect/auth"` | OIDC auth URL template string (to be used as default) | | |||
| | flux | object | `{"install":{"retries":3},"interval":"2m","rollback":{"cleanupOnFail":true,"timeout":"10m"},"upgrade":{"retries":3}}` | (Advanced) Flux reconciliation parameters. The default values provided will be sufficient for the majority of workloads. | | | flux | object | `{"install":{"retries":3},"interval":"2m","rollback":{"cleanupOnFail":true,"timeout":"10m"},"upgrade":{"retries":3}}` | (Advanced) Flux reconciliation parameters. The default values provided will be sufficient for the majority of workloads. | | ||
| | istio.enabled | bool | `true` | Toggle deployment of Istio. | | | istio.enabled | bool | `true` | Toggle deployment of Istio. | | ||
| | istio.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/istio-controlplane.git"` | | | | istio.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/istio-controlplane.git"` | | | ||
| ... | @@ -71,7 +71,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t | ... | @@ -71,7 +71,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t |
| | clusterAuditor.enabled | bool | `true` | Toggle deployment of Cluster Auditor. | | | clusterAuditor.enabled | bool | `true` | Toggle deployment of Cluster Auditor. | | ||
| | clusterAuditor.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/cluster-auditor.git"` | | | | clusterAuditor.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/cluster-auditor.git"` | | | ||
| | clusterAuditor.git.path | string | `"./chart"` | | | | clusterAuditor.git.path | string | `"./chart"` | | | ||
| | clusterAuditor.git.tag | string | `"0.1.8-bb.1"` | | | | clusterAuditor.git.tag | string | `"0.1.8-bb.2"` | | | ||
| | clusterAuditor.values | object | `{}` | Values to passthrough to the cluster auditor chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/cluster-auditor.git | | | clusterAuditor.values | object | `{}` | Values to passthrough to the cluster auditor chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/cluster-auditor.git | | ||
| | gatekeeper.enabled | bool | `true` | Toggle deployment of OPA Gatekeeper. | | | gatekeeper.enabled | bool | `true` | Toggle deployment of OPA Gatekeeper. | | ||
| | gatekeeper.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/policy.git"` | | | | gatekeeper.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/policy.git"` | | | ||
| ... | @@ -81,7 +81,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t | ... | @@ -81,7 +81,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t |
| | logging.enabled | bool | `true` | Toggle deployment of Logging (EFK). | | | logging.enabled | bool | `true` | Toggle deployment of Logging (EFK). | | ||
| | logging.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/elasticsearch-kibana.git"` | | | | logging.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/elasticsearch-kibana.git"` | | | ||
| | logging.git.path | string | `"./chart"` | | | | logging.git.path | string | `"./chart"` | | | ||
| | logging.git.tag | string | `"0.1.4-bb.4"` | | | | logging.git.tag | string | `"0.1.7-bb.0"` | | | ||
| | logging.sso.enabled | bool | `false` | Toggle OIDC SSO for Kibana/Elasticsearch on and off. Enabling this option will auto-create any required secrets. | | | logging.sso.enabled | bool | `false` | Toggle OIDC SSO for Kibana/Elasticsearch on and off. Enabling this option will auto-create any required secrets. | | ||
| | logging.sso.client_id | string | `""` | Elasticsearch/Kibana OIDC client ID | | | logging.sso.client_id | string | `""` | Elasticsearch/Kibana OIDC client ID | | ||
| | logging.sso.client_secret | string | `""` | Elasticsearch/Kibana OIDC client secret | | | logging.sso.client_secret | string | `""` | Elasticsearch/Kibana OIDC client secret | | ||
| ... | @@ -96,7 +96,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t | ... | @@ -96,7 +96,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t |
| | fluentbit.enabled | bool | `true` | Toggle deployment of Fluent-Bit. | | | fluentbit.enabled | bool | `true` | Toggle deployment of Fluent-Bit. | | ||
| | fluentbit.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/fluentbit.git"` | | | | fluentbit.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/fluentbit.git"` | | | ||
| | fluentbit.git.path | string | `"./chart"` | | | | fluentbit.git.path | string | `"./chart"` | | | ||
| | fluentbit.git.tag | string | `"0.7.10-bb.0"` | | | | fluentbit.git.tag | string | `"0.15.3-bb.0"` | | | ||
| | fluentbit.values | object | `{}` | | | | fluentbit.values | object | `{}` | | | ||
| | monitoring.enabled | bool | `true` | Toggle deployment of Monitoring (Prometheus, Grafana, and Alertmanager). | | | monitoring.enabled | bool | `true` | Toggle deployment of Monitoring (Prometheus, Grafana, and Alertmanager). | | ||
| | monitoring.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring.git"` | | | | monitoring.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring.git"` | | | ||
| ... | @@ -116,12 +116,12 @@ To start using Big Bang, you will need to create your own Big Bang environment t | ... | @@ -116,12 +116,12 @@ To start using Big Bang, you will need to create your own Big Bang environment t |
| | twistlock.enabled | bool | `true` | Toggle deployment of Twistlock. | | | twistlock.enabled | bool | `true` | Toggle deployment of Twistlock. | | ||
| | twistlock.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/twistlock.git"` | | | | twistlock.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/twistlock.git"` | | | ||
| | twistlock.git.path | string | `"./chart"` | | | | twistlock.git.path | string | `"./chart"` | | | ||
| | twistlock.git.tag | string | `"0.0.3-bb.1"` | | | | twistlock.git.tag | string | `"0.0.3-bb.3"` | | | ||
| | twistlock.values | object | `{}` | Values to passthrough to the twistlock chart: https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/twistlock.git | | | twistlock.values | object | `{}` | Values to passthrough to the twistlock chart: https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/twistlock.git | | ||
| | addons.argocd.enabled | bool | `false` | Toggle deployment of ArgoCD. | | | addons.argocd.enabled | bool | `false` | Toggle deployment of ArgoCD. | | ||
| | addons.argocd.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/argocd.git"` | | | | addons.argocd.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/argocd.git"` | | | ||
| | addons.argocd.git.path | string | `"./chart"` | | | | addons.argocd.git.path | string | `"./chart"` | | | ||
| | addons.argocd.git.tag | string | `"2.14.7-bb.2"` | | | | addons.argocd.git.tag | string | `"2.14.7-bb.3"` | | | ||
| | addons.argocd.sso.enabled | bool | `false` | Toggle SSO for ArgoCD on and off | | | addons.argocd.sso.enabled | bool | `false` | Toggle SSO for ArgoCD on and off | | ||
| | addons.argocd.sso.client_id | string | `""` | ArgoCD OIDC client ID | | | addons.argocd.sso.client_id | string | `""` | ArgoCD OIDC client ID | | ||
| | addons.argocd.sso.client_secret | string | `""` | ArgoCD OIDC client secret | | | addons.argocd.sso.client_secret | string | `""` | ArgoCD OIDC client secret | | ||
| ... | @@ -176,7 +176,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t | ... | @@ -176,7 +176,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t |
| | addons.sonarqube.enabled | bool | `false` | Toggle deployment of SonarQube. | | | addons.sonarqube.enabled | bool | `false` | Toggle deployment of SonarQube. | | ||
| | addons.sonarqube.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/sonarqube.git"` | | | | addons.sonarqube.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/sonarqube.git"` | | | ||
| | addons.sonarqube.git.path | string | `"./chart"` | | | | addons.sonarqube.git.path | string | `"./chart"` | | | ||
| | addons.sonarqube.git.tag | string | `"9.2.6-bb.6"` | | | | addons.sonarqube.git.tag | string | `"9.2.6-bb.7"` | | | ||
| | addons.sonarqube.sso.enabled | bool | `false` | Toggle OIDC SSO for SonarQube. Enabling this option will auto-create any required secrets. | | | addons.sonarqube.sso.enabled | bool | `false` | Toggle OIDC SSO for SonarQube. Enabling this option will auto-create any required secrets. | | ||
| | addons.sonarqube.sso.client_id | string | `""` | SonarQube OIDC client ID | | | addons.sonarqube.sso.client_id | string | `""` | SonarQube OIDC client ID | | ||
| | addons.sonarqube.sso.label | string | `""` | SonarQube SSO login button label | | | addons.sonarqube.sso.label | string | `""` | SonarQube SSO login button label | | ||
| ... | @@ -220,12 +220,12 @@ To start using Big Bang, you will need to create your own Big Bang environment t | ... | @@ -220,12 +220,12 @@ To start using Big Bang, you will need to create your own Big Bang environment t |
| | addons.mattermostoperator.enabled | bool | `false` | | | | addons.mattermostoperator.enabled | bool | `false` | | | ||
| | addons.mattermostoperator.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/collaboration-tools/mattermost-operator.git"` | | | | addons.mattermostoperator.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/collaboration-tools/mattermost-operator.git"` | | | ||
| | addons.mattermostoperator.git.path | string | `"./chart"` | | | | addons.mattermostoperator.git.path | string | `"./chart"` | | | ||
| | addons.mattermostoperator.git.tag | string | `"1.13.0-bb.0"` | | | | addons.mattermostoperator.git.tag | string | `"1.13.0-bb.2"` | | | ||
| | addons.mattermostoperator.values | object | `{}` | Values to passthrough to the mattermost operator chart: https://repo1.dso.mil/platform-one/big-bang/apps/collaboration-tools/mattermost-operator/-/blob/main/chart/values.yaml | | | addons.mattermostoperator.values | object | `{}` | Values to passthrough to the mattermost operator chart: https://repo1.dso.mil/platform-one/big-bang/apps/collaboration-tools/mattermost-operator/-/blob/main/chart/values.yaml | | ||
| | addons.mattermost.enabled | bool | `false` | Toggle deployment of Mattermost. | | | addons.mattermost.enabled | bool | `false` | Toggle deployment of Mattermost. | | ||
| | addons.mattermost.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/collaboration-tools/mattermost.git"` | | | | addons.mattermost.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/collaboration-tools/mattermost.git"` | | | ||
| | addons.mattermost.git.path | string | `"./chart"` | | | | addons.mattermost.git.path | string | `"./chart"` | | | ||
| | addons.mattermost.git.tag | string | `"0.1.1-bb.3"` | | | | addons.mattermost.git.tag | string | `"0.1.2-bb.0"` | | | ||
| | addons.mattermost.enterprise | object | `{"enabled":false,"license":""}` | Mattermost Enterprise functionality. | | | addons.mattermost.enterprise | object | `{"enabled":false,"license":""}` | Mattermost Enterprise functionality. | | ||
| | addons.mattermost.enterprise.enabled | bool | `false` | Toggle the Mattermost Enterprise. This must be accompanied by a valid license unless you plan to start a trial post-install. | | | addons.mattermost.enterprise.enabled | bool | `false` | Toggle the Mattermost Enterprise. This must be accompanied by a valid license unless you plan to start a trial post-install. | | ||
| | addons.mattermost.enterprise.license | string | `""` | License for Mattermost. This should be the entire contents of the license file from Mattermost (should be one line), example below license: "eyJpZCI6InIxM205bjR3eTdkYjludG95Z3RiOD---REST---IS---HIDDEN | | | addons.mattermost.enterprise.license | string | `""` | License for Mattermost. This should be the entire contents of the license file from Mattermost (should be one line), example below license: "eyJpZCI6InIxM205bjR3eTdkYjludG95Z3RiOD---REST---IS---HIDDEN | | ||
| ... | ... | ||
