UNCLASSIFIED - NO CUI

Skip to content
Snippets Groups Projects
Commit 4f9d1b8e authored by Gabe Scarberry's avatar Gabe Scarberry :popcorn:
Browse files

Merge branch 'charter-update-gabe' into 'master' 

charter update-to-master

Closes #870

See merge request platform-one/big-bang/bigbang!993
parents a68d00dc 9707654a
No related branches found
No related tags found
2 merge requests!1386Master,!993charter update-to-master
Pipeline #531401 failed
Stage: .pre
Stage: network up
Stage: cluster up
Stage: bigbang up
Stage: test
Stage: bigbang down
Stage: cluster down
Stage: network down
Hide whitespace changes
Inline Side-by-side
charter/BigBangPackages.md
+ 50
− 125
View file @ 4f9d1b8e
......@@ -25,7 +25,6 @@ graph TB
Thanos
end
ServiceMesh
ArgoCD
ClusterAuditor --> LoggingECK
ClusterAuditor --> OPA(Policy Enforcement)
......@@ -35,8 +34,6 @@ graph TB
Postgres
MinIO(S3 Compatible Storage)
Redis
MySQL
MongoDB
end
subgraph "Security"
......@@ -54,8 +51,6 @@ graph TB
end
subgraph "Collaboration Tools"
Jira --> Postgres
Confluence --> Postgres
MatterMost --> MinIO
end
......@@ -82,7 +77,6 @@ graph TB
Thanos
end
ServiceMesh
ArgoCD
Twistlock
ClusterAuditor --> LoggingECK
......@@ -90,27 +84,6 @@ graph TB
end
```
### ArgoCD
Product:
* [ArgoCD](https://argoproj.github.io/argo-cd/)
Repository:
* [ArgoCD Repo](https://repo1.dso.mil/platform-one/big-bang/apps/core/argocd)
Dependency: None
Owners:
* @joshwolf - Rancher Federal
* @karchaf
Understudy:
* @kavitha
### Service Mesh
Current implementation of Service Mesh is provided by Istio. Service Mesh should be the first Package deployed to ensure other applications are operating with visibility and security.
......@@ -127,15 +100,7 @@ Repository:
Dependency: None
Owners:
* @runyontr - Runyon Solutions
* @nick_tetrate - Tetrate
Understudy:
* Chris McGrath
* @kavitha
* @kenna81
* [CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/core/istio-operator/-/blob/main/CODEOWNERS)
### Auth Service
......@@ -147,17 +112,12 @@ Product:
Repository:
* [authservice](https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/authservice)
* [authservice](https://repo1.dso.mil/platform-one/big-bang/apps/core/authservice)
Dependency: None
Owners:
* @runyontr - Runyon Solutions
* @nick_tetrate - Tetrate
* @adam.toy - Rancher Federal
Understudy:
* [CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/core/authservice/-/blob/main/CODEOWNERS)
### Logging
......@@ -182,13 +142,9 @@ Dependencies:
* RWO StorageClass
Owners:
* @kavitha
* @ryan.j.garcia
Understudy:
* @evan.rush
* [Elasticsearch-kibana CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/core/elasticsearch-kibana/-/blob/main/CODEOWNERS)
* [Fluentbit CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/core/fluentbit/-/blob/main/CODEOWNERS)
* [Eck-operator CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/core/eck-operator/-/blob/main/CODEOWNERS)
### Policy Enforcement
......@@ -207,13 +163,7 @@ Dependencies: None
Owners:
* @runyontr - Runyon Solutions
* @karchaf - Cloud Fit Software
Understudy
* @agudem
* @kavitha
* [CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/core/policy/-/blob/main/CODEOWNERS)
### Monitoring
......@@ -233,8 +183,7 @@ Dependencies: None
Owners:
* @lynnStill
* @ryan.j.garcia
* [CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring/-/blob/main/CODEOWNERS)
### Cluster Auditor
......@@ -251,12 +200,7 @@ Dependencies:
Owners:
* @runyontr - Runyon Solutions
* @thomas.burton - iSenpai
Understudy:
* @kenna81
* [CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/core/cluster-auditor/-/blob/main/CODEOWNERS)
Repository:
......@@ -278,8 +222,7 @@ Dependencies:
Owners:
* @runyontr - Runyon Solutions
* @thomas.burton - iSenpai
* [CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/twistlock/-/blob/main/CODEOWNERS)
## Addons
......@@ -319,14 +262,7 @@ Dependencies:
Owners:
* @megamind
* @kevin.wilder
* @michaelmcleroy
Understudy:
* @agudem
* @kenna81
* [CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/keycloak/-/blob/main/CODEOWNERS)
#### Anchore Enterprise
......@@ -342,8 +278,7 @@ Dependencies:
Owners:
* @thomas.burton - iSenpai
* @james.peterson - Anchore
* [CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/anchore-enterprise/-/blob/main/CODEOWNERS)
### Developer Tools
......@@ -389,8 +324,7 @@ Dependencies:
Owners:
* @ryan.j.garcia
* @LynnStill
* [CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/gitlab/-/blob/main/CODEOWNERS)
#### GitLab Runners
......@@ -410,12 +344,7 @@ Dependencies:
Owners:
* @ryan.j.garcia
* @LynnStill
Understudies
* @kevin.wilder
* [CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/gitlab-runner/-/blob/main/CODEOWNERS)
#### Sonarqube
......@@ -436,27 +365,7 @@ Dependencies:
Owners:
* @kevin.wilder
* @LynnStill
#### Fortify
Fortify provides code
Product:
*
Repository:
* [Fortify Repo](https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/fortify)
Dependencies:
Owners:
* @kevin.wilder
* @LynnStill
* [CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/sonarqube/-/blob/main/CODEOWNERS)
#### Nexus
......@@ -471,15 +380,13 @@ Product:
Repository:
* [Nexus](https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/nexus)
* [Nexus](https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/nexus)
Dependencies:
Owners:
* @kevin.wilder
* @ariel.shnitzer
* @grant.duncklee
* [CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/nexus/-/blob/main/CODEOWNERS)
### Collaboration Tools
......@@ -500,7 +407,7 @@ graph TB
```
#### Confluence
<!-- #### Confluence
Confluence provides a centralized workspace for collaborating on documentation
......@@ -542,7 +449,7 @@ Dependencies:
Owners:
* @matt.kaiser
* @branden.cobb
* @branden.cobb -->
#### Mattermost
......@@ -562,8 +469,7 @@ Dependencies:
Owners:
* @ryan.j.garcia
* @kevin.wilder
* [CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/collaboration-tools/mattermost/-/blob/main/CODEOWNERS)
### Package Utilities
......@@ -606,14 +512,15 @@ Product:
* [MinIO](https://min.io/)
Repository: TBD
Repository:
* [Minio Package](https://repo1.dso.mil/platform-one/big-bang/apps/application-utilities/minio/)
Dependencies: None
Owners:
* @kevin.wilder - Dark Wolf Solutions
* @branden.cobb
* [CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/application-utilities/minio/-/blob/main/CODEOWNERS)
#### MySQL
......@@ -657,13 +564,28 @@ Repository:
Owners:
* @runyontr - Runyon Solutions
* @still - Parsons
* [CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/redis/-/blob/main/CODEOWNERS)
### Cluster Utilities
Packages that provider cluster level utility, such as RWX storage or generic backup capabilities.
#### ArgoCD
Product:
* [ArgoCD](https://argoproj.github.io/argo-cd/)
Repository:
* [ArgoCD Repo](https://repo1.dso.mil/platform-one/big-bang/apps/core/argocd)
Dependency: None
Owners:
* [CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/core/argocd/-/blob/main/CODEOWNERS)
#### Velero
Velero is an open source tool to safely backup and restore, perform disaster recovery, and migrate Kubernetes cluster resources and persistent volumes
......@@ -676,13 +598,16 @@ Repository:
Owners:
* @tunde - Oteemo
* @adam.toy - Rancher Federal
* [CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/cluster-utilities/velero/-/blob/main/CODEOWNERS)
### BB Technical Oversight Committee (BB TOC)
### Sandbox
[Process](https://repo1.dso.mil/platform-one/bbtoc/-/tree/master/process)
The [Sandbox](https://repo1.dso.mil/platform-one/big-bang/apps/sandbox) is an area for packages that are currently being or will be worked that do not yet meet the requirements of a supported package. Due to the fluidity of sandbox apps, they are not tracked in the charter.
#### BB TOC Repos
[Graduated](https://repo1.dso.mil/platform-one/big-bang/apps/graduated)
Note, this is _not_ a place where packages go to die. If a package is abandoned for whatever reason it will be archived.
[Incubating](https://repo1.dso.mil/platform-one/big-bang/apps/incubating)
To graduate from a sandbox package, it must meet the requirements outlined in this charter.
[Sandbox](https://repo1.dso.mil/platform-one/big-bang/apps/sandbox)
\ No newline at end of file
charter/NewPackageRequests.md
+ 2
− 8
View file @ 4f9d1b8e
......@@ -2,9 +2,7 @@
This is the process for adding a new package into Big Bang
## Out-of-Tree / 3rd Party Packages
### Submit New Big Bang Package Proposal to the BB Technical Oversite Committee
## Submit New Big Bang Package Proposal to the BB Technical Oversite Committee
[BB TOC New Package Proposal](https://repo1.dso.mil/platform-one/p1toc/-/issues/new?issue%5Bassignee_id%5D=&issue%5Bmilestone_id%5D=)
......@@ -12,8 +10,4 @@ A shepherd will be assigned to the project to create a repo in the [BB sandbox](
### Process
Out-of-Tree packages packages will follow the [BBTOC process](https://repo1.dso.mil/platform-one/bbtoc/-/tree/master/process) from Sandbox -> Incubating -> Graduated
## In-Tree / Big Bang Maintained Package Process
In order for a package to become an "In-Tree" package (supported by Platform One), it must meet all of the requirements of a BB TOC graduated package and have an [issue](https://repo1.dso.mil/groups/platform-one/big-bang/apps/third-party/-/issues) opened to 'Recommend Package for "In-Tree" Support'. The issue will be processed through the Platform One Jedi Order and Rebel Alliance councils for a governement decision to be added as officially supported / "in-tree" add-on.
New packages packages will follow the [BBTOC process](https://repo1.dso.mil/platform-one/bbtoc/-/tree/master/process) from Sandbox -> Incubating -> Graduated
charter/PackageRequirements.md
+ 3
− 11
View file @ 4f9d1b8e
......@@ -24,17 +24,9 @@ Each package will work with any cluster under the following criteria.
## PR-X. Iron Bank Images
Every Big Bang Package shall be configured to use Iron Bank images. The images used from Iron Bank __must__ be _fully_ approved and _functional_ to be in compliance with the Big Bang baseline security posture.
Big Bang Package shall be configured to use Iron Bank images. The images used from Iron Bank __must__ be _fully_ approved and _functional_ to be in compliance with the Big Bang baseline security posture.
Once this prerequisite is met, a package is eligible for inclusion within BigBang in accordance with [New Package Requests](NewPackageRequests.md).
### Out-of-Tree Packages
[Out-of-Tree Packages](https://repo1.dso.mil/platform-one/big-bang/apps/third-party) are third party packages that adhere to all the BigBang package standards. These packages are predominantly community-maintained packages; however, some packages may be jointly maintained by BigBang and community as indicated by the codeowners.
### In-Tree Packages
[In-Tree Packages](https://repo1.dso.mil/platform-one/big-bang/apps) are Platform One developer-supported Big Bang Core & add-ons that adhere to all the BigBang package standards. These packages have been adopted as an official Big Bang offering for key customers. As such, they are supported, updated, and maintained by team members of BigBang and are labeled with the "BigBang Supported" badge on the repository's `README.md` page, which indicates active support. That being said, BigBang reserves the right to deprecate support for these packages.
Please see [New Package Requests](NewPackageRequests.md) and the [BBTOC process](https://repo1.dso.mil/platform-one/bbtoc/-/tree/master/process) for additional pre-requisites.
## PR-X. Packages are Helm Charts
......@@ -83,7 +75,7 @@ include:
file: '/templates/package-tests.yaml'
```
## PR-X. Dependencies must be Big Bang Package
## PR-X. Dependencies must be a Big Bang Package
If a Package has a dependency on another Package to function, the dependency shall also be a Big Bang Package
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment

UNCLASSIFIED - NO CUI