diff --git a/charter/BigBangPackages.md b/charter/BigBangPackages.md index 854c1a2392bc82c086c17433e8fe9e0c97a108f4..ed9e502ef15e74f97683f36c7f3290c0833e8eae 100644 --- a/charter/BigBangPackages.md +++ b/charter/BigBangPackages.md @@ -25,7 +25,6 @@ graph TB Thanos end ServiceMesh - ArgoCD ClusterAuditor --> LoggingECK ClusterAuditor --> OPA(Policy Enforcement) @@ -35,8 +34,6 @@ graph TB Postgres MinIO(S3 Compatible Storage) Redis - MySQL - MongoDB end subgraph "Security" @@ -54,8 +51,6 @@ graph TB end subgraph "Collaboration Tools" - Jira --> Postgres - Confluence --> Postgres MatterMost --> MinIO end @@ -82,7 +77,6 @@ graph TB Thanos end ServiceMesh - ArgoCD Twistlock ClusterAuditor --> LoggingECK @@ -90,27 +84,6 @@ graph TB end ``` -### ArgoCD - -Product: - -* [ArgoCD](https://argoproj.github.io/argo-cd/) - -Repository: - -* [ArgoCD Repo](https://repo1.dso.mil/platform-one/big-bang/apps/core/argocd) - -Dependency: None - -Owners: - -* @joshwolf - Rancher Federal -* @karchaf - -Understudy: - -* @kavitha - ### Service Mesh Current implementation of Service Mesh is provided by Istio. Service Mesh should be the first Package deployed to ensure other applications are operating with visibility and security. @@ -127,15 +100,7 @@ Repository: Dependency: None Owners: - -* @runyontr - Runyon Solutions -* @nick_tetrate - Tetrate - -Understudy: - -* Chris McGrath -* @kavitha -* @kenna81 +* [CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/core/istio-operator/-/blob/main/CODEOWNERS) ### Auth Service @@ -147,17 +112,12 @@ Product: Repository: -* [authservice](https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/authservice) +* [authservice](https://repo1.dso.mil/platform-one/big-bang/apps/core/authservice) Dependency: None Owners: - -* @runyontr - Runyon Solutions -* @nick_tetrate - Tetrate -* @adam.toy - Rancher Federal - -Understudy: +* [CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/core/authservice/-/blob/main/CODEOWNERS) ### Logging @@ -182,13 +142,9 @@ Dependencies: * RWO StorageClass Owners: - -* @kavitha -* @ryan.j.garcia - -Understudy: - -* @evan.rush +* [Elasticsearch-kibana CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/core/elasticsearch-kibana/-/blob/main/CODEOWNERS) +* [Fluentbit CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/core/fluentbit/-/blob/main/CODEOWNERS) +* [Eck-operator CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/core/eck-operator/-/blob/main/CODEOWNERS) ### Policy Enforcement @@ -207,13 +163,7 @@ Dependencies: None Owners: -* @runyontr - Runyon Solutions -* @karchaf - Cloud Fit Software - -Understudy - -* @agudem -* @kavitha +* [CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/core/policy/-/blob/main/CODEOWNERS) ### Monitoring @@ -233,8 +183,7 @@ Dependencies: None Owners: -* @lynnStill -* @ryan.j.garcia +* [CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring/-/blob/main/CODEOWNERS) ### Cluster Auditor @@ -251,12 +200,7 @@ Dependencies: Owners: -* @runyontr - Runyon Solutions -* @thomas.burton - iSenpai - -Understudy: - -* @kenna81 +* [CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/core/cluster-auditor/-/blob/main/CODEOWNERS) Repository: @@ -278,8 +222,7 @@ Dependencies: Owners: -* @runyontr - Runyon Solutions -* @thomas.burton - iSenpai +* [CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/twistlock/-/blob/main/CODEOWNERS) ## Addons @@ -319,14 +262,7 @@ Dependencies: Owners: -* @megamind -* @kevin.wilder -* @michaelmcleroy - -Understudy: - -* @agudem -* @kenna81 +* [CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/keycloak/-/blob/main/CODEOWNERS) #### Anchore Enterprise @@ -342,8 +278,7 @@ Dependencies: Owners: -* @thomas.burton - iSenpai -* @james.peterson - Anchore +* [CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/anchore-enterprise/-/blob/main/CODEOWNERS) ### Developer Tools @@ -389,8 +324,7 @@ Dependencies: Owners: -* @ryan.j.garcia -* @LynnStill +* [CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/gitlab/-/blob/main/CODEOWNERS) #### GitLab Runners @@ -410,12 +344,7 @@ Dependencies: Owners: -* @ryan.j.garcia -* @LynnStill - -Understudies - -* @kevin.wilder +* [CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/gitlab-runner/-/blob/main/CODEOWNERS) #### Sonarqube @@ -436,27 +365,7 @@ Dependencies: Owners: -* @kevin.wilder -* @LynnStill - -#### Fortify - -Fortify provides code - -Product: - -* - -Repository: - -* [Fortify Repo](https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/fortify) - -Dependencies: - -Owners: - -* @kevin.wilder -* @LynnStill +* [CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/sonarqube/-/blob/main/CODEOWNERS) #### Nexus @@ -471,15 +380,13 @@ Product: Repository: -* [Nexus](https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/nexus) +* [Nexus](https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/nexus) Dependencies: Owners: -* @kevin.wilder -* @ariel.shnitzer -* @grant.duncklee +* [CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/nexus/-/blob/main/CODEOWNERS) ### Collaboration Tools @@ -500,7 +407,7 @@ graph TB ``` -#### Confluence +<!-- #### Confluence Confluence provides a centralized workspace for collaborating on documentation @@ -542,7 +449,7 @@ Dependencies: Owners: * @matt.kaiser -* @branden.cobb +* @branden.cobb --> #### Mattermost @@ -562,8 +469,7 @@ Dependencies: Owners: -* @ryan.j.garcia -* @kevin.wilder +* [CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/collaboration-tools/mattermost/-/blob/main/CODEOWNERS) ### Package Utilities @@ -606,14 +512,15 @@ Product: * [MinIO](https://min.io/) -Repository: TBD +Repository: + +* [Minio Package](https://repo1.dso.mil/platform-one/big-bang/apps/application-utilities/minio/) Dependencies: None Owners: -* @kevin.wilder - Dark Wolf Solutions -* @branden.cobb +* [CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/application-utilities/minio/-/blob/main/CODEOWNERS) #### MySQL @@ -657,13 +564,28 @@ Repository: Owners: -* @runyontr - Runyon Solutions -* @still - Parsons +* [CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/redis/-/blob/main/CODEOWNERS) ### Cluster Utilities Packages that provider cluster level utility, such as RWX storage or generic backup capabilities. +#### ArgoCD + +Product: + +* [ArgoCD](https://argoproj.github.io/argo-cd/) + +Repository: + +* [ArgoCD Repo](https://repo1.dso.mil/platform-one/big-bang/apps/core/argocd) + +Dependency: None + +Owners: + +* [CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/core/argocd/-/blob/main/CODEOWNERS) + #### Velero Velero is an open source tool to safely backup and restore, perform disaster recovery, and migrate Kubernetes cluster resources and persistent volumes @@ -676,13 +598,16 @@ Repository: Owners: -* @tunde - Oteemo -* @adam.toy - Rancher Federal +* [CODEOWNERS](https://repo1.dso.mil/platform-one/big-bang/apps/cluster-utilities/velero/-/blob/main/CODEOWNERS) + + +### BB Technical Oversight Committee (BB TOC) -### Sandbox +[Process](https://repo1.dso.mil/platform-one/bbtoc/-/tree/master/process) -The [Sandbox](https://repo1.dso.mil/platform-one/big-bang/apps/sandbox) is an area for packages that are currently being or will be worked that do not yet meet the requirements of a supported package. Due to the fluidity of sandbox apps, they are not tracked in the charter. +#### BB TOC Repos +[Graduated](https://repo1.dso.mil/platform-one/big-bang/apps/graduated) -Note, this is _not_ a place where packages go to die. If a package is abandoned for whatever reason it will be archived. +[Incubating](https://repo1.dso.mil/platform-one/big-bang/apps/incubating) -To graduate from a sandbox package, it must meet the requirements outlined in this charter. +[Sandbox](https://repo1.dso.mil/platform-one/big-bang/apps/sandbox) \ No newline at end of file diff --git a/charter/NewPackageRequests.md b/charter/NewPackageRequests.md index d333039324ad3cfe8e25a84962718adbd355fb2b..06354cc899fc0aec34bf9727780170f0deff5fac 100644 --- a/charter/NewPackageRequests.md +++ b/charter/NewPackageRequests.md @@ -2,9 +2,7 @@ This is the process for adding a new package into Big Bang -## Out-of-Tree / 3rd Party Packages - -### Submit New Big Bang Package Proposal to the BB Technical Oversite Committee +## Submit New Big Bang Package Proposal to the BB Technical Oversite Committee [BB TOC New Package Proposal](https://repo1.dso.mil/platform-one/p1toc/-/issues/new?issue%5Bassignee_id%5D=&issue%5Bmilestone_id%5D=) @@ -12,8 +10,4 @@ A shepherd will be assigned to the project to create a repo in the [BB sandbox]( ### Process -Out-of-Tree packages packages will follow the [BBTOC process](https://repo1.dso.mil/platform-one/bbtoc/-/tree/master/process) from Sandbox -> Incubating -> Graduated - -## In-Tree / Big Bang Maintained Package Process - -In order for a package to become an "In-Tree" package (supported by Platform One), it must meet all of the requirements of a BB TOC graduated package and have an [issue](https://repo1.dso.mil/groups/platform-one/big-bang/apps/third-party/-/issues) opened to 'Recommend Package for "In-Tree" Support'. The issue will be processed through the Platform One Jedi Order and Rebel Alliance councils for a governement decision to be added as officially supported / "in-tree" add-on. +New packages packages will follow the [BBTOC process](https://repo1.dso.mil/platform-one/bbtoc/-/tree/master/process) from Sandbox -> Incubating -> Graduated diff --git a/charter/PackageRequirements.md b/charter/PackageRequirements.md index d65b22de1c556964f88a0a68c3c9d9e458d18ba5..fb29c726803d82c1419217b3463dc0ba937f5436 100644 --- a/charter/PackageRequirements.md +++ b/charter/PackageRequirements.md @@ -24,17 +24,9 @@ Each package will work with any cluster under the following criteria. ## PR-X. Iron Bank Images -Every Big Bang Package shall be configured to use Iron Bank images. The images used from Iron Bank __must__ be _fully_ approved and _functional_ to be in compliance with the Big Bang baseline security posture. +Big Bang Package shall be configured to use Iron Bank images. The images used from Iron Bank __must__ be _fully_ approved and _functional_ to be in compliance with the Big Bang baseline security posture. -Once this prerequisite is met, a package is eligible for inclusion within BigBang in accordance with [New Package Requests](NewPackageRequests.md). - -### Out-of-Tree Packages - -[Out-of-Tree Packages](https://repo1.dso.mil/platform-one/big-bang/apps/third-party) are third party packages that adhere to all the BigBang package standards. These packages are predominantly community-maintained packages; however, some packages may be jointly maintained by BigBang and community as indicated by the codeowners. - -### In-Tree Packages - -[In-Tree Packages](https://repo1.dso.mil/platform-one/big-bang/apps) are Platform One developer-supported Big Bang Core & add-ons that adhere to all the BigBang package standards. These packages have been adopted as an official Big Bang offering for key customers. As such, they are supported, updated, and maintained by team members of BigBang and are labeled with the "BigBang Supported" badge on the repository's `README.md` page, which indicates active support. That being said, BigBang reserves the right to deprecate support for these packages. +Please see [New Package Requests](NewPackageRequests.md) and the [BBTOC process](https://repo1.dso.mil/platform-one/bbtoc/-/tree/master/process) for additional pre-requisites. ## PR-X. Packages are Helm Charts @@ -83,7 +75,7 @@ include: file: '/templates/package-tests.yaml' ``` -## PR-X. Dependencies must be Big Bang Package +## PR-X. Dependencies must be a Big Bang Package If a Package has a dependency on another Package to function, the dependency shall also be a Big Bang Package