diff --git a/CHANGELOG.md b/CHANGELOG.md
index b711ccf6235107219fa693d6a5931255edae6ef4..025c4fa75f051b626b1a2e3d4d5e9664f79bf601 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,11 @@
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
---
+## [2.19.2]
+
+- [!3780](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/3780); istio update pod security context
+- [!3759](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/3759); fluentbit update to 2.2.2
+
## [2.19.1]
- [!3746](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/3746); Gitlab update to 16.8.1
diff --git a/base/gitrepository.yaml b/base/gitrepository.yaml
index d37d32ad9d992b151c34e1f5e8b7442a56b586c9..40450864bed931cbb817c44c00c12a4a1a00dcc0 100644
--- a/base/gitrepository.yaml
+++ b/base/gitrepository.yaml
@@ -11,4 +11,4 @@ spec:
interval: 10m
url: https://repo1.dso.mil/big-bang/bigbang.git
ref:
- tag: 2.19.1
+ tag: 2.19.2
diff --git a/chart/Chart.yaml b/chart/Chart.yaml
index 8c91b2985f2a4c071089e6da1aec53acd2cf2d39..292c68b1c545d9384d97338d0df0c928aab39466 100644
--- a/chart/Chart.yaml
+++ b/chart/Chart.yaml
@@ -1,6 +1,6 @@
apiVersion: v2
name: bigbang
-version: 2.19.1
+version: 2.19.2
description: Big Bang is a declarative, continuous delivery tool for core DoD hardened and approved packages into a Kubernetes cluster.
type: application
diff --git a/chart/templates/kyverno-policies/values.yaml b/chart/templates/kyverno-policies/values.yaml
index 0c00d9e1761b40e91eb9ed8b4321563ee343e795..73d20ca22658bf47ab0535a0950759c2c47c2dcd 100644
--- a/chart/templates/kyverno-policies/values.yaml
+++ b/chart/templates/kyverno-policies/values.yaml
@@ -862,23 +862,17 @@ policies:
- vault-vault-agent-injector-*
- vault-vault-job-init-*
- namespace: promtail
- serviceAccounts:
- - promtail-promtail
pods:
allow:
- promtail-promtail-*
- namespace: fluentbit
- serviceAccounts:
- - fluentbit-fluent-bit
pods:
allow:
- fluentbit-fluent-bit-*
- namespace: eck-operator
- serviceAccounts:
- - elastic-operator
pods:
allow:
- - elastic-operator-?
+ - elastic-operator-*
- namespace: nexus-repository-manager
pods:
allow:
@@ -911,8 +905,9 @@ policies:
allow:
- mattermost-operator-*
- namespace: keycloak
- serviceAccounts:
- - keycloak
+ pods:
+ allow:
+ - keycloak-*
- namespace: gitlab
pods:
allow:
diff --git a/chart/values.yaml b/chart/values.yaml
index 2f8cefffdd10ca1d74f4b22181766ff980e10c3c..5827eb96b7d8fb4e708111abcac151e323855805 100644
--- a/chart/values.yaml
+++ b/chart/values.yaml
@@ -516,11 +516,11 @@ kyvernoPolicies:
git:
repo: https://repo1.dso.mil/big-bang/product/packages/kyverno-policies.git
path: ./chart
- tag: "3.0.4-bb.23"
+ tag: "3.0.4-bb.24"
helmRepo:
repoName: "registry1"
chartName: "kyverno-policies"
- tag: "3.0.4-bb.23"
+ tag: "3.0.4-bb.24"
# -- Flux reconciliation overrides specifically for the Kyverno Package
flux: {}
@@ -541,11 +541,11 @@ kyvernoReporter:
git:
repo: https://repo1.dso.mil/big-bang/product/packages/kyverno-reporter.git
path: ./chart
- tag: "2.21.6-bb.1"
+ tag: "2.21.6-bb.2"
helmRepo:
repoName: "registry1"
chartName: "kyverno-reporter"
- tag: "2.21.6-bb.1"
+ tag: "2.21.6-bb.2"
# -- Flux reconciliation overrides specifically for the Kyverno Reporter Package
flux: {}
@@ -644,11 +644,11 @@ fluentbit:
git:
repo: https://repo1.dso.mil/big-bang/product/packages/fluentbit.git
path: "./chart"
- tag: "0.42.0-bb.0"
+ tag: "0.43.0-bb.1"
helmRepo:
repoName: "registry1"
chartName: "fluentbit"
- tag: "0.42.0-bb.0"
+ tag: "0.43.0-bb.1"
# -- Flux reconciliation overrides specifically for the Fluent-Bit Package
flux: {}
@@ -870,11 +870,11 @@ monitoring:
git:
repo: https://repo1.dso.mil/big-bang/product/packages/monitoring.git
path: "./chart"
- tag: "56.2.1-bb.0"
+ tag: "56.2.1-bb.1"
helmRepo:
repoName: "registry1"
chartName: "monitoring"
- tag: "56.2.1-bb.0"
+ tag: "56.2.1-bb.1"
# -- Flux reconciliation overrides specifically for the Monitoring Package
flux:
@@ -925,11 +925,11 @@ grafana:
git:
repo: https://repo1.dso.mil/big-bang/product/packages/grafana.git
path: "./chart"
- tag: "7.2.1-bb.4"
+ tag: "7.2.1-bb.5"
helmRepo:
repoName: "registry1"
chartName: "grafana"
- tag: "7.2.1-bb.4"
+ tag: "7.2.1-bb.5"
# -- Flux reconciliation overrides specifically for the Monitoring Package
flux: {}
@@ -1180,11 +1180,11 @@ addons:
git:
repo: https://repo1.dso.mil/big-bang/product/packages/gitlab.git
path: "./chart"
- tag: "7.8.1-bb.0"
+ tag: "7.8.1-bb.2"
helmRepo:
repoName: "registry1"
chartName: "gitlab"
- tag: "7.8.1-bb.0"
+ tag: "7.8.1-bb.2"
# -- Flux reconciliation overrides specifically for the Gitlab Package
flux: {}
@@ -1927,12 +1927,12 @@ addons:
git:
repo: https://repo1.dso.mil/big-bang/product/packages/thanos.git
- tag: "12.23.0-bb.0"
+ tag: "12.23.0-bb.2"
path: "./chart"
helmRepo:
repoName: "registry1"
chartName: "thanos"
- tag: "12.23.0-bb.0"
+ tag: "12.23.0-bb.2"
# -- Flux reconciliation overrides specifically for the Jaeger Package
flux: {}
diff --git a/docs/understanding-bigbang/configuration/base-config.md b/docs/understanding-bigbang/configuration/base-config.md
index c30ad002dc3f95b8736688fc8278d4443dd6b0fc..0a4ff97d980f524aed923aa1255545897e1ecf22 100644
--- a/docs/understanding-bigbang/configuration/base-config.md
+++ b/docs/understanding-bigbang/configuration/base-config.md
@@ -1,6 +1,6 @@
# bigbang
- 
+ 
Big Bang is a declarative, continuous delivery tool for core DoD hardened and approved packages into a Kubernetes cluster.
@@ -67,10 +67,10 @@ To start using Big Bang, you will need to create your own Big Bang environment t
| istio.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" |
| istio.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/istio-controlplane.git"` | |
| istio.git.path | string | `"./chart"` | |
-| istio.git.tag | string | `"1.19.6-bb.0"` | |
+| istio.git.tag | string | `"1.19.6-bb.1"` | |
| istio.helmRepo.repoName | string | `"registry1"` | |
| istio.helmRepo.chartName | string | `"istio"` | |
-| istio.helmRepo.tag | string | `"1.19.6-bb.0"` | |
+| istio.helmRepo.tag | string | `"1.19.6-bb.1"` | |
| istio.enterprise | bool | `false` | Tetrate Istio Distribution - Tetrate provides FIPs verified Istio and Envoy software and support, validated through the FIPs Boring Crypto module. Find out more from Tetrate - https://www.tetrate.io/tetrate-istio-subscription |
| istio.ingressGateways.public-ingressgateway.type | string | `"LoadBalancer"` | |
| istio.ingressGateways.public-ingressgateway.kubernetesResourceSpec | object | `{}` | |
@@ -211,10 +211,10 @@ To start using Big Bang, you will need to create your own Big Bang environment t
| fluentbit.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" |
| fluentbit.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/fluentbit.git"` | |
| fluentbit.git.path | string | `"./chart"` | |
-| fluentbit.git.tag | string | `"0.42.0-bb.0"` | |
+| fluentbit.git.tag | string | `"0.43.0-bb.0"` | |
| fluentbit.helmRepo.repoName | string | `"registry1"` | |
| fluentbit.helmRepo.chartName | string | `"fluentbit"` | |
-| fluentbit.helmRepo.tag | string | `"0.42.0-bb.0"` | |
+| fluentbit.helmRepo.tag | string | `"0.43.0-bb.0"` | |
| fluentbit.flux | object | `{}` | Flux reconciliation overrides specifically for the Fluent-Bit Package |
| fluentbit.values | object | `{}` | Values to passthrough to the fluentbit chart: https://repo1.dso.mil/big-bang/product/packages/fluentbit.git |
| fluentbit.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md |
diff --git a/tests/test-values.yaml b/tests/test-values.yaml
index d8df392dd8b782179ff3558afbc3ee67a6b01c2d..6cdc507674eae2a466b8f30d40dbdb385a63fd13 100644
--- a/tests/test-values.yaml
+++ b/tests/test-values.yaml
@@ -1253,7 +1253,7 @@ addons:
cypress:
artifacts: true
envs:
- cypress_baseUrl: https://gitlab.bigbang.dev
+ cypress_url: https://gitlab.bigbang.dev
scripts:
envs:
GITLAB_REPOSITORY: https://gitlab.bigbang.dev
@@ -1286,7 +1286,7 @@ addons:
cypress:
artifacts: true
envs:
- cypress_baseUrl: "https://gitlab.bigbang.dev"
+ cypress_url: "https://gitlab.bigbang.dev"
cypress_gitlab_first_name: "testrunner"
cypress_gitlab_last_name: "userrunner"
cypress_gitlab_email: "gitlab@bigbang.dev"