diff --git a/CHANGELOG.md b/CHANGELOG.md index a204666e7838e6ba054c06b5a1c104ab2aa9dab0..54f04aca1f0aa0bd7cd86e70bd60c95867d17e16 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -3,6 +3,10 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). --- +## [2.42.0] + +- [!2.42.0](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests?scope=all&utf8=%E2%9C%93&state=merged&milestone_title=2.42.0); List of merge requests in this release. + ## [2.41.0] - [!2.41.0](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests?scope=all&utf8=%E2%9C%93&state=merged&milestone_title=2.41.0); List of merge requests in this release. diff --git a/base/gitrepository.yaml b/base/gitrepository.yaml index c002f9935908405992acc5a46c875a01a3ed2acd..8a3d8b2971288c2ebe6c76e533bfa71e375e0734 100644 --- a/base/gitrepository.yaml +++ b/base/gitrepository.yaml @@ -11,4 +11,4 @@ spec: interval: 10m url: https://repo1.dso.mil/big-bang/bigbang.git ref: - tag: 2.41.0 + tag: 2.42.0 diff --git a/chart/Chart.yaml b/chart/Chart.yaml index 6e9862d047153633656f1a9f217d1a417c838e41..c28b1f47c4613e217452b981283895db887d383c 100644 --- a/chart/Chart.yaml +++ b/chart/Chart.yaml @@ -1,6 +1,6 @@ apiVersion: v2 name: bigbang -version: 2.41.0 +version: 2.42.0 kubeVersion: '>=1.29.0-0' description: Big Bang is a declarative, continuous delivery tool for core DoD hardened and approved packages into a Kubernetes cluster. type: application diff --git a/docs/understanding-bigbang/configuration/base-config.md b/docs/understanding-bigbang/configuration/base-config.md index 72bb2013aba26d7a0ad49b0bc50c278fec59b690..e7a1a2117d938ded39ce155a73ace132447d0ad9 100644 --- a/docs/understanding-bigbang/configuration/base-config.md +++ b/docs/understanding-bigbang/configuration/base-config.md @@ -1,6 +1,6 @@ # bigbang -  +  Big Bang is a declarative, continuous delivery tool for core DoD hardened and approved packages into a Kubernetes cluster. @@ -72,10 +72,10 @@ Kubernetes: `>=1.29.0-0` | istio.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | istio.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/istio-controlplane.git"` | | | istio.git.path | string | `"./chart"` | | -| istio.git.tag | string | `"1.23.3-bb.1"` | | +| istio.git.tag | string | `"1.23.3-bb.2"` | | | istio.helmRepo.repoName | string | `"registry1"` | | | istio.helmRepo.chartName | string | `"istio"` | | -| istio.helmRepo.tag | string | `"1.23.3-bb.1"` | | +| istio.helmRepo.tag | string | `"1.23.3-bb.2"` | | | istio.enterprise | bool | `false` | Tetrate Istio Distribution - Tetrate provides FIPs verified Istio and Envoy software and support, validated through the FIPs Boring Crypto module. Find out more from Tetrate - https://www.tetrate.io/tetrate-istio-subscription | | istio.ingressGateways.public-ingressgateway.type | string | `"LoadBalancer"` | | | istio.ingressGateways.public-ingressgateway.kubernetesResourceSpec | object | `{}` | | @@ -155,10 +155,10 @@ Kubernetes: `>=1.29.0-0` | kyverno.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | kyverno.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/kyverno.git"` | | | kyverno.git.path | string | `"./chart"` | | -| kyverno.git.tag | string | `"3.2.7-bb.0"` | | +| kyverno.git.tag | string | `"3.3.4-bb.0"` | | | kyverno.helmRepo.repoName | string | `"registry1"` | | | kyverno.helmRepo.chartName | string | `"kyverno"` | | -| kyverno.helmRepo.tag | string | `"3.2.7-bb.0"` | | +| kyverno.helmRepo.tag | string | `"3.3.4-bb.0"` | | | kyverno.flux | object | `{}` | Flux reconciliation overrides specifically for the Kyverno Package | | kyverno.values | object | `{}` | Values to passthrough to the kyverno chart: https://repo1.dso.mil/big-bang/product/packages/kyverno.git | | kyverno.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | @@ -166,10 +166,10 @@ Kubernetes: `>=1.29.0-0` | kyvernoPolicies.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | kyvernoPolicies.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/kyverno-policies.git"` | | | kyvernoPolicies.git.path | string | `"./chart"` | | -| kyvernoPolicies.git.tag | string | `"3.2.6-bb.1"` | | +| kyvernoPolicies.git.tag | string | `"3.3.4-bb.0"` | | | kyvernoPolicies.helmRepo.repoName | string | `"registry1"` | | | kyvernoPolicies.helmRepo.chartName | string | `"kyverno-policies"` | | -| kyvernoPolicies.helmRepo.tag | string | `"3.2.6-bb.1"` | | +| kyvernoPolicies.helmRepo.tag | string | `"3.3.4-bb.0"` | | | kyvernoPolicies.flux | object | `{}` | Flux reconciliation overrides specifically for the Kyverno Package | | kyvernoPolicies.values | object | `{}` | Values to passthrough to the kyverno policies chart: https://repo1.dso.mil/big-bang/product/packages/kyverno-policies.git | | kyvernoPolicies.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | @@ -188,10 +188,10 @@ Kubernetes: `>=1.29.0-0` | elasticsearchKibana.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | elasticsearchKibana.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/elasticsearch-kibana.git"` | | | elasticsearchKibana.git.path | string | `"./chart"` | | -| elasticsearchKibana.git.tag | string | `"1.22.0-bb.0"` | | +| elasticsearchKibana.git.tag | string | `"1.23.0-bb.0"` | | | elasticsearchKibana.helmRepo.repoName | string | `"registry1"` | | | elasticsearchKibana.helmRepo.chartName | string | `"elasticsearch-kibana"` | | -| elasticsearchKibana.helmRepo.tag | string | `"1.22.0-bb.0"` | | +| elasticsearchKibana.helmRepo.tag | string | `"1.23.0-bb.0"` | | | elasticsearchKibana.flux | object | `{"timeout":"20m"}` | Flux reconciliation overrides specifically for the Logging (EFK) Package | | elasticsearchKibana.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". | | elasticsearchKibana.sso.enabled | bool | `false` | Toggle OIDC SSO for Kibana/Elasticsearch on and off. Enabling this option will auto-create any required secrets. | @@ -206,10 +206,10 @@ Kubernetes: `>=1.29.0-0` | eckOperator.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | eckOperator.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/eck-operator.git"` | | | eckOperator.git.path | string | `"./chart"` | | -| eckOperator.git.tag | string | `"2.14.0-bb.0"` | | +| eckOperator.git.tag | string | `"2.15.0-bb.0"` | | | eckOperator.helmRepo.repoName | string | `"registry1"` | | | eckOperator.helmRepo.chartName | string | `"eck-operator"` | | -| eckOperator.helmRepo.tag | string | `"2.14.0-bb.0"` | | +| eckOperator.helmRepo.tag | string | `"2.15.0-bb.0"` | | | eckOperator.flux | object | `{}` | Flux reconciliation overrides specifically for the ECK Operator Package | | eckOperator.values | object | `{}` | Values to passthrough to the eck-operator chart: https://repo1.dso.mil/big-bang/product/packages/eck-operator.git | | eckOperator.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | @@ -217,10 +217,10 @@ Kubernetes: `>=1.29.0-0` | fluentbit.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | fluentbit.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/fluentbit.git"` | | | fluentbit.git.path | string | `"./chart"` | | -| fluentbit.git.tag | string | `"0.48.2-bb.0"` | | +| fluentbit.git.tag | string | `"0.48.3-bb.1"` | | | fluentbit.helmRepo.repoName | string | `"registry1"` | | | fluentbit.helmRepo.chartName | string | `"fluentbit"` | | -| fluentbit.helmRepo.tag | string | `"0.48.2-bb.0"` | | +| fluentbit.helmRepo.tag | string | `"0.48.3-bb.1"` | | | fluentbit.flux | object | `{}` | Flux reconciliation overrides specifically for the Fluent-Bit Package | | fluentbit.values | object | `{}` | Values to passthrough to the fluentbit chart: https://repo1.dso.mil/big-bang/product/packages/fluentbit.git | | fluentbit.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | @@ -239,10 +239,10 @@ Kubernetes: `>=1.29.0-0` | loki.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | loki.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/loki.git"` | | | loki.git.path | string | `"./chart"` | | -| loki.git.tag | string | `"6.18.0-bb.3"` | | +| loki.git.tag | string | `"6.23.0-bb.0"` | | | loki.helmRepo.repoName | string | `"registry1"` | | | loki.helmRepo.chartName | string | `"loki"` | | -| loki.helmRepo.tag | string | `"6.18.0-bb.3"` | | +| loki.helmRepo.tag | string | `"6.23.0-bb.0"` | | | loki.flux | object | `{}` | Flux reconciliation overrides specifically for the Loki Package | | loki.strategy | string | `"monolith"` | Loki architecture. Options are monolith and scalable | | loki.clusterName | string | `""` | Loki clusterName identifier for Promtail and Dashboards | @@ -257,10 +257,10 @@ Kubernetes: `>=1.29.0-0` | neuvector.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | neuvector.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/neuvector.git"` | | | neuvector.git.path | string | `"./chart"` | | -| neuvector.git.tag | string | `"2.8.2-bb.2"` | | +| neuvector.git.tag | string | `"2.8.3-bb.0"` | | | neuvector.helmRepo.repoName | string | `"registry1"` | | | neuvector.helmRepo.chartName | string | `"neuvector"` | | -| neuvector.helmRepo.tag | string | `"2.8.2-bb.2"` | | +| neuvector.helmRepo.tag | string | `"2.8.3-bb.0"` | | | neuvector.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". | | neuvector.sso.enabled | bool | `false` | Toggle SSO for Neuvector on and off | | neuvector.sso.client_id | string | `""` | OIDC Client ID to use for Neuvector | @@ -389,10 +389,10 @@ Kubernetes: `>=1.29.0-0` | addons.minio.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | addons.minio.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/minio.git"` | | | addons.minio.git.path | string | `"./chart"` | | -| addons.minio.git.tag | string | `"6.0.4-bb.2"` | | +| addons.minio.git.tag | string | `"6.0.4-bb.4"` | | | addons.minio.helmRepo.repoName | string | `"registry1"` | | | addons.minio.helmRepo.chartName | string | `"minio-instance"` | | -| addons.minio.helmRepo.tag | string | `"6.0.4-bb.2"` | | +| addons.minio.helmRepo.tag | string | `"6.0.4-bb.4"` | | | addons.minio.flux | object | `{}` | Flux reconciliation overrides specifically for the Minio Package | | addons.minio.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". | | addons.minio.accesskey | string | `""` | Default access key to use for minio. | @@ -405,10 +405,10 @@ Kubernetes: `>=1.29.0-0` | addons.gitlab.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | addons.gitlab.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/gitlab.git"` | | | addons.gitlab.git.path | string | `"./chart"` | | -| addons.gitlab.git.tag | string | `"8.5.2-bb.0"` | | +| addons.gitlab.git.tag | string | `"8.6.1-bb.0"` | | | addons.gitlab.helmRepo.repoName | string | `"registry1"` | | | addons.gitlab.helmRepo.chartName | string | `"gitlab"` | | -| addons.gitlab.helmRepo.tag | string | `"8.5.2-bb.0"` | | +| addons.gitlab.helmRepo.tag | string | `"8.6.1-bb.0"` | | | addons.gitlab.flux | object | `{}` | Flux reconciliation overrides specifically for the Gitlab Package | | addons.gitlab.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". | | addons.gitlab.sso.enabled | bool | `false` | Toggle OIDC SSO for Gitlab on and off. Enabling this option will auto-create any required secrets. | @@ -437,10 +437,10 @@ Kubernetes: `>=1.29.0-0` | addons.gitlabRunner.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | addons.gitlabRunner.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/gitlab-runner.git"` | | | addons.gitlabRunner.git.path | string | `"./chart"` | | -| addons.gitlabRunner.git.tag | string | `"0.67.1-bb.1"` | | +| addons.gitlabRunner.git.tag | string | `"0.68.1-bb.2"` | | | addons.gitlabRunner.helmRepo.repoName | string | `"registry1"` | | | addons.gitlabRunner.helmRepo.chartName | string | `"gitlab-runner"` | | -| addons.gitlabRunner.helmRepo.tag | string | `"0.67.1-bb.1"` | | +| addons.gitlabRunner.helmRepo.tag | string | `"0.68.1-bb.2"` | | | addons.gitlabRunner.flux | object | `{}` | Flux reconciliation overrides specifically for the Gitlab Runner Package | | addons.gitlabRunner.values | object | `{}` | Values to passthrough to the gitlab runner chart: https://repo1.dso.mil/big-bang/product/packages/gitlab-runner.git | | addons.gitlabRunner.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | @@ -492,10 +492,10 @@ Kubernetes: `>=1.29.0-0` | addons.fortify.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | addons.fortify.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/fortify.git"` | | | addons.fortify.git.path | string | `"./chart"` | | -| addons.fortify.git.tag | string | `"1.1.2320154-bb.20"` | | +| addons.fortify.git.tag | string | `"1.1.2320154-bb.21"` | | | addons.fortify.helmRepo.repoName | string | `"registry1"` | | | addons.fortify.helmRepo.chartName | string | `"fortify-ssc"` | | -| addons.fortify.helmRepo.tag | string | `"1.1.2320154-bb.20"` | | +| addons.fortify.helmRepo.tag | string | `"1.1.2320154-bb.21"` | | | addons.fortify.flux | object | `{}` | Flux reconciliation overrides specifically for the Fortify Package | | addons.fortify.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". | | addons.fortify.sso.enabled | bool | `false` | Toggle SSO for Fortify on and off | @@ -546,10 +546,10 @@ Kubernetes: `>=1.29.0-0` | addons.mattermostOperator.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | addons.mattermostOperator.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/mattermost-operator.git"` | | | addons.mattermostOperator.git.path | string | `"./chart"` | | -| addons.mattermostOperator.git.tag | string | `"1.22.1-bb.0"` | | +| addons.mattermostOperator.git.tag | string | `"1.22.1-bb.1"` | | | addons.mattermostOperator.helmRepo.repoName | string | `"registry1"` | | | addons.mattermostOperator.helmRepo.chartName | string | `"mattermost-operator"` | | -| addons.mattermostOperator.helmRepo.tag | string | `"1.22.1-bb.0"` | | +| addons.mattermostOperator.helmRepo.tag | string | `"1.22.1-bb.1"` | | | addons.mattermostOperator.flux | object | `{}` | Flux reconciliation overrides specifically for the Mattermost Operator Package | | addons.mattermostOperator.values | object | `{}` | Values to passthrough to the mattermost operator chart: https://repo1.dso.mil/big-bang/product/packages/values.yaml | | addons.mattermostOperator.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | @@ -587,10 +587,10 @@ Kubernetes: `>=1.29.0-0` | addons.velero.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | addons.velero.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/velero.git"` | | | addons.velero.git.path | string | `"./chart"` | | -| addons.velero.git.tag | string | `"7.2.2-bb.3"` | | +| addons.velero.git.tag | string | `"7.2.2-bb.4"` | | | addons.velero.helmRepo.repoName | string | `"registry1"` | | | addons.velero.helmRepo.chartName | string | `"velero"` | | -| addons.velero.helmRepo.tag | string | `"7.2.2-bb.3"` | | +| addons.velero.helmRepo.tag | string | `"7.2.2-bb.4"` | | | addons.velero.flux | object | `{}` | Flux reconciliation overrides specifically for the Velero Package | | addons.velero.plugins | list | `[]` | Plugin provider for Velero - requires at least one plugin installed. Current supported values: aws, azure, csi | | addons.velero.values | object | `{}` | Values to passthrough to the Velero chart: https://repo1.dso.mil/big-bang/product/packages/values.yaml | @@ -599,10 +599,10 @@ Kubernetes: `>=1.29.0-0` | addons.keycloak.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | addons.keycloak.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/keycloak.git"` | | | addons.keycloak.git.path | string | `"./chart"` | | -| addons.keycloak.git.tag | string | `"2.5.1-bb.2"` | | +| addons.keycloak.git.tag | string | `"2.5.1-bb.3"` | | | addons.keycloak.helmRepo.repoName | string | `"registry1"` | | | addons.keycloak.helmRepo.chartName | string | `"keycloak"` | | -| addons.keycloak.helmRepo.tag | string | `"2.5.1-bb.2"` | | +| addons.keycloak.helmRepo.tag | string | `"2.5.1-bb.3"` | | | addons.keycloak.database.host | string | `""` | Hostname of a pre-existing database to use for Keycloak. Entering connection info will disable the deployment of an internal database and will auto-create any required secrets. | | addons.keycloak.database.type | string | `"postgres"` | Pre-existing database type (e.g. postgres) to use for Keycloak. | | addons.keycloak.database.port | int | `5432` | Port of a pre-existing database to use for Keycloak. | @@ -618,10 +618,10 @@ Kubernetes: `>=1.29.0-0` | addons.vault.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | addons.vault.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/vault.git"` | | | addons.vault.git.path | string | `"./chart"` | | -| addons.vault.git.tag | string | `"0.29.0-bb.0"` | | +| addons.vault.git.tag | string | `"0.29.1-bb.0"` | | | addons.vault.helmRepo.repoName | string | `"registry1"` | | | addons.vault.helmRepo.chartName | string | `"vault"` | | -| addons.vault.helmRepo.tag | string | `"0.29.0-bb.0"` | | +| addons.vault.helmRepo.tag | string | `"0.29.1-bb.0"` | | | addons.vault.flux | object | `{}` | Flux reconciliation overrides specifically for the Vault Package | | addons.vault.ingress | object | `{"cert":"","gateway":"","key":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". | | addons.vault.ingress.key | string | `""` | Certificate/Key pair to use as the certificate for exposing Vault Setting the ingress cert here will automatically create the volume and volumemounts in the Vault package chart | @@ -648,9 +648,6 @@ Kubernetes: `>=1.29.0-0` | addons.harbor.helmRepo.tag | string | `"1.16.0-bb.2"` | | | addons.harbor.flux | object | `{}` | Flux reconciliation overrides specifically for the Jaeger Package | | addons.harbor.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". | -| addons.harbor.sso.enabled | bool | `false` | Toggle SSO for Harbor on and off | -| addons.harbor.sso.client_id | string | `""` | OIDC Client ID to use for Harbor | -| addons.harbor.sso.client_secret | string | `""` | OIDC Client Secret to use for Harbor | | addons.harbor.values | object | `{}` | Values to pass through to Habor chart: https://repo1.dso.mil/big-bang/product/packages/harbor.git | | addons.harbor.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | | addons.holocron.enabled | bool | `false` | Toggle deployment of Holocron. | @@ -705,11 +702,11 @@ Kubernetes: `>=1.29.0-0` | addons.externalSecrets.enabled | bool | `false` | Toggle deployment of external secrets | | addons.externalSecrets.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | addons.externalSecrets.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/external-secrets.git"` | | -| addons.externalSecrets.git.tag | string | `"0.10.4-bb.0"` | | +| addons.externalSecrets.git.tag | string | `"0.11.0-bb.0"` | | | addons.externalSecrets.git.path | string | `"./chart"` | | | addons.externalSecrets.helmRepo.repoName | string | `"registry1"` | | | addons.externalSecrets.helmRepo.chartName | string | `"external-secrets"` | | -| addons.externalSecrets.helmRepo.tag | string | `"0.10.4-bb.0"` | | +| addons.externalSecrets.helmRepo.tag | string | `"0.11.0-bb.0"` | | | addons.externalSecrets.flux | object | `{}` | Override flux settings for this package | | addons.externalSecrets.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". | | addons.externalSecrets.values | object | `{}` | | @@ -717,7 +714,7 @@ Kubernetes: `>=1.29.0-0` | addons.alloy.enabled | bool | `false` | Toggle deployment of grafana alloy | | addons.alloy.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | addons.alloy.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/alloy.git"` | | -| addons.alloy.git.tag | string | `"1.6.4-bb.0"` | | +| addons.alloy.git.tag | string | `"1.6.13-bb.0"` | | | addons.alloy.git.path | string | `"./chart"` | | | addons.alloy.values | object | `{}` | | | addons.alloy.postRenderers | list | `[]` | |