diff --git a/CHANGELOG.md b/CHANGELOG.md index 4ff16182d72b046088bff86c423f9980c5af139b..64ed7b15664581dbf2e276d6089b676f21c6ed9d 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -3,6 +3,10 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). --- +## [1.41.0] + +- [!1.41.0](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests?scope=all&utf8=%E2%9C%93&state=merged&milestone_title=1.41.0); List of merge requests in this release. + ## [1.40.0] - [!1.40.0](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests?scope=all&utf8=%E2%9C%93&state=merged&milestone_title=1.40.0); List of merge requests in this release. diff --git a/base/gitrepository.yaml b/base/gitrepository.yaml index ea5894e5c1ba2ebf313a2e101d82512a359a3d46..27da64ed179a2417ee9ad138d09bcb329ecaaacc 100644 --- a/base/gitrepository.yaml +++ b/base/gitrepository.yaml @@ -11,4 +11,4 @@ spec: interval: 10m url: https://repo1.dso.mil/platform-one/big-bang/bigbang.git ref: - tag: 1.40.0 + tag: 1.41.0 diff --git a/chart/Chart.yaml b/chart/Chart.yaml index e61f21b075fcd472ad76e02847e88e2b98f22569..97b0f5602bf4583849a40206cd6bcad399e14d61 100644 --- a/chart/Chart.yaml +++ b/chart/Chart.yaml @@ -1,6 +1,6 @@ apiVersion: v2 name: bigbang -version: 1.40.0 +version: 1.41.0 description: Big Bang is a declarative, continuous delivery tool for core DoD hardened and approved packages into a Kubernetes cluster. type: application diff --git a/docs/packages.md b/docs/packages.md index dbbfbb601861b718fb9151e34180ba0c38bc0f65..911bd782ee359ecef355b33a8f338c2250769188 100644 --- a/docs/packages.md +++ b/docs/packages.md @@ -17,7 +17,7 @@ Columns: | [Istio Controlplane](https://repo1.dso.mil/platform-one/big-bang/apps/core/istio-controlplane) |  | No | No | No | [Yes](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/632) | Yes | No | | [Jaeger](https://repo1.dso.mil/platform-one/big-bang/apps/core/jaeger) |  | No | Yes | Yes | [Yes](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/602) | [Yes (STRICT)](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/1295) | No | | [Kiali](https://repo1.dso.mil/platform-one/big-bang/apps/core/kiali) |  | No | Yes | Yes | [Yes](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/589) | [Yes (STRICT)](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/1296) | No | -| [Monitoring](https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring) |  | No | No | No | [Yes](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/509) | Yes (PERMISSIVE) | No | +| [Monitoring](https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring) |  | No | No | No | [Yes](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/509) | [Yes (STRICT)](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/1900) | No | | [Twistlock](https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/twistlock) |  | No | No | No | [Yes](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/498) | [Yes (STRICT)](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/1396) | No | | [ECK Operator](https://repo1.dso.mil/platform-one/big-bang/apps/core/eck-operator) |  | No | No | No | [Yes](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/510) | [Yes (STRICT)](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/1236) | No | | [Elasticsearch Kibana](https://repo1.dso.mil/platform-one/big-bang/apps/core/elasticsearch-kibana) | | No | No | No | [Yes](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/527) | [Yes (STRICT)](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/1537) | No | @@ -74,4 +74,4 @@ Columns: | --- | --- | --- | --- | --- | --- | --- | --- | | [Argocd](https://repo1.dso.mil/platform-one/big-bang/apps/core/argocd) | | No | No | No | [Yes](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/572) | [Yes (STRICT)](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/1368) | No | | [Velero](https://repo1.dso.mil/platform-one/big-bang/apps/cluster-utilities/velero) |  | No | No | No | [Yes](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/552) | [Yes (STRICT)](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/1451) | No | -| [Metrics Server](https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/metrics-server) |  | No | No | No | [Yes](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/1738) | Yes (PERMISSIVE) | No | +| [Metrics Server](https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/metrics-server) |  | No | No | No | [Yes](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/1738) | [Yes (STRICT)](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/1968) | No | diff --git a/docs/understanding-bigbang/configuration/base-config.md b/docs/understanding-bigbang/configuration/base-config.md index 27bf589ff104393069e708906bbbba8adbcfcde1..8a128062b65258c3c9d576e97dda81d57115814e 100644 --- a/docs/understanding-bigbang/configuration/base-config.md +++ b/docs/understanding-bigbang/configuration/base-config.md @@ -1,6 +1,6 @@ # bigbang -  +  Big Bang is a declarative, continuous delivery tool for core DoD hardened and approved packages into a Kubernetes cluster. @@ -56,7 +56,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t | istio.enabled | bool | `true` | Toggle deployment of Istio. | | istio.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/istio-controlplane.git"` | | | istio.git.path | string | `"./chart"` | | -| istio.git.tag | string | `"1.14.3-bb.1"` | | +| istio.git.tag | string | `"1.14.3-bb.2"` | | | istio.enterprise | bool | `false` | Tetrate Istio Distribution - Tetrate provides FIPs verified Istio and Envoy software and support, validated through the FIPs Boring Crypto module. Find out more from Tetrate - https://www.tetrate.io/tetrate-istio-subscription | | istio.ingressGateways.public-ingressgateway.type | string | `"LoadBalancer"` | | | istio.ingressGateways.public-ingressgateway.kubernetesResourceSpec | object | `{}` | | @@ -78,7 +78,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t | jaeger.enabled | bool | `true` | Toggle deployment of Jaeger. | | jaeger.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/jaeger.git"` | | | jaeger.git.path | string | `"./chart"` | | -| jaeger.git.tag | string | `"2.33.0-bb.0"` | | +| jaeger.git.tag | string | `"2.34.0-bb.0"` | | | jaeger.flux | object | `{"install":{"crds":"CreateReplace"},"upgrade":{"crds":"CreateReplace"}}` | Flux reconciliation overrides specifically for the Jaeger Package | | jaeger.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". | | jaeger.sso.enabled | bool | `false` | Toggle SSO for Jaeger on and off | @@ -100,21 +100,21 @@ To start using Big Bang, you will need to create your own Big Bang environment t | clusterAuditor.enabled | bool | `true` | Toggle deployment of Cluster Auditor. | | clusterAuditor.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/cluster-auditor.git"` | | | clusterAuditor.git.path | string | `"./chart"` | | -| clusterAuditor.git.tag | string | `"1.4.0-bb.5"` | | +| clusterAuditor.git.tag | string | `"1.4.0-bb.7"` | | | clusterAuditor.flux | object | `{}` | Flux reconciliation overrides specifically for the Cluster Auditor Package | | clusterAuditor.values | object | `{}` | Values to passthrough to the cluster auditor chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/cluster-auditor.git | | clusterAuditor.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | | gatekeeper.enabled | bool | `true` | Toggle deployment of OPA Gatekeeper. | | gatekeeper.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/policy.git"` | | | gatekeeper.git.path | string | `"./chart"` | | -| gatekeeper.git.tag | string | `"3.8.1-bb.5"` | | +| gatekeeper.git.tag | string | `"3.9.0-bb.0"` | | | gatekeeper.flux | object | `{"install":{"crds":"CreateReplace"},"upgrade":{"crds":"CreateReplace"}}` | Flux reconciliation overrides specifically for the OPA Gatekeeper Package | | gatekeeper.values | object | `{}` | Values to passthrough to the gatekeeper chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/policy.git | | gatekeeper.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | | kyverno.enabled | bool | `false` | Toggle deployment of Kyverno. | | kyverno.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/kyverno.git"` | | | kyverno.git.path | string | `"./chart"` | | -| kyverno.git.tag | string | `"2.2.0-bb.3"` | | +| kyverno.git.tag | string | `"2.5.2-bb.0"` | | | kyverno.flux | object | `{}` | Flux reconciliation overrides specifically for the Kyverno Package | | kyverno.values | object | `{}` | Values to passthrough to the kyverno chart: https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/kyverno.git | | kyverno.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | @@ -128,7 +128,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t | logging.enabled | bool | `true` | Toggle deployment of Logging (EFK). | | logging.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/elasticsearch-kibana.git"` | | | logging.git.path | string | `"./chart"` | | -| logging.git.tag | string | `"0.8.0-bb.1"` | | +| logging.git.tag | string | `"0.9.0-bb.1"` | | | logging.flux | object | `{"timeout":"20m"}` | Flux reconciliation overrides specifically for the Logging (EFK) Package | | logging.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". | | logging.sso.enabled | bool | `false` | Toggle OIDC SSO for Kibana/Elasticsearch on and off. Enabling this option will auto-create any required secrets. | @@ -147,7 +147,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t | fluentbit.enabled | bool | `true` | Toggle deployment of Fluent-Bit. | | fluentbit.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/fluentbit.git"` | | | fluentbit.git.path | string | `"./chart"` | | -| fluentbit.git.tag | string | `"0.20.3-bb.0"` | | +| fluentbit.git.tag | string | `"0.20.3-bb.1"` | | | fluentbit.flux | object | `{}` | Flux reconciliation overrides specifically for the Fluent-Bit Package | | fluentbit.values | object | `{}` | Values to passthrough to the fluentbit chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/fluentbit.git | | fluentbit.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | @@ -161,14 +161,14 @@ To start using Big Bang, you will need to create your own Big Bang environment t | loki.enabled | bool | `false` | Toggle deployment of Loki. | | loki.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/loki.git"` | | | loki.git.path | string | `"./chart"` | | -| loki.git.tag | string | `"3.0.5-bb.4"` | | +| loki.git.tag | string | `"1.7.6-bb.1"` | | | loki.flux | object | `{}` | Flux reconciliation overrides specifically for the Loki Package | | loki.strategy | string | `"monolith"` | Loki architecture. Options are monolith and scalable | | loki.objectStorage.endpoint | string | `""` | S3 compatible endpoint to use for connection information. examples: "https://s3.amazonaws.com" "https://s3.us-gov-west-1.amazonaws.com" "http://minio.minio.svc.cluster.local:9000" | | loki.objectStorage.region | string | `""` | S3 compatible region to use for connection information. | | loki.objectStorage.accessKey | string | `""` | Access key for connecting to object storage endpoint. | | loki.objectStorage.accessSecret | string | `""` | Secret key for connecting to object storage endpoint. Unencoded string data. This should be placed in the secret values and then encrypted | -| loki.objectStorage.bucketNames | string | `""` | Bucket Names for Loki as a comma delimited list. examples: "loki-logs" | +| loki.objectStorage.bucketNames | object | `{}` | Bucket Names for the Loki buckets as YAML chunks: loki-logs ruler: loki-ruler admin: loki-admin | | loki.values | object | `{}` | Values to passthrough to the Loki chart: https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/loki.git | | loki.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | | tempo.enabled | bool | `false` | Toggle deployment of Tempo. | @@ -191,7 +191,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t | monitoring.enabled | bool | `true` | Toggle deployment of Monitoring (Prometheus, Grafana, and Alertmanager). | | monitoring.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring.git"` | | | monitoring.git.path | string | `"./chart"` | | -| monitoring.git.tag | string | `"39.2.1-bb.2"` | | +| monitoring.git.tag | string | `"39.2.1-bb.5"` | | | monitoring.flux | object | `{"install":{"crds":"CreateReplace"},"upgrade":{"crds":"CreateReplace"}}` | Flux reconciliation overrides specifically for the Monitoring Package | | monitoring.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". | | monitoring.sso.enabled | bool | `false` | Toggle SSO for monitoring components on and off | @@ -209,7 +209,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t | twistlock.enabled | bool | `true` | Toggle deployment of Twistlock. | | twistlock.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/twistlock.git"` | | | twistlock.git.path | string | `"./chart"` | | -| twistlock.git.tag | string | `"0.9.0-bb.3"` | | +| twistlock.git.tag | string | `"0.9.0-bb.4"` | | | twistlock.flux | object | `{}` | Flux reconciliation overrides specifically for the Twistlock Package | | twistlock.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". | | twistlock.values | object | `{}` | Values to passthrough to the twistlock chart: https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/twistlock.git | @@ -232,7 +232,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t | addons.authservice.enabled | bool | `false` | Toggle deployment of Authservice. if enabling authservice, a filter needs to be provided by either enabling sso for monitoring or istio, or manually adding a filter chain in the values here: values: chain: minimal: callback_uri: "https://somecallback" | | addons.authservice.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/authservice.git"` | | | addons.authservice.git.path | string | `"./chart"` | | -| addons.authservice.git.tag | string | `"0.5.1-bb.5"` | | +| addons.authservice.git.tag | string | `"0.5.2-bb.0"` | | | addons.authservice.flux | object | `{}` | Flux reconciliation overrides specifically for the Authservice Package | | addons.authservice.values | object | `{}` | Values to passthrough to the authservice chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/authservice.git | | addons.authservice.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | @@ -247,7 +247,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t | addons.minio.enabled | bool | `false` | Toggle deployment of minio. | | addons.minio.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/application-utilities/minio.git"` | | | addons.minio.git.path | string | `"./chart"` | | -| addons.minio.git.tag | string | `"4.4.16-bb.0"` | | +| addons.minio.git.tag | string | `"4.4.25-bb.0"` | | | addons.minio.flux | object | `{}` | Flux reconciliation overrides specifically for the Minio Package | | addons.minio.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". | | addons.minio.accesskey | string | `""` | Default access key to use for minio. | @@ -259,7 +259,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t | addons.gitlab.hostnames.registry | string | `"registry"` | | | addons.gitlab.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/gitlab.git"` | | | addons.gitlab.git.path | string | `"./chart"` | | -| addons.gitlab.git.tag | string | `"6.1.2-bb.1"` | | +| addons.gitlab.git.tag | string | `"6.2.1-bb.1"` | | | addons.gitlab.flux | object | `{}` | Flux reconciliation overrides specifically for the Gitlab Package | | addons.gitlab.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". | | addons.gitlab.sso.enabled | bool | `false` | Toggle OIDC SSO for Gitlab on and off. Enabling this option will auto-create any required secrets. | @@ -289,14 +289,14 @@ To start using Big Bang, you will need to create your own Big Bang environment t | addons.gitlabRunner.enabled | bool | `false` | Toggle deployment of Gitlab Runner | | addons.gitlabRunner.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/gitlab-runner.git"` | | | addons.gitlabRunner.git.path | string | `"./chart"` | | -| addons.gitlabRunner.git.tag | string | `"0.41.0-bb.1"` | | +| addons.gitlabRunner.git.tag | string | `"0.43.1-bb.1"` | | | addons.gitlabRunner.flux | object | `{}` | Flux reconciliation overrides specifically for the Gitlab Runner Package | | addons.gitlabRunner.values | object | `{}` | Values to passthrough to the gitlab runner chart: https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/gitlab-runner.git | | addons.gitlabRunner.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | | addons.nexus.enabled | bool | `false` | Toggle deployment of Nexus. | | addons.nexus.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/nexus.git"` | | | addons.nexus.git.path | string | `"./chart"` | | -| addons.nexus.git.tag | string | `"40.1.0-bb.0"` | | +| addons.nexus.git.tag | string | `"41.0.0-bb.0"` | | | addons.nexus.license_key | string | `""` | Base64 encoded license file. | | addons.nexus.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". | | addons.nexus.sso.enabled | bool | `false` | Toggle SAML SSO for NXRM. -- handles SAML SSO, a Client must be configured in Keycloak or IdP -- to complete setup. -- https://support.sonatype.com/hc/en-us/articles/1500000976522-SAML-integration-for-Nexus-Repository-Manager-Pro-3-and-Nexus-IQ-Server-with-Keycloak#h_01EV7CWCYH3YKAPMAHG8XMQ599 | @@ -342,7 +342,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t | addons.anchore.enabled | bool | `false` | Toggle deployment of Anchore. | | addons.anchore.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/anchore-enterprise.git"` | | | addons.anchore.git.path | string | `"./chart"` | | -| addons.anchore.git.tag | string | `"1.18.6-bb.11"` | | +| addons.anchore.git.tag | string | `"1.19.2-bb.0"` | | | addons.anchore.flux | object | `{"upgrade":{"disableWait":true}}` | Flux reconciliation overrides specifically for the Anchore Package | | addons.anchore.adminPassword | string | `""` | Initial admin password used to authenticate to Anchore. | | addons.anchore.enterprise | object | `{"enabled":false,"licenseYaml":"FULL LICENSE\n"}` | Anchore Enterprise functionality. | @@ -426,7 +426,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t | addons.vault.enabled | bool | `false` | Toggle deployment of Vault. | | addons.vault.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/vault.git"` | | | addons.vault.git.path | string | `"./chart"` | | -| addons.vault.git.tag | string | `"0.20.1-bb.4"` | | +| addons.vault.git.tag | string | `"0.21.0-bb.0"` | | | addons.vault.flux | object | `{}` | Flux reconciliation overrides specifically for the Vault Package | | addons.vault.ingress | object | `{"cert":"","gateway":"","key":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". | | addons.vault.ingress.key | string | `""` | Certificate/Key pair to use as the certificate for exposing Vault Setting the ingress cert here will automatically create the volume and volumemounts in the Vault package chart | @@ -435,7 +435,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t | addons.metricsServer.enabled | string | `"auto"` | Toggle deployment of metrics server Acceptable options are enabled: true, enabled: false, enabled: auto true = enabled / false = disabled / auto = automatic (Installs only if metrics API endpoint is not present) | | addons.metricsServer.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/metrics-server.git"` | | | addons.metricsServer.git.path | string | `"./chart"` | | -| addons.metricsServer.git.tag | string | `"3.8.0-bb.2"` | | +| addons.metricsServer.git.tag | string | `"3.8.0-bb.4"` | | | addons.metricsServer.flux | object | `{}` | Flux reconciliation overrides specifically for the metrics server Package | | addons.metricsServer.values | object | `{}` | Values to passthrough to the metrics server chart: https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/metrics-server.git | | addons.metricsServer.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md |