diff --git a/CHANGELOG.md b/CHANGELOG.md index d4d0237454b5087a819f934f750517dbf97243a4..996966b4b149e8b6cc9f7db1995e963b56c12aa1 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -3,6 +3,10 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). --- +## [2.9.0] + +- [!2.9.0](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests?scope=all&utf8=%E2%9C%93&state=merged&milestone_title=2.9.0); List of merge requests in this release. + ## [2.8.0] - List of merge requests in this release. diff --git a/base/gitrepository.yaml b/base/gitrepository.yaml index ab65eedef71935b725fb5ea5e29a32c64b732202..d617db6b788cf0d906219e3c7a6aee3bdfda83c8 100644 --- a/base/gitrepository.yaml +++ b/base/gitrepository.yaml @@ -11,4 +11,4 @@ spec: interval: 10m url: https://repo1.dso.mil/big-bang/bigbang.git ref: - tag: 2.8.0 + tag: 2.9.0 diff --git a/chart/Chart.yaml b/chart/Chart.yaml index 291ffc17317e64cf5b24b096a0b94629366e3a3f..9aec57f4a41c885918cd8320d4474df418b3a409 100644 --- a/chart/Chart.yaml +++ b/chart/Chart.yaml @@ -1,6 +1,6 @@ apiVersion: v2 name: bigbang -version: 2.8.0 +version: 2.9.0 description: Big Bang is a declarative, continuous delivery tool for core DoD hardened and approved packages into a Kubernetes cluster. type: application @@ -16,10 +16,6 @@ sources: maintainers: - name: Ryan Garcia email: ryan.garcia@sigmadefense.com - - name: Micah Nagel - email: micah.nagel@defenseunicorns.com - - name: Rob Ferguson - email: rob.ferguson@defenseunicorns.com - name: Chris O'Connell email: coconnell@bridgephase.com diff --git a/chart/values.yaml b/chart/values.yaml index b755db1563cb4d598a4ce8406a7bbf299281e29f..57bc9ad4df62197ed77f8bbc8a5b927d01765181 100644 --- a/chart/values.yaml +++ b/chart/values.yaml @@ -903,7 +903,7 @@ grafana: sourceType: "git" git: - repo: https://repo1.dso.mil/big-bang/apps/sandbox/grafana.git + repo: https://repo1.dso.mil/big-bang/product/packages/grafana.git path: "./chart" tag: "6.58.9-bb.0" helmRepo: diff --git a/docs/packages.md b/docs/packages.md index 9ad41e82a19ae77e2109bc9e924f08cf3e8e7983..7a9d36403e39352f017c6ca2d17bca1eceb047cc 100644 --- a/docs/packages.md +++ b/docs/packages.md @@ -22,7 +22,7 @@ | [Jaeger](https://repo1.dso.mil/big-bang/apps/core/jaeger) |  | Yes | Yes | [Yes](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/602) | [Yes (STRICT)](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/1295) | | [Kiali](https://repo1.dso.mil/big-bang/apps/core/kiali) |  | No | Yes | [Yes](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/589) | [Yes (STRICT)](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/1296) | | [Monitoring](https://repo1.dso.mil/big-bang/apps/core/monitoring) |  | Yes | Yes | [Yes](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/509) | [Yes (STRICT)](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/1900) | -| [Grafana](https://repo1.dso.mil/big-bang/apps/sandbox/grafana) |  | Yes | Yes | [Yes](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/2929) | [Yes (STRICT)](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/2929) | +| [Grafana](https://repo1.dso.mil/big-bang/product/packages/grafana) |  | Yes | Yes | [Yes](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/2929) | [Yes (STRICT)](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/2929) | | [NeuVector](https://repo1.dso.mil/big-bang/apps/sandbox/neuvector) |  | Yes | No | [Yes](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/2486) | [Yes (STRICT)](https://repo1.dso.mil/big-bang/apps/sandbox/neuvector/-/blob/main/chart/templates/bigbang/peerauthentication/peerauthentication/peer-authentication.yaml) | | [Twistlock](https://repo1.dso.mil/big-bang/apps/security-tools/twistlock) |  | Yes | Yes | [Yes](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/498) | [Yes (STRICT)](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/1396) | | [ECK Operator](https://repo1.dso.mil/big-bang/apps/core/eck-operator) |  | No | Yes | [Yes](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/510) | [Yes (STRICT)](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/1236) | @@ -58,7 +58,7 @@ | [Gitlab Runner](https://repo1.dso.mil/big-bang/apps/developer-tools/gitlab-runner) |  | Yes | Yes \* | [Yes](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/522) \* | [Yes (STRICT)](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/1724) \* | | [Nexus](https://repo1.dso.mil/big-bang/apps/developer-tools/nexus) |  | Yes | Yes | [Yes](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/544) | [Yes (STRICT)](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/1605) | | [Sonarqube](https://repo1.dso.mil/big-bang/apps/developer-tools/sonarqube) |  | N/A | Yes | [Yes](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/503) | [Yes (STRICT)](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/1508) | -| [Harbor](https://https://repo1.dso.mil/big-bang/product/packages/harbor) |  | Yes | Yes | [Yes](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/2939) | [Yes (STRICT)](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/2939) | +| [Harbor](https://repo1.dso.mil/big-bang/product/packages/harbor) |  | Yes | Yes | [Yes](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/2939) | [Yes (STRICT)](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/2939) | > `*` inherited from Gitlab when installed in the same namespace. diff --git a/docs/understanding-bigbang/configuration/base-config.md b/docs/understanding-bigbang/configuration/base-config.md index 7457dcb9ac56398337415563a0838cac913439a4..fa8bed85b2f7eb908dad9b776a7ccbb8f75d7b64 100644 --- a/docs/understanding-bigbang/configuration/base-config.md +++ b/docs/understanding-bigbang/configuration/base-config.md @@ -1,6 +1,6 @@ # bigbang -  +  Big Bang is a declarative, continuous delivery tool for core DoD hardened and approved packages into a Kubernetes cluster. @@ -66,10 +66,10 @@ To start using Big Bang, you will need to create your own Big Bang environment t | istio.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | istio.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/istio-controlplane.git"` | | | istio.git.path | string | `"./chart"` | | -| istio.git.tag | string | `"1.18.2-bb.0"` | | +| istio.git.tag | string | `"1.18.2-bb.1"` | | | istio.helmRepo.repoName | string | `"registry1"` | | | istio.helmRepo.chartName | string | `"istio"` | | -| istio.helmRepo.tag | string | `"1.18.2-bb.0"` | | +| istio.helmRepo.tag | string | `"1.18.2-bb.1"` | | | istio.enterprise | bool | `false` | Tetrate Istio Distribution - Tetrate provides FIPs verified Istio and Envoy software and support, validated through the FIPs Boring Crypto module. Find out more from Tetrate - https://www.tetrate.io/tetrate-istio-subscription | | istio.ingressGateways.public-ingressgateway.type | string | `"LoadBalancer"` | | | istio.ingressGateways.public-ingressgateway.kubernetesResourceSpec | object | `{}` | | @@ -97,10 +97,10 @@ To start using Big Bang, you will need to create your own Big Bang environment t | jaeger.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | jaeger.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/jaeger.git"` | | | jaeger.git.path | string | `"./chart"` | | -| jaeger.git.tag | string | `"2.46.0-bb.0"` | | +| jaeger.git.tag | string | `"2.46.0-bb.2"` | | | jaeger.helmRepo.repoName | string | `"registry1"` | | | jaeger.helmRepo.chartName | string | `"jaeger"` | | -| jaeger.helmRepo.tag | string | `"2.46.0-bb.0"` | | +| jaeger.helmRepo.tag | string | `"2.46.0-bb.2"` | | | jaeger.flux | object | `{"install":{"crds":"CreateReplace"},"upgrade":{"crds":"CreateReplace"}}` | Flux reconciliation overrides specifically for the Jaeger Package | | jaeger.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". | | jaeger.sso.enabled | bool | `false` | Toggle SSO for Jaeger on and off | @@ -182,10 +182,10 @@ To start using Big Bang, you will need to create your own Big Bang environment t | elasticsearchKibana.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | elasticsearchKibana.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/elasticsearch-kibana.git"` | | | elasticsearchKibana.git.path | string | `"./chart"` | | -| elasticsearchKibana.git.tag | string | `"1.3.1-bb.0"` | | +| elasticsearchKibana.git.tag | string | `"1.3.1-bb.1"` | | | elasticsearchKibana.helmRepo.repoName | string | `"registry1"` | | | elasticsearchKibana.helmRepo.chartName | string | `"elasticsearch-kibana"` | | -| elasticsearchKibana.helmRepo.tag | string | `"1.3.1-bb.0"` | | +| elasticsearchKibana.helmRepo.tag | string | `"1.3.1-bb.1"` | | | elasticsearchKibana.flux | object | `{"timeout":"20m"}` | Flux reconciliation overrides specifically for the Logging (EFK) Package | | elasticsearchKibana.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". | | elasticsearchKibana.sso.enabled | bool | `false` | Toggle OIDC SSO for Kibana/Elasticsearch on and off. Enabling this option will auto-create any required secrets. | @@ -210,10 +210,10 @@ To start using Big Bang, you will need to create your own Big Bang environment t | fluentbit.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | fluentbit.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/fluentbit.git"` | | | fluentbit.git.path | string | `"./chart"` | | -| fluentbit.git.tag | string | `"0.30.4-bb.0"` | | +| fluentbit.git.tag | string | `"0.37.0-bb.0"` | | | fluentbit.helmRepo.repoName | string | `"registry1"` | | | fluentbit.helmRepo.chartName | string | `"fluentbit"` | | -| fluentbit.helmRepo.tag | string | `"0.30.4-bb.0"` | | +| fluentbit.helmRepo.tag | string | `"0.37.0-bb.0"` | | | fluentbit.flux | object | `{}` | Flux reconciliation overrides specifically for the Fluent-Bit Package | | fluentbit.values | object | `{}` | Values to passthrough to the fluentbit chart: https://repo1.dso.mil/big-bang/product/packages/fluentbit.git | | fluentbit.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | @@ -249,10 +249,10 @@ To start using Big Bang, you will need to create your own Big Bang environment t | neuvector.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | neuvector.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/neuvector.git"` | | | neuvector.git.path | string | `"./chart"` | | -| neuvector.git.tag | string | `"2.4.5-bb.2"` | | +| neuvector.git.tag | string | `"2.4.5-bb.3"` | | | neuvector.helmRepo.repoName | string | `"registry1"` | | | neuvector.helmRepo.chartName | string | `"neuvector"` | | -| neuvector.helmRepo.tag | string | `"2.4.5-bb.2"` | | +| neuvector.helmRepo.tag | string | `"2.4.5-bb.3"` | | | neuvector.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". | | neuvector.sso.enabled | bool | `true` | Toggle SSO for Neuvector on and off | | neuvector.sso.client_id | string | `""` | OIDC Client ID to use for Neuvector | @@ -286,10 +286,10 @@ To start using Big Bang, you will need to create your own Big Bang environment t | monitoring.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | monitoring.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/monitoring.git"` | | | monitoring.git.path | string | `"./chart"` | | -| monitoring.git.tag | string | `"47.1.0-bb.2"` | | +| monitoring.git.tag | string | `"48.3.1-bb.0"` | | | monitoring.helmRepo.repoName | string | `"registry1"` | | | monitoring.helmRepo.chartName | string | `"monitoring"` | | -| monitoring.helmRepo.tag | string | `"47.1.0-bb.2"` | | +| monitoring.helmRepo.tag | string | `"48.3.1-bb.0"` | | | monitoring.flux | object | `{"install":{"crds":"CreateReplace"},"upgrade":{"crds":"CreateReplace"}}` | Flux reconciliation overrides specifically for the Monitoring Package | | monitoring.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". | | monitoring.sso.enabled | bool | `false` | Toggle SSO for monitoring components on and off | @@ -301,7 +301,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t | monitoring.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | | grafana.enabled | bool | `true` | Toggle deployment of Grafana | | grafana.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | -| grafana.git.repo | string | `"https://repo1.dso.mil/big-bang/apps/sandbox/grafana.git"` | | +| grafana.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/grafana.git"` | | | grafana.git.path | string | `"./chart"` | | | grafana.git.tag | string | `"6.57.4-bb.0"` | | | grafana.helmRepo.repoName | string | `"registry1"` | | @@ -394,10 +394,10 @@ To start using Big Bang, you will need to create your own Big Bang environment t | addons.gitlab.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | addons.gitlab.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/gitlab.git"` | | | addons.gitlab.git.path | string | `"./chart"` | | -| addons.gitlab.git.tag | string | `"7.2.2-bb.0"` | | +| addons.gitlab.git.tag | string | `"7.2.2-bb.1"` | | | addons.gitlab.helmRepo.repoName | string | `"registry1"` | | | addons.gitlab.helmRepo.chartName | string | `"gitlab"` | | -| addons.gitlab.helmRepo.tag | string | `"7.2.2-bb.0"` | | +| addons.gitlab.helmRepo.tag | string | `"7.2.2-bb.1"` | | | addons.gitlab.flux | object | `{}` | Flux reconciliation overrides specifically for the Gitlab Package | | addons.gitlab.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". | | addons.gitlab.sso.enabled | bool | `false` | Toggle OIDC SSO for Gitlab on and off. Enabling this option will auto-create any required secrets. | @@ -457,10 +457,10 @@ To start using Big Bang, you will need to create your own Big Bang environment t | addons.sonarqube.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | addons.sonarqube.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/sonarqube.git"` | | | addons.sonarqube.git.path | string | `"./chart"` | | -| addons.sonarqube.git.tag | string | `"8.0.1-bb.2"` | | +| addons.sonarqube.git.tag | string | `"8.0.1-bb.4"` | | | addons.sonarqube.helmRepo.repoName | string | `"registry1"` | | | addons.sonarqube.helmRepo.chartName | string | `"sonarqube"` | | -| addons.sonarqube.helmRepo.tag | string | `"8.0.1-bb.2"` | | +| addons.sonarqube.helmRepo.tag | string | `"8.0.1-bb.4"` | | | addons.sonarqube.flux | object | `{}` | Flux reconciliation overrides specifically for the Sonarqube Package | | addons.sonarqube.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". | | addons.sonarqube.sso.enabled | bool | `false` | Toggle SAML SSO for SonarQube. Enabling this option will auto-create any required secrets. | @@ -479,10 +479,10 @@ To start using Big Bang, you will need to create your own Big Bang environment t | addons.haproxy.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | addons.haproxy.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/haproxy.git"` | | | addons.haproxy.git.path | string | `"./chart"` | | -| addons.haproxy.git.tag | string | `"1.12.0-bb.0"` | | +| addons.haproxy.git.tag | string | `"1.12.0-bb.1"` | | | addons.haproxy.helmRepo.repoName | string | `"registry1"` | | | addons.haproxy.helmRepo.chartName | string | `"haproxy"` | | -| addons.haproxy.helmRepo.tag | string | `"1.12.0-bb.0"` | | +| addons.haproxy.helmRepo.tag | string | `"1.12.0-bb.1"` | | | addons.haproxy.flux | object | `{}` | Flux reconciliation overrides specifically for the HAProxy Package | | addons.haproxy.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". | | addons.haproxy.values | object | `{}` | Values to passthrough to the haproxy chart: https://repo1.dso.mil/big-bang/product/packages/haproxy.git | @@ -531,10 +531,10 @@ To start using Big Bang, you will need to create your own Big Bang environment t | addons.mattermost.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | addons.mattermost.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/mattermost.git"` | | | addons.mattermost.git.path | string | `"./chart"` | | -| addons.mattermost.git.tag | string | `"7.10.5-bb.0"` | | +| addons.mattermost.git.tag | string | `"8.0.1-bb.1"` | | | addons.mattermost.helmRepo.repoName | string | `"registry1"` | | | addons.mattermost.helmRepo.chartName | string | `"mattermost"` | | -| addons.mattermost.helmRepo.tag | string | `"7.10.5-bb.0"` | | +| addons.mattermost.helmRepo.tag | string | `"8.0.1-bb.1"` | | | addons.mattermost.flux | object | `{}` | Flux reconciliation overrides specifically for the Mattermost Package | | addons.mattermost.enterprise | object | `{"enabled":false,"license":""}` | Mattermost Enterprise functionality. | | addons.mattermost.enterprise.enabled | bool | `false` | Toggle the Mattermost Enterprise. This must be accompanied by a valid license unless you plan to start a trial post-install. | @@ -592,10 +592,10 @@ To start using Big Bang, you will need to create your own Big Bang environment t | addons.vault.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | addons.vault.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/vault.git"` | | | addons.vault.git.path | string | `"./chart"` | | -| addons.vault.git.tag | string | `"0.24.1-bb.1"` | | +| addons.vault.git.tag | string | `"0.24.1-bb.3"` | | | addons.vault.helmRepo.repoName | string | `"registry1"` | | | addons.vault.helmRepo.chartName | string | `"vault"` | | -| addons.vault.helmRepo.tag | string | `"0.24.1-bb.1"` | | +| addons.vault.helmRepo.tag | string | `"0.24.1-bb.3"` | | | addons.vault.flux | object | `{}` | Flux reconciliation overrides specifically for the Vault Package | | addons.vault.ingress | object | `{"cert":"","gateway":"","key":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". | | addons.vault.ingress.key | string | `""` | Certificate/Key pair to use as the certificate for exposing Vault Setting the ingress cert here will automatically create the volume and volumemounts in the Vault package chart |