diff --git a/CHANGELOG.md b/CHANGELOG.md index 54a41c363b67246b085c82a40c675b6f0777af2e..d4d0237454b5087a819f934f750517dbf97243a4 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -3,6 +3,28 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). --- +## [2.8.0] + +- List of merge requests in this release. + +- [!2971](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/2971): Grafana chart indentation 6 -> 4 +- [!2950](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/2950): velero update to 4.0.3-bb.0 +- [!2973](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/2973): gitlab update to 7.2.0-bb.0 +- [!2974](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/2974): authservice update to 0.5.3-bb.12 +- [!2936](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/2936): argocd update to 5.39.0-bb.0 +- [!2964](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/2964): neuvector update to 2.4.5-bb.2 +- [!2966](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/2966): loki update to 5.9.2-bb.0 +- [!2975](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/2975): promtail update to 6.13.1-bb.0 +- [!2930](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/2930): Re-add IB key to Kyverno Policies test-values +- [!2963](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/2963): kyvernoPolicies update to 1.1.0-bb.9 +- [!2972](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/2972): istio & operator update to 1.18.2-bb.0 +- [!2938](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/2938): Add 'comments' field to schema +- [!2957](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/2957): fix for ca-secret creation logic +- [!2955](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/2955): harbor update to 1.12.2-bb.7 +- [!2958](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/2958): anchore update to 1.26.1-bb.0 +- [!2977](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/2977): gitlab update to 7.2.2-bb.0 +- [!2961](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/2961): Fixing conditional for grafana extraSecretMounts + ## [2.7.0] - [!2.7.0](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests?scope=all&utf8=%E2%9C%93&state=merged&milestone_title=2.7.0); List of merge requests in this release. diff --git a/base/gitrepository.yaml b/base/gitrepository.yaml index f1d64c62dfa7ac3e99899a5776edd1e5b031e4ae..ab65eedef71935b725fb5ea5e29a32c64b732202 100644 --- a/base/gitrepository.yaml +++ b/base/gitrepository.yaml @@ -11,4 +11,4 @@ spec: interval: 10m url: https://repo1.dso.mil/big-bang/bigbang.git ref: - tag: 2.7.0 + tag: 2.8.0 diff --git a/chart/Chart.yaml b/chart/Chart.yaml index 954ef381031bdb53d313a25a60039bf836a6bc5f..291ffc17317e64cf5b24b096a0b94629366e3a3f 100644 --- a/chart/Chart.yaml +++ b/chart/Chart.yaml @@ -1,6 +1,6 @@ apiVersion: v2 name: bigbang -version: 2.7.0 +version: 2.8.0 description: Big Bang is a declarative, continuous delivery tool for core DoD hardened and approved packages into a Kubernetes cluster. type: application diff --git a/docs/packages.md b/docs/packages.md index ea6100b51baa298c078bc82cf05293da0a8f435d..9ad41e82a19ae77e2109bc9e924f08cf3e8e7983 100644 --- a/docs/packages.md +++ b/docs/packages.md @@ -22,6 +22,7 @@ | [Jaeger](https://repo1.dso.mil/big-bang/apps/core/jaeger) |  | Yes | Yes | [Yes](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/602) | [Yes (STRICT)](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/1295) | | [Kiali](https://repo1.dso.mil/big-bang/apps/core/kiali) |  | No | Yes | [Yes](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/589) | [Yes (STRICT)](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/1296) | | [Monitoring](https://repo1.dso.mil/big-bang/apps/core/monitoring) |  | Yes | Yes | [Yes](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/509) | [Yes (STRICT)](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/1900) | +| [Grafana](https://repo1.dso.mil/big-bang/apps/sandbox/grafana) |  | Yes | Yes | [Yes](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/2929) | [Yes (STRICT)](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/2929) | | [NeuVector](https://repo1.dso.mil/big-bang/apps/sandbox/neuvector) |  | Yes | No | [Yes](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/2486) | [Yes (STRICT)](https://repo1.dso.mil/big-bang/apps/sandbox/neuvector/-/blob/main/chart/templates/bigbang/peerauthentication/peerauthentication/peer-authentication.yaml) | | [Twistlock](https://repo1.dso.mil/big-bang/apps/security-tools/twistlock) |  | Yes | Yes | [Yes](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/498) | [Yes (STRICT)](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/1396) | | [ECK Operator](https://repo1.dso.mil/big-bang/apps/core/eck-operator) |  | No | Yes | [Yes](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/510) | [Yes (STRICT)](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/1236) | diff --git a/docs/understanding-bigbang/configuration/base-config.md b/docs/understanding-bigbang/configuration/base-config.md index a0eb34540be5f521808f2d36346240fe4b6f1702..7457dcb9ac56398337415563a0838cac913439a4 100644 --- a/docs/understanding-bigbang/configuration/base-config.md +++ b/docs/understanding-bigbang/configuration/base-config.md @@ -1,6 +1,6 @@ # bigbang -  +  Big Bang is a declarative, continuous delivery tool for core DoD hardened and approved packages into a Kubernetes cluster. @@ -13,8 +13,6 @@ To start using Big Bang, you will need to create your own Big Bang environment t | Name | Email | Url | | ---- | ------ | --- | | Ryan Garcia | ryan.garcia@sigmadefense.com | | -| Micah Nagel | micah.nagel@defenseunicorns.com | | -| Rob Ferguson | rob.ferguson@defenseunicorns.com | | | Chris O'Connell | coconnell@bridgephase.com | | ## Source Code @@ -68,10 +66,10 @@ To start using Big Bang, you will need to create your own Big Bang environment t | istio.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | istio.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/istio-controlplane.git"` | | | istio.git.path | string | `"./chart"` | | -| istio.git.tag | string | `"1.18.1-bb.0"` | | +| istio.git.tag | string | `"1.18.2-bb.0"` | | | istio.helmRepo.repoName | string | `"registry1"` | | | istio.helmRepo.chartName | string | `"istio"` | | -| istio.helmRepo.tag | string | `"1.18.1-bb.0"` | | +| istio.helmRepo.tag | string | `"1.18.2-bb.0"` | | | istio.enterprise | bool | `false` | Tetrate Istio Distribution - Tetrate provides FIPs verified Istio and Envoy software and support, validated through the FIPs Boring Crypto module. Find out more from Tetrate - https://www.tetrate.io/tetrate-istio-subscription | | istio.ingressGateways.public-ingressgateway.type | string | `"LoadBalancer"` | | | istio.ingressGateways.public-ingressgateway.kubernetesResourceSpec | object | `{}` | | @@ -88,10 +86,10 @@ To start using Big Bang, you will need to create your own Big Bang environment t | istioOperator.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | istioOperator.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/istio-operator.git"` | | | istioOperator.git.path | string | `"./chart"` | | -| istioOperator.git.tag | string | `"1.18.1-bb.0"` | | +| istioOperator.git.tag | string | `"1.18.2-bb.0"` | | | istioOperator.helmRepo.repoName | string | `"registry1"` | | | istioOperator.helmRepo.chartName | string | `"istio-operator"` | | -| istioOperator.helmRepo.tag | string | `"1.18.1-bb.0"` | | +| istioOperator.helmRepo.tag | string | `"1.18.2-bb.0"` | | | istioOperator.flux | object | `{}` | Flux reconciliation overrides specifically for the Istio Operator Package | | istioOperator.values | object | `{}` | Values to passthrough to the istio-operator chart: https://repo1.dso.mil/big-bang/product/packages/istio-operator.git | | istioOperator.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | @@ -162,10 +160,10 @@ To start using Big Bang, you will need to create your own Big Bang environment t | kyvernoPolicies.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | kyvernoPolicies.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/kyverno-policies.git"` | | | kyvernoPolicies.git.path | string | `"./chart"` | | -| kyvernoPolicies.git.tag | string | `"1.1.0-bb.7"` | | +| kyvernoPolicies.git.tag | string | `"1.1.0-bb.9"` | | | kyvernoPolicies.helmRepo.repoName | string | `"registry1"` | | | kyvernoPolicies.helmRepo.chartName | string | `"kyverno-policies"` | | -| kyvernoPolicies.helmRepo.tag | string | `"1.1.0-bb.7"` | | +| kyvernoPolicies.helmRepo.tag | string | `"1.1.0-bb.9"` | | | kyvernoPolicies.flux | object | `{}` | Flux reconciliation overrides specifically for the Kyverno Package | | kyvernoPolicies.values | object | `{}` | Values to passthrough to the kyverno policies chart: https://repo1.dso.mil/big-bang/product/packages/kyverno-policies.git | | kyvernoPolicies.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | @@ -223,10 +221,10 @@ To start using Big Bang, you will need to create your own Big Bang environment t | promtail.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | promtail.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/promtail.git"` | | | promtail.git.path | string | `"./chart"` | | -| promtail.git.tag | string | `"6.11.3-bb.0"` | | +| promtail.git.tag | string | `"6.13.1-bb.0"` | | | promtail.helmRepo.repoName | string | `"registry1"` | | | promtail.helmRepo.chartName | string | `"promtail"` | | -| promtail.helmRepo.tag | string | `"6.11.3-bb.0"` | | +| promtail.helmRepo.tag | string | `"6.13.1-bb.0"` | | | promtail.flux | object | `{}` | Flux reconciliation overrides specifically for the Promtail Package | | promtail.values | object | `{}` | Values to passthrough to the promtail chart: https://repo1.dso.mil/big-bang/product/packages/fluentbit.git | | promtail.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | @@ -234,10 +232,10 @@ To start using Big Bang, you will need to create your own Big Bang environment t | loki.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | loki.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/loki.git"` | | | loki.git.path | string | `"./chart"` | | -| loki.git.tag | string | `"5.8.9-bb.0"` | | +| loki.git.tag | string | `"5.9.2-bb.0"` | | | loki.helmRepo.repoName | string | `"registry1"` | | | loki.helmRepo.chartName | string | `"loki"` | | -| loki.helmRepo.tag | string | `"5.8.9-bb.0"` | | +| loki.helmRepo.tag | string | `"5.9.2-bb.0"` | | | loki.flux | object | `{}` | Flux reconciliation overrides specifically for the Loki Package | | loki.strategy | string | `"monolith"` | Loki architecture. Options are monolith and scalable | | loki.objectStorage.endpoint | string | `""` | S3 compatible endpoint to use for connection information. examples: "https://s3.amazonaws.com" "https://s3.us-gov-west-1.amazonaws.com" "http://minio.minio.svc.cluster.local:9000" | @@ -251,10 +249,10 @@ To start using Big Bang, you will need to create your own Big Bang environment t | neuvector.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | neuvector.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/neuvector.git"` | | | neuvector.git.path | string | `"./chart"` | | -| neuvector.git.tag | string | `"2.4.5-bb.0"` | | +| neuvector.git.tag | string | `"2.4.5-bb.2"` | | | neuvector.helmRepo.repoName | string | `"registry1"` | | | neuvector.helmRepo.chartName | string | `"neuvector"` | | -| neuvector.helmRepo.tag | string | `"2.4.5-bb.0"` | | +| neuvector.helmRepo.tag | string | `"2.4.5-bb.2"` | | | neuvector.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". | | neuvector.sso.enabled | bool | `true` | Toggle SSO for Neuvector on and off | | neuvector.sso.client_id | string | `""` | OIDC Client ID to use for Neuvector | @@ -288,10 +286,10 @@ To start using Big Bang, you will need to create your own Big Bang environment t | monitoring.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | monitoring.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/monitoring.git"` | | | monitoring.git.path | string | `"./chart"` | | -| monitoring.git.tag | string | `"47.1.0-bb.1"` | | +| monitoring.git.tag | string | `"47.1.0-bb.2"` | | | monitoring.helmRepo.repoName | string | `"registry1"` | | | monitoring.helmRepo.chartName | string | `"monitoring"` | | -| monitoring.helmRepo.tag | string | `"47.1.0-bb.1"` | | +| monitoring.helmRepo.tag | string | `"47.1.0-bb.2"` | | | monitoring.flux | object | `{"install":{"crds":"CreateReplace"},"upgrade":{"crds":"CreateReplace"}}` | Flux reconciliation overrides specifically for the Monitoring Package | | monitoring.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". | | monitoring.sso.enabled | bool | `false` | Toggle SSO for monitoring components on and off | @@ -339,10 +337,10 @@ To start using Big Bang, you will need to create your own Big Bang environment t | addons.argocd.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | addons.argocd.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/argocd.git"` | | | addons.argocd.git.path | string | `"./chart"` | | -| addons.argocd.git.tag | string | `"5.36.1-bb.0"` | | +| addons.argocd.git.tag | string | `"5.39.0-bb.0"` | | | addons.argocd.helmRepo.repoName | string | `"registry1"` | | | addons.argocd.helmRepo.chartName | string | `"argocd"` | | -| addons.argocd.helmRepo.tag | string | `"5.36.1-bb.0"` | | +| addons.argocd.helmRepo.tag | string | `"5.39.0-bb.0"` | | | addons.argocd.flux | object | `{}` | Flux reconciliation overrides specifically for the ArgoCD Package | | addons.argocd.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". | | addons.argocd.redis.host | string | `""` | Hostname of a pre-existing Redis to use for ArgoCD. Entering connection info will enable external Redis and will auto-create any required secrets. | @@ -357,10 +355,10 @@ To start using Big Bang, you will need to create your own Big Bang environment t | addons.authservice.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | addons.authservice.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/authservice.git"` | | | addons.authservice.git.path | string | `"./chart"` | | -| addons.authservice.git.tag | string | `"0.5.3-bb.11"` | | +| addons.authservice.git.tag | string | `"0.5.3-bb.12"` | | | addons.authservice.helmRepo.repoName | string | `"registry1"` | | | addons.authservice.helmRepo.chartName | string | `"authservice"` | | -| addons.authservice.helmRepo.tag | string | `"0.5.3-bb.11"` | | +| addons.authservice.helmRepo.tag | string | `"0.5.3-bb.12"` | | | addons.authservice.flux | object | `{}` | Flux reconciliation overrides specifically for the Authservice Package | | addons.authservice.values | object | `{}` | Values to passthrough to the authservice chart: https://repo1.dso.mil/big-bang/product/packages/authservice.git | | addons.authservice.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | @@ -396,10 +394,10 @@ To start using Big Bang, you will need to create your own Big Bang environment t | addons.gitlab.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | addons.gitlab.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/gitlab.git"` | | | addons.gitlab.git.path | string | `"./chart"` | | -| addons.gitlab.git.tag | string | `"7.1.2-bb.0"` | | +| addons.gitlab.git.tag | string | `"7.2.2-bb.0"` | | | addons.gitlab.helmRepo.repoName | string | `"registry1"` | | | addons.gitlab.helmRepo.chartName | string | `"gitlab"` | | -| addons.gitlab.helmRepo.tag | string | `"7.1.2-bb.0"` | | +| addons.gitlab.helmRepo.tag | string | `"7.2.2-bb.0"` | | | addons.gitlab.flux | object | `{}` | Flux reconciliation overrides specifically for the Gitlab Package | | addons.gitlab.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". | | addons.gitlab.sso.enabled | bool | `false` | Toggle OIDC SSO for Gitlab on and off. Enabling this option will auto-create any required secrets. | @@ -493,10 +491,10 @@ To start using Big Bang, you will need to create your own Big Bang environment t | addons.anchore.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | addons.anchore.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/anchore-enterprise.git"` | | | addons.anchore.git.path | string | `"./chart"` | | -| addons.anchore.git.tag | string | `"1.24.1-bb.5"` | | +| addons.anchore.git.tag | string | `"1.26.1-bb.0"` | | | addons.anchore.helmRepo.repoName | string | `"registry1"` | | | addons.anchore.helmRepo.chartName | string | `"anchore"` | | -| addons.anchore.helmRepo.tag | string | `"1.24.1-bb.5"` | | +| addons.anchore.helmRepo.tag | string | `"1.26.1-bb.0"` | | | addons.anchore.flux | object | `{"upgrade":{"disableWait":true}}` | Flux reconciliation overrides specifically for the Anchore Package | | addons.anchore.adminPassword | string | `""` | Initial admin password used to authenticate to Anchore. | | addons.anchore.enterprise | object | `{"enabled":false,"licenseYaml":"FULL LICENSE\n"}` | Anchore Enterprise functionality. | @@ -533,10 +531,10 @@ To start using Big Bang, you will need to create your own Big Bang environment t | addons.mattermost.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | addons.mattermost.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/mattermost.git"` | | | addons.mattermost.git.path | string | `"./chart"` | | -| addons.mattermost.git.tag | string | `"7.10.3-bb.1"` | | +| addons.mattermost.git.tag | string | `"7.10.5-bb.0"` | | | addons.mattermost.helmRepo.repoName | string | `"registry1"` | | | addons.mattermost.helmRepo.chartName | string | `"mattermost"` | | -| addons.mattermost.helmRepo.tag | string | `"7.10.3-bb.1"` | | +| addons.mattermost.helmRepo.tag | string | `"7.10.5-bb.0"` | | | addons.mattermost.flux | object | `{}` | Flux reconciliation overrides specifically for the Mattermost Package | | addons.mattermost.enterprise | object | `{"enabled":false,"license":""}` | Mattermost Enterprise functionality. | | addons.mattermost.enterprise.enabled | bool | `false` | Toggle the Mattermost Enterprise. This must be accompanied by a valid license unless you plan to start a trial post-install. | @@ -563,10 +561,10 @@ To start using Big Bang, you will need to create your own Big Bang environment t | addons.velero.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | addons.velero.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/velero.git"` | | | addons.velero.git.path | string | `"./chart"` | | -| addons.velero.git.tag | string | `"3.1.5-bb.2"` | | +| addons.velero.git.tag | string | `"4.0.3-bb.0"` | | | addons.velero.helmRepo.repoName | string | `"registry1"` | | | addons.velero.helmRepo.chartName | string | `"velero"` | | -| addons.velero.helmRepo.tag | string | `"3.1.5-bb.2"` | | +| addons.velero.helmRepo.tag | string | `"4.0.3-bb.0"` | | | addons.velero.flux | object | `{}` | Flux reconciliation overrides specifically for the Velero Package | | addons.velero.plugins | list | `[]` | Plugin provider for Velero - requires at least one plugin installed. Current supported values: aws, azure, csi | | addons.velero.values | object | `{}` | Values to passthrough to the Velero chart: https://repo1.dso.mil/big-bang/product/packages/values.yaml | @@ -617,11 +615,11 @@ To start using Big Bang, you will need to create your own Big Bang environment t | addons.harbor.enabled | bool | `false` | Toggle deployment of harbor | | addons.harbor.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" | | addons.harbor.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/harbor.git"` | | -| addons.harbor.git.tag | string | `"1.12.2-bb.5"` | | +| addons.harbor.git.tag | string | `"1.12.2-bb.7"` | | | addons.harbor.git.path | string | `"./chart"` | | | addons.harbor.helmRepo.repoName | string | `"registry1"` | | | addons.harbor.helmRepo.chartName | string | `"harbor"` | | -| addons.harbor.helmRepo.tag | string | `"1.12.2-bb.5"` | | +| addons.harbor.helmRepo.tag | string | `"1.12.2-bb.7"` | | | addons.harbor.flux | object | `{}` | Flux reconciliation overrides specifically for the Jaeger Package | | addons.harbor.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". | | addons.harbor.sso.enabled | bool | `false` | Toggle SSO for Harbor on and off |