diff --git a/CHANGELOG.md b/CHANGELOG.md index a186621c0878e4a2b423f7002529e373035505ee..751865108baaf4d87b14e4681800eb23b7fa0906 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -3,6 +3,11 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). --- +## [1.14.1] + +* [!771](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/771): Intermediate update to authservice package to allow for cleaner certificate formatting +* [!782](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/782): Bumping Authservice tag to 0.4.0-bb.13 to fix mapping for values passed to redis sub-chart and uploading correct dependency sub-chart + ## [1.14.0] * [!1.14.0](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests?scope=all&utf8=%E2%9C%93&state=merged&milestone_title=1.14.0); List of merge requests in this release. diff --git a/README.md b/README.md index 434cc1b033c4cacda7c4bad963eb691f6521d73a..fd910900d82822699aabfedc5f85247622b70a93 100644 --- a/README.md +++ b/README.md @@ -1,6 +1,6 @@ # bigbang -  +  Big Bang is a declarative, continuous delivery tool for core DoD hardened and approved packages into a Kubernetes cluster. @@ -50,8 +50,8 @@ To start using Big Bang, you will need to create your own Big Bang environment t | sso | object | `{"auth_url":"https://{{ .Values.sso.oidc.host }}/auth/realms/{{ .Values.sso.oidc.realm }}/protocol/openid-connect/auth","certificate_authority":"","client_id":"","client_secret":"","jwks":"","oidc":{"host":"login.dso.mil","realm":"baby-yoda"},"token_url":"https://{{ .Values.sso.oidc.host }}/auth/realms/{{ .Values.sso.oidc.realm }}/protocol/openid-connect/token"}` | Global SSO values used for BigBang deployments when sso is enabled, can be overridden by individual packages. | | sso.oidc.host | string | `"login.dso.mil"` | Domain for keycloak used for configuring SSO | | sso.oidc.realm | string | `"baby-yoda"` | Keycloak realm containing clients | -| sso.certificate_authority | string | `""` | Keycloak's certificate authority (unencoded) used by authservice to support SSO for various packages | -| sso.jwks | string | `""` | Keycloak realm's json web key uri, obtained through https://<keycloak-server>/auth/realms/<realm>/.well-known/openid-configuration | +| sso.certificate_authority | string | `""` | Keycloak's certificate authority (PEM Format). Entered using chomp modifier (see chart/dev-sso-values.yaml for example). Used by authservice to support SSO for various packages | +| sso.jwks | string | `""` | Keycloak realm's json web key output, obtained at https://<keycloak-server>/auth/realms/<realm>/protocol/openid-connect/certs | | sso.client_id | string | `""` | OIDC client ID used for packages authenticated through authservice | | sso.client_secret | string | `""` | OIDC client secret used for packages authenticated through authservice | | sso.token_url | string | `"https://{{ .Values.sso.oidc.host }}/auth/realms/{{ .Values.sso.oidc.realm }}/protocol/openid-connect/token"` | OIDC token URL template string (to be used as default) | @@ -184,7 +184,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t | addons.authservice.enabled | bool | `false` | Toggle deployment of Authservice. if enabling authservice, a filter needs to be provided by either enabling sso for monitoring or istio, or manually adding a filter chain in the values here: values: chain: minimal: callback_uri: "https://somecallback" | | addons.authservice.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/authservice.git"` | | | addons.authservice.git.path | string | `"./chart"` | | -| addons.authservice.git.tag | string | `"0.4.0-bb.10"` | | +| addons.authservice.git.tag | string | `"0.4.0-bb.13"` | | | addons.authservice.flux | object | `{}` | Flux reconciliation overrides specifically for the Authservice Package | | addons.authservice.values | object | `{}` | Values to passthrough to the authservice chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/authservice.git | | addons.authservice.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | diff --git a/base/gitrepository.yaml b/base/gitrepository.yaml index b642f6e0f8a77b02665cd1e080279ab53b831022..4d46221dd04a9338dc9dfa2d0dc486486674bfab 100644 --- a/base/gitrepository.yaml +++ b/base/gitrepository.yaml @@ -11,4 +11,4 @@ spec: interval: 10m url: https://repo1.dso.mil/platform-one/big-bang/bigbang.git ref: - tag: 1.14.0 + tag: 1.14.1 diff --git a/chart/Chart.yaml b/chart/Chart.yaml index cd2d062103af194e183eba6212f2ea8ea6d62b95..5b58b3b0b2173c229e6fd3c7b7542550b599572f 100644 --- a/chart/Chart.yaml +++ b/chart/Chart.yaml @@ -1,6 +1,6 @@ apiVersion: v2 name: bigbang -version: 1.14.0 +version: 1.14.1 description: Big Bang is a declarative, continuous delivery tool for core DoD hardened and approved packages into a Kubernetes cluster. type: application