Merge remote-tracking branch 'origin/master' into automount-sa-wildcard-keycloak

CHANGELOG.md

@@ -3,6 +3,11 @@
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ---
+## [2.19.2]
+
+- [!3780](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/3780); istio update pod security context
+- [!3759](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/3759); fluentbit update to 2.2.2
+
 ## [2.19.1]
 
 - [!3746](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/3746); Gitlab update to 16.8.1

base/gitrepository.yaml

@@ -11,4 +11,4 @@ spec:
   interval: 10m
   url: https://repo1.dso.mil/big-bang/bigbang.git
   ref:
-    tag: 2.19.1
+    tag: 2.19.2

chart/Chart.yaml

 apiVersion: v2
 name: bigbang
-version: 2.19.1
+version: 2.19.2
 description: Big Bang is a declarative, continuous delivery tool for core DoD hardened and approved packages into a Kubernetes cluster.
 
 type: application

chart/templates/kyverno-policies/values.yaml

@@ -862,14 +862,10 @@ policies:
           - vault-vault-agent-injector-*
           - vault-vault-job-init-*
       - namespace: promtail 
-        serviceAccounts:
-        - promtail-promtail
         pods:
           allow:
           - promtail-promtail-*
       - namespace: fluentbit
-        serviceAccounts:
-        - fluentbit-fluent-bit
         pods:
           allow:
           - fluentbit-fluent-bit-*

chart/values.yaml

@@ -516,11 +516,11 @@ kyvernoPolicies:
   git:
     repo: https://repo1.dso.mil/big-bang/product/packages/kyverno-policies.git
     path: ./chart
-    tag: "3.0.4-bb.23"
+    tag: "3.0.4-bb.24"
   helmRepo:
     repoName: "registry1"
     chartName: "kyverno-policies"
-    tag: "3.0.4-bb.23"
+    tag: "3.0.4-bb.24"
 
   # -- Flux reconciliation overrides specifically for the Kyverno Package
   flux: {}
@@ -644,11 +644,11 @@ fluentbit:
   git:
     repo: https://repo1.dso.mil/big-bang/product/packages/fluentbit.git
     path: "./chart"
-    tag: "0.42.0-bb.0"
+    tag: "0.43.0-bb.1"
   helmRepo:
     repoName: "registry1"
     chartName: "fluentbit"
-    tag: "0.42.0-bb.0"
+    tag: "0.43.0-bb.1"
 
   # -- Flux reconciliation overrides specifically for the Fluent-Bit Package
   flux: {}
@@ -925,11 +925,11 @@ grafana:
   git:
     repo: https://repo1.dso.mil/big-bang/product/packages/grafana.git
     path: "./chart"
-    tag: "7.2.1-bb.4"
+    tag: "7.2.1-bb.5"
   helmRepo:
     repoName: "registry1"
     chartName: "grafana"
-    tag: "7.2.1-bb.4"
+    tag: "7.2.1-bb.5"
 
   # -- Flux reconciliation overrides specifically for the Monitoring Package
   flux: {}

docs/understanding-bigbang/configuration/base-config.md

 # bigbang
 
-![Version: 2.19.1](https://img.shields.io/badge/Version-2.19.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square)
+![Version: 2.19.2](https://img.shields.io/badge/Version-2.19.2-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square)
 
 Big Bang is a declarative, continuous delivery tool for core DoD hardened and approved packages into a Kubernetes cluster.
 
@@ -67,10 +67,10 @@ To start using Big Bang, you will need to create your own Big Bang environment t
 | istio.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" |
 | istio.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/istio-controlplane.git"` |  |
 | istio.git.path | string | `"./chart"` |  |
-| istio.git.tag | string | `"1.19.6-bb.0"` |  |
+| istio.git.tag | string | `"1.19.6-bb.1"` |  |
 | istio.helmRepo.repoName | string | `"registry1"` |  |
 | istio.helmRepo.chartName | string | `"istio"` |  |
-| istio.helmRepo.tag | string | `"1.19.6-bb.0"` |  |
+| istio.helmRepo.tag | string | `"1.19.6-bb.1"` |  |
 | istio.enterprise | bool | `false` | Tetrate Istio Distribution - Tetrate provides FIPs verified Istio and Envoy software and support, validated through the FIPs Boring Crypto module. Find out more from Tetrate - https://www.tetrate.io/tetrate-istio-subscription |
 | istio.ingressGateways.public-ingressgateway.type | string | `"LoadBalancer"` |  |
 | istio.ingressGateways.public-ingressgateway.kubernetesResourceSpec | object | `{}` |  |
@@ -211,10 +211,10 @@ To start using Big Bang, you will need to create your own Big Bang environment t
 | fluentbit.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" |
 | fluentbit.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/fluentbit.git"` |  |
 | fluentbit.git.path | string | `"./chart"` |  |
-| fluentbit.git.tag | string | `"0.42.0-bb.0"` |  |
+| fluentbit.git.tag | string | `"0.43.0-bb.0"` |  |
 | fluentbit.helmRepo.repoName | string | `"registry1"` |  |
 | fluentbit.helmRepo.chartName | string | `"fluentbit"` |  |
-| fluentbit.helmRepo.tag | string | `"0.42.0-bb.0"` |  |
+| fluentbit.helmRepo.tag | string | `"0.43.0-bb.0"` |  |
 | fluentbit.flux | object | `{}` | Flux reconciliation overrides specifically for the Fluent-Bit Package |
 | fluentbit.values | object | `{}` | Values to passthrough to the fluentbit chart: https://repo1.dso.mil/big-bang/product/packages/fluentbit.git |
 | fluentbit.postRenderers | list | `[]` | Post Renderers.  See docs/postrenders.md |