diff --git a/CHANGELOG.md b/CHANGELOG.md index b609717564c66a7460e4d1aed50c9e60a54b0169..aa8afa318686513568623ad7c12bdc2bcd7a6d9d 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -3,6 +3,10 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). --- +## [1.32.0] + +- [!1.32.0](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests?scope=all&utf8=%E2%9C%93&state=merged&milestone_title=1.32.0); List of merge requests in this release. + ## [1.31.0] - [!1.31.0](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests?scope=all&utf8=%E2%9C%93&state=merged&milestone_title=1.31.0); List of merge requests in this release diff --git a/Packages.md b/Packages.md index ae83d5eaf73b460023247cdccfc1a25d47643446..9519ef2833138e8302e501e7d966aeca8e83859d 100644 --- a/Packages.md +++ b/Packages.md @@ -19,15 +19,15 @@ Columns: | [Kiali](https://repo1.dso.mil/platform-one/big-bang/apps/core/kiali) |  | No | Yes | Yes | [Yes](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/589) | [Yes (STRICT)](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/1296) | No | | [Monitoring](https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring) |  | No | No | No | [Yes](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/509) | Yes (PERMISSIVE) | No | | [ECK Operator](https://repo1.dso.mil/platform-one/big-bang/apps/core/eck-operator) |  | No | No | No | [Yes](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/510) | [Yes (STRICT)](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/1236) | No | -| [Elasticsearch Kibana](https://repo1.dso.mil/platform-one/big-bang/apps/core/elasticsearch-kibana) | | No | No | No | [Yes](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/527) | Yes (PERMISSIVE) | No | -| [Fluentbit](https://repo1.dso.mil/platform-one/big-bang/apps/core/fluentbit) |  | No | No | No | [Yes](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/555/) | Yes (PERMISSIVE) | No | +| [Elasticsearch Kibana](https://repo1.dso.mil/platform-one/big-bang/apps/core/elasticsearch-kibana) | | No | No | No | [Yes](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/527) | [Yes (STRICT)](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/1537) | No | +| [Fluentbit](https://repo1.dso.mil/platform-one/big-bang/apps/core/fluentbit) |  | No | No | No | [Yes](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/555/) | [Yes (STRICT)](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/1537) | No | | [OPA Gatekeeper](https://repo1.dso.mil/platform-one/big-bang/apps/core/policy) |  | No | No | No | [Yes](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/626) | No | No | -| [Argocd](https://repo1.dso.mil/platform-one/big-bang/apps/core/argocd) | | No | No | No | [Yes](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/572) | Yes (PERMISSIVE) | No | -| [Cluster Auditor](https://repo1.dso.mil/platform-one/big-bang/apps/core/cluster-auditor) |  | No | No | No | [Yes](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/565) | Yes (PERMISSIVE) | No | +| [Argocd](https://repo1.dso.mil/platform-one/big-bang/apps/core/argocd) | | No | No | No | [Yes](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/572) | [Yes (STRICT)](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/1368) | No | +| [Cluster Auditor](https://repo1.dso.mil/platform-one/big-bang/apps/core/cluster-auditor) |  | No | No | No | [Yes](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/565) | [Yes (STRICT)](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/1370) | No | | [Kyverno](https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/kyverno) |  | No | No | No | Yes | No | No | | [Kyverno Policies](https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/kyverno-policies) |  | No | No | No | Yes | No | No | -| [Promtail](https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/promtail)  |  | No | No | No | Yes | Yes (PERMISSIVE) | No | -| [Loki](https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/loki)  |  | No | No | No | Yes | Yes (PERMISSIVE) | No | +| [Promtail](https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/promtail)  |  | No | No | No | Yes | [Yes (STRICT)](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/1516) | No | +| [Loki](https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/loki)  |  | No | No | No | Yes | [Yes (STRICT)](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/1516) | No | | [Tempo](https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/tempo)  |  | No | Yes | Yes | No | Yes (PERMISSIVE) | No | ## Security @@ -36,7 +36,7 @@ Columns: | [Keycloak](https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/keycloak) |  | No | No | No | [Yes](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/536) | No | No | | [Twistlock](https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/twistlock) |  | No | No | No | [Yes](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/498) | [Yes (STRICT)](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/1396) | No | | [Anchore Enterprise](https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/anchore-enterprise) |  | No | No | No | [Yes](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/505) | Yes (PERMISSIVE) | No | -| [Authservice](https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/authservice) |  | No | Yes | Yes | [Yes](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/511) | [Yes (STRICT)](https://repo1.dso.mil/platform-one/big-bang/apps/core/authservice/-/merge_requests/66) | No | +| [Authservice](https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/authservice) |  | No | Yes | Yes | [Yes](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/511) | [Yes (STRICT)](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/1329) | No | | [Vault](https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/vault)  |  | No | No | No | Yes | Yes (PERMISSIVE) | No | @@ -56,7 +56,7 @@ Columns: | Package | Status | Logging | Telemetry | Tracing | Network Policies | mTLS | Behavior Detection | | ---- | --- | ---|---|---|---|---|---| | [Mattermost](https://repo1.dso.mil/platform-one/big-bang/apps/collaboration-tools/mattermost) |  | No | No | No | [Yes](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/515) | [No](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/issues/623) | No | -| [Mattermost Operator](https://repo1.dso.mil/platform-one/big-bang/apps/collaboration-tools/mattermost-operator) |  | No | No | No | [Yes](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/499) | Yes (PERMISSIVE) | No | +| [Mattermost Operator](https://repo1.dso.mil/platform-one/big-bang/apps/collaboration-tools/mattermost-operator) |  | No | No | No | [Yes](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/499) | [Yes (STRICT)](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/1531) | No | ## Application Utilities diff --git a/README.md b/README.md index 0a689a40ac17317cb5453579456a82682b2f4a5e..48bb8824fc6a64fa434069c1944c15916a21150b 100644 --- a/README.md +++ b/README.md @@ -1,6 +1,6 @@ # bigbang -  +  Big Bang is a declarative, continuous delivery tool for core DoD hardened and approved packages into a Kubernetes cluster. @@ -91,7 +91,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t | jaeger.enabled | bool | `true` | Toggle deployment of Jaeger. | | jaeger.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/jaeger.git"` | | | jaeger.git.path | string | `"./chart"` | | -| jaeger.git.tag | string | `"2.29.0-bb.0"` | | +| jaeger.git.tag | string | `"2.29.0-bb.1"` | | | jaeger.flux | object | `{"install":{"crds":"CreateReplace"},"upgrade":{"crds":"CreateReplace"}}` | Flux reconciliation overrides specifically for the Jaeger Package | | jaeger.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". | | jaeger.sso.enabled | bool | `false` | Toggle SSO for Jaeger on and off | @@ -102,7 +102,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t | kiali.enabled | bool | `true` | Toggle deployment of Kiali. | | kiali.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/kiali.git"` | | | kiali.git.path | string | `"./chart"` | | -| kiali.git.tag | string | `"1.47.0-bb.4"` | | +| kiali.git.tag | string | `"1.47.0-bb.5"` | | | kiali.flux | object | `{}` | Flux reconciliation overrides specifically for the Kiali Package | | kiali.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". | | kiali.sso.enabled | bool | `false` | Toggle SSO for Kiali on and off | @@ -141,7 +141,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t | logging.enabled | bool | `true` | Toggle deployment of Logging (EFK). | | logging.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/elasticsearch-kibana.git"` | | | logging.git.path | string | `"./chart"` | | -| logging.git.tag | string | `"0.7.0-bb.1"` | | +| logging.git.tag | string | `"0.7.0-bb.2"` | | | logging.flux | object | `{"timeout":"20m"}` | Flux reconciliation overrides specifically for the Logging (EFK) Package | | logging.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". | | logging.sso.enabled | bool | `false` | Toggle OIDC SSO for Kibana/Elasticsearch on and off. Enabling this option will auto-create any required secrets. | @@ -154,17 +154,17 @@ To start using Big Bang, you will need to create your own Big Bang environment t | eckoperator.enabled | bool | `true` | Toggle deployment of ECK Operator. | | eckoperator.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/eck-operator.git"` | | | eckoperator.git.path | string | `"./chart"` | | -| eckoperator.git.tag | string | `"2.0.0-bb.1"` | | +| eckoperator.git.tag | string | `"2.0.0-bb.2"` | | | eckoperator.flux | object | `{}` | Flux reconciliation overrides specifically for the ECK Operator Package | | eckoperator.values | object | `{}` | Values to passthrough to the eck-operator chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/eck-operator.git | | fluentbit.enabled | bool | `true` | Toggle deployment of Fluent-Bit. | | fluentbit.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/fluentbit.git"` | | | fluentbit.git.path | string | `"./chart"` | | -| fluentbit.git.tag | string | `"0.19.20-bb.2"` | | +| fluentbit.git.tag | string | `"0.19.20-bb.3"` | | | fluentbit.flux | object | `{}` | Flux reconciliation overrides specifically for the Fluent-Bit Package | | fluentbit.values | object | `{}` | Values to passthrough to the fluentbit chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/fluentbit.git | | fluentbit.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | -| promtail | object | `{"enabled":false,"flux":{},"git":{"path":"./chart","repo":"https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/promtail.git","tag":"3.11.0-bb.0"},"postRenderers":[],"values":{}}` | BETA support of promtail/loki logging stack | +| promtail | object | `{"enabled":false,"flux":{},"git":{"path":"./chart","repo":"https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/promtail.git","tag":"3.11.0-bb.1"},"postRenderers":[],"values":{}}` | BETA support of promtail/loki logging stack | | promtail.enabled | bool | `false` | Toggle deployment of Promtail. | | promtail.flux | object | `{}` | Flux reconciliation overrides specifically for the Promtail Package | | promtail.values | object | `{}` | Values to passthrough to the promtail chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/fluentbit.git | @@ -172,10 +172,16 @@ To start using Big Bang, you will need to create your own Big Bang environment t | loki.enabled | bool | `false` | Toggle deployment of Loki. | | loki.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/loki.git"` | | | loki.git.path | string | `"./chart"` | | -| loki.git.tag | string | `"2.10.1-bb.4"` | | +| loki.git.tag | string | `"3.0.1-bb.1"` | | | loki.flux | object | `{}` | Flux reconciliation overrides specifically for the Loki Package | | loki.values | object | `{}` | Values to passthrough to the Loki chart: https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/loki.git | | loki.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | +| loki.strategy | string | `"monolith"` | Loki architecture. Options are monolith and scalable | +| loki.objectStorage.endpoint | string | `""` | S3 compatible endpoint to use for connection information. examples: "https://s3.amazonaws.com" "https://s3.us-gov-west-1.amazonaws.com" "http://minio.minio.svc.cluster.local:9000" | +| loki.objectStorage.region | string | `""` | S3 compatible region to use for connection information. | +| loki.objectStorage.accessKey | string | `""` | Access key for connecting to object storage endpoint. | +| loki.objectStorage.accessSecret | string | `""` | Secret key for connecting to object storage endpoint. Unencoded string data. This should be placed in the secret values and then encrypted | +| loki.objectStorage.bucketNames | string | `""` | Bucket Names for Loki as a comma delimited list. examples: "loki-logs" | | tempo.enabled | bool | `false` | Toggle deployment of Tempo. | | tempo.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/tempo.git"` | | | tempo.git.path | string | `"./chart"` | | @@ -228,7 +234,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t | addons.authservice.enabled | bool | `false` | Toggle deployment of Authservice. if enabling authservice, a filter needs to be provided by either enabling sso for monitoring or istio, or manually adding a filter chain in the values here: values: chain: minimal: callback_uri: "https://somecallback" | | addons.authservice.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/authservice.git"` | | | addons.authservice.git.path | string | `"./chart"` | | -| addons.authservice.git.tag | string | `"0.4.0-bb.26"` | | +| addons.authservice.git.tag | string | `"0.5.1-bb.0"` | | | addons.authservice.flux | object | `{}` | Flux reconciliation overrides specifically for the Authservice Package | | addons.authservice.values | object | `{}` | Values to passthrough to the authservice chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/authservice.git | | addons.authservice.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | @@ -243,7 +249,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t | addons.minio.enabled | bool | `false` | Toggle deployment of minio. | | addons.minio.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/application-utilities/minio.git"` | | | addons.minio.git.path | string | `"./chart"` | | -| addons.minio.git.tag | string | `"4.4.12-bb.1"` | | +| addons.minio.git.tag | string | `"4.4.12-bb.2"` | | | addons.minio.flux | object | `{}` | Flux reconciliation overrides specifically for the Minio Package | | addons.minio.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". | | addons.minio.accesskey | string | `""` | Default access key to use for minio. | @@ -284,14 +290,14 @@ To start using Big Bang, you will need to create your own Big Bang environment t | addons.gitlabRunner.enabled | bool | `false` | Toggle deployment of Gitlab Runner | | addons.gitlabRunner.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/gitlab-runner.git"` | | | addons.gitlabRunner.git.path | string | `"./chart"` | | -| addons.gitlabRunner.git.tag | string | `"0.38.1-bb.1"` | | +| addons.gitlabRunner.git.tag | string | `"0.39.0-bb.0"` | | | addons.gitlabRunner.flux | object | `{}` | Flux reconciliation overrides specifically for the Gitlab Runner Package | | addons.gitlabRunner.values | object | `{}` | Values to passthrough to the gitlab runner chart: https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/gitlab-runner.git | | addons.gitlabRunner.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | | addons.nexus.enabled | bool | `false` | Toggle deployment of Nexus. | | addons.nexus.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/nexus.git"` | | | addons.nexus.git.path | string | `"./chart"` | | -| addons.nexus.git.tag | string | `"37.3.0-bb.2"` | | +| addons.nexus.git.tag | string | `"38.0.0-bb.0"` | | | addons.nexus.license_key | string | `""` | Base64 encoded license file. | | addons.nexus.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". | | addons.nexus.sso.enabled | bool | `false` | Toggle SAML SSO for NXRM. -- handles SAML SSO, a Client must be configured in Keycloak or IdP -- to complete setup. -- https://support.sonatype.com/hc/en-us/articles/1500000976522-SAML-integration-for-Nexus-Repository-Manager-Pro-3-and-Nexus-IQ-Server-with-Keycloak#h_01EV7CWCYH3YKAPMAHG8XMQ599 | @@ -309,7 +315,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t | addons.sonarqube.enabled | bool | `false` | Toggle deployment of SonarQube. | | addons.sonarqube.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/sonarqube.git"` | | | addons.sonarqube.git.path | string | `"./chart"` | | -| addons.sonarqube.git.tag | string | `"9.6.3-bb.23"` | | +| addons.sonarqube.git.tag | string | `"9.6.3-bb.24"` | | | addons.sonarqube.flux | object | `{}` | Flux reconciliation overrides specifically for the Sonarqube Package | | addons.sonarqube.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". | | addons.sonarqube.sso.enabled | bool | `false` | Toggle SAML SSO for SonarQube. Enabling this option will auto-create any required secrets. | @@ -327,7 +333,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t | addons.sonarqube.database.password | string | `""` | Database password for the username used to connect to the existing database. | | addons.sonarqube.values | object | `{}` | Values to passthrough to the sonarqube chart: https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/sonarqube.git | | addons.sonarqube.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | -| addons.haproxy | object | `{"flux":{},"git":{"path":"./chart","repo":"https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/haproxy","tag":"1.1.2-bb.3"},"ingress":{"gateway":""},"postRenderers":[],"values":{}}` | Deployment of HAProxy is automatically toggled depending on Monitoring SSO and Monitoring Istio Injection | +| addons.haproxy | object | `{"flux":{},"git":{"path":"./chart","repo":"https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/haproxy","tag":"1.12.0-bb.0"},"ingress":{"gateway":""},"postRenderers":[],"values":{}}` | Deployment of HAProxy is automatically toggled depending on Monitoring SSO and Monitoring Istio Injection | | addons.haproxy.flux | object | `{}` | Flux reconciliation overrides specifically for the HAProxy Package | | addons.haproxy.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". | | addons.haproxy.values | object | `{}` | Values to passthrough to the haproxy chart: https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/haproxy.git | @@ -335,7 +341,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t | addons.anchore.enabled | bool | `false` | Toggle deployment of Anchore. | | addons.anchore.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/anchore-enterprise.git"` | | | addons.anchore.git.path | string | `"./chart"` | | -| addons.anchore.git.tag | string | `"1.17.1-bb.2"` | | +| addons.anchore.git.tag | string | `"1.18.0-bb.2"` | | | addons.anchore.flux | object | `{"upgrade":{"disableWait":true}}` | Flux reconciliation overrides specifically for the Anchore Package | | addons.anchore.adminPassword | string | `""` | Initial admin password used to authenticate to Anchore. | | addons.anchore.enterprise | object | `{"enabled":false,"licenseYaml":"FULL LICENSE\n"}` | Anchore Enterprise functionality. | @@ -360,7 +366,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t | addons.mattermostoperator.enabled | bool | `false` | | | addons.mattermostoperator.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/collaboration-tools/mattermost-operator.git"` | | | addons.mattermostoperator.git.path | string | `"./chart"` | | -| addons.mattermostoperator.git.tag | string | `"1.17.0-bb.2"` | | +| addons.mattermostoperator.git.tag | string | `"1.17.0-bb.3"` | | | addons.mattermostoperator.flux | object | `{}` | Flux reconciliation overrides specifically for the Mattermost Operator Package | | addons.mattermostoperator.values | object | `{}` | Values to passthrough to the mattermost operator chart: https://repo1.dso.mil/platform-one/big-bang/apps/collaboration-tools/mattermost-operator/-/blob/main/chart/values.yaml | | addons.mattermostoperator.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | @@ -404,7 +410,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t | addons.keycloak.enabled | bool | `false` | Toggle deployment of Keycloak. if you enable Keycloak you should uncomment the istio passthrough configurations above istio.ingressGateways.passthrough-ingressgateway and istio.gateways.passthrough | | addons.keycloak.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/keycloak.git"` | | | addons.keycloak.git.path | string | `"./chart"` | | -| addons.keycloak.git.tag | string | `"17.0.1-bb.2"` | | +| addons.keycloak.git.tag | string | `"18.0.0-bb.1"` | | | addons.keycloak.database.host | string | `""` | Hostname of a pre-existing database to use for Keycloak. Entering connection info will disable the deployment of an internal database and will auto-create any required secrets. | | addons.keycloak.database.type | string | `"postgres"` | Pre-existing database type (e.g. postgres) to use for Keycloak. | | addons.keycloak.database.port | int | `5432` | Port of a pre-existing database to use for Keycloak. | @@ -418,9 +424,10 @@ To start using Big Bang, you will need to create your own Big Bang environment t | addons.vault.enabled | bool | `false` | Toggle deployment of Vault. | | addons.vault.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/vault.git"` | | | addons.vault.git.path | string | `"./chart"` | | -| addons.vault.git.tag | string | `"0.19.0-bb.6"` | | +| addons.vault.git.tag | string | `"0.19.0-bb.7"` | | | addons.vault.flux | object | `{}` | Flux reconciliation overrides specifically for the Vault Package | -| addons.vault.ingress | object | `{"gateway":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". | +| addons.vault.ingress | object | `{"cert":"","gateway":"","key":""}` | Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". | +| addons.vault.ingress.key | string | `""` | Certificate/Key pair to use as the certificate for exposing Vault Setting the ingress cert here will automatically create the volume and volumemounts in the Vault package chart | | addons.vault.values | object | `{}` | Values to passthrough to the vault chart: https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/vault.git | | addons.vault.postRenderers | list | `[]` | Post Renderers. See docs/postrenders.md | diff --git a/base/gitrepository.yaml b/base/gitrepository.yaml index 90eb9c2677d6b6a9767bd78285a08b2877cf8786..f32802afd4bf64f74c05944f635273cafec7e112 100644 --- a/base/gitrepository.yaml +++ b/base/gitrepository.yaml @@ -11,4 +11,4 @@ spec: interval: 10m url: https://repo1.dso.mil/platform-one/big-bang/bigbang.git ref: - tag: 1.31.0 + tag: 1.32.0 diff --git a/chart/Chart.yaml b/chart/Chart.yaml index 3d7bd3f2251947a20532cead6f2706f3c4fb1de5..ef5232f9329c2d501d984f1bc621a0713ae12f2f 100644 --- a/chart/Chart.yaml +++ b/chart/Chart.yaml @@ -1,6 +1,6 @@ apiVersion: v2 name: bigbang -version: 1.31.0 +version: 1.32.0 description: Big Bang is a declarative, continuous delivery tool for core DoD hardened and approved packages into a Kubernetes cluster. type: application