Doc/readme template

See merge request platform-one/big-bang/bigbang!420

docs: Adding Architecture Doc for ek package

Summary

Adding charter Package Architecture Documentation for elasticsearch-kibana package.

Closes #309

See merge request platform-one/big-bang/bigbang!408

Dev SSO values with monitoring disabled

Closes #350.

Updated the HAProxy config with conditional checks to prevent adding rules for `prometheus` and `alert_manager` if they are not enabled.

See merge request platform-one/big-bang/bigbang!404

Andrew Blanchard authored 3 years ago and joshwolf committed 3 years ago

#350 Updated the HAProxy config to only configure rules for alert manager and prometheus if they are enabled.

update anchore to 1.12.7-bb.2

- Add secrets and jobs for automated external Postgres database creation and user creation (PB request)
- Update virtual services to allow for customizable gateways and hosts (PB request)
- Update docs
- add Affinity.md
- add Architecture.md at the BB level

See merge request platform-one/big-bang/bigbang!385

Upgrade OPA Gatekeeper

Summary
- Update OPA Gatekeeper tag to latest 3.3.0-bb.0
- Modified the new way opa-gatekeeper chart handles image pullSecrets.

This is for Epic: https://repo1.dso.mil/groups/platform-one/big-bang/-/epics/63

Closes: https://repo1.dso.mil/platform-one/big-bang/bigbang/-/issues/342

See merge request platform-one/big-bang/bigbang!405

Doc standards gatekeeper

Summary

Add package docs to charter for opa-gatekeeper.
Closes https://repo1.dso.mil/platform-one/big-bang/bigbang/-/issues/306

See merge request platform-one/big-bang/bigbang!410

Branden Cobb authored 3 years ago and joshwolf committed 3 years ago

Deleted charter/packages/opa-gatekeeper/.gitkeep

Moved over resources from /big-bang/terraform-modules/air-gap-deployment

Closes #317

See merge request platform-one/big-bang/bigbang!363

Update CODEOWNERS

See merge request platform-one/big-bang/bigbang!398

Merge branch '317-airgap-documentation' of https://repo1.dso.mil/platform-one/big-bang/bigbang into 317-airgap-documentation

Doc standards Sonarqube

See merge request platform-one/big-bang/bigbang!401

Release 1.5.X

See merge request platform-one/big-bang/bigbang!396

ci: updating fluent-bit test values for CI

See merge request platform-one/big-bang/bigbang!402

Assigning pods to nodes

See merge request platform-one/big-bang/bigbang!388

Mattermost - ENV changes

See merge request platform-one/big-bang/bigbang!400

Add optional terraform secret

This adds a single optional valuesFrom secret to enable deployment via the [Big Bang Terraform Launcher](https://repo1.dso.mil/platform-one/big-bang/terraform-modules/big-bang-terraform-launcher).

A working demo can be found here:  https://repo1.dso.mil/platform-one/quick-start/big-bang


/cc @runyontr @joshwolf


Add Big Bang Terraform Module secret injection

See merge request platform-one/big-bang/bigbang!383

Update flux images

Summary

Flux images were out of date from Ironbank

Relevant logs/screenshots

See merge request platform-one/big-bang/bigbang!387

Upgrade Fluent-Bit Chart to 0.15.3 and Elasticsearch Chart to 0.1.7-bb.0

Summary

- Updating Fluent-bit to upstream chart version 0.15.3, image version 1.7.2.
- Updating fluent-bit configuration with production ready settings to greatly increase reliability of log ingestion within stack.
  - Adding [filesystem buffering ](https://docs.fluentbit.io/manual/administration/buffering-and-storage#filesystem-buffering-to-the-rescue)
  - Switching to containerd parser instead of Docker.
  - Excluding fluent-bit, and gatekeeper-audit (captured by opa-collector) container logs by default.
  - Adding separate tags for kube and system INPUT logs.
  - Replace_Dots setting in [Elasticsearch Output](https://docs.fluentbit.io/manual/pipeline/outputs/elasticsearch) to ensure all logs from cluster will be processed successfully.
- Few [istio related changes to ECK package](https://www.elastic.co/guide/en/cloud-on-k8s/current/k8s-service-mesh-istio.html) to assist with fluent-bit communication reliability.


[Fluent-bit MR](https://repo1.dso.mil/platform-one/big-bang/apps/core/fluentbit/-/merge_requests/12)


[elasticsearch-kibana MR](https://repo1.dso.mil/platform-one/big-bang/apps/core/elasticsearch-kibana/-/merge_requests/34)


Closes #336 #335

See merge request platform-one/big-bang/bigbang!386

Sonarqube prereqs

Summary

The newest version of sonarqube has initcontainers disabled by default this documents the needed kernel mods.

Closes https://repo1.dso.mil/platform-one/big-bang/bigbang/-/issues/347

See merge request platform-one/big-bang/bigbang!392