Upgrade Fluent-Bit Chart to 0.15.3 and Elasticsearch Chart to 0.1.7-bb.0

Summary

- Updating Fluent-bit to upstream chart version 0.15.3, image version 1.7.2.
- Updating fluent-bit configuration with production ready settings to greatly increase reliability of log ingestion within stack.
  - Adding [filesystem buffering ](https://docs.fluentbit.io/manual/administration/buffering-and-storage#filesystem-buffering-to-the-rescue)
  - Switching to containerd parser instead of Docker.
  - Excluding fluent-bit, and gatekeeper-audit (captured by opa-collector) container logs by default.
  - Adding separate tags for kube and system INPUT logs.
  - Replace_Dots setting in [Elasticsearch Output](https://docs.fluentbit.io/manual/pipeline/outputs/elasticsearch) to ensure all logs from cluster will be processed successfully.
- Few [istio related changes to ECK package](https://www.elastic.co/guide/en/cloud-on-k8s/current/k8s-service-mesh-istio.html) to assist with fluent-bit communication reliability.


[Fluent-bit MR](https://repo1.dso.mil/platform-one/big-bang/apps/core/fluentbit/-/merge_requests/12)


[elasticsearch-kibana MR](https://repo1.dso.mil/platform-one/big-bang/apps/core/elasticsearch-kibana/-/merge_requests/34)


Closes #336 #335

See merge request platform-one/big-bang/bigbang!386

Sonarqube prereqs

Summary

The newest version of sonarqube has initcontainers disabled by default this documents the needed kernel mods.

Closes https://repo1.dso.mil/platform-one/big-bang/bigbang/-/issues/347

See merge request platform-one/big-bang/bigbang!392

Ensure CHANGELOG.md contains changes located in release notes

Closes #348

See merge request platform-one/big-bang/bigbang!399

Cluster Auditor Affinity

Bump the tag, see https://repo1.dso.mil/platform-one/big-bang/apps/core/cluster-auditor/-/merge_requests/13

See merge request platform-one/big-bang/bigbang!393

Twistlock Affinity

See https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/twistlock/-/merge_requests/17

Standardized affinity for Twistlock

See merge request platform-one/big-bang/bigbang!390

testing

See merge request platform-one/big-bang/bigbang!397

Label Definitions

See merge request platform-one/big-bang/bigbang!344

Resolve "Document Mattermost package Architecture in charter"

Closes #303

See merge request platform-one/big-bang/bigbang!391

Docs - Developer: Secret Values, Package Pipelines

See merge request platform-one/big-bang/bigbang!373

Mattermost (and operator) - Add Affinity

See merge request platform-one/big-bang/bigbang!377

Resolve "`eckoperator.enabled` does nothing"

Closes #334

See merge request platform-one/big-bang/bigbang!380

Add twistlock affinity tag bump

See merge request platform-one/big-bang/bigbang!379

Update Packages.md

See merge request platform-one/big-bang/bigbang!384

backport 1.4.0

See merge request platform-one/big-bang/bigbang!382

Resolve "flux fails to find tags in airgap"

Fixes the airgap issue with flux failing to find tags.

Closes https://repo1.dso.mil/platform-one/big-bang/bigbang/-/issues/332

See merge request platform-one/big-bang/bigbang!378

Resolve "monitoring fails to deploy when selinux is enforcing"

See merge request platform-one/big-bang/bigbang!376

Feature/integrate google auth with grafana

Closes #325

See merge request platform-one/big-bang/bigbang!368

Andrew Blanchard authored 3 years ago and runyontr committed 3 years ago

Added new global var template strings for sso/{auth_url, token_url}. Updated monitoring/grafana to reference the new global values as a default pointing to keycloak. Added a new folder to the .gitignore for scratch manifests and testing.

Enable dev sso for logging

See merge request platform-one/big-bang/bigbang!370

rRmoved accidental change in dev-sso-values.yaml'. Added a default value for 'client_secret' ('no-secret') to the template values file.

Adjusted logging.sso values in 'dev-sso-values.yaml': set enabled=true, fixed indentatation on license block, added client_secret field with appropriate default.

feat(monitoring): added flux to prometheus/grafana

See merge request platform-one/big-bang/bigbang!356

Fix for Sonarqube initContainer bug

Summary

Sonarqube tag bump.
This fixes an issue in initContainers when using external postgres.

See merge request platform-one/big-bang/bigbang!364