CHANGELOG.md

@@ -3,6 +3,11 @@
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ---
+## [2.19.2]
+
+- [!3780](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/3780); istio update pod security context
+- [!3759](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/3759); fluentbit update to 2.2.2
+
 ## [2.19.1]
 
 - [!3746](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/3746); Gitlab update to 16.8.1

base/gitrepository.yaml

@@ -11,4 +11,4 @@ spec:
   interval: 10m
   url: https://repo1.dso.mil/big-bang/bigbang.git
   ref:
-    tag: 2.19.1
+    tag: 2.19.2

chart/Chart.yaml

 apiVersion: v2
 name: bigbang
-version: 2.19.1
+version: 2.19.2
 description: Big Bang is a declarative, continuous delivery tool for core DoD hardened and approved packages into a Kubernetes cluster.
 
 type: application

chart/templates/kyverno-policies/values.yaml

@@ -862,23 +862,17 @@ policies:
           - vault-vault-agent-injector-*
           - vault-vault-job-init-*
       - namespace: promtail 
-        serviceAccounts:
-        - promtail-promtail
         pods:
           allow:
           - promtail-promtail-*
       - namespace: fluentbit
-        serviceAccounts:
-        - fluentbit-fluent-bit
         pods:
           allow:
           - fluentbit-fluent-bit-*
       - namespace: eck-operator
-        serviceAccounts:
-        - elastic-operator
         pods:
           allow:
-          - elastic-operator-?
+          - elastic-operator-*
       - namespace: nexus-repository-manager
         pods:
           allow:
@@ -911,8 +905,9 @@ policies:
           allow:
           - mattermost-operator-*
       - namespace: keycloak
-        serviceAccounts:
-        - keycloak
+        pods:
+          allow:
+          - keycloak-*
       - namespace: gitlab
         pods:
           allow:

chart/values.yaml

@@ -516,11 +516,11 @@ kyvernoPolicies:
   git:
     repo: https://repo1.dso.mil/big-bang/product/packages/kyverno-policies.git
     path: ./chart
-    tag: "3.0.4-bb.23"
+    tag: "3.0.4-bb.24"
   helmRepo:
     repoName: "registry1"
     chartName: "kyverno-policies"
-    tag: "3.0.4-bb.23"
+    tag: "3.0.4-bb.24"
 
   # -- Flux reconciliation overrides specifically for the Kyverno Package
   flux: {}
@@ -541,11 +541,11 @@ kyvernoReporter:
   git:
     repo: https://repo1.dso.mil/big-bang/product/packages/kyverno-reporter.git
     path: ./chart
-    tag: "2.21.6-bb.1"
+    tag: "2.21.6-bb.2"
   helmRepo:
     repoName: "registry1"
     chartName: "kyverno-reporter"
-    tag: "2.21.6-bb.1"
+    tag: "2.21.6-bb.2"
 
   # -- Flux reconciliation overrides specifically for the Kyverno Reporter Package
   flux: {}
@@ -644,11 +644,11 @@ fluentbit:
   git:
     repo: https://repo1.dso.mil/big-bang/product/packages/fluentbit.git
     path: "./chart"
-    tag: "0.42.0-bb.0"
+    tag: "0.43.0-bb.1"
   helmRepo:
     repoName: "registry1"
     chartName: "fluentbit"
-    tag: "0.42.0-bb.0"
+    tag: "0.43.0-bb.1"
 
   # -- Flux reconciliation overrides specifically for the Fluent-Bit Package
   flux: {}
@@ -870,11 +870,11 @@ monitoring:
   git:
     repo: https://repo1.dso.mil/big-bang/product/packages/monitoring.git
     path: "./chart"
-    tag: "56.2.1-bb.0"
+    tag: "56.2.1-bb.1"
   helmRepo:
     repoName: "registry1"
     chartName: "monitoring"
-    tag: "56.2.1-bb.0"
+    tag: "56.2.1-bb.1"
 
   # -- Flux reconciliation overrides specifically for the Monitoring Package
   flux:
@@ -925,11 +925,11 @@ grafana:
   git:
     repo: https://repo1.dso.mil/big-bang/product/packages/grafana.git
     path: "./chart"
-    tag: "7.2.1-bb.4"
+    tag: "7.2.1-bb.5"
   helmRepo:
     repoName: "registry1"
     chartName: "grafana"
-    tag: "7.2.1-bb.4"
+    tag: "7.2.1-bb.5"
 
   # -- Flux reconciliation overrides specifically for the Monitoring Package
   flux: {}
@@ -1180,11 +1180,11 @@ addons:
     git:
       repo: https://repo1.dso.mil/big-bang/product/packages/gitlab.git
       path: "./chart"
-      tag: "7.8.1-bb.0"
+      tag: "7.8.1-bb.2"
     helmRepo:
       repoName: "registry1"
       chartName: "gitlab"
-      tag: "7.8.1-bb.0"
+      tag: "7.8.1-bb.2"
 
     # -- Flux reconciliation overrides specifically for the Gitlab Package
     flux: {}
@@ -1927,12 +1927,12 @@ addons:
 
     git:
       repo: https://repo1.dso.mil/big-bang/product/packages/thanos.git
-      tag: "12.23.0-bb.0"
+      tag: "12.23.0-bb.2"
       path: "./chart"
     helmRepo:
       repoName: "registry1"
       chartName: "thanos"
-      tag: "12.23.0-bb.0"
+      tag: "12.23.0-bb.2"
 
     # -- Flux reconciliation overrides specifically for the Jaeger Package
     flux: {}

docs/understanding-bigbang/configuration/base-config.md

 # bigbang
 
-![Version: 2.19.1](https://img.shields.io/badge/Version-2.19.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square)
+![Version: 2.19.2](https://img.shields.io/badge/Version-2.19.2-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square)
 
 Big Bang is a declarative, continuous delivery tool for core DoD hardened and approved packages into a Kubernetes cluster.
 
@@ -67,10 +67,10 @@ To start using Big Bang, you will need to create your own Big Bang environment t
 | istio.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" |
 | istio.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/istio-controlplane.git"` |  |
 | istio.git.path | string | `"./chart"` |  |
-| istio.git.tag | string | `"1.19.6-bb.0"` |  |
+| istio.git.tag | string | `"1.19.6-bb.1"` |  |
 | istio.helmRepo.repoName | string | `"registry1"` |  |
 | istio.helmRepo.chartName | string | `"istio"` |  |
-| istio.helmRepo.tag | string | `"1.19.6-bb.0"` |  |
+| istio.helmRepo.tag | string | `"1.19.6-bb.1"` |  |
 | istio.enterprise | bool | `false` | Tetrate Istio Distribution - Tetrate provides FIPs verified Istio and Envoy software and support, validated through the FIPs Boring Crypto module. Find out more from Tetrate - https://www.tetrate.io/tetrate-istio-subscription |
 | istio.ingressGateways.public-ingressgateway.type | string | `"LoadBalancer"` |  |
 | istio.ingressGateways.public-ingressgateway.kubernetesResourceSpec | object | `{}` |  |
@@ -211,10 +211,10 @@ To start using Big Bang, you will need to create your own Big Bang environment t
 | fluentbit.sourceType | string | `"git"` | Choose source type of "git" or "helmRepo" |
 | fluentbit.git.repo | string | `"https://repo1.dso.mil/big-bang/product/packages/fluentbit.git"` |  |
 | fluentbit.git.path | string | `"./chart"` |  |
-| fluentbit.git.tag | string | `"0.42.0-bb.0"` |  |
+| fluentbit.git.tag | string | `"0.43.0-bb.0"` |  |
 | fluentbit.helmRepo.repoName | string | `"registry1"` |  |
 | fluentbit.helmRepo.chartName | string | `"fluentbit"` |  |
-| fluentbit.helmRepo.tag | string | `"0.42.0-bb.0"` |  |
+| fluentbit.helmRepo.tag | string | `"0.43.0-bb.0"` |  |
 | fluentbit.flux | object | `{}` | Flux reconciliation overrides specifically for the Fluent-Bit Package |
 | fluentbit.values | object | `{}` | Values to passthrough to the fluentbit chart: https://repo1.dso.mil/big-bang/product/packages/fluentbit.git |
 | fluentbit.postRenderers | list | `[]` | Post Renderers.  See docs/postrenders.md |

tests/test-values.yaml

@@ -1253,7 +1253,7 @@ addons:
         cypress:
           artifacts: true
           envs:
-            cypress_baseUrl: https://gitlab.bigbang.dev
+            cypress_url: https://gitlab.bigbang.dev
         scripts:
           envs:
             GITLAB_REPOSITORY: https://gitlab.bigbang.dev
@@ -1286,7 +1286,7 @@ addons:
         cypress:
           artifacts: true
           envs:
-            cypress_baseUrl: "https://gitlab.bigbang.dev"
+            cypress_url: "https://gitlab.bigbang.dev"
             cypress_gitlab_first_name: "testrunner"
             cypress_gitlab_last_name: "userrunner"
             cypress_gitlab_email: "gitlab@bigbang.dev"