Create all necessary Flux objects (gitrepo + helmrelease) and other required manifests (namespace, values secret, imagepullsecret, etc) to install NeuVector as a supported core package within Big Bang. Add values as necessary to the BB chart values. Ensure that CI is configured to install NeuVector based on the label neuvector and that all necessary test values are in place for CI. Also ensure necessary doc updates are included (package architecture being the primary requirement).
NeuVector should be a core package, but disabled by default initially (to prevent overlap with Twistlock).
Edited
Designs
Child items
0
Show closed items
No child items are currently assigned. Use child items to break down this issue into smaller parts.
Linked items
0
Link issues together to show that they're related or that one is blocking others.
Learn more.
Related merge requests
1
When this merge request is accepted, this issue will be closed automatically.
@micah.nagel this issue has been inactive for 30 days and is being labelled as stale. If this issue is still required please take action by removing the stale label and commenting with an update, status, or justification. If this issue is not required please close it or label it as delete-me. If no action is taken it will be auto closed in 60 days.
@micah.nagel this issue has been inactive for 30 days and is being labelled as stale. If this issue is still required please take action by removing the stale label and commenting with an update, status, or justification. If this issue is not required please close it or label it as delete-me. If no action is taken this issue will be auto closed in 60 days.
@micah.nagel , I would be very interested in stress testing Neuvector once it is ready to deploy via Big Bang. I am curious to how well it performs in practice compared to PCC.
Absolutely, yep! We will make sure to clearly announce when it's available for deployment via BB.
There's a "manual" process to deploy it that is enumerated here. It's not fully fleshed out and values may vary depending on the environment you deploy in, but if you want to take a first look and test it out it should be ready for "side-loading" as is.