UNCLASSIFIED - NO CUI

Skip to content
Snippets Groups Projects
Forked from Big Bang / bigbang
8908 commits behind, 2 commits ahead of the upstream repository.
Code owners
Assign users and groups as approvers for specific file changes. Learn more.
To find the state of this project's repository at the time of any of these versions, check out the tags.

Big Bang Release Notes

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.


[1.1.2]

  • #279: Allowed ArgoCD SSO url configuration to be overrideable by customer values

[1.1.1]

  • !262: Fixed issue with sso not being enabled properly for kibana/elasticsearch
  • !234: Ensure default for kibana/elasticsearch is to use istio injection
  • !263: Added missing non-runtime anchore images to release artifacts for airgap deployments

[1.1.0]

  • &2: Add support for Gitlab (with sso) 13.8.0
  • &3: Add support for Gitlab Runners 13.2.2
  • &7: Add support for SonarQube (with sso) 8.6
  • &15: Add support for Anchore (with sso) 0.8.1
  • #129: Updated FluentBit to 1.6.3
  • #63: Fix bug with elasticsearch failing to start due to invalid file permissions
  • #49: Add consistent labels to authservice deployment
  • #32: Add support for PodAntiAffinity and NodeAffinity for elasticsearch deployments
  • #6: Add support for new elasticsearch cluster node types
  • #16: Fix bug with incorrect git credentials being created when specifying a private repository
  • #66: Fix bug with EnvoyFilter being applied in the wrong non-global namespace
  • #99: Fix bug that allowed for incorrect ImagePullSecrets to be created when providing incomplete credentials

[1.0.8]

  • Added support for deployment of Minio operator and instance deployment of minio.

[1.0.7]

  • Added Kubernetes labels to all objects created by umbrella
  • Add OIDC integration for Grafana
  • Allow creation of wildcard cert for istio ingress to be passed to BigBang chart

[1.0.6]

  • Added HAProxy Addon
  • Added support for automatically populating configs and settings for the following placing SSO in front of apps without support:
istio:
  sso:
    enabled: true
    prometheus:
      client_id:
      client_secret:
    alertmanager:
      client_id:
      client_secret:

monitoring:
  sso:
    enabled: true
    kiali:
      client_id:
      client_secret:
    jaeger:
      client_id:
      client_secret:
  • Added authservice namespace where authservice addon and haproxy deployment will be created.
  • Added global sso options for umbrella which will be applied to all configured authservice chains:
sso:
  oidc:
    host: login.dso.mil
    realm: baby-yoda
  certificate_authority: ''
  jwks: ""
  client_id: ""
  client_secret: ""
  • Updated syntax for authservice chains definition.

[1.0.5]

  • Bumped monitoring chart to consume kiwigrid/sidecar from IronBank

[1.0.4]

  • Bug fix where argocd's VirtualService wouldn't recieve the top level hostname value.

[1.0.3]

  • Added Gitlab
  • Added ability to provide multiple registry credentials while maintaining current capabilities:
registryCredentials:
  username: registry1user
  password: somesecretpassword

or

registryCredentials:
- registry: registry1.dso.mil
  username: registry1user
  password: somesecretpassword
- registry: registry.dsop.io
  username: registry1user
  password: somesecretpassword
- registry: somewhere.else.io
  username: someuser
  password: someothersecret

will correctly create the ImagePullSecrets for all those registries

[1.0.2]

Changed

  • Updated istio-controlplane to 1.7.3-bb.5 to allow for setting ingressgateway to use nodeports

[1.0.1]

Changed

  • Updated Istio Control plane to support Node Ports for ingressGateway
  • Update Istio Control plane to support SSO for Kiali and Jaeger
  • Update Authservice to refact definitions of filter chains
  • Updated documentation

[0.0.4] - 2020-12-16

Changed


[0.0.3] - 2020-12-15

Added

  • Documentation in docs

Changed


[0.0.2] - 2020-12-11

Added

  • Initial release of Big Bang