CHANGELOG.md

@@ -3,43 +3,16 @@
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ---
-## [1.15.0]
-
-* [!1.15.0](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests?scope=all&utf8=%E2%9C%93&state=merged&milestone_title=1.15.0); List of merge requests in this release.
-
-### Upgrade Notices
-
-#### **MINIO INSTANCE CRITICAL UPGRADE INFORMATION - PLEASE READ BEFORE UPGRADING**
-
-**If you have enabled the Minio Cluster Instance in the 'minio' namespace, this upgrade requires a backup and restore
-of your Minio instance buckets.   Failure to do so will result in data lose during the upgrade.**
-
-By default, the update of the Minio Instance helm chart to V4.1.2 will keep the 2.0.9 instances in place and operational.
-This allow a backup to be performed on the operational Minio Instances.   After the back is complete, an upgrade to the V4.1.2
-instance is required.   This is accomplished by setting the upgrade key/value [in the values file] (show below) to TRUE.
-
-```
-# When true, upgradeTenants enables use of the V4.* Minio Operator CRD for creation of tenants is enabled.
-upgradeTenants:
-  enabled: false
-
-```
-
-After execution of the helm chart with this value set to true, the new V4 instances will be running and you can restore the
-backup data to the new instances.
-
-**NOTE: If you have not enabled the deployment of a Minio Instance before the V4.1.2 release, you must set the above
-mentioned upgradeTenants/enabled value to TRUE or the helm deployment will fail**
+## [1.15.1]
 
-One of the easiest ways to backup your Minio instance is to the the Minio MC command line tool  on a different system.
-The MC command line tool can be found here:  https://github.com/minio/mc or you can use the Iron Bank approved container
-located at registry1.dso.mil/ironbank/opensource/minio/mc:RELEASE.2021-06-08T01-29-37Z.
+* https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/834 Update istio to version 1.9.8
+* https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/818 Fix minio istio pass down
+* https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/831 Fix monitoring hostNetwork violation
+* https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/835 Fix fluentbit hostFilesystem violation
 
-```
-mc alias set <alais name> HOSTNAME ACCESSKEY SECRETKEY
-mc mirror <alias name>/ <local storage location>
+## [1.15.0]
 
-```
+* [!1.15.0](https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests?scope=all&utf8=%E2%9C%93&state=merged&milestone_title=1.15.0); List of merge requests in this release.
 
 ## [1.14.1]
 

README.md

 # bigbang
 
-![Version: 1.15.0](https://img.shields.io/badge/Version-1.15.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square)
+![Version: 1.15.1](https://img.shields.io/badge/Version-1.15.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square)
 
 Big Bang is a declarative, continuous delivery tool for core DoD hardened and approved packages into a Kubernetes cluster.
 
@@ -145,7 +145,7 @@ To start using Big Bang, you will need to create your own Big Bang environment t
 | monitoring.enabled | bool | `true` | Toggle deployment of Monitoring (Prometheus, Grafana, and Alertmanager). |
 | monitoring.git.repo | string | `"https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring.git"` |  |
 | monitoring.git.path | string | `"./chart"` |  |
-| monitoring.git.tag | string | `"14.0.0-bb.8"` |  |
+| monitoring.git.tag | string | `"14.0.0-bb.9"` |  |
 | monitoring.flux | object | `{"install":{"crds":"CreateReplace"},"upgrade":{"crds":"CreateReplace"}}` | Flux reconciliation overrides specifically for the Monitoring Package |
 | monitoring.ingress.gateway | string | `""` |  |
 | monitoring.sso.enabled | bool | `false` | Toggle SSO for monitoring components on and off |
@@ -371,4 +371,4 @@ To start using Big Bang, you will need to create your own Big Bang environment t
 
 ## Contributing
 
-Please see the [contributing guide](./CONTRIBUTING.md) if you are interested in contributing to Big Bang.
\ No newline at end of file
+Please see the [contributing guide](./CONTRIBUTING.md) if you are interested in contributing to Big Bang.

base/gitrepository.yaml

@@ -11,4 +11,4 @@ spec:
   interval: 10m
   url: https://repo1.dso.mil/platform-one/big-bang/bigbang.git
   ref:
-    tag: 1.15.0
+    tag: 1.15.1

chart/Chart.yaml

 apiVersion: v2
 name: bigbang
-version: 1.15.0
+version: 1.15.1
 description: Big Bang is a declarative, continuous delivery tool for core DoD hardened and approved packages into a Kubernetes cluster.
 
 type: application

chart/templates/gatekeeper/values.yaml

@@ -34,12 +34,20 @@ violations:  # Try to keep this in alpha order to make it easier to find keys
         - mattermost/init-check-database
       {{- end }}
 
-  {{- if .Values.monitoring.enabled}}
+  {{- if or .Values.monitoring.enabled .Values.fluentbit.enabled }}
   allowedHostFilesystem:
+    {{- if .Values.monitoring.enabled }}
     match:
       excludedNamespaces:
         # Prometheus-node-exporter needs access to host to get node metrics
         - monitoring
+    {{- end }}
+    {{- if .Values.fluentbit.enabled }}
+    parameters:
+      excludedResources:
+        # Fluentbit pods need access to host to get log files
+        - logging/logging-fluent-bit-.*
+    {{- end }}
   {{- end }}
 
   {{- if .Values.addons.mattermost.enabled }}

chart/templates/istio/controlplane/values.yaml

@@ -20,6 +20,11 @@ networkPolicies:
   enabled: {{ .Values.networkPolicies.enabled }}
   controlPlaneCidr: {{ .Values.networkPolicies.controlPlaneCidr }}
 
+tag: 1.9.8
+cni:
+  image:
+    tag: 1.9.8
+
 {{- if .Values.istio.ingressGateways }}
 ingressGateways:
   istio-ingressgateway:

chart/templates/istio/operator/values.yaml

@@ -11,4 +11,6 @@ imagePullSecrets:
 networkPolicies:
   enabled: {{ .Values.networkPolicies.enabled }}
   controlPlaneCidr: {{ .Values.networkPolicies.controlPlaneCidr }}
+
+tag: 1.9.8
 {{- end -}}

chart/templates/minio/minio-operator/values.yaml

@@ -15,8 +15,10 @@ networkPolicies:
   enabled: {{ .Values.networkPolicies.enabled }}
   controlPlaneCidr: {{ .Values.networkPolicies.controlPlaneCidr }}
 
+istio:
+  enabled: {{ .Values.istio.enabled }}
+
 monitoring:
   enabled: {{ .Values.monitoring.enabled }}
 
 {{- end -}}
-

chart/values.yaml

@@ -381,7 +381,7 @@ monitoring:
   git:
     repo: https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring.git
     path: "./chart"
-    tag: "14.0.0-bb.8"
+    tag: "14.0.0-bb.9"
 
   # -- Flux reconciliation overrides specifically for the Monitoring Package
   flux: