Big Bang values.yaml💣
domain💣
Type: string
"bigbang.dev"
Description: Domain used for BigBang created exposed services, can be overridden by individual packages.
offline💣
Type: bool
false
Description: (experimental) Toggle sourcing from external repos. All this does right now is toggle GitRepositories, it is not fully functional
registryCredentials💣
Type: object
{"email":"","password":"","registry":"registry1.dso.mil","username":""}
Default value (formatted)
{
"email": "",
"password": "",
"registry": "registry1.dso.mil",
"username": ""
}
Description: Single set of registry credentials used to pull all images deployed by BigBang.
openshift💣
Type: bool
false
Description: Multiple sets of registry credentials used to pull all images deployed by BigBang. Credentials will only be created when a valid combination exists, registry, username, and password (email is optional) Or a list of registires: - registry: registry1.dso.mil username: “” password: “” email: “” - registry: registry.dso.mil username: “” password: “” email: “” Openshift Container Platform Feature Toggle
git💣
Type: object
{"credentials":{"caFile":"","knownHosts":"","password":"","privateKey":"","publicKey":"","username":""},"existingSecret":""}
Default value (formatted)
{
"credentials": {
"caFile": "",
"knownHosts": "",
"password": "",
"privateKey": "",
"publicKey": "",
"username": ""
},
"existingSecret": ""
}
Description: Git credential settings for accessing private repositories Order of precedence is: 1. existingSecret 2. http credentials (username/password/caFile) 3. ssh credentials (privateKey/publicKey/knownHosts)
git.existingSecret💣
Type: string
""
Description: Existing secret to use for git credentials, must be in the appropriate format: https://toolkit.fluxcd.io/components/source/gitrepositories/#https-authentication
git.credentials💣
Type: object
{"caFile":"","knownHosts":"","password":"","privateKey":"","publicKey":"","username":""}
Default value (formatted)
{
"caFile": "",
"knownHosts": "",
"password": "",
"privateKey": "",
"publicKey": "",
"username": ""
}
Description: Chart created secrets with user defined values
git.credentials.username💣
Type: string
""
Description: HTTP git credentials, both username and password must be provided
git.credentials.caFile💣
Type: string
""
Description: HTTPS certificate authority file. Required for any repo with a self signed certificate
git.credentials.privateKey💣
Type: string
""
Description: SSH git credentials, privateKey, publicKey, and knownHosts must be provided
sso💣
Type: object
{"auth_url":"https://{{ .Values.sso.oidc.host }}/auth/realms/{{ .Values.sso.oidc.realm }}/protocol/openid-connect/auth","certificate_authority":"","client_id":"","client_secret":"","jwks":"","oidc":{"host":"login.dso.mil","realm":"baby-yoda"},"secretName":"tls-ca-sso","token_url":"https://{{ .Values.sso.oidc.host }}/auth/realms/{{ .Values.sso.oidc.realm }}/protocol/openid-connect/token"}
Default value (formatted)
{
"auth_url": "https://{{ .Values.sso.oidc.host }}/auth/realms/{{ .Values.sso.oidc.realm }}/protocol/openid-connect/auth",
"certificate_authority": "",
"client_id": "",
"client_secret": "",
"jwks": "",
"oidc": {
"host": "login.dso.mil",
"realm": "baby-yoda"
},
"secretName": "tls-ca-sso",
"token_url": "https://{{ .Values.sso.oidc.host }}/auth/realms/{{ .Values.sso.oidc.realm }}/protocol/openid-connect/token"
}
Description: Global SSO values used for BigBang deployments when sso is enabled, can be overridden by individual packages.
sso.oidc.host💣
Type: string
"login.dso.mil"
Description: Domain for keycloak used for configuring SSO
sso.oidc.realm💣
Type: string
"baby-yoda"
Description: Keycloak realm containing clients
sso.certificate_authority💣
Type: string
""
Description: Keycloak’s certificate authority (PEM Format). Entered using chomp modifier (see docs/assets/configs/example/dev-sso-values.yaml for example). Used by authservice to support SSO for various packages
sso.jwks💣
Type: string
""
Description: Keycloak realm’s json web key output, obtained at https://
sso.client_id💣
Type: string
""
Description: OIDC client ID used for packages authenticated through authservice
sso.client_secret💣
Type: string
""
Description: OIDC client secret used for packages authenticated through authservice
sso.token_url💣
Type: string
"https://{{ .Values.sso.oidc.host }}/auth/realms/{{ .Values.sso.oidc.realm }}/protocol/openid-connect/token"
Description: OIDC token URL template string (to be used as default)
sso.auth_url💣
Type: string
"https://{{ .Values.sso.oidc.host }}/auth/realms/{{ .Values.sso.oidc.realm }}/protocol/openid-connect/auth"
Description: OIDC auth URL template string (to be used as default)
sso.secretName💣
Type: string
"tls-ca-sso"
Description: Kubernetes Secret containing the sso.certificate_authority value for SSO enabled application namespaces
flux💣
Type: object
{"install":{"remediation":{"retries":-1}},"interval":"2m","rollback":{"cleanupOnFail":true,"timeout":"10m"},"test":{"enable":false},"timeout":"10m","upgrade":{"cleanupOnFail":true,"remediation":{"remediateLastFailure":true,"retries":3}}}
Default value (formatted)
{
"install": {
"remediation": {
"retries": -1
}
},
"interval": "2m",
"rollback": {
"cleanupOnFail": true,
"timeout": "10m"
},
"test": {
"enable": false
},
"timeout": "10m",
"upgrade": {
"cleanupOnFail": true,
"remediation": {
"remediateLastFailure": true,
"retries": 3
}
}
}
Description: (Advanced) Flux reconciliation parameters. The default values provided will be sufficient for the majority of workloads.
networkPolicies💣
Type: object
{"controlPlaneCidr":"0.0.0.0/0","enabled":true,"nodeCidr":"","vpcCidr":"0.0.0.0/0"}
Default value (formatted)
{
"controlPlaneCidr": "0.0.0.0/0",
"enabled": true,
"nodeCidr": "",
"vpcCidr": "0.0.0.0/0"
}
Description: Global NetworkPolicies settings
networkPolicies.enabled💣
Type: bool
true
Description: Toggle all package NetworkPolicies, can disable specific packages with package.values.networkPolicies.enabled
networkPolicies.controlPlaneCidr💣
Type: string
"0.0.0.0/0"
Description: Control Plane CIDR, defaults to 0.0.0.0/0, use kubectl get endpoints -n default kubernetes to get the CIDR range needed for your cluster Must be an IP CIDR range (x.x.x.x/x - ideally with /32 for the specific IP of a single endpoint, broader range for multiple masters/endpoints) Used by package NetworkPolicies to allow Kube API access
networkPolicies.nodeCidr💣
Type: string
""
Description: Node CIDR, defaults to allowing “10.0.0.0/8” “172.16.0.0/12” “192.168.0.0/16” “100.64.0.0/10” networks. use kubectl get nodes -owide and review the INTERNAL-IP column to derive CIDR range. Must be an IP CIDR range (x.x.x.x/x - ideally a /16 or /24 to include multiple IPs)
networkPolicies.vpcCidr💣
Type: string
"0.0.0.0/0"
Description: VPC CIDR, defaults to 0.0.0.0/0 In a production environment, it is recommended to setup a Private Endpoint for your AWS services like KMS or S3. Please review https://docs.aws.amazon.com/kms/latest/developerguide/kms-vpc-endpoint.html to setup routing to AWS services that never leave the AWS network. Once created update networkPolicies.vpcCidr to match the CIDR of your VPC so Vault will be able to reach your VPCs DNS and new KMS endpoint.
imagePullPolicy💣
Type: string
"IfNotPresent"
Description: Global ImagePullPolicy value for all packages Permitted values are: None, Always, IfNotPresent
istio.enabled💣
Type: bool
true
Description: Toggle deployment of Istio.
istio.git.repo💣
Type: string
"https://repo1.dso.mil/platform-one/big-bang/apps/core/istio-controlplane.git"
istio.git.path💣
Type: string
"./chart"
istio.git.tag💣
Type: string
"1.15.0-bb.0"
istio.enterprise💣
Type: bool
false
Description: Tetrate Istio Distribution - Tetrate provides FIPs verified Istio and Envoy software and support, validated through the FIPs Boring Crypto module. Find out more from Tetrate - https://www.tetrate.io/tetrate-istio-subscription
istio.ingressGateways.public-ingressgateway.type💣
Type: string
"LoadBalancer"
istio.ingressGateways.public-ingressgateway.kubernetesResourceSpec💣
Type: object
{}
Default value (formatted)
{}
istio.gateways.public.ingressGateway💣
Type: string
"public-ingressgateway"
istio.gateways.public.hosts[0]💣
Type: string
"*.{{ .Values.domain }}"
istio.gateways.public.autoHttpRedirect💣
Type: object
{"enabled":true}
Default value (formatted)
{
"enabled": true
}
Description: Controls default HTTP/8080 server entry with HTTP to HTTPS Redirect.
istio.gateways.public.tls.key💣
Type: string
""
istio.gateways.public.tls.cert💣
Type: string
""
istio.flux💣
Type: object
{}
Default value (formatted)
{}
Description: Flux reconciliation overrides specifically for the Istio Package
istio.values💣
Type: object
{}
Default value (formatted)
{}
Description: Values to passthrough to the istio-controlplane chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/istio-controlplane.git
istio.postRenderers💣
Type: list
[]
Default value (formatted)
[]
Description: Post Renderers. See docs/postrenders.md
istiooperator.enabled💣
Type: bool
true
Description: Toggle deployment of Istio Operator.
istiooperator.git.repo💣
Type: string
"https://repo1.dso.mil/platform-one/big-bang/apps/core/istio-operator.git"
istiooperator.git.path💣
Type: string
"./chart"
istiooperator.git.tag💣
Type: string
"1.15.0-bb.0"
istiooperator.flux💣
Type: object
{}
Default value (formatted)
{}
Description: Flux reconciliation overrides specifically for the Istio Operator Package
istiooperator.values💣
Type: object
{}
Default value (formatted)
{}
Description: Values to passthrough to the istio-operator chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/istio-operator.git
istiooperator.postRenderers💣
Type: list
[]
Default value (formatted)
[]
Description: Post Renderers. See docs/postrenders.md
jaeger.enabled💣
Type: bool
true
Description: Toggle deployment of Jaeger.
jaeger.git.repo💣
Type: string
"https://repo1.dso.mil/platform-one/big-bang/apps/core/jaeger.git"
jaeger.git.path💣
Type: string
"./chart"
jaeger.git.tag💣
Type: string
"2.35.0-bb.1"
jaeger.flux💣
Type: object
{"install":{"crds":"CreateReplace"},"upgrade":{"crds":"CreateReplace"}}
Default value (formatted)
{
"install": {
"crds": "CreateReplace"
},
"upgrade": {
"crds": "CreateReplace"
}
}
Description: Flux reconciliation overrides specifically for the Jaeger Package
jaeger.ingress💣
Type: object
{"gateway":""}
Default value (formatted)
{
"gateway": ""
}
Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.
jaeger.sso.enabled💣
Type: bool
false
Description: Toggle SSO for Jaeger on and off
jaeger.sso.client_id💣
Type: string
""
Description: OIDC Client ID to use for Jaeger
jaeger.sso.client_secret💣
Type: string
""
Description: OIDC Client Secret to use for Jaeger
jaeger.values💣
Type: object
{}
Default value (formatted)
{}
Description: Values to pass through to Jaeger chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/jaeger.git
jaeger.postRenderers💣
Type: list
[]
Default value (formatted)
[]
Description: Post Renderers. See docs/postrenders.md
kiali.enabled💣
Type: bool
true
Description: Toggle deployment of Kiali.
kiali.git.repo💣
Type: string
"https://repo1.dso.mil/platform-one/big-bang/apps/core/kiali.git"
kiali.git.path💣
Type: string
"./chart"
kiali.git.tag💣
Type: string
"1.56.1-bb.1"
kiali.flux💣
Type: object
{}
Default value (formatted)
{}
Description: Flux reconciliation overrides specifically for the Kiali Package
kiali.ingress💣
Type: object
{"gateway":""}
Default value (formatted)
{
"gateway": ""
}
Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.
kiali.sso.enabled💣
Type: bool
false
Description: Toggle SSO for Kiali on and off
kiali.sso.client_id💣
Type: string
""
Description: OIDC Client ID to use for Kiali
kiali.sso.client_secret💣
Type: string
""
Description: OIDC Client Secret to use for Kiali
kiali.values💣
Type: object
{}
Default value (formatted)
{}
Description: Values to pass through to Kiali chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/kiali
kiali.postRenderers💣
Type: list
[]
Default value (formatted)
[]
Description: Post Renderers. See docs/postrenders.md
clusterAuditor.enabled💣
Type: bool
true
Description: Toggle deployment of Cluster Auditor.
clusterAuditor.git.repo💣
Type: string
"https://repo1.dso.mil/platform-one/big-bang/apps/core/cluster-auditor.git"
clusterAuditor.git.path💣
Type: string
"./chart"
clusterAuditor.git.tag💣
Type: string
"1.5.0-bb.0"
clusterAuditor.flux💣
Type: object
{}
Default value (formatted)
{}
Description: Flux reconciliation overrides specifically for the Cluster Auditor Package
clusterAuditor.values💣
Type: object
{}
Default value (formatted)
{}
Description: Values to passthrough to the cluster auditor chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/cluster-auditor.git
clusterAuditor.postRenderers💣
Type: list
[]
Default value (formatted)
[]
Description: Post Renderers. See docs/postrenders.md
gatekeeper.enabled💣
Type: bool
true
Description: Toggle deployment of OPA Gatekeeper.
gatekeeper.git.repo💣
Type: string
"https://repo1.dso.mil/platform-one/big-bang/apps/core/policy.git"
gatekeeper.git.path💣
Type: string
"./chart"
gatekeeper.git.tag💣
Type: string
"3.9.0-bb.3"
gatekeeper.flux💣
Type: object
{"install":{"crds":"CreateReplace"},"upgrade":{"crds":"CreateReplace"}}
Default value (formatted)
{
"install": {
"crds": "CreateReplace"
},
"upgrade": {
"crds": "CreateReplace"
}
}
Description: Flux reconciliation overrides specifically for the OPA Gatekeeper Package
gatekeeper.values💣
Type: object
{}
Default value (formatted)
{}
Description: Values to passthrough to the gatekeeper chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/policy.git
gatekeeper.postRenderers💣
Type: list
[]
Default value (formatted)
[]
Description: Post Renderers. See docs/postrenders.md
kyverno.enabled💣
Type: bool
false
Description: Toggle deployment of Kyverno.
kyverno.git.repo💣
Type: string
"https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/kyverno.git"
kyverno.git.path💣
Type: string
"./chart"
kyverno.git.tag💣
Type: string
"2.5.3-bb.1"
kyverno.flux💣
Type: object
{}
Default value (formatted)
{}
Description: Flux reconciliation overrides specifically for the Kyverno Package
kyverno.values💣
Type: object
{}
Default value (formatted)
{}
Description: Values to passthrough to the kyverno chart: https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/kyverno.git
kyverno.postRenderers💣
Type: list
[]
Default value (formatted)
[]
Description: Post Renderers. See docs/postrenders.md
kyvernopolicies.enabled💣
Type: bool
false
Description: Toggle deployment of Kyverno policies
kyvernopolicies.git.repo💣
Type: string
"https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/kyverno-policies.git"
kyvernopolicies.git.path💣
Type: string
"./chart"
kyvernopolicies.git.tag💣
Type: string
"1.0.1-bb.5"
kyvernopolicies.flux💣
Type: object
{}
Default value (formatted)
{}
Description: Flux reconciliation overrides specifically for the Kyverno Package
kyvernopolicies.values💣
Type: object
{}
Default value (formatted)
{}
Description: Values to passthrough to the kyverno policies chart: https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/kyverno-policies.git
kyvernopolicies.postRenderers💣
Type: list
[]
Default value (formatted)
[]
Description: Post Renderers. See docs/postrenders.md
logging.enabled💣
Type: bool
true
Description: Toggle deployment of Logging (EFK).
logging.git.repo💣
Type: string
"https://repo1.dso.mil/platform-one/big-bang/apps/core/elasticsearch-kibana.git"
logging.git.path💣
Type: string
"./chart"
logging.git.tag💣
Type: string
"0.11.0-bb.0"
logging.flux💣
Type: object
{"timeout":"20m"}
Default value (formatted)
{
"timeout": "20m"
}
Description: Flux reconciliation overrides specifically for the Logging (EFK) Package
logging.ingress💣
Type: object
{"gateway":""}
Default value (formatted)
{
"gateway": ""
}
Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.
logging.sso.enabled💣
Type: bool
false
Description: Toggle OIDC SSO for Kibana/Elasticsearch on and off. Enabling this option will auto-create any required secrets.
logging.sso.client_id💣
Type: string
""
Description: Elasticsearch/Kibana OIDC client ID
logging.sso.client_secret💣
Type: string
""
Description: Elasticsearch/Kibana OIDC client secret
logging.license.trial💣
Type: bool
false
Description: Toggle trial license installation of elasticsearch. Note that enterprise (non trial) is required for SSO to work.
logging.license.keyJSON💣
Type: string
""
Description: Elasticsearch license in json format seen here: https://repo1.dso.mil/platform-one/big-bang/apps/core/elasticsearch-kibana#enterprise-license
logging.values💣
Type: object
{}
Default value (formatted)
{}
Description: Values to passthrough to the elasticsearch-kibana chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/elasticsearch-kibana.git
logging.postRenderers💣
Type: list
[]
Default value (formatted)
[]
Description: Post Renderers. See docs/postrenders.md
eckoperator.enabled💣
Type: bool
true
Description: Toggle deployment of ECK Operator.
eckoperator.git.repo💣
Type: string
"https://repo1.dso.mil/platform-one/big-bang/apps/core/eck-operator.git"
eckoperator.git.path💣
Type: string
"./chart"
eckoperator.git.tag💣
Type: string
"2.4.0-bb.0"
eckoperator.flux💣
Type: object
{}
Default value (formatted)
{}
Description: Flux reconciliation overrides specifically for the ECK Operator Package
eckoperator.values💣
Type: object
{}
Default value (formatted)
{}
Description: Values to passthrough to the eck-operator chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/eck-operator.git
fluentbit.enabled💣
Type: bool
true
Description: Toggle deployment of Fluent-Bit.
fluentbit.git.repo💣
Type: string
"https://repo1.dso.mil/platform-one/big-bang/apps/core/fluentbit.git"
fluentbit.git.path💣
Type: string
"./chart"
fluentbit.git.tag💣
Type: string
"0.20.8-bb.0"
fluentbit.flux💣
Type: object
{}
Default value (formatted)
{}
Description: Flux reconciliation overrides specifically for the Fluent-Bit Package
fluentbit.values💣
Type: object
{}
Default value (formatted)
{}
Description: Values to passthrough to the fluentbit chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/fluentbit.git
fluentbit.postRenderers💣
Type: list
[]
Default value (formatted)
[]
Description: Post Renderers. See docs/postrenders.md
promtail.enabled💣
Type: bool
false
Description: Toggle deployment of Promtail.
promtail.git.repo💣
Type: string
"https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/promtail.git"
promtail.git.path💣
Type: string
"./chart"
promtail.git.tag💣
Type: string
"6.2.2-bb.2"
promtail.flux💣
Type: object
{}
Default value (formatted)
{}
Description: Flux reconciliation overrides specifically for the Promtail Package
promtail.values💣
Type: object
{}
Default value (formatted)
{}
Description: Values to passthrough to the promtail chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/fluentbit.git
promtail.postRenderers💣
Type: list
[]
Default value (formatted)
[]
Description: Post Renderers. See docs/postrenders.md
loki.enabled💣
Type: bool
false
Description: Toggle deployment of Loki.
loki.git.repo💣
Type: string
"https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/loki.git"
loki.git.path💣
Type: string
"./chart"
loki.git.tag💣
Type: string
"1.8.10-bb.2"
loki.flux💣
Type: object
{}
Default value (formatted)
{}
Description: Flux reconciliation overrides specifically for the Loki Package
loki.strategy💣
Type: string
"monolith"
Description: Loki architecture. Options are monolith and scalable
loki.objectStorage.endpoint💣
Type: string
""
Description: S3 compatible endpoint to use for connection information. examples: “https://s3.amazonaws.com” “https://s3.us-gov-west-1.amazonaws.com” “http://minio.minio.svc.cluster.local:9000”
loki.objectStorage.region💣
Type: string
""
Description: S3 compatible region to use for connection information.
loki.objectStorage.accessKey💣
Type: string
""
Description: Access key for connecting to object storage endpoint.
loki.objectStorage.accessSecret💣
Type: string
""
Description: Secret key for connecting to object storage endpoint. Unencoded string data. This should be placed in the secret values and then encrypted
loki.objectStorage.bucketNames💣
Type: object
{}
Default value (formatted)
{}
Description: Bucket Names for the Loki buckets as YAML chunks: loki-logs ruler: loki-ruler admin: loki-admin
loki.values💣
Type: object
{}
Default value (formatted)
{}
Description: Values to passthrough to the Loki chart: https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/loki.git
loki.postRenderers💣
Type: list
[]
Default value (formatted)
[]
Description: Post Renderers. See docs/postrenders.md
tempo.enabled💣
Type: bool
false
Description: Toggle deployment of Tempo.
tempo.git.repo💣
Type: string
"https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/tempo.git"
tempo.git.path💣
Type: string
"./chart"
tempo.git.tag💣
Type: string
"0.16.1-bb.2"
tempo.ingress💣
Type: object
{"gateway":""}
Default value (formatted)
{
"gateway": ""
}
Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.
tempo.flux💣
Type: object
{}
Default value (formatted)
{}
Description: Flux reconciliation overrides specifically for the Tempo Package
tempo.sso.enabled💣
Type: bool
false
Description: Toggle SSO for Tempo on and off
tempo.sso.client_id💣
Type: string
""
Description: OIDC Client ID to use for Tempo
tempo.sso.client_secret💣
Type: string
""
Description: OIDC Client Secret to use for Tempo
tempo.objectStorage.endpoint💣
Type: string
""
Description: S3 compatible endpoint to use for connection information. examples: “s3.amazonaws.com” “s3.us-gov-west-1.amazonaws.com” “minio.minio.svc.cluster.local:9000” Note: tempo does not require protocol prefix for URL.
tempo.objectStorage.region💣
Type: string
""
Description: S3 compatible region to use for connection information.
tempo.objectStorage.accessKey💣
Type: string
""
Description: Access key for connecting to object storage endpoint.
tempo.objectStorage.accessSecret💣
Type: string
""
Description: Secret key for connecting to object storage endpoint. Unencoded string data. This should be placed in the secret values and then encrypted
tempo.objectStorage.bucket💣
Type: string
""
Description: Bucket Names for Loki as a comma delimited list. examples: “tempo-traces”
tempo.objectStorage.insecure💣
Type: bool
false
Description: Whether or not objectStorage connection should require HTTPS, if connecting to in-cluster object storage on port 80/9000 set this value to true.
tempo.values💣
Type: object
{}
Default value (formatted)
{}
Description: Values to passthrough to the Tempo chart: https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/tempo.git
tempo.postRenderers💣
Type: list
[]
Default value (formatted)
[]
Description: Post Renderers. See docs/postrenders.md
monitoring.enabled💣
Type: bool
true
Description: Toggle deployment of Monitoring (Prometheus, Grafana, and Alertmanager).
monitoring.git.repo💣
Type: string
"https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring.git"
monitoring.git.path💣
Type: string
"./chart"
monitoring.git.tag💣
Type: string
"40.0.0-bb.1"
monitoring.flux💣
Type: object
{"install":{"crds":"CreateReplace"},"upgrade":{"crds":"CreateReplace"}}
Default value (formatted)
{
"install": {
"crds": "CreateReplace"
},
"upgrade": {
"crds": "CreateReplace"
}
}
Description: Flux reconciliation overrides specifically for the Monitoring Package
monitoring.ingress💣
Type: object
{"gateway":""}
Default value (formatted)
{
"gateway": ""
}
Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.
monitoring.sso.enabled💣
Type: bool
false
Description: Toggle SSO for monitoring components on and off
monitoring.sso.prometheus.client_id💣
Type: string
""
Description: Prometheus OIDC client ID
monitoring.sso.prometheus.client_secret💣
Type: string
""
Description: Prometheus OIDC client secret
monitoring.sso.alertmanager.client_id💣
Type: string
""
Description: Alertmanager OIDC client ID
monitoring.sso.alertmanager.client_secret💣
Type: string
""
Description: Alertmanager OIDC client secret
monitoring.sso.grafana.client_id💣
Type: string
""
Description: Grafana OIDC client ID
monitoring.sso.grafana.client_secret💣
Type: string
""
Description: Grafana OIDC client secret
monitoring.sso.grafana.scopes💣
Type: string
""
Description: Grafana OIDC client scopes, comma separated, see https://grafana.com/docs/grafana/latest/auth/generic-oauth/
monitoring.sso.grafana.allow_sign_up💣
Type: string
"true"
monitoring.sso.grafana.role_attribute_path💣
Type: string
"Viewer"
monitoring.values💣
Type: object
{}
Default value (formatted)
{}
Description: Values to passthrough to the monitoring chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring.git
monitoring.postRenderers💣
Type: list
[]
Default value (formatted)
[]
Description: Post Renderers. See docs/postrenders.md
twistlock.enabled💣
Type: bool
true
Description: Toggle deployment of Twistlock.
twistlock.git.repo💣
Type: string
"https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/twistlock.git"
twistlock.git.path💣
Type: string
"./chart"
twistlock.git.tag💣
Type: string
"0.10.0-bb.2"
twistlock.flux💣
Type: object
{}
Default value (formatted)
{}
Description: Flux reconciliation overrides specifically for the Twistlock Package
twistlock.ingress💣
Type: object
{"gateway":""}
Default value (formatted)
{
"gateway": ""
}
Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.
twistlock.sso.enabled💣
Type: bool
false
Description: Toggle SAML SSO, requires a license and enabling the init job - see https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/twistlock/-/blob/main/docs/initialization.md
twistlock.sso.client_id💣
Type: string
""
Description: SAML client ID
twistlock.sso.provider_name💣
Type: string
""
Description: SAML Povider Alias (optional)
twistlock.sso.provider_type💣
Type: string
"shibboleth"
Description: SAML Identity Provider. shibboleth is recommended by Twistlock support for Keycloak
twistlock.sso.issuer_uri💣
Type: string
"https://{{ .Values.sso.oidc.host }}/auth/realms/{{ .Values.sso.oidc.realm }}"
Description: Identity Provider url with path to realm
twistlock.sso.idp_url💣
Type: string
"https://{{ .Values.sso.oidc.host }}/auth/realms/{{ .Values.sso.oidc.realm }}/protocol/saml"
Description: SAML Identity Provider SSO URL
twistlock.sso.console_url💣
Type: string
"https://twistlock.{{ .Values.domain }}"
Description: Console URL of the Twistlock app (optional)
twistlock.sso.groups💣
Type: string
""
Description: Groups attribute (optional)
twistlock.sso.cert💣
Type: string
""` | X.509 Certificate from Identity Provider (i.e. Keycloak). See https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/twistlock/-/blob/main/docs/KEYCLOAK.md for format. Use the
Description: -` syntax for multiline string.
twistlock.values💣
Type: object
{}
Default value (formatted)
{}
Description: Values to passthrough to the twistlock chart: https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/twistlock.git
twistlock.postRenderers💣
Type: list
[]
Default value (formatted)
[]
Description: Post Renderers. See docs/postrenders.md
addons.argocd.enabled💣
Type: bool
false
Description: Toggle deployment of ArgoCD.
addons.argocd.git.repo💣
Type: string
"https://repo1.dso.mil/platform-one/big-bang/apps/core/argocd.git"
addons.argocd.git.path💣
Type: string
"./chart"
addons.argocd.git.tag💣
Type: string
"4.10.8-bb.0"
addons.argocd.flux💣
Type: object
{}
Default value (formatted)
{}
Description: Flux reconciliation overrides specifically for the ArgoCD Package
addons.argocd.ingress💣
Type: object
{"gateway":""}
Default value (formatted)
{
"gateway": ""
}
Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.
addons.argocd.redis.host💣
Type: string
""
Description: Hostname of a pre-existing Redis to use for ArgoCD. Entering connection info will enable external Redis and will auto-create any required secrets.
addons.argocd.redis.port💣
Type: string
""
Description: Port of a pre-existing Redis to use for ArgoCD.
addons.argocd.sso.enabled💣
Type: bool
false
Description: Toggle SSO for ArgoCD on and off
addons.argocd.sso.client_id💣
Type: string
""
Description: ArgoCD OIDC client ID
addons.argocd.sso.client_secret💣
Type: string
""
Description: ArgoCD OIDC client secret
addons.argocd.sso.provider_name💣
Type: string
""
Description: ArgoCD SSO login text
addons.argocd.sso.groups💣
Type: string
"g, Impact Level 2 Authorized, role:admin\n"
Default value (formatted)
g, Impact Level 2 Authorized, role:admin
Description: ArgoCD SSO group roles, see docs for more details: https://argo-cd.readthedocs.io/en/stable/operator-manual/rbac/
addons.argocd.values💣
Type: object
{}
Default value (formatted)
{}
Description: Values to passthrough to the argocd chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/argocd.git
addons.argocd.postRenderers💣
Type: list
[]
Default value (formatted)
[]
Description: Post Renderers. See docs/postrenders.md
addons.authservice.enabled💣
Type: bool
false
Description: Toggle deployment of Authservice. if enabling authservice, a filter needs to be provided by either enabling sso for monitoring or istio, or manually adding a filter chain in the values here: values: chain: minimal: callback_uri: “https://somecallback”
addons.authservice.git.repo💣
Type: string
"https://repo1.dso.mil/platform-one/big-bang/apps/core/authservice.git"
addons.authservice.git.path💣
Type: string
"./chart"
addons.authservice.git.tag💣
Type: string
"0.5.2-bb.0"
addons.authservice.flux💣
Type: object
{}
Default value (formatted)
{}
Description: Flux reconciliation overrides specifically for the Authservice Package
addons.authservice.values💣
Type: object
{}
Default value (formatted)
{}
Description: Values to passthrough to the authservice chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/authservice.git
addons.authservice.postRenderers💣
Type: list
[]
Default value (formatted)
[]
Description: Post Renderers. See docs/postrenders.md
addons.authservice.chains💣
Type: object
{}
Default value (formatted)
{}
Description: Additional authservice chain configurations.
addons.minioOperator.enabled💣
Type: bool
false
Description: Toggle deployment of minio operator and instance.
addons.minioOperator.git.repo💣
Type: string
"https://repo1.dso.mil/platform-one/big-bang/apps/application-utilities/minio-operator.git"
addons.minioOperator.git.path💣
Type: string
"./chart"
addons.minioOperator.git.tag💣
Type: string
"4.4.28-bb.2"
addons.minioOperator.flux💣
Type: object
{}
Default value (formatted)
{}
Description: Flux reconciliation overrides specifically for the Minio Operator Package
addons.minioOperator.values💣
Type: object
{}
Default value (formatted)
{}
Description: Values to passthrough to the minio operator chart: https://repo1.dso.mil/platform-one/big-bang/apps/application-utilities/minio-operator.git
addons.minioOperator.postRenderers💣
Type: list
[]
Default value (formatted)
[]
Description: Post Renderers. See docs/postrenders.md
addons.minio.enabled💣
Type: bool
false
Description: Toggle deployment of minio.
addons.minio.git.repo💣
Type: string
"https://repo1.dso.mil/platform-one/big-bang/apps/application-utilities/minio.git"
addons.minio.git.path💣
Type: string
"./chart"
addons.minio.git.tag💣
Type: string
"4.4.28-bb.1"
addons.minio.flux💣
Type: object
{}
Default value (formatted)
{}
Description: Flux reconciliation overrides specifically for the Minio Package
addons.minio.ingress💣
Type: object
{"gateway":""}
Default value (formatted)
{
"gateway": ""
}
Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.
addons.minio.accesskey💣
Type: string
""
Description: Default access key to use for minio.
addons.minio.secretkey💣
Type: string
""
Description: Default secret key to intstantiate with minio, you should change/delete this after installation.
addons.minio.values💣
Type: object
{}
Default value (formatted)
{}
Description: Values to passthrough to the minio instance chart: https://repo1.dso.mil/platform-one/big-bang/apps/application-utilities/minio.git
addons.minio.postRenderers💣
Type: list
[]
Default value (formatted)
[]
Description: Post Renderers. See docs/postrenders.md
addons.gitlab.enabled💣
Type: bool
false
Description: Toggle deployment of Gitlab
addons.gitlab.hostnames.gitlab💣
Type: string
"gitlab"
addons.gitlab.hostnames.registry💣
Type: string
"registry"
addons.gitlab.git.repo💣
Type: string
"https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/gitlab.git"
addons.gitlab.git.path💣
Type: string
"./chart"
addons.gitlab.git.tag💣
Type: string
"6.3.2-bb.1"
addons.gitlab.flux💣
Type: object
{}
Default value (formatted)
{}
Description: Flux reconciliation overrides specifically for the Gitlab Package
addons.gitlab.ingress💣
Type: object
{"gateway":""}
Default value (formatted)
{
"gateway": ""
}
Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.
addons.gitlab.sso.enabled💣
Type: bool
false
Description: Toggle OIDC SSO for Gitlab on and off. Enabling this option will auto-create any required secrets.
addons.gitlab.sso.client_id💣
Type: string
""
Description: Gitlab OIDC client ID
addons.gitlab.sso.client_secret💣
Type: string
""
Description: Gitlab OIDC client secret
addons.gitlab.sso.label💣
Type: string
""
Description: Gitlab SSO login button label
addons.gitlab.sso.scopes💣
Type: list
["Gitlab"]
Default value (formatted)
[
"Gitlab"
]
Description: Gitlab SSO Scopes, default is [“Gitlab”]
addons.gitlab.sso.issuer_uri💣
Type: string
""
Description: GitLab SSO Issuer URI, Only needed if your SSO is non-Keycloak
addons.gitlab.sso.end_session_uri💣
Type: string
""
Description: GitLab SSO End Session URI, Only needed if your SSO is non-Keycloak
addons.gitlab.sso.uid_field💣
Type: string
"preferred_username"
Description: Gitlab SSO UID field
addons.gitlab.database.host💣
Type: string
""
Description: Hostname of a pre-existing PostgreSQL database to use for Gitlab. Entering connection info will disable the deployment of an internal database and will auto-create any required secrets.
addons.gitlab.database.port💣
Type: int
5432
Description: Port of a pre-existing PostgreSQL database to use for Gitlab.
addons.gitlab.database.database💣
Type: string
""
Description: Database name to connect to on host.
addons.gitlab.database.username💣
Type: string
""
Description: Username to connect as to external database, the user must have all privileges on the database.
addons.gitlab.database.password💣
Type: string
""
Description: Database password for the username used to connect to the existing database.
addons.gitlab.objectStorage.type💣
Type: string
""
Description: Type of object storage to use for Gitlab, setting to s3 will assume an external, pre-existing object storage is to be used. Entering connection info will enable this option and will auto-create any required secrets
addons.gitlab.objectStorage.endpoint💣
Type: string
""
Description: S3 compatible endpoint to use for connection information. examples: “https://s3.amazonaws.com” “https://s3.us-gov-west-1.amazonaws.com” “http://minio.minio.svc.cluster.local:9000”
addons.gitlab.objectStorage.region💣
Type: string
""
Description: S3 compatible region to use for connection information.
addons.gitlab.objectStorage.accessKey💣
Type: string
""
Description: Access key for connecting to object storage endpoint. – If using accessKey and accessSecret, the iamProfile must be left as an empty string: “”
addons.gitlab.objectStorage.accessSecret💣
Type: string
""
Description: Secret key for connecting to object storage endpoint. Unencoded string data. This should be placed in the secret values and then encrypted
addons.gitlab.objectStorage.bucketPrefix💣
Type: string
""
Description: Bucket prefix to use for identifying buckets. Example: “prod” will produce “prod-gitlab-bucket”
addons.gitlab.objectStorage.iamProfile💣
Type: string
""
Description: NOTE: Current bug with AWS IAM Profiles and Object Storage where only artifacts are stored. Fixed in Gitlab 14.5 – Name of AWS IAM profile to use. – If using an AWS IAM profile, the accessKey and accessSecret values must be left as empty strings eg: “”
addons.gitlab.smtp.password💣
Type: string
""
Description: Passwords should be placed in an encrypted file. Example: environment-bb-secret.enc.yaml If a value is provided BigBang will create a k8s secret named gitlab-smtp-password in the gitlab namespace
addons.gitlab.redis.password💣
Type: string
""
Description: Redis plain text password to connect to the redis server. If empty (“”), the gitlab charts will create the gitlab-redis-secret with a random password. – This needs to be set to a non-empty value in order for the Grafana Redis Datasource and Dashboards to be installed.
addons.gitlab.values💣
Type: object
{}
Default value (formatted)
{}
Description: Values to passthrough to the gitlab chart: https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/gitlab.git
addons.gitlab.postRenderers💣
Type: list
[]
Default value (formatted)
[]
Description: Post Renderers. See docs/postrenders.md
addons.gitlabRunner.enabled💣
Type: bool
false
Description: Toggle deployment of Gitlab Runner
addons.gitlabRunner.git.repo💣
Type: string
"https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/gitlab-runner.git"
addons.gitlabRunner.git.path💣
Type: string
"./chart"
addons.gitlabRunner.git.tag💣
Type: string
"0.44.0-bb.0"
addons.gitlabRunner.flux💣
Type: object
{}
Default value (formatted)
{}
Description: Flux reconciliation overrides specifically for the Gitlab Runner Package
addons.gitlabRunner.values💣
Type: object
{}
Default value (formatted)
{}
Description: Values to passthrough to the gitlab runner chart: https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/gitlab-runner.git
addons.gitlabRunner.postRenderers💣
Type: list
[]
Default value (formatted)
[]
Description: Post Renderers. See docs/postrenders.md
addons.nexus.enabled💣
Type: bool
false
Description: Toggle deployment of Nexus.
addons.nexus.git.repo💣
Type: string
"https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/nexus.git"
addons.nexus.git.path💣
Type: string
"./chart"
addons.nexus.git.tag💣
Type: string
"41.1.0-bb.6"
addons.nexus.license_key💣
Type: string
""
Description: Base64 encoded license file.
addons.nexus.ingress💣
Type: object
{"gateway":""}
Default value (formatted)
{
"gateway": ""
}
Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.
addons.nexus.sso.enabled💣
Type: bool
false
Description: Toggle SAML SSO for NXRM. – handles SAML SSO, a Client must be configured in Keycloak or IdP – to complete setup. – https://support.sonatype.com/hc/en-us/articles/1500000976522-SAML-integration-for-Nexus-Repository-Manager-Pro-3-and-Nexus-IQ-Server-with-Keycloak#h_01EV7CWCYH3YKAPMAHG8XMQ599
addons.nexus.sso.idp_data💣
Type: object
{"email":"","entityId":"","firstName":"","groups":"","idpMetadata":"","lastName":"","username":""}
Default value (formatted)
{
"email": "",
"entityId": "",
"firstName": "",
"groups": "",
"idpMetadata": "",
"lastName": "",
"username": ""
}
Description: NXRM SAML SSO Integration data
addons.nexus.sso.idp_data.username💣
Type: string
""
Description: IdP Field Mappings – NXRM username attribute
addons.nexus.sso.idp_data.firstName💣
Type: string
""
Description: NXRM firstname attribute (optional)
addons.nexus.sso.idp_data.lastName💣
Type: string
""
Description: NXRM lastname attribute (optional)
addons.nexus.sso.idp_data.email💣
Type: string
""
Description: NXRM email attribute (optional)
addons.nexus.sso.idp_data.groups💣
Type: string
""
Description: NXRM groups attribute (optional)
addons.nexus.sso.idp_data.idpMetadata💣
Type: string
""
Description: IDP SAML Metadata XML as a single line string in single quotes – this information is public and does not require a secret
addons.nexus.sso.role💣
Type: list
[{"description":"","id":"","name":"","privileges":[],"roles":[]}]
Default value (formatted)
[
{
"description": "",
"id": "",
"name": "",
"privileges": [],
"roles": []
}
]
Description: NXRM Role
addons.nexus.flux💣
Type: object
{}
Default value (formatted)
{}
Description: Flux reconciliation overrides specifically for the Nexus Repository Manager Package
addons.nexus.values💣
Type: object
{}
Default value (formatted)
{}
Description: Values to passthrough to the nxrm chart: https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/nexus.git
addons.nexus.postRenderers💣
Type: list
[]
Default value (formatted)
[]
Description: Post Renderers. See docs/postrenders.md
addons.sonarqube.enabled💣
Type: bool
false
Description: Toggle deployment of SonarQube.
addons.sonarqube.git.repo💣
Type: string
"https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/sonarqube.git"
addons.sonarqube.git.path💣
Type: string
"./chart"
addons.sonarqube.git.tag💣
Type: string
"1.0.29-bb.4"
addons.sonarqube.flux💣
Type: object
{}
Default value (formatted)
{}
Description: Flux reconciliation overrides specifically for the Sonarqube Package
addons.sonarqube.ingress💣
Type: object
{"gateway":""}
Default value (formatted)
{
"gateway": ""
}
Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.
addons.sonarqube.sso.enabled💣
Type: bool
false
Description: Toggle SAML SSO for SonarQube. Enabling this option will auto-create any required secrets.
addons.sonarqube.sso.client_id💣
Type: string
""
Description: SonarQube SAML client ID
addons.sonarqube.sso.provider_name💣
Type: string
""
Description: SonarQube SSO login button label
addons.sonarqube.sso.certificate💣
Type: string
""
Description: SonarQube plaintext SAML sso certificate. example: MITCAYCBFyIEUjNBkqhkiG9w0BA....
addons.sonarqube.sso.login💣
Type: string
"login"
Description: SonarQube login sso attribute.
addons.sonarqube.sso.name💣
Type: string
"name"
Description: SonarQube name sso attribute.
addons.sonarqube.sso.email💣
Type: string
"email"
Description: SonarQube email sso attribute.
addons.sonarqube.sso.group💣
Type: string
"group"
Description: (optional) SonarQube group sso attribute.
addons.sonarqube.database.host💣
Type: string
""
Description: Hostname of a pre-existing PostgreSQL database to use for SonarQube.
addons.sonarqube.database.port💣
Type: int
5432
Description: Port of a pre-existing PostgreSQL database to use for SonarQube.
addons.sonarqube.database.database💣
Type: string
""
Description: Database name to connect to on host.
addons.sonarqube.database.username💣
Type: string
""
Description: Username to connect as to external database, the user must have all privileges on the database.
addons.sonarqube.database.password💣
Type: string
""
Description: Database password for the username used to connect to the existing database.
addons.sonarqube.values💣
Type: object
{}
Default value (formatted)
{}
Description: Values to passthrough to the sonarqube chart: https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/sonarqube.git
addons.sonarqube.postRenderers💣
Type: list
[]
Default value (formatted)
[]
Description: Post Renderers. See docs/postrenders.md
addons.haproxy.git.repo💣
Type: string
"https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/haproxy.git"
addons.haproxy.git.path💣
Type: string
"./chart"
addons.haproxy.git.tag💣
Type: string
"1.12.0-bb.0"
addons.haproxy.flux💣
Type: object
{}
Default value (formatted)
{}
Description: Flux reconciliation overrides specifically for the HAProxy Package
addons.haproxy.ingress💣
Type: object
{"gateway":""}
Default value (formatted)
{
"gateway": ""
}
Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.
addons.haproxy.values💣
Type: object
{}
Default value (formatted)
{}
Description: Values to passthrough to the haproxy chart: https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/haproxy.git
addons.haproxy.postRenderers💣
Type: list
[]
Default value (formatted)
[]
Description: Post Renderers. See docs/postrenders.md
addons.anchore.enabled💣
Type: bool
false
Description: Toggle deployment of Anchore.
addons.anchore.git.repo💣
Type: string
"https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/anchore-enterprise.git"
addons.anchore.git.path💣
Type: string
"./chart"
addons.anchore.git.tag💣
Type: string
"1.19.4-bb.1"
addons.anchore.flux💣
Type: object
{"upgrade":{"disableWait":true}}
Default value (formatted)
{
"upgrade": {
"disableWait": true
}
}
Description: Flux reconciliation overrides specifically for the Anchore Package
addons.anchore.adminPassword💣
Type: string
""
Description: Initial admin password used to authenticate to Anchore.
addons.anchore.enterprise💣
Type: object
{"enabled":false,"licenseYaml":"FULL LICENSE\n"}
Default value (formatted)
{
"enabled": false,
"licenseYaml": "FULL LICENSE
"
}
Description: Anchore Enterprise functionality.
addons.anchore.enterprise.enabled💣
Type: bool
false
Description: Toggle the installation of Anchore Enterprise. This must be accompanied by a valid license.
addons.anchore.enterprise.licenseYaml💣
Type: string
"FULL LICENSE\n"
Default value (formatted)
FULL LICENSE
Description: License for Anchore Enterprise. For formatting examples see https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/anchore-enterprise/-/blob/main/docs/CHART.md#enabling-enterprise-services
addons.anchore.ingress💣
Type: object
{"gateway":""}
Default value (formatted)
{
"gateway": ""
}
Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.
addons.anchore.sso.enabled💣
Type: bool
false
Description: Toggle OIDC SSO for Anchore on and off. Enabling this option will auto-create any required secrets (Note: SSO requires an Enterprise license).
addons.anchore.sso.client_id💣
Type: string
""
Description: Anchore OIDC client ID
addons.anchore.sso.role_attribute💣
Type: string
""
Description: Anchore OIDC client role attribute
addons.anchore.database.host💣
Type: string
""
Description: Hostname of a pre-existing PostgreSQL database to use for Anchore. Entering connection info will disable the deployment of an internal database and will auto-create any required secrets.
addons.anchore.database.port💣
Type: string
""
Description: Port of a pre-existing PostgreSQL database to use for Anchore.
addons.anchore.database.username💣
Type: string
""
Description: Username to connect as to external database, the user must have all privileges on the database.
addons.anchore.database.password💣
Type: string
""
Description: Database password for the username used to connect to the existing database.
addons.anchore.database.database💣
Type: string
""
Description: Database name to connect to on host (Note: database name CANNOT contain hyphens).
addons.anchore.database.feeds_database💣
Type: string
""
Description: Feeds database name to connect to on host (Note: feeds database name CANNOT contain hyphens). Only required for enterprise edition of anchore. By default, feeds database will be configured with the same username and password as the main database. For formatting examples on how to use a separate username and password for the feeds database see https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/anchore-enterprise/-/blob/main/docs/CHART.md#handling-dependencies
addons.anchore.redis.host💣
Type: string
""
Description: Hostname of a pre-existing Redis to use for Anchore Enterprise. Entering connection info will enable external redis and will auto-create any required secrets. Anchore only requires redis for enterprise deployments and will not provision an instance if using external
addons.anchore.redis.port💣
Type: string
""
Description: Port of a pre-existing Redis to use for Anchore Enterprise.
addons.anchore.redis.username💣
Type: string
""
Description: OPTIONAL: Username to connect to a pre-existing Redis (for password-only auth leave empty)
addons.anchore.redis.password💣
Type: string
""
Description: Password to connect to pre-existing Redis.
addons.anchore.values💣
Type: object
{}
Default value (formatted)
{}
Description: Values to passthrough to the anchore chart: https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/anchore-enterprise.git
addons.anchore.postRenderers💣
Type: list
[]
Default value (formatted)
[]
Description: Post Renderers. See docs/postrenders.md
addons.mattermostoperator.enabled💣
Type: bool
false
addons.mattermostoperator.git.repo💣
Type: string
"https://repo1.dso.mil/platform-one/big-bang/apps/collaboration-tools/mattermost-operator.git"
addons.mattermostoperator.git.path💣
Type: string
"./chart"
addons.mattermostoperator.git.tag💣
Type: string
"1.18.1-bb.1"
addons.mattermostoperator.flux💣
Type: object
{}
Default value (formatted)
{}
Description: Flux reconciliation overrides specifically for the Mattermost Operator Package
addons.mattermostoperator.values💣
Type: object
{}
Default value (formatted)
{}
Description: Values to passthrough to the mattermost operator chart: https://repo1.dso.mil/platform-one/big-bang/apps/collaboration-tools/mattermost-operator/-/blob/main/chart/values.yaml
addons.mattermostoperator.postRenderers💣
Type: list
[]
Default value (formatted)
[]
Description: Post Renderers. See docs/postrenders.md
addons.mattermost.enabled💣
Type: bool
false
Description: Toggle deployment of Mattermost.
addons.mattermost.git.repo💣
Type: string
"https://repo1.dso.mil/platform-one/big-bang/apps/collaboration-tools/mattermost.git"
addons.mattermost.git.path💣
Type: string
"./chart"
addons.mattermost.git.tag💣
Type: string
"7.3.0-bb.0"
addons.mattermost.flux💣
Type: object
{}
Default value (formatted)
{}
Description: Flux reconciliation overrides specifically for the Mattermost Package
addons.mattermost.enterprise💣
Type: object
{"enabled":false,"license":""}
Default value (formatted)
{
"enabled": false,
"license": ""
}
Description: Mattermost Enterprise functionality.
addons.mattermost.enterprise.enabled💣
Type: bool
false
Description: Toggle the Mattermost Enterprise. This must be accompanied by a valid license unless you plan to start a trial post-install.
addons.mattermost.enterprise.license💣
Type: string
""
Description: License for Mattermost. This should be the entire contents of the license file from Mattermost (should be one line), example below license: “eyJpZCI6InIxM205bjR3eTdkYjludG95Z3RiOD—REST—IS—HIDDEN
addons.mattermost.ingress💣
Type: object
{"gateway":""}
Default value (formatted)
{
"gateway": ""
}
Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.
addons.mattermost.sso.enabled💣
Type: bool
false
Description: Toggle OIDC SSO for Mattermost on and off. Enabling this option will auto-create any required secrets.
addons.mattermost.sso.client_id💣
Type: string
""
Description: Mattermost OIDC client ID
addons.mattermost.sso.client_secret💣
Type: string
""
Description: Mattermost OIDC client secret
addons.mattermost.sso.auth_endpoint💣
Type: string
""
Description: Mattermost OIDC auth endpoint To get endpoint values, see here: https://repo1.dso.mil/platform-one/big-bang/apps/collaboration-tools/mattermost/-/blob/main/docs/keycloak.md#helm-values
addons.mattermost.sso.token_endpoint💣
Type: string
""
Description: Mattermost OIDC token endpoint To get endpoint values, see here: https://repo1.dso.mil/platform-one/big-bang/apps/collaboration-tools/mattermost/-/blob/main/docs/keycloak.md#helm-values
addons.mattermost.sso.user_api_endpoint💣
Type: string
""
Description: Mattermost OIDC user API endpoint To get endpoint values, see here: https://repo1.dso.mil/platform-one/big-bang/apps/collaboration-tools/mattermost/-/blob/main/docs/keycloak.md#helm-values
addons.mattermost.database.host💣
Type: string
""
Description: Hostname of a pre-existing PostgreSQL database to use for Mattermost. Entering connection info will disable the deployment of an internal database and will auto-create any required secrets.
addons.mattermost.database.port💣
Type: string
""
Description: Port of a pre-existing PostgreSQL database to use for Mattermost.
addons.mattermost.database.username💣
Type: string
""
Description: Username to connect as to external database, the user must have all privileges on the database.
addons.mattermost.database.password💣
Type: string
""
Description: Database password for the username used to connect to the existing database.
addons.mattermost.database.database💣
Type: string
""
Description: Database name to connect to on host.
addons.mattermost.database.ssl_mode💣
Type: string
""
Description: SSL Mode to use when connecting to the database. Allowable values for this are viewable in the postgres documentation: https://www.postgresql.org/docs/current/libpq-ssl.html#LIBPQ-SSL-SSLMODE-STATEMENTS
addons.mattermost.objectStorage.endpoint💣
Type: string
""
Description: S3 compatible endpoint to use for connection information. Entering connection info will enable this option and will auto-create any required secrets. examples: “s3.amazonaws.com” “s3.us-gov-west-1.amazonaws.com” “minio.minio.svc.cluster.local:9000”
addons.mattermost.objectStorage.accessKey💣
Type: string
""
Description: Access key for connecting to object storage endpoint.
addons.mattermost.objectStorage.accessSecret💣
Type: string
""
Description: Secret key for connecting to object storage endpoint. Unencoded string data. This should be placed in the secret values and then encrypted
addons.mattermost.objectStorage.bucket💣
Type: string
""
Description: Bucket name to use for Mattermost - will be auto-created.
addons.mattermost.elasticsearch💣
Type: object
{"enabled":false}
Default value (formatted)
{
"enabled": false
}
Description: Mattermost Elasticsearch integration - requires enterprise E20 license - https://docs.mattermost.com/deployment/elasticsearch.html Connection info defaults to the BB deployed Elastic, all values can be overridden via the “values” passthrough for other connections. See values spec in MM chart “elasticsearch” yaml block - https://repo1.dso.mil/platform-one/big-bang/apps/collaboration-tools/mattermost/-/blob/main/chart/values.yaml
addons.mattermost.elasticsearch.enabled💣
Type: bool
false
Description: Toggle interaction with Elastic for optimized search indexing
addons.mattermost.values💣
Type: object
{}
Default value (formatted)
{}
Description: Values to passthrough to the Mattermost chart: https://repo1.dso.mil/platform-one/big-bang/apps/collaboration-tools/mattermost/-/blob/main/chart/values.yaml
addons.mattermost.postRenderers💣
Type: list
[]
Default value (formatted)
[]
Description: Post Renderers. See docs/postrenders.md
addons.velero.enabled💣
Type: bool
false
Description: Toggle deployment of Velero.
addons.velero.git.repo💣
Type: string
"https://repo1.dso.mil/platform-one/big-bang/apps/cluster-utilities/velero.git"
addons.velero.git.path💣
Type: string
"./chart"
addons.velero.git.tag💣
Type: string
"2.31.3-bb.2"
addons.velero.flux💣
Type: object
{}
Default value (formatted)
{}
Description: Flux reconciliation overrides specifically for the Velero Package
addons.velero.plugins💣
Type: list
[]
Default value (formatted)
[]
Description: Plugin provider for Velero - requires at least one plugin installed. Current supported values: aws, azure, csi
addons.velero.values💣
Type: object
{}
Default value (formatted)
{}
Description: Values to passthrough to the Velero chart: https://repo1.dso.mil/platform-one/big-bang/apps/cluster-utilities/velero/-/blob/main/chart/values.yaml
addons.velero.postRenderers💣
Type: list
[]
Default value (formatted)
[]
Description: Post Renderers. See docs/postrenders.md
addons.keycloak.enabled💣
Type: bool
false
Description: Toggle deployment of Keycloak. if you enable Keycloak you should uncomment the istio passthrough configurations above istio.ingressGateways.passthrough-ingressgateway and istio.gateways.passthrough
addons.keycloak.git.repo💣
Type: string
"https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/keycloak.git"
addons.keycloak.git.path💣
Type: string
"./chart"
addons.keycloak.git.tag💣
Type: string
"18.2.1-bb.4"
addons.keycloak.database.host💣
Type: string
""
Description: Hostname of a pre-existing database to use for Keycloak. Entering connection info will disable the deployment of an internal database and will auto-create any required secrets.
addons.keycloak.database.type💣
Type: string
"postgres"
Description: Pre-existing database type (e.g. postgres) to use for Keycloak.
addons.keycloak.database.port💣
Type: int
5432
Description: Port of a pre-existing database to use for Keycloak.
addons.keycloak.database.database💣
Type: string
""
Description: Database name to connect to on host.
addons.keycloak.database.username💣
Type: string
""
Description: Username to connect as to external database, the user must have all privileges on the database.
addons.keycloak.database.password💣
Type: string
""
Description: Database password for the username used to connect to the existing database.
addons.keycloak.flux💣
Type: object
{}
Default value (formatted)
{}
Description: Flux reconciliation overrides specifically for the OPA Gatekeeper Package
addons.keycloak.ingress💣
Type: object
{"cert":"","gateway":"passthrough","key":""}
Default value (formatted)
{
"cert": "",
"gateway": "passthrough",
"key": ""
}
Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.
addons.keycloak.ingress.key💣
Type: string
""
Description: Certificate/Key pair to use as the certificate for exposing Keycloak Setting the ingress cert here will automatically create the volume and volumemounts in the Keycloak Package chart
addons.keycloak.values💣
Type: object
{}
Default value (formatted)
{}
Description: Values to passthrough to the keycloak chart: https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/keycloak.git
addons.keycloak.postRenderers💣
Type: list
[]
Default value (formatted)
[]
Description: Post Renderers. See docs/postrenders.md
addons.vault.enabled💣
Type: bool
false
Description: Toggle deployment of Vault.
addons.vault.git.repo💣
Type: string
"https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/vault.git"
addons.vault.git.path💣
Type: string
"./chart"
addons.vault.git.tag💣
Type: string
"0.22.0-bb.2"
addons.vault.flux💣
Type: object
{}
Default value (formatted)
{}
Description: Flux reconciliation overrides specifically for the Vault Package
addons.vault.ingress💣
Type: object
{"cert":"","gateway":"","key":""}
Default value (formatted)
{
"cert": "",
"gateway": "",
"key": ""
}
Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.
addons.vault.ingress.key💣
Type: string
""
Description: Certificate/Key pair to use as the certificate for exposing Vault Setting the ingress cert here will automatically create the volume and volumemounts in the Vault package chart
addons.vault.values💣
Type: object
{}
Default value (formatted)
{}
Description: Values to passthrough to the vault chart: https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/vault.git
addons.vault.postRenderers💣
Type: list
[]
Default value (formatted)
[]
Description: Post Renderers. See docs/postrenders.md
addons.metricsServer.enabled💣
Type: string
"auto"
Description: Toggle deployment of metrics server Acceptable options are enabled: true, enabled: false, enabled: auto true = enabled / false = disabled / auto = automatic (Installs only if metrics API endpoint is not present)
addons.metricsServer.git.repo💣
Type: string
"https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/metrics-server.git"
addons.metricsServer.git.path💣
Type: string
"./chart"
addons.metricsServer.git.tag💣
Type: string
"3.8.0-bb.4"
addons.metricsServer.flux💣
Type: object
{}
Default value (formatted)
{}
Description: Flux reconciliation overrides specifically for the metrics server Package
addons.metricsServer.values💣
Type: object
{}
Default value (formatted)
{}
Description: Values to passthrough to the metrics server chart: https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/metrics-server.git
addons.metricsServer.postRenderers💣
Type: list
[]
Default value (formatted)
[]
Description: Post Renderers. See docs/postrenders.md