Skip to content

Big Bang values.yaml💣

domain💣

Type: string

Default value
"bigbang.dev"

Description: Domain used for BigBang created exposed services, can be overridden by individual packages.

offline💣

Type: bool

Default value
false

Description: (experimental) Toggle sourcing from external repos. All this does right now is toggle GitRepositories, it is not fully functional

registryCredentials💣

Type: object

Default value
{"email":"","password":"","registry":"registry1.dso.mil","username":""}
Default value (formatted)
{
  "email": "",
  "password": "",
  "registry": "registry1.dso.mil",
  "username": ""
}

Description: Single set of registry credentials used to pull all images deployed by BigBang.

openshift💣

Type: bool

Default value
false

Description: Multiple sets of registry credentials used to pull all images deployed by BigBang. Credentials will only be created when a valid combination exists, registry, username, and password (email is optional) Or a list of registires: - registry: registry1.dso.mil username: “” password: “” email: “” - registry: registry.dso.mil username: “” password: “” email: “” Openshift Container Platform Feature Toggle

git💣

Type: object

Default value
{"credentials":{"caFile":"","knownHosts":"","password":"","privateKey":"","publicKey":"","username":""},"existingSecret":""}
Default value (formatted)
{
  "credentials": {
    "caFile": "",
    "knownHosts": "",
    "password": "",
    "privateKey": "",
    "publicKey": "",
    "username": ""
  },
  "existingSecret": ""
}

Description: Git credential settings for accessing private repositories Order of precedence is: 1. existingSecret 2. http credentials (username/password/caFile) 3. ssh credentials (privateKey/publicKey/knownHosts)

git.existingSecret💣

Type: string

Default value
""

Description: Existing secret to use for git credentials, must be in the appropriate format: https://toolkit.fluxcd.io/components/source/gitrepositories/#https-authentication

git.credentials💣

Type: object

Default value
{"caFile":"","knownHosts":"","password":"","privateKey":"","publicKey":"","username":""}
Default value (formatted)
{
  "caFile": "",
  "knownHosts": "",
  "password": "",
  "privateKey": "",
  "publicKey": "",
  "username": ""
}

Description: Chart created secrets with user defined values

git.credentials.username💣

Type: string

Default value
""

Description: HTTP git credentials, both username and password must be provided

git.credentials.caFile💣

Type: string

Default value
""

Description: HTTPS certificate authority file. Required for any repo with a self signed certificate

git.credentials.privateKey💣

Type: string

Default value
""

Description: SSH git credentials, privateKey, publicKey, and knownHosts must be provided

sso💣

Type: object

Default value
{"certificateAuthority":{"cert":"","secretName":"tls-ca-sso"},"name":"SSO","oidc":{"authorization":"{{ .Values.sso.url }}/protocol/openid-connect/auth","claims":{"email":"email","groups":"groups","name":"name","username":"preferred_username"},"endSession":"{{ .Values.sso.url }}/protocol/openid-connect/logout","jwks":"","jwksUri":"{{ .Values.sso.url }}/protocol/openid-connect/certs","token":"{{ .Values.sso.url }}/protocol/openid-connect/token","userinfo":"{{ .Values.sso.url }}/protocol/openid-connect/userinfo"},"saml":{"entityDescriptor":"{{ .Values.sso.url }}/protocol/saml/descriptor","metadata":"","service":"{{ .Values.sso.url }}/protocol/saml"},"url":"https://login.dso.mil/auth/realms/baby-yoda"}
Default value (formatted)
{
  "certificateAuthority": {
    "cert": "",
    "secretName": "tls-ca-sso"
  },
  "name": "SSO",
  "oidc": {
    "authorization": "{{ .Values.sso.url }}/protocol/openid-connect/auth",
    "claims": {
      "email": "email",
      "groups": "groups",
      "name": "name",
      "username": "preferred_username"
    },
    "endSession": "{{ .Values.sso.url }}/protocol/openid-connect/logout",
    "jwks": "",
    "jwksUri": "{{ .Values.sso.url }}/protocol/openid-connect/certs",
    "token": "{{ .Values.sso.url }}/protocol/openid-connect/token",
    "userinfo": "{{ .Values.sso.url }}/protocol/openid-connect/userinfo"
  },
  "saml": {
    "entityDescriptor": "{{ .Values.sso.url }}/protocol/saml/descriptor",
    "metadata": "",
    "service": "{{ .Values.sso.url }}/protocol/saml"
  },
  "url": "https://login.dso.mil/auth/realms/baby-yoda"
}

Description: Global SSO values used for BigBang deployments when sso is enabled

sso.name💣

Type: string

Default value
"SSO"

Description: Name of the identity provider. This is used by some packages as the SSO login label.

sso.url💣

Type: string

Default value
"https://login.dso.mil/auth/realms/baby-yoda"

Description: Base URL for the identity provider. For OIDC, this is the issuer. For SAML this is the entityID.

sso.certificateAuthority💣

Type: object

Default value
{"cert":"","secretName":"tls-ca-sso"}
Default value (formatted)
{
  "cert": "",
  "secretName": "tls-ca-sso"
}

Description: Certificate authority for the identity provider’s certificates

sso.certificateAuthority.cert💣

Type: string

Default value
""

Description: The certificate authority public certificate in .pem format. Populating this will create a secret in each namespace that enables SSO.

sso.certificateAuthority.secretName💣

Type: string

Default value
"tls-ca-sso"

Description: The secret name to use for the certificate authority. Can be manually populated if cert is blank.

sso.saml.entityDescriptor💣

Type: string

Default value
"{{ .Values.sso.url }}/protocol/saml/descriptor"

Description: SAML entityDescriptor (metadata) path

sso.saml.service💣

Type: string

Default value
"{{ .Values.sso.url }}/protocol/saml"

Description: SAML SSO Service path

sso.saml.metadata💣

Type: string

Default value
""

Description: Literal SAML XML metadata retrieved from {{ .Values.sso.saml.entityDescriptor }}. Required for SSO in Nexus, Twistlock, or Sonarqube.

sso.oidc💣

Type: object

Default value
{"authorization":"{{ .Values.sso.url }}/protocol/openid-connect/auth","claims":{"email":"email","groups":"groups","name":"name","username":"preferred_username"},"endSession":"{{ .Values.sso.url }}/protocol/openid-connect/logout","jwks":"","jwksUri":"{{ .Values.sso.url }}/protocol/openid-connect/certs","token":"{{ .Values.sso.url }}/protocol/openid-connect/token","userinfo":"{{ .Values.sso.url }}/protocol/openid-connect/userinfo"}
Default value (formatted)
{
  "authorization": "{{ .Values.sso.url }}/protocol/openid-connect/auth",
  "claims": {
    "email": "email",
    "groups": "groups",
    "name": "name",
    "username": "preferred_username"
  },
  "endSession": "{{ .Values.sso.url }}/protocol/openid-connect/logout",
  "jwks": "",
  "jwksUri": "{{ .Values.sso.url }}/protocol/openid-connect/certs",
  "token": "{{ .Values.sso.url }}/protocol/openid-connect/token",
  "userinfo": "{{ .Values.sso.url }}/protocol/openid-connect/userinfo"
}

Description: OIDC endpoints can be retrieved from {{ .Values.sso.url }}/.well-known/openid-configuration

sso.oidc.authorization💣

Type: string

Default value
"{{ .Values.sso.url }}/protocol/openid-connect/auth"

Description: OIDC authorization path

sso.oidc.endSession💣

Type: string

Default value
"{{ .Values.sso.url }}/protocol/openid-connect/logout"

Description: OIDC logout / end session path

sso.oidc.jwksUri💣

Type: string

Default value
"{{ .Values.sso.url }}/protocol/openid-connect/certs"

Description: OIDC JSON Web Key Set (JWKS) path

sso.oidc.token💣

Type: string

Default value
"{{ .Values.sso.url }}/protocol/openid-connect/token"

Description: OIDC token path

sso.oidc.userinfo💣

Type: string

Default value
"{{ .Values.sso.url }}/protocol/openid-connect/userinfo"

Description: OIDC user information path

sso.oidc.jwks💣

Type: string

Default value
""

Description: Literal OIDC JWKS data retrieved from JWKS Uri. Only needed if jwsksUri is not defined.

sso.oidc.claims💣

Type: object

Default value
{"email":"email","groups":"groups","name":"name","username":"preferred_username"}
Default value (formatted)
{
  "email": "email",
  "groups": "groups",
  "name": "name",
  "username": "preferred_username"
}

Description: Identity provider claim names that store metadata about the authenticated user.

sso.oidc.claims.email💣

Type: string

Default value
"email"

Description: IdP’s claim name used for the user’s email address.

sso.oidc.claims.name💣

Type: string

Default value
"name"

Description: IdP’s claim name used for the user’s full name

sso.oidc.claims.username💣

Type: string

Default value
"preferred_username"

Description: IdP’s claim name used for the username

sso.oidc.claims.groups💣

Type: string

Default value
"groups"

Description: IdP’s claim name used for the user’s groups or roles

flux💣

Type: object

Default value
{"install":{"remediation":{"retries":-1}},"interval":"2m","rollback":{"cleanupOnFail":true,"timeout":"10m"},"test":{"enable":false},"timeout":"10m","upgrade":{"cleanupOnFail":true,"remediation":{"remediateLastFailure":true,"retries":3}}}
Default value (formatted)
{
  "install": {
    "remediation": {
      "retries": -1
    }
  },
  "interval": "2m",
  "rollback": {
    "cleanupOnFail": true,
    "timeout": "10m"
  },
  "test": {
    "enable": false
  },
  "timeout": "10m",
  "upgrade": {
    "cleanupOnFail": true,
    "remediation": {
      "remediateLastFailure": true,
      "retries": 3
    }
  }
}

Description: (Advanced) Flux reconciliation parameters. The default values provided will be sufficient for the majority of workloads.

networkPolicies💣

Type: object

Default value
{"controlPlaneCidr":"0.0.0.0/0","enabled":true,"nodeCidr":"","vpcCidr":"0.0.0.0/0"}
Default value (formatted)
{
  "controlPlaneCidr": "0.0.0.0/0",
  "enabled": true,
  "nodeCidr": "",
  "vpcCidr": "0.0.0.0/0"
}

Description: Global NetworkPolicies settings

networkPolicies.enabled💣

Type: bool

Default value
true

Description: Toggle all package NetworkPolicies, can disable specific packages with package.values.networkPolicies.enabled

networkPolicies.controlPlaneCidr💣

Type: string

Default value
"0.0.0.0/0"

Description: Control Plane CIDR, defaults to 0.0.0.0/0, use kubectl get endpoints -n default kubernetes to get the CIDR range needed for your cluster Must be an IP CIDR range (x.x.x.x/x - ideally with /32 for the specific IP of a single endpoint, broader range for multiple masters/endpoints) Used by package NetworkPolicies to allow Kube API access

networkPolicies.nodeCidr💣

Type: string

Default value
""

Description: Node CIDR, defaults to allowing “10.0.0.0/8” “172.16.0.0/12” “192.168.0.0/16” “100.64.0.0/10” networks. use kubectl get nodes -owide and review the INTERNAL-IP column to derive CIDR range. Must be an IP CIDR range (x.x.x.x/x - ideally a /16 or /24 to include multiple IPs)

networkPolicies.vpcCidr💣

Type: string

Default value
"0.0.0.0/0"

Description: VPC CIDR, defaults to 0.0.0.0/0 In a production environment, it is recommended to setup a Private Endpoint for your AWS services like KMS or S3. Please review https://docs.aws.amazon.com/kms/latest/developerguide/kms-vpc-endpoint.html to setup routing to AWS services that never leave the AWS network. Once created update networkPolicies.vpcCidr to match the CIDR of your VPC so Vault will be able to reach your VPCs DNS and new KMS endpoint.

imagePullPolicy💣

Type: string

Default value
"IfNotPresent"

Description: Global ImagePullPolicy value for all packages Permitted values are: None, Always, IfNotPresent

istio.enabled💣

Type: bool

Default value
true

Description: Toggle deployment of Istio.

istio.git.repo💣

Type: string

Default value
"https://repo1.dso.mil/platform-one/big-bang/apps/core/istio-controlplane.git"

istio.git.path💣

Type: string

Default value
"./chart"

istio.git.tag💣

Type: string

Default value
"1.16.2-bb.0"

istio.enterprise💣

Type: bool

Default value
false

Description: Tetrate Istio Distribution - Tetrate provides FIPs verified Istio and Envoy software and support, validated through the FIPs Boring Crypto module. Find out more from Tetrate - https://www.tetrate.io/tetrate-istio-subscription

istio.ingressGateways.public-ingressgateway.type💣

Type: string

Default value
"LoadBalancer"

istio.ingressGateways.public-ingressgateway.kubernetesResourceSpec💣

Type: object

Default value
{}
Default value (formatted)
{}

istio.gateways.public.ingressGateway💣

Type: string

Default value
"public-ingressgateway"

istio.gateways.public.hosts[0]💣

Type: string

Default value
"*.{{ .Values.domain }}"

istio.gateways.public.autoHttpRedirect💣

Type: object

Default value
{"enabled":true}
Default value (formatted)
{
  "enabled": true
}

Description: Controls default HTTP/8080 server entry with HTTP to HTTPS Redirect.

istio.gateways.public.tls.key💣

Type: string

Default value
""

istio.gateways.public.tls.cert💣

Type: string

Default value
""

istio.flux💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Flux reconciliation overrides specifically for the Istio Package

istio.values💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Values to passthrough to the istio-controlplane chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/istio-controlplane.git

istio.postRenderers💣

Type: list

Default value
[]
Default value (formatted)
[]

Description: Post Renderers. See docs/postrenders.md

istiooperator.enabled💣

Type: bool

Default value
true

Description: Toggle deployment of Istio Operator.

istiooperator.git.repo💣

Type: string

Default value
"https://repo1.dso.mil/platform-one/big-bang/apps/core/istio-operator.git"

istiooperator.git.path💣

Type: string

Default value
"./chart"

istiooperator.git.tag💣

Type: string

Default value
"1.16.2-bb.0"

istiooperator.flux💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Flux reconciliation overrides specifically for the Istio Operator Package

istiooperator.values💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Values to passthrough to the istio-operator chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/istio-operator.git

istiooperator.postRenderers💣

Type: list

Default value
[]
Default value (formatted)
[]

Description: Post Renderers. See docs/postrenders.md

jaeger.enabled💣

Type: bool

Default value
true

Description: Toggle deployment of Jaeger.

jaeger.git.repo💣

Type: string

Default value
"https://repo1.dso.mil/platform-one/big-bang/apps/core/jaeger.git"

jaeger.git.path💣

Type: string

Default value
"./chart"

jaeger.git.tag💣

Type: string

Default value
"2.38.0-bb.1"

jaeger.flux💣

Type: object

Default value
{"install":{"crds":"CreateReplace"},"upgrade":{"crds":"CreateReplace"}}
Default value (formatted)
{
  "install": {
    "crds": "CreateReplace"
  },
  "upgrade": {
    "crds": "CreateReplace"
  }
}

Description: Flux reconciliation overrides specifically for the Jaeger Package

jaeger.ingress💣

Type: object

Default value
{"gateway":""}
Default value (formatted)
{
  "gateway": ""
}

Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.

jaeger.sso.enabled💣

Type: bool

Default value
false

Description: Toggle SSO for Jaeger on and off

jaeger.sso.client_id💣

Type: string

Default value
""

Description: OIDC Client ID to use for Jaeger

jaeger.sso.client_secret💣

Type: string

Default value
""

Description: OIDC Client Secret to use for Jaeger

jaeger.values💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Values to pass through to Jaeger chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/jaeger.git

jaeger.postRenderers💣

Type: list

Default value
[]
Default value (formatted)
[]

Description: Post Renderers. See docs/postrenders.md

kiali.enabled💣

Type: bool

Default value
true

Description: Toggle deployment of Kiali.

kiali.git.repo💣

Type: string

Default value
"https://repo1.dso.mil/platform-one/big-bang/apps/core/kiali.git"

kiali.git.path💣

Type: string

Default value
"./chart"

kiali.git.tag💣

Type: string

Default value
"1.60.0-bb.2"

kiali.flux💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Flux reconciliation overrides specifically for the Kiali Package

kiali.ingress💣

Type: object

Default value
{"gateway":""}
Default value (formatted)
{
  "gateway": ""
}

Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.

kiali.sso.enabled💣

Type: bool

Default value
false

Description: Toggle SSO for Kiali on and off

kiali.sso.client_id💣

Type: string

Default value
""

Description: OIDC Client ID to use for Kiali

kiali.sso.client_secret💣

Type: string

Default value
""

Description: OIDC Client Secret to use for Kiali

kiali.values💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Values to pass through to Kiali chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/kiali

kiali.postRenderers💣

Type: list

Default value
[]
Default value (formatted)
[]

Description: Post Renderers. See docs/postrenders.md

clusterAuditor.enabled💣

Type: bool

Default value
true

Description: Toggle deployment of Cluster Auditor.

clusterAuditor.git.repo💣

Type: string

Default value
"https://repo1.dso.mil/platform-one/big-bang/apps/core/cluster-auditor.git"

clusterAuditor.git.path💣

Type: string

Default value
"./chart"

clusterAuditor.git.tag💣

Type: string

Default value
"1.5.0-bb.2"

clusterAuditor.flux💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Flux reconciliation overrides specifically for the Cluster Auditor Package

clusterAuditor.values💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Values to passthrough to the cluster auditor chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/cluster-auditor.git

clusterAuditor.postRenderers💣

Type: list

Default value
[]
Default value (formatted)
[]

Description: Post Renderers. See docs/postrenders.md

gatekeeper.enabled💣

Type: bool

Default value
true

Description: Toggle deployment of OPA Gatekeeper.

gatekeeper.git.repo💣

Type: string

Default value
"https://repo1.dso.mil/platform-one/big-bang/apps/core/policy.git"

gatekeeper.git.path💣

Type: string

Default value
"./chart"

gatekeeper.git.tag💣

Type: string

Default value
"3.11.0-bb.0"

gatekeeper.flux💣

Type: object

Default value
{"install":{"crds":"CreateReplace"},"upgrade":{"crds":"CreateReplace"}}
Default value (formatted)
{
  "install": {
    "crds": "CreateReplace"
  },
  "upgrade": {
    "crds": "CreateReplace"
  }
}

Description: Flux reconciliation overrides specifically for the OPA Gatekeeper Package

gatekeeper.values💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Values to passthrough to the gatekeeper chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/policy.git

gatekeeper.postRenderers💣

Type: list

Default value
[]
Default value (formatted)
[]

Description: Post Renderers. See docs/postrenders.md

kyverno.enabled💣

Type: bool

Default value
false

Description: Toggle deployment of Kyverno.

kyverno.git.repo💣

Type: string

Default value
"https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/kyverno.git"

kyverno.git.path💣

Type: string

Default value
"./chart"

kyverno.git.tag💣

Type: string

Default value
"2.6.5-bb.2"

kyverno.flux💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Flux reconciliation overrides specifically for the Kyverno Package

kyverno.values💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Values to passthrough to the kyverno chart: https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/kyverno.git

kyverno.postRenderers💣

Type: list

Default value
[]
Default value (formatted)
[]

Description: Post Renderers. See docs/postrenders.md

kyvernopolicies.enabled💣

Type: bool

Default value
false

Description: Toggle deployment of Kyverno policies

kyvernopolicies.git.repo💣

Type: string

Default value
"https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/kyverno-policies.git"

kyvernopolicies.git.path💣

Type: string

Default value
"./chart"

kyvernopolicies.git.tag💣

Type: string

Default value
"1.1.0-bb.2"

kyvernopolicies.flux💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Flux reconciliation overrides specifically for the Kyverno Package

kyvernopolicies.values💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Values to passthrough to the kyverno policies chart: https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/kyverno-policies.git

kyvernopolicies.postRenderers💣

Type: list

Default value
[]
Default value (formatted)
[]

Description: Post Renderers. See docs/postrenders.md

kyvernoreporter.enabled💣

Type: bool

Default value
false

Description: Toggle deployment of Kyverno Reporter

kyvernoreporter.git.repo💣

Type: string

Default value
"https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/kyverno-reporter.git"

kyvernoreporter.git.path💣

Type: string

Default value
"./chart"

kyvernoreporter.git.tag💣

Type: string

Default value
"2.16.0-bb.0"

kyvernoreporter.flux💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Flux reconciliation overrides specifically for the Kyverno Reporter Package

kyvernoreporter.values💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Values to passthrough to the kyverno reporter chart: https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/kyverno-reporter.git

kyvernoreporter.postRenderers💣

Type: list

Default value
[]
Default value (formatted)
[]

Description: Post Renderers. See docs/postrenders.md

logging.enabled💣

Type: bool

Default value
true

Description: Toggle deployment of Logging (EFK).

logging.git.repo💣

Type: string

Default value
"https://repo1.dso.mil/platform-one/big-bang/apps/core/elasticsearch-kibana.git"

logging.git.path💣

Type: string

Default value
"./chart"

logging.git.tag💣

Type: string

Default value
"1.1.0-bb.0"

logging.flux💣

Type: object

Default value
{"timeout":"20m"}
Default value (formatted)
{
  "timeout": "20m"
}

Description: Flux reconciliation overrides specifically for the Logging (EFK) Package

logging.ingress💣

Type: object

Default value
{"gateway":""}
Default value (formatted)
{
  "gateway": ""
}

Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.

logging.sso.enabled💣

Type: bool

Default value
false

Description: Toggle OIDC SSO for Kibana/Elasticsearch on and off. Enabling this option will auto-create any required secrets.

logging.sso.client_id💣

Type: string

Default value
""

Description: Elasticsearch/Kibana OIDC client ID

logging.sso.client_secret💣

Type: string

Default value
""

Description: Elasticsearch/Kibana OIDC client secret

logging.license.trial💣

Type: bool

Default value
false

Description: Toggle trial license installation of elasticsearch. Note that enterprise (non trial) is required for SSO to work.

logging.license.keyJSON💣

Type: string

Default value
""

Description: Elasticsearch license in json format seen here: https://repo1.dso.mil/platform-one/big-bang/apps/core/elasticsearch-kibana#enterprise-license

logging.values💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Values to passthrough to the elasticsearch-kibana chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/elasticsearch-kibana.git

logging.postRenderers💣

Type: list

Default value
[]
Default value (formatted)
[]

Description: Post Renderers. See docs/postrenders.md

eckoperator.enabled💣

Type: bool

Default value
true

Description: Toggle deployment of ECK Operator.

eckoperator.git.repo💣

Type: string

Default value
"https://repo1.dso.mil/platform-one/big-bang/apps/core/eck-operator.git"

eckoperator.git.path💣

Type: string

Default value
"./chart"

eckoperator.git.tag💣

Type: string

Default value
"2.6.1-bb.0"

eckoperator.flux💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Flux reconciliation overrides specifically for the ECK Operator Package

eckoperator.values💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Values to passthrough to the eck-operator chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/eck-operator.git

fluentbit.enabled💣

Type: bool

Default value
true

Description: Toggle deployment of Fluent-Bit.

fluentbit.git.repo💣

Type: string

Default value
"https://repo1.dso.mil/platform-one/big-bang/apps/core/fluentbit.git"

fluentbit.git.path💣

Type: string

Default value
"./chart"

fluentbit.git.tag💣

Type: string

Default value
"0.24.0-bb.0"

fluentbit.flux💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Flux reconciliation overrides specifically for the Fluent-Bit Package

fluentbit.values💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Values to passthrough to the fluentbit chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/fluentbit.git

fluentbit.postRenderers💣

Type: list

Default value
[]
Default value (formatted)
[]

Description: Post Renderers. See docs/postrenders.md

promtail.enabled💣

Type: bool

Default value
false

Description: Toggle deployment of Promtail.

promtail.git.repo💣

Type: string

Default value
"https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/promtail.git"

promtail.git.path💣

Type: string

Default value
"./chart"

promtail.git.tag💣

Type: string

Default value
"6.8.1-bb.1"

promtail.flux💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Flux reconciliation overrides specifically for the Promtail Package

promtail.values💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Values to passthrough to the promtail chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/fluentbit.git

promtail.postRenderers💣

Type: list

Default value
[]
Default value (formatted)
[]

Description: Post Renderers. See docs/postrenders.md

loki.enabled💣

Type: bool

Default value
false

Description: Toggle deployment of Loki.

loki.git.repo💣

Type: string

Default value
"https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/loki.git"

loki.git.path💣

Type: string

Default value
"./chart"

loki.git.tag💣

Type: string

Default value
"4.4.2-bb.0"

loki.flux💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Flux reconciliation overrides specifically for the Loki Package

loki.strategy💣

Type: string

Default value
"monolith"

Description: Loki architecture. Options are monolith and scalable

loki.objectStorage.endpoint💣

Type: string

Default value
""

Description: S3 compatible endpoint to use for connection information. examples: “https://s3.amazonaws.com” “https://s3.us-gov-west-1.amazonaws.com” “http://minio.minio.svc.cluster.local:9000”

loki.objectStorage.region💣

Type: string

Default value
""

Description: S3 compatible region to use for connection information.

loki.objectStorage.accessKey💣

Type: string

Default value
""

Description: Access key for connecting to object storage endpoint.

loki.objectStorage.accessSecret💣

Type: string

Default value
""

Description: Secret key for connecting to object storage endpoint. Unencoded string data. This should be placed in the secret values and then encrypted

loki.objectStorage.bucketNames💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Bucket Names for the Loki buckets as YAML chunks: loki-logs ruler: loki-ruler admin: loki-admin

loki.values💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Values to passthrough to the Loki chart: https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/loki.git

loki.postRenderers💣

Type: list

Default value
[]
Default value (formatted)
[]

Description: Post Renderers. See docs/postrenders.md

neuvector.enabled💣

Type: bool

Default value
false

Description: Toggle deployment of Neuvector.

neuvector.git.repo💣

Type: string

Default value
"https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/neuvector.git"

neuvector.git.path💣

Type: string

Default value
"./chart"

neuvector.git.tag💣

Type: string

Default value
"2.4.0-bb.4"

neuvector.ingress💣

Type: object

Default value
{"gateway":""}
Default value (formatted)
{
  "gateway": ""
}

Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.

neuvector.flux💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Flux reconciliation overrides specifically for the Neuvector Package

neuvector.values💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Values to passthrough to the Neuvector chart: https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/neuvector.git

neuvector.postRenderers💣

Type: list

Default value
[]
Default value (formatted)
[]

Description: Post Renderers. See docs/postrenders.md

tempo.enabled💣

Type: bool

Default value
false

Description: Toggle deployment of Tempo.

tempo.git.repo💣

Type: string

Default value
"https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/tempo.git"

tempo.git.path💣

Type: string

Default value
"./chart"

tempo.git.tag💣

Type: string

Default value
"1.0.0-bb.2"

tempo.ingress💣

Type: object

Default value
{"gateway":""}
Default value (formatted)
{
  "gateway": ""
}

Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.

tempo.flux💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Flux reconciliation overrides specifically for the Tempo Package

tempo.sso.enabled💣

Type: bool

Default value
false

Description: Toggle SSO for Tempo on and off

tempo.sso.client_id💣

Type: string

Default value
""

Description: OIDC Client ID to use for Tempo

tempo.sso.client_secret💣

Type: string

Default value
""

Description: OIDC Client Secret to use for Tempo

tempo.objectStorage.endpoint💣

Type: string

Default value
""

Description: S3 compatible endpoint to use for connection information. examples: “s3.amazonaws.com” “s3.us-gov-west-1.amazonaws.com” “minio.minio.svc.cluster.local:9000” Note: tempo does not require protocol prefix for URL.

tempo.objectStorage.region💣

Type: string

Default value
""

Description: S3 compatible region to use for connection information.

tempo.objectStorage.accessKey💣

Type: string

Default value
""

Description: Access key for connecting to object storage endpoint.

tempo.objectStorage.accessSecret💣

Type: string

Default value
""

Description: Secret key for connecting to object storage endpoint. Unencoded string data. This should be placed in the secret values and then encrypted

tempo.objectStorage.bucket💣

Type: string

Default value
""

Description: Bucket Name for Tempo examples: “tempo-traces”

tempo.objectStorage.insecure💣

Type: bool

Default value
false

Description: Whether or not objectStorage connection should require HTTPS, if connecting to in-cluster object storage on port 80/9000 set this value to true.

tempo.values💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Values to passthrough to the Tempo chart: https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/tempo.git

tempo.postRenderers💣

Type: list

Default value
[]
Default value (formatted)
[]

Description: Post Renderers. See docs/postrenders.md

monitoring.enabled💣

Type: bool

Default value
true

Description: Toggle deployment of Monitoring (Prometheus, Grafana, and Alertmanager).

monitoring.git.repo💣

Type: string

Default value
"https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring.git"

monitoring.git.path💣

Type: string

Default value
"./chart"

monitoring.git.tag💣

Type: string

Default value
"43.1.2-bb.2"

monitoring.flux💣

Type: object

Default value
{"install":{"crds":"CreateReplace"},"upgrade":{"crds":"CreateReplace"}}
Default value (formatted)
{
  "install": {
    "crds": "CreateReplace"
  },
  "upgrade": {
    "crds": "CreateReplace"
  }
}

Description: Flux reconciliation overrides specifically for the Monitoring Package

monitoring.ingress💣

Type: object

Default value
{"gateway":""}
Default value (formatted)
{
  "gateway": ""
}

Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.

monitoring.sso.enabled💣

Type: bool

Default value
false

Description: Toggle SSO for monitoring components on and off

monitoring.sso.prometheus.client_id💣

Type: string

Default value
""

Description: Prometheus OIDC client ID

monitoring.sso.prometheus.client_secret💣

Type: string

Default value
""

Description: Prometheus OIDC client secret

monitoring.sso.alertmanager.client_id💣

Type: string

Default value
""

Description: Alertmanager OIDC client ID

monitoring.sso.alertmanager.client_secret💣

Type: string

Default value
""

Description: Alertmanager OIDC client secret

monitoring.sso.grafana.client_id💣

Type: string

Default value
""

Description: Grafana OIDC client ID

monitoring.sso.grafana.client_secret💣

Type: string

Default value
""

Description: Grafana OIDC client secret

monitoring.sso.grafana.scopes💣

Type: string

Default value
""

Description: Grafana OIDC client scopes, comma separated, see https://grafana.com/docs/grafana/latest/auth/generic-oauth/

monitoring.sso.grafana.allow_sign_up💣

Type: string

Default value
"true"

monitoring.sso.grafana.role_attribute_path💣

Type: string

Default value
"Viewer"

monitoring.values💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Values to passthrough to the monitoring chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring.git

monitoring.postRenderers💣

Type: list

Default value
[]
Default value (formatted)
[]

Description: Post Renderers. See docs/postrenders.md

twistlock.enabled💣

Type: bool

Default value
true

Description: Toggle deployment of Twistlock.

twistlock.git.repo💣

Type: string

Default value
"https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/twistlock.git"

twistlock.git.path💣

Type: string

Default value
"./chart"

twistlock.git.tag💣

Type: string

Default value
"0.11.4-bb.3"

twistlock.flux💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Flux reconciliation overrides specifically for the Twistlock Package

twistlock.ingress💣

Type: object

Default value
{"gateway":""}
Default value (formatted)
{
  "gateway": ""
}

Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.

twistlock.sso.enabled💣

Type: bool

Default value
false

Description: Toggle SAML SSO, requires a license and enabling the init job - see https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/twistlock/-/blob/main/docs/initialization.md

twistlock.sso.client_id💣

Type: string

Default value
""

Description: SAML client ID

twistlock.sso.provider_type💣

Type: string

Default value
"shibboleth"

Description: SAML Identity Provider. shibboleth is recommended by Twistlock support for Keycloak Possible values: okta, gsuite, ping, shibboleth, azure, adfs

twistlock.sso.groups💣

Type: string

Default value
""

Description: Groups attribute (optional)

twistlock.values💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Values to passthrough to the twistlock chart: https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/twistlock.git

twistlock.postRenderers💣

Type: list

Default value
[]
Default value (formatted)
[]

Description: Post Renderers. See docs/postrenders.md

addons.argocd.enabled💣

Type: bool

Default value
false

Description: Toggle deployment of ArgoCD.

addons.argocd.git.repo💣

Type: string

Default value
"https://repo1.dso.mil/platform-one/big-bang/apps/core/argocd.git"

addons.argocd.git.path💣

Type: string

Default value
"./chart"

addons.argocd.git.tag💣

Type: string

Default value
"5.19.15-bb.0"

addons.argocd.flux💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Flux reconciliation overrides specifically for the ArgoCD Package

addons.argocd.ingress💣

Type: object

Default value
{"gateway":""}
Default value (formatted)
{
  "gateway": ""
}

Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.

addons.argocd.redis.host💣

Type: string

Default value
""

Description: Hostname of a pre-existing Redis to use for ArgoCD. Entering connection info will enable external Redis and will auto-create any required secrets.

addons.argocd.redis.port💣

Type: string

Default value
""

Description: Port of a pre-existing Redis to use for ArgoCD.

addons.argocd.sso.enabled💣

Type: bool

Default value
false

Description: Toggle SSO for ArgoCD on and off

addons.argocd.sso.client_id💣

Type: string

Default value
""

Description: ArgoCD OIDC client ID

addons.argocd.sso.client_secret💣

Type: string

Default value
""

Description: ArgoCD OIDC client secret

addons.argocd.sso.groups💣

Type: string

Default value
"g, Impact Level 2 Authorized, role:admin\n"
Default value (formatted)
g, Impact Level 2 Authorized, role:admin

Description: ArgoCD SSO group roles, see docs for more details: https://argo-cd.readthedocs.io/en/stable/operator-manual/rbac/

addons.argocd.values💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Values to passthrough to the argocd chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/argocd.git

addons.argocd.postRenderers💣

Type: list

Default value
[]
Default value (formatted)
[]

Description: Post Renderers. See docs/postrenders.md

addons.authservice.enabled💣

Type: bool

Default value
false

Description: Toggle deployment of Authservice. if enabling authservice, a filter needs to be provided by either enabling sso for monitoring or istio, or manually adding a filter chain in the values here: values: chain: minimal: callback_uri: “https://somecallback”

addons.authservice.git.repo💣

Type: string

Default value
"https://repo1.dso.mil/platform-one/big-bang/apps/core/authservice.git"

addons.authservice.git.path💣

Type: string

Default value
"./chart"

addons.authservice.git.tag💣

Type: string

Default value
"0.5.3-bb.3"

addons.authservice.flux💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Flux reconciliation overrides specifically for the Authservice Package

addons.authservice.values💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Values to passthrough to the authservice chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/authservice.git

addons.authservice.postRenderers💣

Type: list

Default value
[]
Default value (formatted)
[]

Description: Post Renderers. See docs/postrenders.md

addons.authservice.chains💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Additional authservice chain configurations.

addons.minioOperator.enabled💣

Type: bool

Default value
false

Description: Toggle deployment of minio operator and instance.

addons.minioOperator.git.repo💣

Type: string

Default value
"https://repo1.dso.mil/platform-one/big-bang/apps/application-utilities/minio-operator.git"

addons.minioOperator.git.path💣

Type: string

Default value
"./chart"

addons.minioOperator.git.tag💣

Type: string

Default value
"4.5.4-bb.0"

addons.minioOperator.flux💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Flux reconciliation overrides specifically for the Minio Operator Package

addons.minioOperator.values💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Values to passthrough to the minio operator chart: https://repo1.dso.mil/platform-one/big-bang/apps/application-utilities/minio-operator.git

addons.minioOperator.postRenderers💣

Type: list

Default value
[]
Default value (formatted)
[]

Description: Post Renderers. See docs/postrenders.md

addons.minio.enabled💣

Type: bool

Default value
false

Description: Toggle deployment of minio.

addons.minio.git.repo💣

Type: string

Default value
"https://repo1.dso.mil/platform-one/big-bang/apps/application-utilities/minio.git"

addons.minio.git.path💣

Type: string

Default value
"./chart"

addons.minio.git.tag💣

Type: string

Default value
"4.5.4-bb.3"

addons.minio.flux💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Flux reconciliation overrides specifically for the Minio Package

addons.minio.ingress💣

Type: object

Default value
{"gateway":""}
Default value (formatted)
{
  "gateway": ""
}

Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.

addons.minio.accesskey💣

Type: string

Default value
""

Description: Default access key to use for minio.

addons.minio.secretkey💣

Type: string

Default value
""

Description: Default secret key to intstantiate with minio, you should change/delete this after installation.

addons.minio.values💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Values to passthrough to the minio instance chart: https://repo1.dso.mil/platform-one/big-bang/apps/application-utilities/minio.git

addons.minio.postRenderers💣

Type: list

Default value
[]
Default value (formatted)
[]

Description: Post Renderers. See docs/postrenders.md

addons.gitlab.enabled💣

Type: bool

Default value
false

Description: Toggle deployment of Gitlab

addons.gitlab.hostnames.gitlab💣

Type: string

Default value
"gitlab"

addons.gitlab.hostnames.registry💣

Type: string

Default value
"registry"

addons.gitlab.git.repo💣

Type: string

Default value
"https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/gitlab.git"

addons.gitlab.git.path💣

Type: string

Default value
"./chart"

addons.gitlab.git.tag💣

Type: string

Default value
"6.8.2-bb.0"

addons.gitlab.flux💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Flux reconciliation overrides specifically for the Gitlab Package

addons.gitlab.ingress💣

Type: object

Default value
{"gateway":""}
Default value (formatted)
{
  "gateway": ""
}

Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.

addons.gitlab.sso.enabled💣

Type: bool

Default value
false

Description: Toggle OIDC SSO for Gitlab on and off. Enabling this option will auto-create any required secrets.

addons.gitlab.sso.client_id💣

Type: string

Default value
""

Description: Gitlab OIDC client ID

addons.gitlab.sso.client_secret💣

Type: string

Default value
""

Description: Gitlab OIDC client secret

addons.gitlab.sso.scopes💣

Type: list

Default value
["Gitlab"]
Default value (formatted)
[
  "Gitlab"
]

Description: Gitlab SSO Scopes, default is [“Gitlab”]

addons.gitlab.database.host💣

Type: string

Default value
""

Description: Hostname of a pre-existing PostgreSQL database to use for Gitlab. Entering connection info will disable the deployment of an internal database and will auto-create any required secrets.

addons.gitlab.database.port💣

Type: int

Default value
5432

Description: Port of a pre-existing PostgreSQL database to use for Gitlab.

addons.gitlab.database.database💣

Type: string

Default value
""

Description: Database name to connect to on host.

addons.gitlab.database.username💣

Type: string

Default value
""

Description: Username to connect as to external database, the user must have all privileges on the database.

addons.gitlab.database.password💣

Type: string

Default value
""

Description: Database password for the username used to connect to the existing database.

addons.gitlab.objectStorage.type💣

Type: string

Default value
""

Description: Type of object storage to use for Gitlab, setting to s3 will assume an external, pre-existing object storage is to be used. Entering connection info will enable this option and will auto-create any required secrets

addons.gitlab.objectStorage.endpoint💣

Type: string

Default value
""

Description: S3 compatible endpoint to use for connection information. examples: “https://s3.amazonaws.com” “https://s3.us-gov-west-1.amazonaws.com” “http://minio.minio.svc.cluster.local:9000”

addons.gitlab.objectStorage.region💣

Type: string

Default value
""

Description: S3 compatible region to use for connection information.

addons.gitlab.objectStorage.accessKey💣

Type: string

Default value
""

Description: Access key for connecting to object storage endpoint. – If using accessKey and accessSecret, the iamProfile must be left as an empty string: “”

addons.gitlab.objectStorage.accessSecret💣

Type: string

Default value
""

Description: Secret key for connecting to object storage endpoint. Unencoded string data. This should be placed in the secret values and then encrypted

addons.gitlab.objectStorage.bucketPrefix💣

Type: string

Default value
""

Description: Bucket prefix to use for identifying buckets. Example: “prod” will produce “prod-gitlab-bucket”

addons.gitlab.objectStorage.iamProfile💣

Type: string

Default value
""

Description: NOTE: Current bug with AWS IAM Profiles and Object Storage where only artifacts are stored. Fixed in Gitlab 14.5 – Name of AWS IAM profile to use. – If using an AWS IAM profile, the accessKey and accessSecret values must be left as empty strings eg: “”

addons.gitlab.smtp.password💣

Type: string

Default value
""

Description: Passwords should be placed in an encrypted file. Example: environment-bb-secret.enc.yaml If a value is provided BigBang will create a k8s secret named gitlab-smtp-password in the gitlab namespace

addons.gitlab.redis.password💣

Type: string

Default value
""

Description: Redis plain text password to connect to the redis server. If empty (“”), the gitlab charts will create the gitlab-redis-secret with a random password. – This needs to be set to a non-empty value in order for the Grafana Redis Datasource and Dashboards to be installed.

addons.gitlab.values💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Values to passthrough to the gitlab chart: https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/gitlab.git

addons.gitlab.postRenderers💣

Type: list

Default value
[]
Default value (formatted)
[]

Description: Post Renderers. See docs/postrenders.md

addons.gitlabRunner.enabled💣

Type: bool

Default value
false

Description: Toggle deployment of Gitlab Runner

addons.gitlabRunner.git.repo💣

Type: string

Default value
"https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/gitlab-runner.git"

addons.gitlabRunner.git.path💣

Type: string

Default value
"./chart"

addons.gitlabRunner.git.tag💣

Type: string

Default value
"0.48.2-bb.0"

addons.gitlabRunner.flux💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Flux reconciliation overrides specifically for the Gitlab Runner Package

addons.gitlabRunner.values💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Values to passthrough to the gitlab runner chart: https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/gitlab-runner.git

addons.gitlabRunner.postRenderers💣

Type: list

Default value
[]
Default value (formatted)
[]

Description: Post Renderers. See docs/postrenders.md

addons.nexusRepositoryManager.enabled💣

Type: bool

Default value
false

Description: Toggle deployment of Nexus Repository Manager.

addons.nexusRepositoryManager.git.repo💣

Type: string

Default value
"https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/nexus.git"

addons.nexusRepositoryManager.git.path💣

Type: string

Default value
"./chart"

addons.nexusRepositoryManager.git.tag💣

Type: string

Default value
"45.1.0-bb.0"

addons.nexusRepositoryManager.license_key💣

Type: string

Default value
""

Description: Base64 encoded license file.

addons.nexusRepositoryManager.ingress💣

Type: object

Default value
{"gateway":""}
Default value (formatted)
{
  "gateway": ""
}

Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.

addons.nexusRepositoryManager.sso.enabled💣

Type: bool

Default value
false

Description: Toggle SAML SSO for NXRM. – handles SAML SSO, a Client must be configured in Keycloak or IdP – to complete setup. – https://support.sonatype.com/hc/en-us/articles/1500000976522-SAML-integration-for-Nexus-Repository-Manager-Pro-3-and-Nexus-IQ-Server-with-Keycloak#h_01EV7CWCYH3YKAPMAHG8XMQ599

addons.nexusRepositoryManager.sso.idp_data💣

Type: object

Default value
{"email":"","entityId":"","firstName":"","groups":"","lastName":"","username":""}
Default value (formatted)
{
  "email": "",
  "entityId": "",
  "firstName": "",
  "groups": "",
  "lastName": "",
  "username": ""
}

Description: NXRM SAML SSO Integration data

addons.nexusRepositoryManager.sso.idp_data.username💣

Type: string

Default value
""

Description: IdP Field Mappings – NXRM username attribute

addons.nexusRepositoryManager.sso.idp_data.firstName💣

Type: string

Default value
""

Description: NXRM firstname attribute (optional)

addons.nexusRepositoryManager.sso.idp_data.lastName💣

Type: string

Default value
""

Description: NXRM lastname attribute (optional)

addons.nexusRepositoryManager.sso.idp_data.email💣

Type: string

Default value
""

Description: NXRM email attribute (optional)

addons.nexusRepositoryManager.sso.idp_data.groups💣

Type: string

Default value
""

Description: NXRM groups attribute (optional)

addons.nexusRepositoryManager.sso.role💣

Type: list

Default value
[{"description":"","id":"","name":"","privileges":[],"roles":[]}]
Default value (formatted)
[
  {
    "description": "",
    "id": "",
    "name": "",
    "privileges": [],
    "roles": []
  }
]

Description: NXRM Role

addons.nexusRepositoryManager.flux💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Flux reconciliation overrides specifically for the Nexus Repository Manager Package

addons.nexusRepositoryManager.values💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Values to passthrough to the nxrm chart: https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/nexus.git

addons.nexusRepositoryManager.postRenderers💣

Type: list

Default value
[]
Default value (formatted)
[]

Description: Post Renderers. See docs/postrenders.md

addons.sonarqube.enabled💣

Type: bool

Default value
false

Description: Toggle deployment of SonarQube.

addons.sonarqube.git.repo💣

Type: string

Default value
"https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/sonarqube.git"

addons.sonarqube.git.path💣

Type: string

Default value
"./chart"

addons.sonarqube.git.tag💣

Type: string

Default value
"8.0.0-bb.0"

addons.sonarqube.flux💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Flux reconciliation overrides specifically for the Sonarqube Package

addons.sonarqube.ingress💣

Type: object

Default value
{"gateway":""}
Default value (formatted)
{
  "gateway": ""
}

Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.

addons.sonarqube.sso.enabled💣

Type: bool

Default value
false

Description: Toggle SAML SSO for SonarQube. Enabling this option will auto-create any required secrets.

addons.sonarqube.sso.client_id💣

Type: string

Default value
""

Description: SonarQube SAML client ID

addons.sonarqube.sso.login💣

Type: string

Default value
"login"

Description: SonarQube login sso attribute.

addons.sonarqube.sso.name💣

Type: string

Default value
"name"

Description: SonarQube name sso attribute.

addons.sonarqube.sso.email💣

Type: string

Default value
"email"

Description: SonarQube email sso attribute.

addons.sonarqube.sso.group💣

Type: string

Default value
"group"

Description: (optional) SonarQube group sso attribute.

addons.sonarqube.database.host💣

Type: string

Default value
""

Description: Hostname of a pre-existing PostgreSQL database to use for SonarQube.

addons.sonarqube.database.port💣

Type: int

Default value
5432

Description: Port of a pre-existing PostgreSQL database to use for SonarQube.

addons.sonarqube.database.database💣

Type: string

Default value
""

Description: Database name to connect to on host.

addons.sonarqube.database.username💣

Type: string

Default value
""

Description: Username to connect as to external database, the user must have all privileges on the database.

addons.sonarqube.database.password💣

Type: string

Default value
""

Description: Database password for the username used to connect to the existing database.

addons.sonarqube.values💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Values to passthrough to the sonarqube chart: https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/sonarqube.git

addons.sonarqube.postRenderers💣

Type: list

Default value
[]
Default value (formatted)
[]

Description: Post Renderers. See docs/postrenders.md

addons.haproxy.git.repo💣

Type: string

Default value
"https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/haproxy.git"

addons.haproxy.git.path💣

Type: string

Default value
"./chart"

addons.haproxy.git.tag💣

Type: string

Default value
"1.12.0-bb.0"

addons.haproxy.flux💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Flux reconciliation overrides specifically for the HAProxy Package

addons.haproxy.ingress💣

Type: object

Default value
{"gateway":""}
Default value (formatted)
{
  "gateway": ""
}

Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.

addons.haproxy.values💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Values to passthrough to the haproxy chart: https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/haproxy.git

addons.haproxy.postRenderers💣

Type: list

Default value
[]
Default value (formatted)
[]

Description: Post Renderers. See docs/postrenders.md

addons.anchore.enabled💣

Type: bool

Default value
false

Description: Toggle deployment of Anchore.

addons.anchore.git.repo💣

Type: string

Default value
"https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/anchore-enterprise.git"

addons.anchore.git.path💣

Type: string

Default value
"./chart"

addons.anchore.git.tag💣

Type: string

Default value
"1.22.3-bb.0"

addons.anchore.flux💣

Type: object

Default value
{"upgrade":{"disableWait":true}}
Default value (formatted)
{
  "upgrade": {
    "disableWait": true
  }
}

Description: Flux reconciliation overrides specifically for the Anchore Package

addons.anchore.adminPassword💣

Type: string

Default value
""

Description: Initial admin password used to authenticate to Anchore.

addons.anchore.enterprise💣

Type: object

Default value
{"enabled":false,"licenseYaml":"FULL LICENSE\n"}
Default value (formatted)
{
  "enabled": false,
  "licenseYaml": "FULL LICENSE
"
}

Description: Anchore Enterprise functionality.

addons.anchore.enterprise.enabled💣

Type: bool

Default value
false

Description: Toggle the installation of Anchore Enterprise. This must be accompanied by a valid license.

addons.anchore.enterprise.licenseYaml💣

Type: string

Default value
"FULL LICENSE\n"
Default value (formatted)
FULL LICENSE

Description: License for Anchore Enterprise. For formatting examples see https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/anchore-enterprise/-/blob/main/docs/CHART.md#enabling-enterprise-services

addons.anchore.ingress💣

Type: object

Default value
{"gateway":""}
Default value (formatted)
{
  "gateway": ""
}

Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.

addons.anchore.sso.enabled💣

Type: bool

Default value
false

Description: Toggle SAML SSO for Anchore on and off. Enabling this option will auto-create any required secrets (Note: SSO requires an Enterprise license).

addons.anchore.sso.client_id💣

Type: string

Default value
""

Description: Anchore SAML client ID

addons.anchore.sso.role_attribute💣

Type: string

Default value
""

Description: Anchore SAML client role attribute

addons.anchore.database.host💣

Type: string

Default value
""

Description: Hostname of a pre-existing PostgreSQL database to use for Anchore. Entering connection info will disable the deployment of an internal database and will auto-create any required secrets.

addons.anchore.database.port💣

Type: string

Default value
""

Description: Port of a pre-existing PostgreSQL database to use for Anchore.

addons.anchore.database.username💣

Type: string

Default value
""

Description: Username to connect as to external database, the user must have all privileges on the database.

addons.anchore.database.password💣

Type: string

Default value
""

Description: Database password for the username used to connect to the existing database.

addons.anchore.database.database💣

Type: string

Default value
""

Description: Database name to connect to on host (Note: database name CANNOT contain hyphens).

addons.anchore.database.feeds_database💣

Type: string

Default value
""

Description: Feeds database name to connect to on host (Note: feeds database name CANNOT contain hyphens). Only required for enterprise edition of anchore. By default, feeds database will be configured with the same username and password as the main database. For formatting examples on how to use a separate username and password for the feeds database see https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/anchore-enterprise/-/blob/main/docs/CHART.md#handling-dependencies

addons.anchore.redis.host💣

Type: string

Default value
""

Description: Hostname of a pre-existing Redis to use for Anchore Enterprise. Entering connection info will enable external redis and will auto-create any required secrets. Anchore only requires redis for enterprise deployments and will not provision an instance if using external

addons.anchore.redis.port💣

Type: string

Default value
""

Description: Port of a pre-existing Redis to use for Anchore Enterprise.

addons.anchore.redis.username💣

Type: string

Default value
""

Description: OPTIONAL: Username to connect to a pre-existing Redis (for password-only auth leave empty)

addons.anchore.redis.password💣

Type: string

Default value
""

Description: Password to connect to pre-existing Redis.

addons.anchore.values💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Values to passthrough to the anchore chart: https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/anchore-enterprise.git

addons.anchore.postRenderers💣

Type: list

Default value
[]
Default value (formatted)
[]

Description: Post Renderers. See docs/postrenders.md

addons.mattermostOperator.enabled💣

Type: bool

Default value
false

addons.mattermostOperator.git.repo💣

Type: string

Default value
"https://repo1.dso.mil/platform-one/big-bang/apps/collaboration-tools/mattermost-operator.git"

addons.mattermostOperator.git.path💣

Type: string

Default value
"./chart"

addons.mattermostOperator.git.tag💣

Type: string

Default value
"1.19.0-bb.0"

addons.mattermostOperator.flux💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Flux reconciliation overrides specifically for the Mattermost Operator Package

addons.mattermostOperator.values💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Values to passthrough to the mattermost operator chart: https://repo1.dso.mil/platform-one/big-bang/apps/collaboration-tools/mattermost-operator/-/blob/main/chart/values.yaml

addons.mattermostOperator.postRenderers💣

Type: list

Default value
[]
Default value (formatted)
[]

Description: Post Renderers. See docs/postrenders.md

addons.mattermost.enabled💣

Type: bool

Default value
false

Description: Toggle deployment of Mattermost.

addons.mattermost.git.repo💣

Type: string

Default value
"https://repo1.dso.mil/platform-one/big-bang/apps/collaboration-tools/mattermost.git"

addons.mattermost.git.path💣

Type: string

Default value
"./chart"

addons.mattermost.git.tag💣

Type: string

Default value
"7.7.1-bb.0"

addons.mattermost.flux💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Flux reconciliation overrides specifically for the Mattermost Package

addons.mattermost.enterprise💣

Type: object

Default value
{"enabled":false,"license":""}
Default value (formatted)
{
  "enabled": false,
  "license": ""
}

Description: Mattermost Enterprise functionality.

addons.mattermost.enterprise.enabled💣

Type: bool

Default value
false

Description: Toggle the Mattermost Enterprise. This must be accompanied by a valid license unless you plan to start a trial post-install.

addons.mattermost.enterprise.license💣

Type: string

Default value
""

Description: License for Mattermost. This should be the entire contents of the license file from Mattermost (should be one line), example below license: “eyJpZCI6InIxM205bjR3eTdkYjludG95Z3RiOD—REST—IS—HIDDEN

addons.mattermost.ingress💣

Type: object

Default value
{"gateway":""}
Default value (formatted)
{
  "gateway": ""
}

Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.

addons.mattermost.sso.enabled💣

Type: bool

Default value
false

Description: Toggle OIDC SSO for Mattermost on and off. Enabling this option will auto-create any required secrets.

addons.mattermost.sso.client_id💣

Type: string

Default value
""

Description: Mattermost OIDC client ID

addons.mattermost.sso.client_secret💣

Type: string

Default value
""

Description: Mattermost OIDC client secret

addons.mattermost.database.host💣

Type: string

Default value
""

Description: Hostname of a pre-existing PostgreSQL database to use for Mattermost. Entering connection info will disable the deployment of an internal database and will auto-create any required secrets.

addons.mattermost.database.port💣

Type: string

Default value
""

Description: Port of a pre-existing PostgreSQL database to use for Mattermost.

addons.mattermost.database.username💣

Type: string

Default value
""

Description: Username to connect as to external database, the user must have all privileges on the database.

addons.mattermost.database.password💣

Type: string

Default value
""

Description: Database password for the username used to connect to the existing database.

addons.mattermost.database.database💣

Type: string

Default value
""

Description: Database name to connect to on host.

addons.mattermost.database.ssl_mode💣

Type: string

Default value
""

Description: SSL Mode to use when connecting to the database. Allowable values for this are viewable in the postgres documentation: https://www.postgresql.org/docs/current/libpq-ssl.html#LIBPQ-SSL-SSLMODE-STATEMENTS

addons.mattermost.objectStorage.endpoint💣

Type: string

Default value
""

Description: S3 compatible endpoint to use for connection information. Entering connection info will enable this option and will auto-create any required secrets. examples: “s3.amazonaws.com” “s3.us-gov-west-1.amazonaws.com” “minio.minio.svc.cluster.local:9000”

addons.mattermost.objectStorage.accessKey💣

Type: string

Default value
""

Description: Access key for connecting to object storage endpoint.

addons.mattermost.objectStorage.accessSecret💣

Type: string

Default value
""

Description: Secret key for connecting to object storage endpoint. Unencoded string data. This should be placed in the secret values and then encrypted

addons.mattermost.objectStorage.bucket💣

Type: string

Default value
""

Description: Bucket name to use for Mattermost - will be auto-created.

addons.mattermost.elasticsearch💣

Type: object

Default value
{"enabled":false}
Default value (formatted)
{
  "enabled": false
}

Description: Mattermost Elasticsearch integration - requires enterprise E20 license - https://docs.mattermost.com/deployment/elasticsearch.html Connection info defaults to the BB deployed Elastic, all values can be overridden via the “values” passthrough for other connections. See values spec in MM chart “elasticsearch” yaml block - https://repo1.dso.mil/platform-one/big-bang/apps/collaboration-tools/mattermost/-/blob/main/chart/values.yaml

addons.mattermost.elasticsearch.enabled💣

Type: bool

Default value
false

Description: Toggle interaction with Elastic for optimized search indexing

addons.mattermost.values💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Values to passthrough to the Mattermost chart: https://repo1.dso.mil/platform-one/big-bang/apps/collaboration-tools/mattermost/-/blob/main/chart/values.yaml

addons.mattermost.postRenderers💣

Type: list

Default value
[]
Default value (formatted)
[]

Description: Post Renderers. See docs/postrenders.md

addons.velero.enabled💣

Type: bool

Default value
false

Description: Toggle deployment of Velero.

addons.velero.git.repo💣

Type: string

Default value
"https://repo1.dso.mil/platform-one/big-bang/apps/cluster-utilities/velero.git"

addons.velero.git.path💣

Type: string

Default value
"./chart"

addons.velero.git.tag💣

Type: string

Default value
"3.1.2-bb.0"

addons.velero.flux💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Flux reconciliation overrides specifically for the Velero Package

addons.velero.plugins💣

Type: list

Default value
[]
Default value (formatted)
[]

Description: Plugin provider for Velero - requires at least one plugin installed. Current supported values: aws, azure, csi

addons.velero.values💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Values to passthrough to the Velero chart: https://repo1.dso.mil/platform-one/big-bang/apps/cluster-utilities/velero/-/blob/main/chart/values.yaml

addons.velero.postRenderers💣

Type: list

Default value
[]
Default value (formatted)
[]

Description: Post Renderers. See docs/postrenders.md

addons.keycloak.enabled💣

Type: bool

Default value
false

Description: Toggle deployment of Keycloak. if you enable Keycloak you should uncomment the istio passthrough configurations above istio.ingressGateways.passthrough-ingressgateway and istio.gateways.passthrough

addons.keycloak.git.repo💣

Type: string

Default value
"https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/keycloak.git"

addons.keycloak.git.path💣

Type: string

Default value
"./chart"

addons.keycloak.git.tag💣

Type: string

Default value
"18.4.0-bb.0"

addons.keycloak.database.host💣

Type: string

Default value
""

Description: Hostname of a pre-existing database to use for Keycloak. Entering connection info will disable the deployment of an internal database and will auto-create any required secrets.

addons.keycloak.database.type💣

Type: string

Default value
"postgres"

Description: Pre-existing database type (e.g. postgres) to use for Keycloak.

addons.keycloak.database.port💣

Type: int

Default value
5432

Description: Port of a pre-existing database to use for Keycloak.

addons.keycloak.database.database💣

Type: string

Default value
""

Description: Database name to connect to on host.

addons.keycloak.database.username💣

Type: string

Default value
""

Description: Username to connect as to external database, the user must have all privileges on the database.

addons.keycloak.database.password💣

Type: string

Default value
""

Description: Database password for the username used to connect to the existing database.

addons.keycloak.flux💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Flux reconciliation overrides specifically for the OPA Gatekeeper Package

addons.keycloak.ingress💣

Type: object

Default value
{"cert":"","gateway":"passthrough","key":""}
Default value (formatted)
{
  "cert": "",
  "gateway": "passthrough",
  "key": ""
}

Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.

addons.keycloak.ingress.key💣

Type: string

Default value
""

Description: Certificate/Key pair to use as the certificate for exposing Keycloak Setting the ingress cert here will automatically create the volume and volumemounts in the Keycloak Package chart

addons.keycloak.values💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Values to passthrough to the keycloak chart: https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/keycloak.git

addons.keycloak.postRenderers💣

Type: list

Default value
[]
Default value (formatted)
[]

Description: Post Renderers. See docs/postrenders.md

addons.vault.enabled💣

Type: bool

Default value
false

Description: Toggle deployment of Vault.

addons.vault.git.repo💣

Type: string

Default value
"https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/vault.git"

addons.vault.git.path💣

Type: string

Default value
"./chart"

addons.vault.git.tag💣

Type: string

Default value
"0.23.0-bb.2"

addons.vault.flux💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Flux reconciliation overrides specifically for the Vault Package

addons.vault.ingress💣

Type: object

Default value
{"cert":"","gateway":"","key":""}
Default value (formatted)
{
  "cert": "",
  "gateway": "",
  "key": ""
}

Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.

addons.vault.ingress.key💣

Type: string

Default value
""

Description: Certificate/Key pair to use as the certificate for exposing Vault Setting the ingress cert here will automatically create the volume and volumemounts in the Vault package chart

addons.vault.values💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Values to passthrough to the vault chart: https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/vault.git

addons.vault.postRenderers💣

Type: list

Default value
[]
Default value (formatted)
[]

Description: Post Renderers. See docs/postrenders.md

addons.metricsServer.enabled💣

Type: string

Default value
"auto"

Description: Toggle deployment of metrics server Acceptable options are enabled: true, enabled: false, enabled: auto true = enabled / false = disabled / auto = automatic (Installs only if metrics API endpoint is not present)

addons.metricsServer.git.repo💣

Type: string

Default value
"https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/metrics-server.git"

addons.metricsServer.git.path💣

Type: string

Default value
"./chart"

addons.metricsServer.git.tag💣

Type: string

Default value
"3.8.3-bb.2"

addons.metricsServer.flux💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Flux reconciliation overrides specifically for the metrics server Package

addons.metricsServer.values💣

Type: object

Default value
{}
Default value (formatted)
{}

Description: Values to passthrough to the metrics server chart: https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/metrics-server.git

addons.metricsServer.postRenderers💣

Type: list

Default value
[]
Default value (formatted)
[]

Description: Post Renderers. See docs/postrenders.md