Release Notes - 2.12.0

Please see our documentation page for more information on how to consume and deploy BigBang. This release was primarily tested on Kubernetes 1.26.3 (RKE2).

Upgrade Notices

Gitlab:

• Gitlab upgrades to version 16.4.1 in this release which is a new minor version plus security patch. Gitlab installations must have upgraded to 16.3.4 included in Big Bang 2.11.0 before upgrading to 16.4.X+.

Istio: - Istio gets updated to 1.19.0. BigBang apps should automatically cycle to get the latest sidecar config and version. Be sure to cycle pods for any community or tenant applications manually.

Flux: - Flux it’s updating to it’s first major GA release 2.1.1 and the following component versions: * source-controller: v1.1.0 * helm-controller: v0.36.0 * kustomize-controller v1.1.0 * notification-controller 1.1.0 - We recommend updating Flux to stay up to date - we only test releases against the latest Flux version in Big Bang. Running the Flux update script via ./scripts/install_flux.sh -s will re-use your existing pull secret and update all components.

Upgrades from previous releases

If coming from a version pre-2.11.1, note the additional upgrade notices in any release in between. The BB team doesn’t test/guarantee upgrades from anything pre-2.11.1.

Packages

Package	Type	Package Version	BB Version
Istio Controlplane	Core	Istio 1.19.0 Tetrate Istio Distro 1.18.2	1.19.0-bb.0 🔗
Istio Operator	Core	Istio Operator 1.19.0 Tetrate Istio Distro Operator 1.19.0	1.19.0-bb.1 🔗
Jaeger	Core	1.47.0	2.47.0-bb.0 🔗
Kiali	Core	1.72.0	1.72.0-bb.1 🔗
Cluster Auditor	Core	0.0.7	1.5.0-bb.8 🔗
Gatekeeper	Core	3.13.0	3.13.0-bb.1 🔗
Kyverno	Core	1.9.3	3.0.0-bb.4 🔗
Kyverno Policies	Core	3.0.4	3.0.4-bb.0
Kyverno Reporter	Core	2.10.4	2.16.0-bb.4 🔗
Elasticsearch Kibana	Core	Kibana 8.7.1 Elasticsearch 8.7.0	1.3.1-bb.3 🔗
Eck Operator	Core	2.9.0	2.9.0-bb.1 🔗
Fluentbit	Core	2.1.8	0.37.0-bb.1
Promtail	Core	2.9.1	6.15.0-bb.1 🔗
Loki	Core	2.9.1	5.23.1-bb.0 🔗
Neuvector	Core	5.1.3	2.4.5-bb.6 🔗
Tempo	Core	Tempo 2.2.2 Tempo Query 2.2.2	1.6.1-bb.1 🔗
Monitoring	Core	Prometheus 2.47.0 Grafana 10.0.3 Alertmanager 0.26.0	51.1.0-bb.0 🔗
Grafana	Core	10.0.3	6.58.9-bb.4 🔗
Twistlock	Core	30.02.123	0.13.0-bb.1 🔗
Wrapper	Core	N / A	0.4.1
Argocd	Addon	2.8.2	5.46.7-bb.2 🔗
Authservice	Addon	0.5.3	0.5.3-bb.18 🔗
Minio Operator	Addon	5.0.9	5.0.9-bb.0 🔗
Minio	Addon	RELEASE.2023-09-23T03-47-50Z	5.0.9-bb.2 🔗
Gitlab	Addon	16.4.1	7.4.1-bb.0
Gitlab Runner	Addon	15.11.0	0.52.0-bb.6
Nexus	Addon	3.53.1-02	53.1.0-bb.3 🔗
Sonarqube	Addon	9.9.1-community	8.0.1-bb.6 🔗
Fortify	Addon	23.1.2.0005	1.1.2311007-bb.1 🔗
Haproxy	Addon	2.2.21	1.12.0-bb.1
Anchore Enterprise	Addon	Enterprise 4.8.0 Engine 1.1.0	1.26.1-bb.0
Mattermost Operator	Addon	1.20.1	1.20.1-bb.0
Mattermost	Addon	9.0.0	9.0.0-bb.0 🔗
Velero	Addon	1.11.1	5.0.2-bb.2 🔗
Keycloak	Addon	21.1.1	18.4.3-bb.7 🔗
Vault	Addon	1.13.1	0.25.0-bb.2 🔗
Metrics Server	Addon	0.6.3	3.10.0-bb.2 🔗
Harbor	Addon	2.8.4	1.12.4-bb.2 🔗

Changes in 2.12.0

Big Bang MRs

• !3206: contributing guidelines upating with Community Guidelines
• !3205: create .kube dir on first run of k3d-dev.sh
• !3224: oscal doc naming and spellcheck
• !3088: Changed repo1.dso.mil/platform-one/big-bang to repo1.dso.mil/big-bang
• !3069: Update Flux

Istio Controlplane

• !3180: istio update to 1.19.0-bb.0

# Changelog Updates

## [1.19.0-bb.0] - 2023-09-12
### Changed
- ironbank/opensource/istio/install-cni updated from 1.18.2 to 1.19.0
- ironbank/opensource/istio/pilot updated from 1.18.2 to 1.19.0
- ironbank/opensource/istio/proxyv2 updated from 1.18.2 to 1.19.0

Istio Operator

• !3183: istioOperator update to 1.19.0-bb.1

# Changelog Updates

## [1.19.0-bb.1] - 2023-09-27
### Added
- Updated deployment template

## [1.19.0-bb.0]
### Added
- Updated repo1 image to `1.19.0`
- Updated TID image to `1.19.0`

Jaeger

• !3227: jaeger update to 2.47.0-bb.0
• !3201: jaeger update to 2.46.0-bb.3

# Changelog Updates

## [2.47.0-bb.0] - 2023-09-28
### Changed
- Upgrade chart to 2.47.0
- Upgrade images to 1.47.0

## [2.46.0-bb.2] - 2023-09-20
### Changed
- Updated to gluon 0.4.1 and Cypress 13.x
- Update cypress test to remove explicit wait and replaced with implicit timeout

Kiali

• !3175: kiali update to 1.72.0-bb.1

# Changelog Updates

## [1.72.0-bb.1] - 2023-09-28
### Changed
- Upgraded to Gluon 0.4.1 and Cypress 13.x
- Updated cypress test to Cypress 13.x format

Cluster Auditor

• !3147: clusterAuditor update to 1.5.0-bb.8

# Changelog Updates

## [1.5.0-bb.8] - 2023-09-19
### Fixed
- Updated to gluon 0.4.1 and Cypress 13.x
- Updated Cypress tests to work with Cypress 13.x

Gatekeeper

• !3226: gatekeeper update to 3.13.0-bb.1

# Changelog Updates

## [3.13.0-bb.1] - 2023-10-02
### Removed
- Removed duplicate strategy

## [3.13.0-bb.0] - 2023-09-19
### Changed
- Updated gluon 0.4.0 -> 0.4.1
- Updated ironbank/opensource/openpolicyagent/gatekeeper v3.12.0 -> v3.13.0
- Updated registry1.dso.mil/ironbank/opensource/kubernetes/kubectl 1.27.3 -> 1.27.6
- Updated registry1.dso.mil/ironbank/opensource/openpolicyagent/gatekeeper v3.12.0 -> v3.13.0

Kyverno

• !3186: kyverno update to 3.0.0-bb.4

# Changelog Updates

## [3.0.0-bb.4] - 2023-09-20
### Changed
- Modified runAsGroup securityContext for kyverno containers

Kyverno Reporter

• !3142: kyvernoReporter update to 2.16.0-bb.4

# Changelog Updates

## [2.16.0-bb.4] - 2023-09-19
### Changed
- Upgraded gluon to 0.4.1
- Upgraded cypress tests to work with cypress 13.x

Elasticsearch Kibana

• !3218: elasticsearchKibana update to 1.3.1-bb.3

# Changelog Updates

## [1.3.1-bb.3] - 2023-09-29
### Added
- Fixed cypress test for BB pipeline

## [1.3.1-bb.2] - 2023-09-27
### Added
- Cypress modernization updates
- Updated gluon to 0.4.1
- Added npm package files, updated cypress file sturcture and file names to meet cypress 13.x requirements

Eck Operator

• !3166: eckOperator update to 2.9.0-bb.0

# Changelog Updates

## [2.9.0-bb.1]
### Changed
- Updated non-root group & user

## [2.9.0-bb.0]
### Changed
- Updated chart and IB images from 2.8.0 to 2.9.0

Promtail

• !3197: promtail update to 6.15.0-bb.1

# Changelog Updates

## [6.15.0-bb.1] - 2023-09-27
### Updated
- Updated ironbank/opensource/grafana/promtail v2.8.4 -> v2.9.1
- Updated registry1.dso.mil/ironbank/opensource/grafana/promtail v2.8.4 -> v2.9.1

Loki

• !3214: loki update to 5.23.1-bb.0
• !3202: loki update to 5.21.0-bb.3
• !3194: Updating Loki Test Values and version to 5.21.0-bb.1

# Changelog Updates

## [5.23.1-bb.0] - 2023-09-29
### Changed
- Updated docker.io/grafana/loki-canary 2.9.0 -> 2.9.1
- Updated ironbank/opensource/grafana/loki 2.9.0 -> 2.9.1
- Updated registry1.dso.mil/ironbank/opensource/kubernetes/kubectl 1.27.5 -> 1.27.6
- Updated registry1.dso.mil/ironbank/kiwigrid/k8s-sidecar 1.22.4 -> 1.25.1
- Updated to latest upstream chart 5.23.1

## [5.21.0-bb.3] - 2023-09-28
### Changed
- Fixed minor bug with cypress tests

## [5.21.0-bb.2] - 2023-09-27
### Changed
- Updated gluon to 0.4.1
- Modified cypress structure to accommodate cypress 13.X+ testing

## [5.21.0-bb.1] - 2023-09-15
### Changed
- Indentation fixes for new rules sidecar YAML

## [5.21.0-bb.0] - 2023-09-14
### Changed
- Updated docker.io/grafana/loki-canary 2.8.4 -> 2.9.0
- Updated ironbank/opensource/grafana/loki 2.8.4 -> 2.9.0
- Updated registry1.dso.mil/ironbank/opensource/grafana/loki 2.8.4 -> 2.9.0

Neuvector

• !3196: neuvector update to 2.4.5-bb.6

# Changelog Updates

## [2.4.5-bb.6] - 2023-09-21
### Changed
- Updated to Gluon 0.4.1 and Cypress 13.x

Tempo

• !3233: Update test-values.yaml
• !3153: tempo update to 1.6.1-bb.1

# Changelog Updates

## [1.6.1-bb.1] - 2022-09-20
### Changed
- Updated Gluon to 0.4.1
- Updated the Cypress test and renamed the Cypress files

Monitoring

• !3222: monitoring update to 51.1.0-bb.0
• !3190: monitoring update to 49.2.0-bb.1

# Changelog Updates

## [51.1.0-bb.0] - 2023-09-26
### Changed
- upgrade chart version to 51.1.0
- registry1.dso.mil/ironbank/opensource/kubernetes/kube-state-metrics minor v2.9.2 -> v2.10.0
- registry1.dso.mil/ironbank/opensource/kubernetes/kubectl patch 1.27.5 -> 1.28.1
- registry1.dso.mil/ironbank/opensource/prometheus-operator/prometheus-config-reloader  minor v0.67.1 -> v0.68.0
- registry1.dso.mil/ironbank/opensource/prometheus-operator/prometheus-operator minor v0.67.1 -> v0.68.0
- registry1.dso.mil/ironbank/opensource/prometheus/prometheus minor v2.46.0 -> v2.47.0
- registry1.dso.mil/ironbank/opensource/thanos/thanos minor v0.32.1 -> v0.32.3
- Updated gluon from 0.4.0 to 0.4.1
- Updated cypress folder structure to accommodate cypress 13.X+

## [49.2.0-bb.1] - 2023-09-25
### Changed
- changed defaultpeerauthentication from a hardcoded value to use {{ .Release.Namespace }}

## [49.2.0-bb.0] - 2023-08-31
### Changed
- upgrade chart version to 49.2.0
- registry1.dso.mil/ironbank/kiwigrid/k8s-sidecar patch 1.25.0 -> 1.25.1

Grafana

• !3233: Update test-values.yaml
• !3217: grafana update to 6.58.9-bb.4

# Changelog Updates

## [6.58.9-bb.4] - 2023-09-26
### Changed
- Updated Cypress test
- Updated Gluon 0.4.1

Twistlock

• !3117: twistlock update to 0.13.0-bb.1

# Changelog Updates

## [0.13.0-bb.1] - 2023-09-15
### Changed
- Support for group assertion for SSO through Init script

Argocd

• !3230: Update test-values.yaml
• !3229: argocd update to 5.46.7-bb.2
• !3167: Updated tags to updated package for ArgoCD

# Changelog Updates

## [5.46.7-bb.2] - 2023-10-02
### Updated
- Updated Argo to 2.8.4

## [5.46.7-bb.1] - 2023-09-29
### Updated
- Updated Cypress test to use guestbook from repo1 git

## [5.46.7-bb.0] - 2023-09-26
### Updated
- Updated chart to 5.46.7
- Bumped Redis chart dependency to `18.0.4-bb.0`
- Updated to redis 7.2.1
- Updated to redis-exporter 1.54.0

## [5.45.2-bb.1] - 2023-09-18
### Updated
- Updated Cypress to 13.x
- Updated Cypress tests to work with new version

Authservice

• !3164: authservice update to 0.5.3-bb.18

# Changelog Updates

## [0.5.3-bb.18]
### Changed
- redis updated from 17.15.4-bb.0 to 18.0.4-bb.0

Minio Operator

• !3174: minioOperator update to 5.0.9-bb.0

# Changelog Updates

## [5.0.9-bb.0]
### Upgrade
- Update console to version v0.30.0
- Updated Minio Operator Helm Chart to v5.0.9

Minio

• !3174: minioOperator update to 5.0.9-bb.0
• !3195: minio update to 5.0.9-bb.2
• !3138: minio update to 5.0.6-bb.0

# Changelog Updates

## [5.0.9-bb.2] - 2023-09-26
### Changed
- Updated minio to `RELEASE.2023-09-23T03-47-50Z`
- Updated mc to `RELEASE.2023-09-22T05-07-46Z`

## [5.0.9-bb.1] - 2023-09-25
### Changed
- Updated minio to `RELEASE.2023-09-20T22-49-55Z`
- Updated mc to `RELEASE.2023-09-20T15-22-31Z`

## [5.0.9-bb.0] - 2023-09-22
### Changed
- Updated chart to v5.0.9
- Updated minio to `RELEASE.2023-09-16T01-01-47Z`
- Updated mc to `RELEASE.2023-09-13T23-08-58Z`

## [5.0.6-bb.0] - 2023-09-19
### Changed
- Updated chart to v5.0.6
- Updated minio to `RELEASE.2023-09-07T02-05-02Z`
- Updated mc to `RELEASE.2023-09-07T22-48-55Z`
- Updated gluon from 0.4.0 to 0.4.1
- Updated folder structure for cypress 13.X+

Nexus

• !3225: nexusRepositoryManager update to 53.1.0-bb.3

# Changelog Updates

## [53.1.0-bb.3] - 2023-10-02
### Changed
- Updated chart to version: 53.1.0-bb.2 | appVersion: 3.53.1
- Updated docs to reflect new chart versioning and maintenance
- Removed kptfile from chart

Sonarqube

• !3134: sonarqube update to 8.0.1-bb.5

# Changelog Updates

## [8.0.1-bb.6] - 2023-09-20
### Changed
- Updated to gluon 0.4.1 and cypress 13.x
- Updated tests to work with cypress 13.x

## [8.0.1-bb.5] - 2023-09-13
### Changed
- sonarqube to run as non root group

Fortify

• !3189: updating the test/test-values.yaml
• !3191: fortify update to 1.1.2311007-bb.0
• !3179: fortify update to 0.2.0-bb.20

# Changelog Updates

## [1.1.2311007-bb.1] - 2023-09-26
### Updated
- fixed the requests and limits in the pipeline

## [1.1.2311007-bb.0] - 2023-09-25
### Updated
- Updated tag versioning 0.2.0-bb.x to 1.1.2311007-bb.x

## [0.2.0-bb.20] - 2023-09-22
### Updated
- fixed a bug around the mysql credentials when using an out of cluster db

Mattermost

• !3158: mattermost update to 9.0.0-bb.0

# Changelog Updates

## [9.0.0-bb.0] - 2023-09-18
### Changed
- ironbank/opensource/mattermost/mattermost updated from 8.1.2 to 9.0.0
- Updated gluon from 0.4.0 to 0.4.1
- Modified cypress test structure to allow for cypress 13.X testing

Velero

• !3216: velero update to 5.0.2-bb.2

# Changelog Updates

## [5.0.2-bb.2] - 2023-09-20
### Changed
- ironbank/opensource/nginx/nginx 1.25.1 -> 1.25.2
- registry1.dso.mil/bigbang-ci/velero-tester 1.0.0 -> 1.1.0
- registry1.dso.mil/ironbank/opensource/kubernetes/kubectl 1.27.4 -> 1.27.6
- Updated Gluon 0.3.1 -> 0.4.1

Keycloak

• !3232: keycloak update to 18.4.3-bb.7
• !3208: keycloak update to 18.4.3-bb.6
• !3139: keycloak update to 18.4.3-bb.5

# Changelog Updates

## [18.4.3-bb.7]
### Updated
- Added dev client for neuvector to baby-yoda realm

## [18.4.3-bb.6] - 2023-09-27
### Updated
- Updated horizontal pod autoscaler to select and apply the appropriate API version

## [18.4.3-bb.5]
### Updated
- Updated gluon to 0.4.0 to 0.4.1
- Updated Cypress tests to accomodate cypress 13.X+
- Added chart/resources/dev/baby-yoda-bb-ci.json to enable SSO testing in the pipeline
- Improved chart/templates/bigbang/create-ci-cypress-user-hook.yaml with additional attributes

Vault

• !3228: Vault update to 0.25.0-bb.2
• !3156: vault update to 0.25.0-bb.1

# Changelog Updates

## [0.25.0-bb.2] - 2023-10-02
### Changed
- Updated minio-instance 5.0.3-bb.2 -> 5.0.9-bb.2

## [0.25.0-bb.1] - 2023-09-19
### Changed
- Updated registry1.dso.mil/ironbank/hashicorp/vault/vault-k8s 1.2.1 -> 1.3.0
- Updated gluon 0.4.0 -> 0.4.1
- Updated Cypress files

Metrics Server

• !3211: metricsServer update to 3.10.0-bb.2

# Changelog Updates

## [3.10.0-bb.2] - 2023-09-29
### Added
- Update patch version of kubectl v1.27.6 -> v1.28.2

## [3.10.0-bb.1] - 2023-09-20
### Added
- Update patch version of kubectl v1.27.3 -> v1.27.6
- Update patch version of addon-resizer 1.8.18 -> 1.8.19
- Update securityContext to include runAsGroup

Harbor

• !3235: harbor update to 1.12.4-bb.2
• !3165: harbor update to 1.12.4-bb.1

# Changelog Updates


## [1.12.4-bb.2] - 2023-10-03
### Changed
- redis.external to use master service endpoint

## [1.12.4-bb.1] - 2023-09-20
### Changed
- Updated gluon to 0.4.1 and Cypress to 13.x

Known Issues

• Kyverno Policies Issue 43: “Injected pods with ‘istio-init’ containers violate require-non-root-group policy” syntax is no longer valid with new chart versions, we are working to get this updated for 2.13.0.

• Velero Issue 1740: “BB 2.11.x contains an undocumented breaking change for velero schedules” Please see issue link for details and workaround.

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our chat
• Check out the documentation for guidance on how to get started

Future

Don’t see your feature and/or bug fix? Check out our epics for estimates on when you can expect things to drop, and as always, feel free to comment or create issues if you have questions, comments, or concerns.