Release Notes - 2.2.0

Please see our documentation page for more information on how to consume and deploy BigBang. This release was primarily tested on Kubernetes 1.26.3 (RKE2).

Upgrade Notices

Minio:

• Minio’s image user changed from 1000 to 1001. This will not affect vanilla managed kubernetes clusters like EKS/RKE2/etc but abstracted clusters like k3d/minikube may encounter issues with permissions post-upgrade.

Upgrades from previous releases

If coming from a version pre-2.1.0, note the additional upgrade notices in any release in between. The BB team doesn’t test/guarantee upgrades from anything pre-2.1.0.

Packages

Package	Type	Package Version	BB Version
Istio Controlplane	Core	Istio 1.17.2 Tetrate Istio Distro 1.17.2	1.17.2-bb.1 🔗
Istio Operator	Core	Istio Operator 1.17.2 Tetrate Istio Distro Operator 1.17.2	1.17.2-bb.1 🔗
Jaeger	Core	1.43.0	2.42.0-bb.0
Kiali	Core	1.66.0	1.66.0-bb.0
Cluster Auditor	Core	0.0.7	1.5.0-bb.3 🔗
Gatekeeper	Core	3.12.0	3.12.0-bb.3 🔗
Kyverno	Core	1.8.5	2.6.5-bb.3
Kyverno Policies	Core	1.1.0	1.1.0-bb.6
Kyverno Reporter	Core	2.10.4	2.16.0-bb.1
Elasticsearch Kibana	Core	Kibana 8.6.1 Elasticsearch 8.6.0	1.2.0-bb.0
Eck Operator	Core	2.7.0	2.7.0-bb.0
Fluentbit	Core	2.1.2	0.28.0-bb.0 🔗
Promtail	Core	2.8.1	6.11.0-bb.0 🔗
Loki	Core	2.8.0	5.0.0-bb.4 🔗
Neuvector	Core	5.1.2	2.4.3-bb.0
Tempo	Core	Tempo 2.1.1 Tempo Query 2.1.1	1.2.0-bb.1 🔗
Monitoring	Core	Prometheus 2.43.1 Grafana 9.5.1 Alertmanager 0.25.0	45.27.2-bb.1 🔗
Twistlock	Core	22.12.415	0.12.0-bb.1 🔗
Wrapper	Core	N / A	0.4.1
Argocd	Addon	2.6.7	5.28.0-bb.3 🔗
Authservice	Addon	0.5.3	0.5.3-bb.8 🔗
Minio Operator	Addon	5.0.4	5.0.4-bb.1 🔗
Minio	Addon	RELEASE.2023-04-28T18-11-17Z	5.0.3-bb.2 🔗
Gitlab	Addon	15.11.2	6.11.2-bb.0 🔗
Gitlab Runner	Addon	15.10.0	0.51.0-bb.2 🔗
Nexus	Addon	3.52.0-01	52.0.0-bb.0 🔗
Sonarqube	Addon	9.9.0-community	8.0.0-bb.1
Haproxy	Addon	2.2.21	1.12.0-bb.0
Anchore Enterprise	Addon	Enterprise 4.6.0 Engine 1.1.0	1.24.1-bb.4 🔗
Mattermost Operator	Addon	1.20.1	1.20.1-bb.0 🔗
Mattermost	Addon	7.10.0	7.10.0-bb.1 🔗
Velero	Addon	1.10.2	3.1.5-bb.1
Keycloak	Addon	21.0.2	18.4.0-bb.2
Vault	Addon	1.13.1	0.24.1-bb.0 🔗
Metrics Server	Addon	0.6.3	3.9.0-bb.1

Changes in 2.2.0

Big Bang MRs

• !2721: Resolve “Investigate Enabling HorizontalPodAutoscaler Resource in Redis chart by default”

Istio Controlplane

• !2731: bump Istio/Istio Operator versions

# Changelog Updates

## [1.17.2-bb.1] - 2023-05-04

### Changed

- ironbank/tetrate/istio/install-cni updated from 1.16.1 to 1.17.2
- ironbank/tetrate/istio/pilot updated from 1.16.1 to 1.17.2
- ironbank/tetrate/istio/proxyv2 updated from 1.16.1 to 1.17.2

Istio Operator

• !2731: bump Istio/Istio Operator versions

# Changelog Updates

## [1.17.2-bb.1]

### Changed

- Updated TID image to `1.17.2`

Cluster Auditor

• !2782: clusterAuditor update to 1.5.0-bb.3

# Changelog Updates

## [1.5.0-bb.3] - 2023-05-19

### Changed

- Update cypress tests for compatibility with latest monitoring version (45.27.2)

Gatekeeper

• !2718: gatekeeper update to 3.12.0-bb.3

# Changelog Updates

## [3.12.0-bb.0] - 2023-04-18

### Changed

- Updated ironbank/opensource/openpolicyagent/gatekeeper v3.11.0 -> v3.12.0.
- Updated registry1.dso.mil/ironbank/opensource/kubernetes/kubectl v1.26.3 -> v1.26.4
- Updated registry1.dso.mil/ironbank/opensource/openpolicyagent/gatekeeper v3.11.0 -> v3.12.0

Fluentbit

• !2739: fluentbit update to 0.28.0-bb.0

# Changelog Updates

## [0.28.0-bb.0]

### Changed

- Updated upstream helm chart tag `0.28.0-bb.0`
- Updated fluent-bit image to `2.1.2` from IB

Promtail

• !2730: promtail update to 6.11.0-bb.0

# Changelog Updates

## [6.11.0-bb.0]

### Added

- Bumped chart version to 6.11.0
- Bumped appversion to 2.8.1

Loki

# Changelog Updates

## [5.0.0-bb.4] - 2023-05-15

### Added

- updated cypress test for monitoring package update

## [5.0.0-bb.3] - 2023-05-10

### Added

- Added a networkpolicy for egress from minio to the controlplane

Tempo

• !2746: tempo update to 1.2.0-bb.0

# Changelog Updates

## [1.2.0-bb.1] - 2022-05-15

### Added

- updated cypress test for monitoring package update

## [1.2.0-bb.0] - 2022-05-02

### Changed

- Bumped chart version to 1.2.0
- Bumped images tag to 2.1.1

Monitoring

• !2767: monitoring update to 45.27.2-bb.0
• !2754: monitoring update to 43.1.2-bb.5

# Changelog Updates

## [45.27.2-bb.1] - 2023-05-16

### Added

- updated cypress tests

## [45.27.2-bb.0] - 2023-05-11

### Added

- registry1.dso.mil/ironbank/big-bang/grafana/grafana-plugins minor 9.3.2 -> 9.5.1
- registry1.dso.mil/ironbank/kiwigrid/k8s-sidecar minor 1.21.0 -> 1.23.3
- registry1.dso.mil/ironbank/opensource/bats/bats minor 1.8.2 -> 1.9.0
- registry1.dso.mil/ironbank/opensource/kubernetes/kube-state-metrics minor v2.7.0 -> v2.8.2
- registry1.dso.mil/ironbank/opensource/kubernetes/kubectl minor v1.25.5 -> v1.26.4
- registry1.dso.mil/ironbank/opensource/prometheus-operator/prometheus-config-reloader minor v0.61.1 -> v0.65.1
- registry1.dso.mil/ironbank/opensource/prometheus-operator/prometheus-operator minor v0.61.1 -> v0.65.1
- registry1.dso.mil/ironbank/opensource/prometheus-operator/prometheus-operator minor 0.61.1 -> v0.65.1
- registry1.dso.mil/ironbank/opensource/prometheus/alertmanager minor v0.24.0 -> v0.25.0
- registry1.dso.mil/ironbank/opensource/prometheus/prometheus minor v2.40.5 -> v2.42.0
- registry1.dso.mil/ironbank/opensource/thanos/thanos minor v0.29.0 -> v0.30.2

## [43.1.2-bb.5] - 2022-05-08

### Added

- Added AuthorizationPolicy for tempo to prometheus

Twistlock

• !2762: twistlock update to 0.12.0-bb.1

# Changelog Updates

## [0.12.0-bb.1] - 2023-05-11

### Added

- Added TLDR documentation for Container Models

Argocd

• !2761: argocd update to 5.28.0-bb.3

# Changelog Updates

## [5.28.0-bb.3] - 2023-05-11

### Changed

- Bumped Redis chart dependency to `17.10.2-bb.1`

## [5.28.0-bb.2] - 2023-05-08

### Changed

- Bumped Redis chart dependency to `17.10.2-bb.0`

## [5.28.0-bb.1] - 2023-04-11

### Updated

- Add redis-exporter image annotation to Chart.yaml

Authservice

# Changelog Updates

## [0.5.3-bb.8]

### Changed

- Bumped Redis chart dependency to `17.10.2-bb.0`

Minio Operator

• !2732: minioOperator update to 5.0.4-bb.0
• !2720: minioOperator update to 5.0.3-bb.0

# Changelog Updates

## [5.0.4-bb.1] - 2023-05-03

### Fix

- Bug fix
- Image user is 1001 in IronBank. Chart must run as user 1001 container enters crash loop

## [5.0.4-bb.0] - 2023-05-03

### Fix

- Update console to version v0.26.0
- Updated Minio Operator Helm Chart to v5.0.4

## [5.0.3-bb.0] - 2023-04-05

### Fix

- Updated Minio Operator Helm Chart to v5.0.3

Minio

• !2738: minio update to 5.0.3-bb.1
• !2723: minio update to 5.0.3-bb.0

# Changelog Updates

## [5.0.3-bb.2] - 2023-05-08

### Fix

- Update container security context run as user and group to 1001 to match IronBank image.
- add network policy to egress

## [5.0.3-bb.1] - 2023-04-06

### Changed

- Updated chart to v5.0.3
- Updated MinIO to `RELEASE.2023-04-28T18-11-17Z`
- Update mc to `RELEASE.2023-04-12T02-21-51Z`

Gitlab

• !2759: gitlab update to 6.11.2-bb.0
• !2753: gitlab update to 6.10.2-bb.1

# Changelog Updates

## [6.11.2-bb.0] - 2023-05-10

### Changed

- "upgrade Gitlab to app version 15.11.2 chart version 6.11.2-bb.0"
- ironbank/gitlab/gitlab/gitlab-webservice patch 15.10.2 -> 15.11.2
- registry1.dso.mil/ironbank/gitlab/gitlab/certificates patch 15.10.2 -> 15.11.2
- registry1.dso.mil/ironbank/gitlab/gitlab/gitaly patch 15.10.2 -> 15.11.2
- registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-container-registry patch 15.10.2 -> 15.11.2
- registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-exporter patch 15.10.2 -> 15.11.2
- registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-mailroom patch 15.10.2 -> 15.11.2
- registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-pages patch 15.10.2 -> 15.11.2
- registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-shell patch 15.10.2 -> 15.11.2
- registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-sidekiq patch 15.10.2 -> 15.11.2
- registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-toolbox patch 15.10.2 -> 15.11.2
- registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-webservice patch 15.10.2 -> 15.11.2
- registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-workhorse patch 15.10.2 -> 15.11.2
- registry1.dso.mil/ironbank/gitlab/gitlab/kubectl patch 15.10.2 -> 15.11.2

## [6.10.2-bb.1] - 2023-05-09

### Changed

- Fixed redis values to deduplicate imagePullSecrets

Gitlab Runner

• !2783: gitlabRunner update to 0.51.0-bb.2

# Changelog Updates

## [0.51.0-bb.2] - 2023-05-19

### Changed

- Update cypress tests for compatibility with latest gitlab version (6.11.2)

Nexus

• !2740: nexusRepositoryManager update to 52.0.0-bb.0

# Changelog Updates

## [51.0.0-bb.0] - 2023-04-06

### Changed

- Updated chart to version: 51.0.0-bb.0 | appVersion: 3.52.0
- Updated chart to version: 51.0.0-bb.0 | appVersion: 3.51.0

Anchore Enterprise

# Changelog Updates

## [1.24.1-bb.4]

### Changed

- Bumped Redis chart dependency to `17.10.2-bb.0`
- Bumped Gluon chart dependency to `0.3.2`

Mattermost Operator

• !2752: mattermostOperator update to 1.20.1-bb.0

# Changelog Updates

## [1.20.1-bb.0] - 2023-05-9

### Changed

- ironbank/opensource/mattermost/mattermost-operator updated from 1.20.0 to 1.20.1

Mattermost

• !2704: mattermost update to 7.10.0-bb.0

# Changelog Updates

## [7.10.0-bb.1] - 2023-05-10

### Added

- Added a networkpolicy for egress from minio to the controlplane

## [7.10.0-bb.0] - 2023-04-18

### Changed

- ironbank/opensource/mattermost/mattermost updated from 7.9.1 to 7.10.0
- Updated minio subchart to latest 4.5.8-bb.0

Vault

• !2751: Vault update 0.24.1-bb 1.13.1
• !2706: vault update to 0.23.0-bb.5

# Changelog Updates

## [0.24.1-bb.0] - 2023-05-08

### Changed

- `vault` updated to 1.13.1
- `vault-k8s` updated to 1.2.1
- `vault-csi-provider` updated to v1.4.0

## [0.23.0-bb.5] - 2023-04-19

### Changed

- `vault-csi-provider` updated to v1.3.0

Known Issues

• On some k8s distros certain components in the kube-system namespace are unable to be scraped by Prometheus due to the services default network interface binding - More Information

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our chat
• Check out the documentation for guidance on how to get started

Future

Don’t see your feature and/or bug fix? Check out our epics for estimates on when you can expect things to drop, and as always, feel free to comment or create issues if you have questions, comments, or concerns.