Big Bang Docs

IstioHardened

Initializing search

big-bang/bigbang

🏰 Home
💣 Big Bang Docs
🪙 Values
📦 Packages
📋 Release Notes
📖 Training
👥 Contributing
📝 Blog
🚥 Pipelines

Big Bang Docs

big-bang/bigbang

🏰 Home
💣 Big Bang Docs
💣 Big Bang Docs
- Overview
- Packages
- Developer
  Developer
  - Overview
  - AWS Dev Script
  - CI Workflow
  - Package Development
  - Development Environment
  - K8s Storage Options
  - Partybus Pipelines
  - Release Process
  - Testing
  - Testing Vendor Distros
  - Package Integration
    Package Integration
    
    Overview
    
    Database
    
    Documentation
    
    Flux
    
    Helm Standards
    
    Istio Hardened
    
    Monitoring
    
    Network Policies
    
    Ownership
    
    Pipeline
    
    Policy Enforcement
    
    Service Mesh
    
    SSO
    
    Object Storage
    
    Supported
    
    Testing
    
    Upstream
- Guides
  Guides
  - Overview
  - Using Big Bang
    Using Big Bang
    
    Installing and Configuring Vertical Pod Autoscaler (VPA) for Vertical Scaling of Fluent Bit and Promtail Pods
    
    Credentials for Big Bang Packages
    
    Switching Between EFK and PLG
    
    ImagePullPolicy for Big Bang
    
    List Of Big Bang Applications That Are Using Kyverno
    
    Integrating Prometheus Label Scraping for Sample Application
    
    Using Network Policies in Big Bang
    
    How To Monitor Pod Resource Using Grafana
    
    Deploying BigBang and BigBang packages using Signed HelmRepository artifacts
    
    General Conventions Style Guide
    
    Testing Deployments Using Cypress
    
    Upgrading Big Bang
    
    Values Guide
  - Deployment Scenarios
    Deployment Scenarios
    
    Quickstart
    
    SSO Quickstart
    
    Extra Package Deployment
    
    Multiple Ingress
    
    Appliance Mode
  - Backup and Restore
    Backup and Restore
    
    Gitlab Backups and Restores
    
    Migrating a Nexus Repository Using Velero
  - Airgap
    Airgap
    
    Airgap w/Zarf
- Prerequisites
  Prerequisites
- Understanding Big Bang
  Understanding Big Bang
  - Overview
  - Licensing Model
  - Configuration
    Configuration
    
    Base Config
    
    Sample Production Config
    
    Overall Configuration
    
    Post Renderers
  - Concepts
    Concepts
    
    Deployment
    
    Encryption
    
    GitOps Engines
    
    Glossary
    
    Troubleshooting
  - Package Architecture
    Package Architecture
    
    Overview
    
    Anchore
    
    Argocd
    
    Authservice
    
    Cluster Auditor
    
    Elasticsearch-Kibana
    
    External Secrets Operator
    
    Fluentbit
    
    Fortify
    
    Gitlab
    
    Harbor
    
    Holocron
    
    Istio
    
    Jaeger
    
    Keycloak
    
    Kiali
    
    Kyverno
    
    Loki
    
    Mattermost
    
    Metrics Server
    
    MinIO
    
    Monitoring
    
    NeuVector
    
    Nexus
    
    OPA-Gatekeeper
    
    Promtail
    
    Sonarqube
    
    Tempo
    
    Twistlock
    
    Vault
    
    Velero
    
    Template MD
  - Architecture Diagrams
    Architecture Diagrams
    
    Kube API Server Webhooks
    
    Logs Data Flow
    
    Metrics Data Flow
    
    Network Encryption and Ingress
- FAQ
🪙 Values
📦 Packages
📦 Packages
- Overview
- anchore-enterprise
  anchore-enterprise
  - 📦 README
  - 🪙 Values
  - 👥 Contributing
  - 📜 Changelog
  - 📖 More Info
    📖 More Info
    
    Anchore
    
    Node Affinity & Anti-Affinity with Anchore
    
    Changes needed for Big Bang and Ironbank Images
    
    Big Bang Anchore 4.1 Release Notes
    
    Anchore Engine Helm Chart
    
    To upgrade the Anchore Package
    
    IstioHardened
    
    Anchore Keycloak Integration
    
    Anchore Metrics
    
    Anchore Enterprise
    
    Security
    
    Troubleshooting Guide
- argocd
  argocd
  - 📦 README
  - 🪙 Values
  - 👥 Contributing
  - 📜 Changelog
  - 📖 More Info
    📖 More Info
    
    ArgoCD
    
    Affinity
    
    Files that require bigbang integration testing
    
    Elastic
    
    IstioHardened
    
    ArgoCD Keycloak Configuration
    
    Prometheus & ArgoCD
    
    Disaster Recovery
    
    Argo CD
    
    Security
    
    Testing your Package Branch against Bigbang before Package Merge
    
    Troubleshooting Guide
- authservice
  authservice
  - 📦 README
  - 🪙 Values
  - 👥 Contributing
  - 📜 Changelog
  - 📖 More Info
    📖 More Info
    
    Node Affinity & Anti-Affinity with Authservice
    
    How to upgrade the Authservice Package chart
    
    IstioHardened
    
    Backups and Disaster Recovery
    
    Chains with Domains
    
    Logging
    
    Keycloak
    
    networkPolicies
    
    Authservice
    
    Metrics
    
    Troubleshooting
- cluster-auditor
  cluster-auditor
  - 📦 README
  - 🪙 Values
  - 👥 Contributing
  - 📜 Changelog
  - 📖 More Info
    📖 More Info
    
    Node Affinity & Anti-Affinity with Cluster Auditor
    
    Code Changes for Updates
    
    istioHardened
    
    Keycloak / Single Sign-on
    
    Monitoring
    
    networkPolicies
    
    Cluster Auditor
    
    Troubleshooting
- eck-operator
  eck-operator
  - 📦 README
  - 🪙 Values
  - 👥 Contributing
  - 📜 Changelog
  - 📖 More Info
    📖 More Info
    
    ECK Operator
    
    Node Affinity & Anti-Affinity with ECK Operator
    
    How to upgrade the ECK-Operator chart
    
    ECK Operator
    
    Developer guide
    
    Istio Hardened
    
    networkPolicies
- elasticsearch-kibana
  elasticsearch-kibana
  - 📦 README
  - 🪙 Values
  - 👥 Contributing
  - 📜 Changelog
  - 📖 More Info
    📖 More Info
    
    Node Affinity & Anti-Affinity with Elastic/Kibana
    
    How to upgrade the Elasticsearch-Kibana chart
    
    Snapshots in Elasticsearch
    
    Elastic
    
    Istio Hardened
    
    Elastic / Kibana Keycloak Integration
    
    networkPolicies
    
    Overview
    
    Elastic Exporter Metrics
    
    Sysctls
    
    Troubleshooting
- external-secrets
  external-secrets
  - 📦 README
  - 🪙 Values
  - 👥 Contributing
  - 📜 Changelog
  - 📖 More Info
    📖 More Info
    
    Deploying External Secrets Operator
    
    Upgrading to a new version
- fluentbit
  fluentbit
  - 📦 README
  - 🪙 Values
  - 👥 Contributing
  - 📜 Changelog
  - 📖 More Info
    📖 More Info
    
    Index
    
    Node Affinity & Anti-Affinity with Fluentbit
    
    Code Changes for Updates
    
    Istio Hardened
    
    Increase (or decrease) the number of indexes that are generated
    
    Troubleshooting
    
    networkPolicies
    
    Fluent-bit
- fortify
  fortify
  - 📦 README
  - 🪙 Values
  - 👥 Contributing
  - 📜 Changelog
  - 📖 More Info
    📖 More Info
    
    Files that require bigbang integration testing
    
    IstioHardened
    
    Fortify App
    
    Fortify (Customized)
    
    Testing your Package Branch against Bigbang before Package Merge
- gitlab
  gitlab
- gitlab-runner
  gitlab-runner
- grafana
  grafana
  - 📦 README
  - 🪙 Values
  - 👥 Contributing
  - 📜 Changelog
  - 📖 More Info
    📖 More Info
    
    Development and Maintenance Guide for the Grafana Package
    
    Istio Hardened
- haproxy
  haproxy
  - 📦 README
  - 🪙 Values
  - 👥 Contributing
  - 📜 Changelog
  - 📖 More Info
    📖 More Info
    
    How to upgrade the HAProxy Package chart
    
    IstioHardened
- harbor
  harbor
  - 📦 README
  - 🪙 Values
  - 👥 Contributing
  - 📜 Changelog
  - 📖 More Info
    📖 More Info
    
    Files that require bigbang integration testing
    
    Harbor
    
    istioHardened
    
    networkPolicies
    
    Production
    
    Testing your Package Branch against Bigbang before Package Merge
- holocron
  holocron
  - 📦 README
  - 🪙 Values
  - 👥 Contributing
  - 📜 Changelog
  - 📖 More Info
    📖 More Info
    
    Deploy Holocron with Big Bang
    
    IstioHardened
    
    How to setup Holocron
    
    Getting Started with Big Bang
    
    Setting up a development environment
    
    Welcome to Holocron!
    
    User
- istio-controlplane
  istio-controlplane
  - 📦 README
  - 🪙 Values
  - 👥 Contributing
  - 📜 Changelog
  - 📖 More Info
    📖 More Info
    
    How to upgrade the Istio ControlPlane Package chart
    
    IstioHardened
    
    Node Affinity & Anti-Affinity with Istio ControlPlane
    
    Istio Control Plan Ingress Configuration
    
    Monitoring
    
    Service Mesh and Istio
    
    Istio Security
    
    Traffic management
    
    Common Problems
- istio-operator
  istio-operator
  - 📦 README
  - 🪙 Values
  - 👥 Contributing
  - 📜 Changelog
  - 📖 More Info
    📖 More Info
    
    Node Affinity & Anti-Affinity with Istio Operator
    
    How to upgrade the Istio Operator Package chart
    
    Istio Operator
- jaeger
  jaeger
  - 📦 README
  - 🪙 Values
  - 👥 Contributing
  - 📜 Changelog
  - 📖 More Info
    📖 More Info
    
    Affinity
    
    Code Changes for Updates
    
    Elasticsearch
    
    Istio Hardened
    
    Keycloak Configuration
    
    Jaeger
- keycloak
  keycloak
  - 📦 README
  - 🪙 Values
  - 👥 Contributing
  - 📜 Changelog
  - 📖 More Info
    📖 More Info
    
    Node Affinity & Anti-Affinity with KeyCloak
    
    How to update the Keycloak Package chart
    
    IstioHardened
    
    Keycloak Configuration
    
    Keycloak
    
    Context
- kiali
  kiali
  - 📦 README
  - 🪙 Values
  - 👥 Contributing
  - 📜 Changelog
  - 📖 More Info
    📖 More Info
    
    Affinity
    
    Maintaining Kiali
    
    IstioHardened
    
    Default Token Login
    
    Kiali
- kyverno
  kyverno
  - 📦 README
  - 🪙 Values
  - 👥 Contributing
  - 📜 Changelog
  - 📖 More Info
    📖 More Info
    
    How to update the Kyverno Package chart
    
    Migration from Gatekeeper to Kyverno
    
    Policy management
    
    Kyverno
- kyverno-policies
  kyverno-policies
- kyverno-reporter
  kyverno-reporter
  - 📦 README
  - 🪙 Values
  - 👥 Contributing
  - 📜 Changelog
  - 📖 More Info
    📖 More Info
    
    How to upgrade the Kyverno Policy Reporter Package chart
    
    Istio Hardened
    
    Kyverno Monitoring
    
    Introduction to Kyverno Reporting
- loki
  loki
  - 📦 README
  - 🪙 Values
  - 👥 Contributing
  - 📜 Changelog
  - 📖 More Info
    📖 More Info
    
    Loki Development and Maintenance Guide
    
    Istio Hardened
    
    Assumptions (5/5/2022)
    
    Log entry deletion
    
    Motivations for Restructure
    
    Loki
    
    Loki in Production
    
    v3.0.0 Upgrade Details
- mattermost
  mattermost
  - 📦 README
  - 🪙 Values
  - 👥 Contributing
  - 📜 Changelog
  - 📖 More Info
    📖 More Info
    
    Node Affinity & Anti-Affinity with Mattermost
    
    Upgrading to a new version
    
    IstioHardened
    
    Keycloak SSO Mattermost Config
    
    Mattermost
- mattermost-operator
  mattermost-operator
  - 📦 README
  - 🪙 Values
  - 👥 Contributing
  - 📜 Changelog
  - 📖 More Info
    📖 More Info
    
    Node Affinity & Anti-Affinity with Mattermost Operator
    
    How to Sync with Upstream
    
    Istio Hardened
    
    Developer guide
    
    Mattermost Operator
- metrics-server
  metrics-server
  - 📦 README
  - 🪙 Values
  - 👥 Contributing
  - 📜 Changelog
  - 📖 More Info
    📖 More Info
    
    BBCHANGES
    
    DEVELOPMENT MAINTENANCE
    
    Istio Hardened
    
    Metric Server
- minio
  minio
  - 📦 README
  - 🪙 Values
  - 👥 Contributing
  - 📜 Changelog
  - 📖 More Info
    📖 More Info
    
    How to upgrade
    
    IstioHardened
    
    Affinity
    
    Backups and Disaster Recovery
    
    Logging
    
    Keycloak
    
    MinIO
    
    Metrics
    
    Troubleshooting
- minio-operator
  minio-operator
  - 📦 README
  - 🪙 Values
  - 👥 Contributing
  - 📜 Changelog
  - 📖 More Info
    📖 More Info
    
    How to upgrade
    
    IstioHardened
    
    Affinity
    
    Backups and Disaster Recovery
    
    Logging
    
    Keycloak
    
    MinIO Operator
    
    Metrics
    
    Troubleshooting
- monitoring
  monitoring
- neuvector
  neuvector
  - 📦 README
  - 🪙 Values
  - 👥 Contributing
  - 📜 Changelog
  - 📖 More Info
    📖 More Info
    
    How to upgrade the NeuVector Package chart
    
    IstioHardened
    
    Neuvector Keycloak Configuration
    
    NeuVector
    
    Prometheus Metrics Exporter
- nexus
  nexus
- policy
  policy
  - 📦 README
  - 🪙 Values
  - 👥 Contributing
  - 📜 Changelog
  - 📖 More Info
    📖 More Info
    
    To upgrade Gatekeeper package
    
    Affinity
    
    Constraint Annotations
    
    OPA Constraint Framework
    
    Constraint Templates
    
    OPA Gatekeeper Violation Exceptions
    
    Open Policy Agent Gatekeeper
    
    Policy Library
    
    Rego
    
    Security with OPA Gatekeeper
    
    OPA Gatekeeper Testing
    
    Upgrade
- promtail
  promtail
  - 📦 README
  - 🪙 Values
  - 👥 Contributing
  - 📜 Changelog
  - 📖 More Info
    📖 More Info
    
    DEVELOPMENT MAINTENANCE
    
    Istio Hardened
    
    Promtail
- sonarqube
  sonarqube
- tempo
  tempo
  - 📦 README
  - 🪙 Values
  - 👥 Contributing
  - 📜 Changelog
  - 📖 More Info
    📖 More Info
    
    How to upgrade the Tempo Package chart
    
    Keycloak Configuration for Tempo
    
    Istio Hardened
    
    Tempo
    
    Tempo in Production
- thanos
  thanos
  - 📦 README
  - 🪙 Values
  - 👥 Contributing
  - 📜 Changelog
  - 📖 More Info
    📖 More Info
    
    How to upgrade the Thanos Package chart
    
    Istio Hardened
    
    Thanos
- twistlock
  twistlock
  - 📦 README
  - 🪙 Values
  - 👥 Contributing
  - 📜 Changelog
  - 📖 More Info
    📖 More Info
    
    Node Affinity & Anti-Affinity with Twistlock
    
    Disaster Recovery
    
    CONTAINER MODELS
    
    To upgrade the Twistlock Package
    
    ELASTIC
    
    IstioHardened
    
    Keycloak integration
    
    Monitoring
    
    TROUBLESHOOTING
    
    WAAS
    
    Twistlock Initialization
    
    Twistlock on k3d
    
    Twistlock
- vault
  vault
- velero
  velero
  - 📦 README
  - 🪙 Values
  - 👥 Contributing
  - 📜 Changelog
  - 📖 More Info
    📖 More Info
    
    Node Affinity & Anti-Affinity with Velero
    
    Changes needed for Iron Bank Images and Big Bang
    
    To upgrade the Velero Package
    
    istioHardened
    
    Velero
    
    Backup and restore
    Backup and restore
    
    Background
    
    Full cluster backup and restore
    
    Label Based backup and restore
    
    Namespace Backup and restore
    
    Scheduled Backup
    
    Troubleshooting and additional links
- wrapper
  wrapper
  - 📦 README
  - 🪙 Values
  - 👥 Contributing
  - 📜 Changelog
  - 📖 More Info
    📖 More Info
    
    How to upgrade the Wrapper Package chart
    
    IstioHardened
    
    Custom Helm Chart Deployment and the “Package Wrapper”
    
    Overview
📋 Release Notes
📖 Training
📖 Training
- Docs
  Docs
  - Home
  - Big Bang 101
    Big Bang 101
    
    Overview
    
    What is Platform One?
    
    Security in Platform One
    
    Layered Architecture
    
    Security Tools
    
    Summary
  - Pre-Install Prep
    Pre-Install Prep
    
    Overview
    
    New Platform One User Guide
    
    Verify you can pull from Repo1 and IronBank
    
    How to Set up AWS to use with Big Bang
    
    Summary
  - Installation
    Installation
    
    Overview
    
    Software Installation and Verification
    
    Big Bang Customer Deployment
    
    Summary
  - Packages
    Packages
    
    Overview
    
    Package Development
    
    Pipeline Overview
    
    OCI Artifacts
    OCI Artifacts
    
    OCI Artifacts Overview
    
    Dev Workflow with OCI
    
    Summary
  - Labs
    Labs
    
    Overview
    
    Bad Pods Lab
    
    Encryption
    
    Flux Lab: Install Flux to a Cluster
    
    Helm Lab
    
    Expose a mock mission app using istio ingress gateway Lab
    
    Kubernetes Lab
    
    Kustomize Lab
    
    VI Basics
    
    Summary
  - k8s
    k8s
    
    Overview
    
    The Basics
    
    Package Managers
    
    Operators
    
    GitOps w/ Flux
    
    Service Mesh w/ Istio
    
    Metrics w/ Prometheus
    
    Secrets w/ SOPS
    
    Consolidated Logging
    
    Summary
  - Istio
    Istio
    
    Platform One - Istio Training
    
    Docs
    Docs
    
    Welcome!
    
    Getting Started
    
    Environment validation
    
    Istio Architecture
    
    The application Lab
    
    Ingress
    
    Ingress Lab
    
    Observability
    
    Observability Lab
    
    Security
    
    09 2 security
    
    09 3 security
    
    Security Lab
    
    Traffic Shifting
    
    Traffic Shifting Lab
    
    Sidecar resource
    
    Enforcing egress traffic using Istio’s authorization policies
    
    Install Istio
    
    Deeper into sidecar injection
    
    Congratulations
    
    Labs
    Labs
    
    Observability - Telemetry and Logs
    
    Creating a deployment and using a Gateway to expose it
    
    Enable TLS
    
    Envoy Demo
    
    Envoy Filters
    
    Access control
    
    Advanced traffic shifting
    
    Failure injection
    
    Simple traffic shifting
  - User Guides and Further Reading
    User Guides and Further Reading
    
    Further Reading
    
    User Guides
  - Training Feedback
👥 Contributing
📝 Blog
📝 Blog
🚥 Pipelines

package mattermost 10.0.0-bb.2

IstioHardened

See the Big Bang Doc.

Last update: 2024-07-12 by Jacob Kershaw

Previous Upgrading to a new version

Next Keycloak SSO Mattermost Config

Made with Material for MkDocs