Release Notes - 2.4.0💣

Please see our documentation page for more information on how to consume and deploy BigBang. This release was primarily tested on Kubernetes 1.26.3 (RKE2).

Upgrade Notices💣

Istio mTLS:

This release enables mTLS for Mattermost at long last!!. The mTLS column in Packages.md can be reviewed for an up to date list.
If you run into issues with mTLS STRICT mode please report them to the team via Repo1 issues and turn mTLS to PERMISSIVE via values:
```
addons:
  mattermost:
    values:
      istio:
        mtls:
          mode: PERMISSIVE
```

Loki:

The default Loki schema store and version were updated to use the TSDB index. Loki’s schema processes starting with a certain date to tell it what schema to use in the past and “from now on” so it would be easiest to update the loki.schemaConfig portion to the date you are performing the upgrade and you can see an example here.

loki:
  values:
    loki:
      schemaConfig:
        configs:
          - from: 2022-01-11
            store: boltdb-shipper
            object_store: YOUR_LOKI_STORAGE_TYPE (eg: `s3` or `filesystem`)
            schema: v12
            index:
              prefix: loki_index_
              period: 24h
          - from: 2023-MONTH-DAY
            store: tsdb
            object_store: YOUR_LOKI_STORAGE_TYPE (eg: `s3` or `filesystem`)
            schema: v12
            index:
              prefix: loki_tsdb_
              period: 24h

Upgrades from previous releases💣

If coming from a version pre-2.3.0, note the additional upgrade notices in any release in between. The BB team doesn’t test/guarantee upgrades from anything pre-2.3.0.

Packages💣

Package	Type	Package Version	BB Version
Istio Controlplane	Core	Istio `1.17.2` Tetrate Istio Distro `1.17.2`	`1.17.2-bb.2` 🔗
Istio Operator	Core	Istio Operator `1.17.2` Tetrate Istio Distro Operator `1.17.2`	`1.17.2-bb.2` 🔗
Jaeger	Core	`1.45.0`	`2.45.0-bb.2` 🔗
Kiali	Core	`1.68.0`	`1.68.0-bb.0` 🔗
Cluster Auditor	Core	`0.0.7`	`1.5.0-bb.3`
Gatekeeper	Core	`3.12.0`	`3.12.0-bb.3`
Kyverno	Core	`1.8.5`	`2.6.5-bb.3`
Kyverno Policies	Core	`1.1.0`	`1.1.0-bb.6`
Kyverno Reporter	Core	`2.10.4`	`2.16.0-bb.1`
Elasticsearch Kibana	Core	Kibana `8.7.1` Elasticsearch `8.7.0`	`1.3.1-bb.0` 🔗
Eck Operator	Core	`2.7.0`	`2.7.0-bb.1` 🔗
Fluentbit	Core	`2.1.2`	`0.28.0-bb.1` 🔗
Promtail	Core	`2.8.1`	`6.11.0-bb.1` 🔗
Loki	Core	`2.8.2`	`5.5.0-bb.2` 🔗
Neuvector	Core	`5.1.2`	`2.4.3-bb.0`
Tempo	Core	Tempo `2.1.1` Tempo Query `2.1.1`	`1.2.0-bb.2` 🔗
Monitoring	Core	Prometheus `2.43.1` Grafana `9.5.1` Alertmanager `0.25.0`	`45.27.2-bb.4` 🔗
Twistlock	Core	`22.12.415`	`0.12.0-bb.2` 🔗
Wrapper	Core	N / A	`0.4.1`
Argocd	Addon	`2.7.1`	`5.33.1-bb.2` 🔗
Authservice	Addon	`0.5.3`	`0.5.3-bb.9` 🔗
Minio Operator	Addon	`5.0.4`	`5.0.4-bb.2`
Minio	Addon	`RELEASE.2023-05-04T21-44-30Z`	`5.0.4-bb.1`
Gitlab	Addon	`15.11.3`	`6.11.3-bb.0`
Gitlab Runner	Addon	`15.10.0`	`0.51.0-bb.2`
Nexus	Addon	`3.53.1-02`	`53.1.0-bb.1` 🔗
Sonarqube	Addon	`9.9.1-community`	`8.0.1-bb.1` 🔗
Haproxy	Addon	`2.2.21`	`1.12.0-bb.0`
Anchore Enterprise	Addon	Enterprise `4.6.0` Engine `1.1.0`	`1.24.1-bb.4`
Mattermost Operator	Addon	`1.20.1`	`1.20.1-bb.0`
Mattermost	Addon	`7.10.0`	`7.10.0-bb.3` 🔗
Velero	Addon	`1.10.2`	`3.1.5-bb.1`
Keycloak	Addon	`21.1.1`	`18.4.3-bb.0`
Vault	Addon	`1.13.1`	`0.24.1-bb.1` 🔗
Metrics Server	Addon	`0.6.3`	`3.9.0-bb.1`

Changes in 2.4.0💣

Big Bang MRs💣

!2805: Resolve “Document Installing and Using VPA in BigBang and Vertically Scaling Log Forwarder Pods”
!2834: Fix k3d-dev.sh default AMI selection
!2838: Allow setting minProtocolVersion on istio gateways
!2857: Reverting Anchore Postgres authentication issue

Istio Controlplane💣

!2810: istio update to 1.17.2-bb.2

# Changelog Updates

## [1.17.2-bb.2] - 2023-05-26

### Added

- Added scc for OpenShift

Istio Operator💣

!2813: istioOperator update to 1.17.2-bb.2

# Changelog Updates

## [1.17.2-bb.2]

### Added

- Added SCC for OpenShift

Jaeger💣

!2839: jaeger update to 2.45.0-bb.2

# Changelog Updates

## [2.45.0-bb.2] - 2023-5-31

### Changed

- Modified securityContext for es-index-templates job to run as non root user/group

## [2.45.0-bb.1] - 2023-05-26

### Added

- Added SCC and NetworkAttachmentDefinition for OpenShift

Kiali💣

!2836: kiali update to 1.68.0-bb.0
!2828: kiali update to 1.66.0-bb.1 with better openshift support

# Changelog Updates

## [1.68.0-bb.0] - 2023-06-06

### Added

- Updated to 1.68.0 images (latest in IB)

## [1.67.0-bb.0] - 2023-05-18

### Changed

- Updated to 1.67.0 images (latest in IB)

## [1.66.0-bb.1] - 2023-05-26

### Added

- Added OpenShift support

Elasticsearch Kibana💣

!2827: elasticsearchKibana update to 1.3.1-bb.0

# Changelog Updates

## [1.3.1-bb.0] - 2023-05-24

### Added

- Optional section in values for Elastic Agent config

Eck Operator💣

!2843: eckOperator update to 2.7.0-bb.1

# Changelog Updates

## [2.7.0-bb.1]

### Changed

- Added OpenShift support

Fluentbit💣

!2829: fluentbit update to 0.28.0-bb.1

# Changelog Updates

## [0.28.0-bb.1]

### Added

- Added SCC for OpenShift

Promtail💣

!2840: promtail update to 6.11.0-bb.1

# Changelog Updates

## [6.11.0-bb.1]

### Added

- added 'vpa.yaml' chart template
- added VPA logic to 'values.yaml'

Loki💣

!2809: loki update to 5.5.0-bb.1 & TSDB Schema

# Changelog Updates

## [5.0.0-bb.4] - 2023-05-30

### Changed

- updated cypress test for monitoring package update

### Added

- updated cypress test for monitoring package update

## [5.5.0-bb.1] - 2023-05-23

### Changed

- Updated `schema_config` with tsdb index default
- Updated `storage_config` with `tsdb-shipper` default

Tempo💣

!2826: SKIP UPGRADE Update tempo branch in values.yaml

# Changelog Updates

## [1.2.0-bb.2] - 2022-06-02

### Changed

- updated cypress test for monitoring package update part deux

Monitoring💣

!2837: monitoring update to 45.27.2-bb.4

# Changelog Updates

## [45.27.2-bb.4] - 2023-05-26

### Added

- Added Openshift support

Argocd💣

!2833: argocd update to 5.33.1-bb.2

# Changelog Updates

## [5.33.1-bb.2] - 2023-06-06

### Updated

- Openshift conditional update to not reference enabled

## [5.33.1-bb.1] - 2023-06-06

### Updated

- Openshift conditional update

## [5.33.1-bb.0] - 2023-06-05

### Updated

- Updated to Argo 2.7.1

## [5.28.0-bb.5] - 2023-05-25

### Changed

- Add scc permissions for OpenShift
- Add NetworkAttachmentDefinition for OpenShift

Authservice💣

!2823: authservice update to 0.5.3-bb.9

# Changelog Updates

## [0.5.3-bb.9]

### Changed

- Fixes a double quoting bug in `jwks_uri` setting.

Nexus💣

!2832: nexusRepositoryManager update to 53.1.0-bb.0
!2835: nexusRepositoryManager update to 53.1.0-bb.1

# Changelog Updates

## [53.1.0-bb.1] - 2023-06-06

### Changed

- Updated crane to v0.15.2

## [53.1.0-bb.0] - 2023-05-22

### Changed

- Updated chart to version: 53.1.0-bb.0 | appVersion: 3.53.1

Sonarqube💣

!2844: sonarqube update to 8.0.1-bb.1

# Changelog Updates

## [8.0.1-bb.1] - 2023-05-26

### Added

- Added OpenShift support

Twistlock💣

!2825: twistlock update to 0.12.0-bb.2

# Changelog Updates

## [0.12.0-bb.2] - 2023-05-31

#### Changed

- Changed chart/Chart.yaml condition

Mattermost💣

!2800: Enabling mTLS on mattermost & 7.10.2 update

# Changelog Updates

## [7.10.2-bb.1] - 2023-06-15

### Changed

- ServiceMonitor tlsConfig indent bug fix

## [7.10.2-bb.0] - 2023-06-07

### Changed

- ironbank/opensource/mattermost/mattermost updated from 7.10.0 to 7.10.2
- ironbank/opensource/postgres/postgresql12 updated from 12.14 to 12.15

## [7.10.0-bb.3] - 2023-05-24

### Added

- Added mTLS to mattermost

Vault💣

!2820: vault update to 0.24.1-bb.1

# Changelog Updates

## [0.24.1-bb.1] - 2023-05-30

### Changed

- Fix VAULT_ADDR in autoInit job configMap

Known Issues💣

On some k8s distros certain components in the kube-system namespace are unable to be scraped by Prometheus due to the services default network interface binding - More Information

Helpful Links💣

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

Open issues here
Join our chat
Check out the documentation for guidance on how to get started

Future💣

Don’t see your feature and/or bug fix? Check out our epics for estimates on when you can expect things to drop, and as always, feel free to comment or create issues if you have questions, comments, or concerns.