Big Bang values.yaml📜
domain📜
Type: string
"dev.bigbang.mil"
Description: Domain used for BigBang created exposed services, can be overridden by individual packages.
offline📜
Type: bool
false
Description: (experimental) Toggle sourcing from external repos. All this does right now is toggle GitRepositories, it is not fully functional
helmRepositories📜
Type: list
[]
Description: List of Helm repositories/credentials to pull helm charts from. OCI Type: Must specify username/password or existingSecret if repository requires auth. Using “private-registry” for existingSecret will reuse credentials from registryCredentials above. Default Type: Must specify existingSecret with auth - see https://fluxcd.io/flux/components/source/helmrepositories/#secret-reference for details on secret data required.
registryCredentials📜
Type: object
email: ''
password: ''
registry: registry1.dso.mil
username: ''
Description: Single set of registry credentials used to pull all images deployed by BigBang.
openshift📜
Type: bool
false
Description: Multiple sets of registry credentials used to pull all images deployed by BigBang. Credentials will only be created when a valid combination exists, registry, username, and password (email is optional) Or a list of registires: - registry: registry1.dso.mil username: “” password: “” email: “” - registry: registry.dso.mil username: “” password: “” email: “” Openshift Container Platform Feature Toggle
git📜
Type: object
credentials:
caFile: ''
knownHosts: ''
password: ''
privateKey: ''
publicKey: ''
username: ''
existingSecret: ''
Description: Git credential settings for accessing private repositories Order of precedence is: 1. existingSecret 2. http credentials (username/password/caFile) 3. ssh credentials (privateKey/publicKey/knownHosts)
git.existingSecret📜
Type: string
""
Description: Existing secret to use for git credentials, must be in the appropriate format: https://toolkit.fluxcd.io/components/source/gitrepositories/#https-authentication
git.credentials📜
Type: object
caFile: ''
knownHosts: ''
password: ''
privateKey: ''
publicKey: ''
username: ''
Description: Chart created secrets with user defined values
git.credentials.username📜
Type: string
""
Description: HTTP git credentials, both username and password must be provided
git.credentials.caFile📜
Type: string
""
Description: HTTPS certificate authority file. Required for any repo with a self signed certificate
git.credentials.privateKey📜
Type: string
""
Description: SSH git credentials, privateKey, publicKey, and knownHosts must be provided
sso📜
Type: object
certificateAuthority:
cert: ''
secretName: tls-ca-sso
name: SSO
oidc:
authorization: '{{ .Values.sso.url }}/protocol/openid-connect/auth'
claims:
email: email
groups: groups
name: name
username: preferred_username
endSession: '{{ .Values.sso.url }}/protocol/openid-connect/logout'
jwks: ''
jwksUri: '{{ .Values.sso.url }}/protocol/openid-connect/certs'
token: '{{ .Values.sso.url }}/protocol/openid-connect/token'
userinfo: '{{ .Values.sso.url }}/protocol/openid-connect/userinfo'
saml:
entityDescriptor: '{{ .Values.sso.url }}/protocol/saml/descriptor'
metadata: ''
service: '{{ .Values.sso.url }}/protocol/saml'
url: https://login.dso.mil/auth/realms/baby-yoda
Description: Global SSO values used for BigBang deployments when sso is enabled
sso.name📜
Type: string
"SSO"
Description: Name of the identity provider. This is used by some packages as the SSO login label.
sso.url📜
Type: string
"https://login.dso.mil/auth/realms/baby-yoda"
Description: Base URL for the identity provider. For OIDC, this is the issuer. For SAML this is the entityID.
sso.certificateAuthority📜
Type: object
cert: ''
secretName: tls-ca-sso
Description: Certificate authority for the identity provider’s certificates
sso.certificateAuthority.cert📜
Type: string
""
Description: The certificate authority public certificate in .pem format. Populating this will create a secret in each namespace that enables SSO.
sso.certificateAuthority.secretName📜
Type: string
"tls-ca-sso"
Description: The secret name to use for the certificate authority. Can be manually populated if cert is blank.
sso.saml.entityDescriptor📜
Type: string
"{{ .Values.sso.url }}/protocol/saml/descriptor"
Description: SAML entityDescriptor (metadata) path
sso.saml.service📜
Type: string
"{{ .Values.sso.url }}/protocol/saml"
Description: SAML SSO Service path
sso.saml.metadata📜
Type: string
""
Description: Literal SAML XML metadata retrieved from {{ .Values.sso.saml.entityDescriptor }}. Required for SSO in Nexus, Twistlock, or Sonarqube.
sso.oidc📜
Type: object
authorization: '{{ .Values.sso.url }}/protocol/openid-connect/auth'
claims:
email: email
groups: groups
name: name
username: preferred_username
endSession: '{{ .Values.sso.url }}/protocol/openid-connect/logout'
jwks: ''
jwksUri: '{{ .Values.sso.url }}/protocol/openid-connect/certs'
token: '{{ .Values.sso.url }}/protocol/openid-connect/token'
userinfo: '{{ .Values.sso.url }}/protocol/openid-connect/userinfo'
Description: OIDC endpoints can be retrieved from {{ .Values.sso.url }}/.well-known/openid-configuration
sso.oidc.authorization📜
Type: string
"{{ .Values.sso.url }}/protocol/openid-connect/auth"
Description: OIDC authorization path
sso.oidc.endSession📜
Type: string
"{{ .Values.sso.url }}/protocol/openid-connect/logout"
Description: OIDC logout / end session path
sso.oidc.jwksUri📜
Type: string
"{{ .Values.sso.url }}/protocol/openid-connect/certs"
Description: OIDC JSON Web Key Set (JWKS) path
sso.oidc.token📜
Type: string
"{{ .Values.sso.url }}/protocol/openid-connect/token"
Description: OIDC token path
sso.oidc.userinfo📜
Type: string
"{{ .Values.sso.url }}/protocol/openid-connect/userinfo"
Description: OIDC user information path
sso.oidc.jwks📜
Type: string
""
Description: Literal OIDC JWKS data retrieved from JWKS Uri. Only needed if jwsksUri is not defined.
sso.oidc.claims📜
Type: object
email: email
groups: groups
name: name
username: preferred_username
Description: Identity provider claim names that store metadata about the authenticated user.
sso.oidc.claims.email📜
Type: string
"email"
Description: IdP’s claim name used for the user’s email address.
sso.oidc.claims.name📜
Type: string
"name"
Description: IdP’s claim name used for the user’s full name
sso.oidc.claims.username📜
Type: string
"preferred_username"
Description: IdP’s claim name used for the username
sso.oidc.claims.groups📜
Type: string
"groups"
Description: IdP’s claim name used for the user’s groups or roles
flux📜
Type: object
install:
remediation:
retries: -1
interval: 2m
rollback:
cleanupOnFail: true
timeout: 10m
test:
enable: false
timeout: 10m
upgrade:
cleanupOnFail: true
remediation:
remediateLastFailure: true
retries: 3
Description: (Advanced) Flux reconciliation parameters. The default values provided will be sufficient for the majority of workloads.
networkPolicies📜
Type: object
controlPlaneCidr: 0.0.0.0/0
enabled: true
nodeCidr: ''
vpcCidr: 0.0.0.0/0
Description: Global NetworkPolicies settings
networkPolicies.enabled📜
Type: bool
true
Description: Toggle all package NetworkPolicies, can disable specific packages with package.values.networkPolicies.enabled
networkPolicies.controlPlaneCidr📜
Type: string
"0.0.0.0/0"
Description: Control Plane CIDR, defaults to 0.0.0.0/0, use kubectl get endpoints -n default kubernetes to get the CIDR range needed for your cluster Must be an IP CIDR range (x.x.x.x/x - ideally with /32 for the specific IP of a single endpoint, broader range for multiple masters/endpoints) Used by package NetworkPolicies to allow Kube API access
networkPolicies.nodeCidr📜
Type: string
""
Description: Node CIDR, defaults to allowing “10.0.0.0/8” “172.16.0.0/12” “192.168.0.0/16” “100.64.0.0/10” networks. use kubectl get nodes -owide and review the INTERNAL-IP column to derive CIDR range. Must be an IP CIDR range (x.x.x.x/x - ideally a /16 or /24 to include multiple IPs)
networkPolicies.vpcCidr📜
Type: string
"0.0.0.0/0"
Description: VPC CIDR, defaults to 0.0.0.0/0 In a production environment, it is recommended to setup a Private Endpoint for your AWS services like KMS or S3. Please review https://docs.aws.amazon.com/kms/latest/developerguide/kms-vpc-endpoint.html to setup routing to AWS services that never leave the AWS network. Once created update networkPolicies.vpcCidr to match the CIDR of your VPC so Vault will be able to reach your VPCs DNS and new KMS endpoint.
imagePullPolicy📜
Type: string
"IfNotPresent"
Description: Global ImagePullPolicy value for all packages Permitted values are: None, Always, IfNotPresent
istioCore.status📜
Type: string
"alpha"
istioCore.enabled📜
Type: bool
false
Description: Toggle deployment of Istio (helm deployment of istio-base and istiod)
istioCore.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
istioCore.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/istio-core.git"
istioCore.git.path📜
Type: string
"./chart"
istioCore.git.branch📜
Type: string
"main"
istioCore.helmRepo.repoName📜
Type: string
"registry1"
istioCore.helmRepo.chartName📜
Type: string
"istio-core"
istioCore.values📜
Type: object
istiod:
pilot:
env:
ENABLE_NATIVE_SIDECARS: 'true'
Description: Values to passthrough to the istiod chart
istioCore.flux📜
Type: object
{}
Description: Flux reconciliation overrides specifically for the Istio Gateway Package
istioCore.postRenderers📜
Type: list
[]
Description: Post Renderers. See docs/postrenders.md
istioGateway.status📜
Type: string
"alpha"
istioGateway.enabled📜
Type: bool
false
istioGateway.sourceType📜
Type: string
"git"
istioGateway.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/istio-gateway.git"
istioGateway.git.path📜
Type: string
"./chart"
istioGateway.git.branch📜
Type: string
"main"
istioGateway.helmRepo.repoName📜
Type: string
"registry1"
istioGateway.helmRepo.chartName📜
Type: string
"istio-gateway"
istioGateway.values📜
Type: object
{}
istioGateway.flux📜
Type: object
{}
Description: Flux reconciliation overrides specifically for the Istio Gateway Package
istioGateway.postRenderers📜
Type: list
[]
Description: Post Renderers. See docs/postrenders.md The istioGateway package supports advanced postRenderer definitions. If an array of postRenderers is provided, the postRenderers will be applied to all gateways. If a map of postRenderers is provided, the postRenderers will be applied only to their respective gateways. The map key must match the gateway name for the postRenderers to be applied to that gateway. You cannot mix array and map postRenderers.
istio.enabled📜
Type: bool
true
Description: Toggle deployment of Istio.
istio.mtls.mode📜
Type: string
"STRICT"
Description: STRICT = Allow only mutual TLS traffic, PERMISSIVE = Allow both plain text and mutual TLS traffic
istio.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
istio.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/istio-controlplane.git"
istio.git.path📜
Type: string
"./chart"
istio.git.tag📜
Type: string
"1.23.5-bb.1"
istio.helmRepo.repoName📜
Type: string
"registry1"
istio.helmRepo.chartName📜
Type: string
"istio"
istio.helmRepo.tag📜
Type: string
"1.23.5-bb.1"
istio.enterprise📜
Type: bool
false
Description: Tetrate Istio Distribution - Tetrate provides FIPs verified Istio and Envoy software and support, validated through the FIPs Boring Crypto module. Find out more from Tetrate - https://www.tetrate.io/tetrate-istio-subscription
istio.ingressGateways.public-ingressgateway.type📜
Type: string
"LoadBalancer"
istio.ingressGateways.public-ingressgateway.kubernetesResourceSpec📜
Type: object
{}
istio.gateways.public.ingressGateway📜
Type: string
"public-ingressgateway"
istio.gateways.public.hosts[0]📜
Type: string
"*.{{ .Values.domain }}"
istio.gateways.public.autoHttpRedirect📜
Type: object
enabled: true
Description: Controls default HTTP/8080 server entry with HTTP to HTTPS Redirect.
istio.gateways.public.tls.key📜
Type: string
""
istio.gateways.public.tls.cert📜
Type: string
""
istio.gateways.public.tls.minProtocolVersion📜
Type: string
""
istio.flux📜
Type: object
{}
Description: Flux reconciliation overrides specifically for the Istio Package
istio.values📜
Type: object
{}
Description: Values to passthrough to the istio-controlplane chart: https://repo1.dso.mil/big-bang/product/packages/istio-controlplane.git
istio.postRenderers📜
Type: list
[]
Description: Post Renderers. See docs/postrenders.md
istioOperator.enabled📜
Type: bool
true
Description: Toggle deployment of Istio Operator.
istioOperator.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
istioOperator.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/istio-operator.git"
istioOperator.git.path📜
Type: string
"./chart"
istioOperator.git.tag📜
Type: string
"1.23.5-bb.0"
istioOperator.helmRepo.repoName📜
Type: string
"registry1"
istioOperator.helmRepo.chartName📜
Type: string
"istio-operator"
istioOperator.helmRepo.tag📜
Type: string
"1.23.5-bb.0"
istioOperator.flux📜
Type: object
{}
Description: Flux reconciliation overrides specifically for the Istio Operator Package
istioOperator.values📜
Type: object
{}
Description: Values to passthrough to the istio-operator chart: https://repo1.dso.mil/big-bang/product/packages/istio-operator.git
istioOperator.postRenderers📜
Type: list
[]
Description: Post Renderers. See docs/postrenders.md
jaeger.enabled📜
Type: bool
false
Description: Toggle deployment of Jaeger.
jaeger.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
jaeger.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/jaeger.git"
jaeger.git.path📜
Type: string
"./chart"
jaeger.git.tag📜
Type: string
"2.57.0-bb.6"
jaeger.helmRepo.repoName📜
Type: string
"registry1"
jaeger.helmRepo.chartName📜
Type: string
"jaeger"
jaeger.helmRepo.tag📜
Type: string
"2.57.0-bb.6"
jaeger.flux📜
Type: object
install:
crds: CreateReplace
upgrade:
crds: CreateReplace
Description: Flux reconciliation overrides specifically for the Jaeger Package
jaeger.ingress📜
Type: object
gateway: ''
Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.
jaeger.sso.enabled📜
Type: bool
false
Description: Toggle SSO for Jaeger on and off
jaeger.sso.client_id📜
Type: string
""
Description: OIDC Client ID to use for Jaeger
jaeger.sso.client_secret📜
Type: string
""
Description: OIDC Client Secret to use for Jaeger
jaeger.values📜
Type: object
{}
Description: Values to pass through to Jaeger chart: https://repo1.dso.mil/big-bang/product/packages/jaeger.git
jaeger.postRenderers📜
Type: list
[]
Description: Post Renderers. See docs/postrenders.md
kiali.enabled📜
Type: bool
true
Description: Toggle deployment of Kiali.
kiali.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
kiali.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/kiali.git"
kiali.git.path📜
Type: string
"./chart"
kiali.git.tag📜
Type: string
"2.6.0-bb.0"
kiali.helmRepo.repoName📜
Type: string
"registry1"
kiali.helmRepo.chartName📜
Type: string
"kiali"
kiali.helmRepo.tag📜
Type: string
"2.6.0-bb.0"
kiali.flux📜
Type: object
{}
Description: Flux reconciliation overrides specifically for the Kiali Package
kiali.ingress📜
Type: object
gateway: ''
Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.
kiali.sso.enabled📜
Type: bool
false
Description: Toggle SSO for Kiali on and off
kiali.sso.client_id📜
Type: string
""
Description: OIDC Client ID to use for Kiali
kiali.sso.client_secret📜
Type: string
""
Description: OIDC Client Secret to use for Kiali
kiali.values📜
Type: object
{}
Description: Values to pass through to Kiali chart: https://repo1.dso.mil/big-bang/product/packages/kiali
kiali.postRenderers📜
Type: list
[]
Description: Post Renderers. See docs/postrenders.md
clusterAuditor.enabled📜
Type: bool
false
Description: Toggle deployment of Cluster Auditor.
clusterAuditor.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
clusterAuditor.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/cluster-auditor.git"
clusterAuditor.git.path📜
Type: string
"./chart"
clusterAuditor.git.tag📜
Type: string
"1.5.0-bb.22"
clusterAuditor.helmRepo.repoName📜
Type: string
"registry1"
clusterAuditor.helmRepo.chartName📜
Type: string
"cluster-auditor"
clusterAuditor.helmRepo.tag📜
Type: string
"1.5.0-bb.22"
clusterAuditor.flux📜
Type: object
{}
Description: Flux reconciliation overrides specifically for the Cluster Auditor Package
clusterAuditor.values📜
Type: object
{}
Description: Values to passthrough to the cluster auditor chart: https://repo1.dso.mil/big-bang/product/packages/cluster-auditor.git
clusterAuditor.postRenderers📜
Type: list
[]
Description: Post Renderers. See docs/postrenders.md
gatekeeper.enabled📜
Type: bool
false
Description: Toggle deployment of OPA Gatekeeper.
gatekeeper.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
gatekeeper.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/policy.git"
gatekeeper.git.path📜
Type: string
"./chart"
gatekeeper.git.tag📜
Type: string
"3.18.2-bb.4"
gatekeeper.helmRepo.repoName📜
Type: string
"registry1"
gatekeeper.helmRepo.chartName📜
Type: string
"gatekeeper"
gatekeeper.helmRepo.tag📜
Type: string
"3.18.2-bb.4"
gatekeeper.flux📜
Type: object
install:
crds: CreateReplace
upgrade:
crds: CreateReplace
Description: Flux reconciliation overrides specifically for the OPA Gatekeeper Package
gatekeeper.values📜
Type: object
{}
Description: Values to passthrough to the gatekeeper chart: https://repo1.dso.mil/big-bang/product/packages/policy.git
gatekeeper.postRenderers📜
Type: list
[]
Description: Post Renderers. See docs/postrenders.md
kyverno.enabled📜
Type: bool
true
Description: Toggle deployment of Kyverno.
kyverno.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
kyverno.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/kyverno.git"
kyverno.git.path📜
Type: string
"./chart"
kyverno.git.tag📜
Type: string
"3.3.6-bb.0"
kyverno.helmRepo.repoName📜
Type: string
"registry1"
kyverno.helmRepo.chartName📜
Type: string
"kyverno"
kyverno.helmRepo.tag📜
Type: string
"3.3.6-bb.0"
kyverno.flux📜
Type: object
{}
Description: Flux reconciliation overrides specifically for the Kyverno Package
kyverno.values📜
Type: object
{}
Description: Values to passthrough to the kyverno chart: https://repo1.dso.mil/big-bang/product/packages/kyverno.git
kyverno.postRenderers📜
Type: list
[]
Description: Post Renderers. See docs/postrenders.md
kyvernoPolicies.enabled📜
Type: bool
true
Description: Toggle deployment of Kyverno policies
kyvernoPolicies.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
kyvernoPolicies.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/kyverno-policies.git"
kyvernoPolicies.git.path📜
Type: string
"./chart"
kyvernoPolicies.git.tag📜
Type: string
"3.3.4-bb.6"
kyvernoPolicies.helmRepo.repoName📜
Type: string
"registry1"
kyvernoPolicies.helmRepo.chartName📜
Type: string
"kyverno-policies"
kyvernoPolicies.helmRepo.tag📜
Type: string
"3.3.4-bb.6"
kyvernoPolicies.flux📜
Type: object
{}
Description: Flux reconciliation overrides specifically for the Kyverno Package
kyvernoPolicies.values📜
Type: object
{}
Description: Values to passthrough to the kyverno policies chart: https://repo1.dso.mil/big-bang/product/packages/kyverno-policies.git
kyvernoPolicies.postRenderers📜
Type: list
[]
Description: Post Renderers. See docs/postrenders.md
kyvernoReporter.enabled📜
Type: bool
true
Description: Toggle deployment of Kyverno Reporter
kyvernoReporter.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
kyvernoReporter.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/kyverno-reporter.git"
kyvernoReporter.git.path📜
Type: string
"./chart"
kyvernoReporter.git.tag📜
Type: string
"3.0.3-bb.1"
kyvernoReporter.helmRepo.repoName📜
Type: string
"registry1"
kyvernoReporter.helmRepo.chartName📜
Type: string
"kyverno-reporter"
kyvernoReporter.helmRepo.tag📜
Type: string
"3.0.3-bb.1"
kyvernoReporter.flux📜
Type: object
{}
Description: Flux reconciliation overrides specifically for the Kyverno Reporter Package
kyvernoReporter.values📜
Type: object
{}
Description: Values to passthrough to the kyverno reporter chart: https://repo1.dso.mil/big-bang/product/packages/kyverno-reporter.git
kyvernoReporter.postRenderers📜
Type: list
[]
Description: Post Renderers. See docs/postrenders.md
elasticsearchKibana.enabled📜
Type: bool
false
Description: Toggle deployment of Logging (EFK).
elasticsearchKibana.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
elasticsearchKibana.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/elasticsearch-kibana.git"
elasticsearchKibana.git.path📜
Type: string
"./chart"
elasticsearchKibana.git.tag📜
Type: string
"1.28.0-bb.2"
elasticsearchKibana.helmRepo.repoName📜
Type: string
"registry1"
elasticsearchKibana.helmRepo.chartName📜
Type: string
"elasticsearch-kibana"
elasticsearchKibana.helmRepo.tag📜
Type: string
"1.28.0-bb.2"
elasticsearchKibana.flux📜
Type: object
timeout: 20m
Description: Flux reconciliation overrides specifically for the Logging (EFK) Package
elasticsearchKibana.ingress📜
Type: object
gateway: ''
Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.
elasticsearchKibana.sso.enabled📜
Type: bool
false
Description: Toggle OIDC SSO for Kibana/Elasticsearch on and off. Enabling this option will auto-create any required secrets.
elasticsearchKibana.sso.client_id📜
Type: string
""
Description: Elasticsearch/Kibana OIDC client ID
elasticsearchKibana.sso.client_secret📜
Type: string
""
Description: Elasticsearch/Kibana OIDC client secret
elasticsearchKibana.serviceAccountAnnotations📜
Type: object
elasticsearch: {}
kibana: {}
Description: Elasticsearch/Kibana Service Account Annotations
elasticsearchKibana.license.trial📜
Type: bool
false
Description: Toggle trial license installation of elasticsearch. Note that enterprise (non trial) is required for SSO to work.
elasticsearchKibana.license.keyJSON📜
Type: string
""
Description: Elasticsearch license in json format seen here: https://repo1.dso.mil/big-bang/product/packages/elasticsearch-kibana#enterprise-license
elasticsearchKibana.values📜
Type: object
{}
Description: Values to passthrough to the elasticsearch-kibana chart: https://repo1.dso.mil/big-bang/product/packages/elasticsearch-kibana.git
elasticsearchKibana.postRenderers📜
Type: list
[]
Description: Post Renderers. See docs/postrenders.md
eckOperator.enabled📜
Type: bool
false
Description: Toggle deployment of ECK Operator.
eckOperator.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
eckOperator.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/eck-operator.git"
eckOperator.git.path📜
Type: string
"./chart"
eckOperator.git.tag📜
Type: string
"2.16.1-bb.1"
eckOperator.helmRepo.repoName📜
Type: string
"registry1"
eckOperator.helmRepo.chartName📜
Type: string
"eck-operator"
eckOperator.helmRepo.tag📜
Type: string
"2.16.1-bb.1"
eckOperator.flux📜
Type: object
{}
Description: Flux reconciliation overrides specifically for the ECK Operator Package
eckOperator.values📜
Type: object
{}
Description: Values to passthrough to the eck-operator chart: https://repo1.dso.mil/big-bang/product/packages/eck-operator.git
eckOperator.postRenderers📜
Type: list
[]
Description: Post Renderers. See docs/postrenders.md
fluentbit.enabled📜
Type: bool
false
Description: Toggle deployment of Fluent-Bit.
fluentbit.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
fluentbit.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/fluentbit.git"
fluentbit.git.path📜
Type: string
"./chart"
fluentbit.git.tag📜
Type: string
"0.48.9-bb.0"
fluentbit.helmRepo.repoName📜
Type: string
"registry1"
fluentbit.helmRepo.chartName📜
Type: string
"fluentbit"
fluentbit.helmRepo.tag📜
Type: string
"0.48.9-bb.0"
fluentbit.flux📜
Type: object
{}
Description: Flux reconciliation overrides specifically for the Fluent-Bit Package
fluentbit.values📜
Type: object
{}
Description: Values to passthrough to the fluentbit chart: https://repo1.dso.mil/big-bang/product/packages/fluentbit.git
fluentbit.postRenderers📜
Type: list
[]
Description: Post Renderers. See docs/postrenders.md
promtail.enabled📜
Type: bool
true
Description: Toggle deployment of Promtail.
promtail.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
promtail.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/promtail.git"
promtail.git.path📜
Type: string
"./chart"
promtail.git.tag📜
Type: string
"6.16.6-bb.2"
promtail.helmRepo.repoName📜
Type: string
"registry1"
promtail.helmRepo.chartName📜
Type: string
"promtail"
promtail.helmRepo.tag📜
Type: string
"6.16.6-bb.2"
promtail.flux📜
Type: object
{}
Description: Flux reconciliation overrides specifically for the Promtail Package
promtail.values📜
Type: object
{}
Description: Values to passthrough to the promtail chart: https://repo1.dso.mil/big-bang/product/packages/fluentbit.git
promtail.postRenderers📜
Type: list
[]
Description: Post Renderers. See docs/postrenders.md
loki.enabled📜
Type: bool
true
Description: Toggle deployment of Loki.
loki.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
loki.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/loki.git"
loki.git.path📜
Type: string
"./chart"
loki.git.tag📜
Type: string
"6.27.0-bb.1"
loki.helmRepo.repoName📜
Type: string
"registry1"
loki.helmRepo.chartName📜
Type: string
"loki"
loki.helmRepo.tag📜
Type: string
"6.27.0-bb.1"
loki.flux📜
Type: object
{}
Description: Flux reconciliation overrides specifically for the Loki Package
loki.strategy📜
Type: string
"monolith"
Description: Loki architecture. Options are monolith and scalable
loki.clusterName📜
Type: string
""
Description: Loki clusterName identifier for Promtail and Dashboards
loki.objectStorage.endpoint📜
Type: string
""
Description: S3 compatible endpoint to use for connection information. examples: “https://s3.amazonaws.com” “https://s3.us-gov-west-1.amazonaws.com” “http://minio.minio.svc.cluster.local:9000”
loki.objectStorage.region📜
Type: string
""
Description: S3 compatible region to use for connection information.
loki.objectStorage.accessKey📜
Type: string
""
Description: Access key for connecting to object storage endpoint.
loki.objectStorage.accessSecret📜
Type: string
""
Description: Secret key for connecting to object storage endpoint. Unencoded string data. This should be placed in the secret values and then encrypted
loki.objectStorage.bucketNames📜
Type: object
{}
Description: Bucket Names for the Loki buckets as YAML chunks: loki-logs ruler: loki-ruler admin: loki-admin
loki.values📜
Type: object
{}
Description: Values to passthrough to the Loki chart: https://repo1.dso.mil/big-bang/product/packages/loki.git
loki.postRenderers📜
Type: list
[]
Description: Post Renderers. See docs/postrenders.md
neuvector.enabled📜
Type: bool
true
Description: Toggle deployment of Neuvector.
neuvector.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
neuvector.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/neuvector.git"
neuvector.git.path📜
Type: string
"./chart"
neuvector.git.tag📜
Type: string
"2.8.3-bb.1"
neuvector.helmRepo.repoName📜
Type: string
"registry1"
neuvector.helmRepo.chartName📜
Type: string
"neuvector"
neuvector.helmRepo.tag📜
Type: string
"2.8.3-bb.1"
neuvector.ingress📜
Type: object
gateway: ''
Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.
neuvector.sso.enabled📜
Type: bool
false
Description: Toggle SSO for Neuvector on and off
neuvector.sso.client_id📜
Type: string
""
Description: OIDC Client ID to use for Neuvector
neuvector.sso.client_secret📜
Type: string
""
Description: OIDC Client Secret to use for Neuvector
neuvector.sso.default_role📜
Type: string
""
Description: Default role to use for Neuvector OIDC users. Supports admin, reader, or no default
neuvector.sso.group_claim📜
Type: string
""
Description: Default role to use for Neuvector OIDC users. Supports admin, reader, or no default
neuvector.sso.group_mapped_roles📜
Type: list
[]
Description: Default role to use for Neuvector OIDC users. Supports admin, reader, or no default
neuvector.flux📜
Type: object
{}
Description: Flux reconciliation overrides specifically for the Neuvector Package
neuvector.values📜
Type: object
{}
Description: Values to passthrough to the Neuvector chart: https://repo1.dso.mil/big-bang/product/packages/neuvector.git
neuvector.postRenderers📜
Type: list
[]
Description: Post Renderers. See docs/postrenders.md
tempo.enabled📜
Type: bool
true
Description: Toggle deployment of Tempo.
tempo.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
tempo.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/tempo.git"
tempo.git.path📜
Type: string
"./chart"
tempo.git.tag📜
Type: string
"1.18.3-bb.0"
tempo.helmRepo.repoName📜
Type: string
"registry1"
tempo.helmRepo.chartName📜
Type: string
"tempo"
tempo.helmRepo.tag📜
Type: string
"1.18.3-bb.0"
tempo.ingress📜
Type: object
gateway: ''
Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.
tempo.flux📜
Type: object
{}
Description: Flux reconciliation overrides specifically for the Tempo Package
tempo.sso.enabled📜
Type: bool
false
Description: Toggle SSO for Tempo on and off
tempo.sso.client_id📜
Type: string
""
Description: OIDC Client ID to use for Tempo
tempo.sso.client_secret📜
Type: string
""
Description: OIDC Client Secret to use for Tempo
tempo.objectStorage.endpoint📜
Type: string
""
Description: S3 compatible endpoint to use for connection information. examples: “s3.amazonaws.com” “s3.us-gov-west-1.amazonaws.com” “minio.minio.svc.cluster.local:9000” Note: tempo does not require protocol prefix for URL.
tempo.objectStorage.region📜
Type: string
""
Description: S3 compatible region to use for connection information.
tempo.objectStorage.accessKey📜
Type: string
""
Description: Access key for connecting to object storage endpoint.
tempo.objectStorage.accessSecret📜
Type: string
""
Description: Secret key for connecting to object storage endpoint. Unencoded string data. This should be placed in the secret values and then encrypted
tempo.objectStorage.bucket📜
Type: string
""
Description: Bucket Name for Tempo examples: “tempo-traces”
tempo.objectStorage.insecure📜
Type: bool
false
Description: Whether or not objectStorage connection should require HTTPS, if connecting to in-cluster object storage on port 80/9000 set this value to true.
tempo.values📜
Type: object
{}
Description: Values to passthrough to the Tempo chart: https://repo1.dso.mil/big-bang/product/packages/tempo.git
tempo.postRenderers📜
Type: list
[]
Description: Post Renderers. See docs/postrenders.md
monitoring.enabled📜
Type: bool
true
Description: Toggle deployment of Monitoring (Prometheus, Grafana, and Alertmanager).
monitoring.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
monitoring.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/monitoring.git"
monitoring.git.path📜
Type: string
"./chart"
monitoring.git.tag📜
Type: string
"69.7.3-bb.1"
monitoring.helmRepo.repoName📜
Type: string
"registry1"
monitoring.helmRepo.chartName📜
Type: string
"monitoring"
monitoring.helmRepo.tag📜
Type: string
"69.7.3-bb.1"
monitoring.flux📜
Type: object
install:
crds: CreateReplace
upgrade:
crds: CreateReplace
Description: Flux reconciliation overrides specifically for the Monitoring Package
monitoring.ingress📜
Type: object
gateway: ''
Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.
monitoring.sso.enabled📜
Type: bool
false
Description: Toggle SSO for monitoring components on and off
monitoring.sso.prometheus.client_id📜
Type: string
""
Description: Prometheus OIDC client ID
monitoring.sso.prometheus.client_secret📜
Type: string
""
Description: Prometheus OIDC client secret
monitoring.sso.alertmanager.client_id📜
Type: string
""
Description: Alertmanager OIDC client ID
monitoring.sso.alertmanager.client_secret📜
Type: string
""
Description: Alertmanager OIDC client secret
monitoring.values📜
Type: object
{}
Description: Values to passthrough to the monitoring chart: https://repo1.dso.mil/big-bang/product/packages/monitoring.git
monitoring.postRenderers📜
Type: list
[]
Description: Post Renderers. See docs/postrenders.md
grafana.enabled📜
Type: bool
true
Description: Toggle deployment of Grafana
grafana.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
grafana.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/grafana.git"
grafana.git.path📜
Type: string
"./chart"
grafana.git.tag📜
Type: string
"8.10.4-bb.0"
grafana.helmRepo.repoName📜
Type: string
"registry1"
grafana.helmRepo.chartName📜
Type: string
"grafana"
grafana.helmRepo.tag📜
Type: string
"8.10.4-bb.0"
grafana.flux📜
Type: object
{}
Description: Flux reconciliation overrides specifically for the Monitoring Package
grafana.ingress📜
Type: object
gateway: ''
Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.
grafana.sso.enabled📜
Type: bool
false
Description: Toggle SSO for grafana components on and off
grafana.sso.grafana.client_id📜
Type: string
""
Description: Grafana OIDC client ID
grafana.sso.grafana.client_secret📜
Type: string
""
Description: Grafana OIDC client secret
grafana.sso.grafana.scopes📜
Type: string
""
Description: Grafana OIDC client scopes, comma separated, see https://grafana.com/docs/grafana/latest/auth/generic-oauth/
grafana.sso.grafana.allow_sign_up📜
Type: bool
true
grafana.sso.grafana.role_attribute_path📜
Type: string
"Viewer"
grafana.values📜
Type: object
{}
Description: Values to passthrough to the grafana chart: https://repo1.dso.mil/big-bang/product/packages/grafana.git
grafana.postRenderers📜
Type: list
[]
Description: Post Renderers. See docs/postrenders.md
twistlock.enabled📜
Type: bool
false
Description: Toggle deployment of Twistlock.
twistlock.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
twistlock.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/twistlock.git"
twistlock.git.path📜
Type: string
"./chart"
twistlock.git.tag📜
Type: string
"0.19.0-bb.5"
twistlock.helmRepo.repoName📜
Type: string
"registry1"
twistlock.helmRepo.chartName📜
Type: string
"twistlock"
twistlock.helmRepo.tag📜
Type: string
"0.19.0-bb.5"
twistlock.flux📜
Type: object
{}
Description: Flux reconciliation overrides specifically for the Twistlock Package
twistlock.ingress📜
Type: object
gateway: ''
Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.
twistlock.sso.enabled📜
Type: bool
false
Description: Toggle SAML SSO, requires a license and enabling the init job - see https://repo1.dso.mil/big-bang/product/packages/initialization.md
twistlock.sso.client_id📜
Type: string
""
Description: SAML client ID
twistlock.sso.provider_type📜
Type: string
"shibboleth"
Description: SAML Identity Provider. shibboleth is recommended by Twistlock support for Keycloak Possible values: okta, gsuite, ping, shibboleth, azure, adfs
twistlock.sso.groups📜
Type: string
""
Description: Groups attribute (optional)
twistlock.values📜
Type: object
{}
Description: Values to passthrough to the twistlock chart: https://repo1.dso.mil/big-bang/product/packages/twistlock.git
twistlock.postRenderers📜
Type: list
[]
Description: Post Renderers. See docs/postrenders.md
bbctl.enabled📜
Type: bool
false
Description: Toggle deployment of the bbctl dashboards
bbctl.sourceType📜
Type: string
"git"
bbctl.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/bbctl.git"
bbctl.git.tag📜
Type: string
"1.0.0-bb.2"
bbctl.git.path📜
Type: string
"./chart"
bbctl.helmRepo.repoName📜
Type: string
"registry1"
bbctl.helmRepo.chartName📜
Type: string
"bbctl"
bbctl.helmRepo.tag📜
Type: string
"1.0.0-bb.2"
bbctl.repoCredentials.repo📜
Type: string
"repo1.dso.mil"
bbctl.repoCredentials.username📜
Type: string
""
bbctl.repoCredentials.password📜
Type: string
""
bbctl.flux📜
Type: object
{}
Description: Override flux settings for this package
bbctl.values📜
Type: object
{}
bbctl.postRenderers📜
Type: list
[]
addons.argocd.enabled📜
Type: bool
false
Description: Toggle deployment of ArgoCD.
addons.argocd.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
addons.argocd.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/argocd.git"
addons.argocd.git.path📜
Type: string
"./chart"
addons.argocd.git.tag📜
Type: string
"7.8.11-bb.0"
addons.argocd.helmRepo.repoName📜
Type: string
"registry1"
addons.argocd.helmRepo.chartName📜
Type: string
"argocd"
addons.argocd.helmRepo.tag📜
Type: string
"7.8.11-bb.0"
addons.argocd.flux📜
Type: object
{}
Description: Flux reconciliation overrides specifically for the ArgoCD Package
addons.argocd.ingress📜
Type: object
gateway: ''
Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.
addons.argocd.redis.host📜
Type: string
""
Description: Hostname of a pre-existing Redis to use for ArgoCD. Entering connection info will enable external Redis and will auto-create any required secrets.
addons.argocd.redis.port📜
Type: string
""
Description: Port of a pre-existing Redis to use for ArgoCD.
addons.argocd.sso.enabled📜
Type: bool
false
Description: Toggle SSO for ArgoCD on and off
addons.argocd.sso.client_id📜
Type: string
""
Description: ArgoCD OIDC client ID
addons.argocd.sso.client_secret📜
Type: string
""
Description: ArgoCD OIDC client secret
addons.argocd.sso.groups📜
Type: string
"g, Impact Level 2 Authorized, role:admin\n"
Description: ArgoCD SSO group roles, see docs for more details: https://argo-cd.readthedocs.io/en/stable/operator-manual/rbac/
addons.argocd.values📜
Type: object
{}
Description: Values to passthrough to the argocd chart: https://repo1.dso.mil/big-bang/product/packages/argocd.git
addons.argocd.postRenderers📜
Type: list
[]
Description: Post Renderers. See docs/postrenders.md
addons.authservice.enabled📜
Type: bool
false
Description: Toggle deployment of Authservice. if enabling authservice, a filter needs to be provided by either enabling sso for monitoring or istio, or manually adding a filter chain in the values here: values: chain: minimal: callback_uri: “https://somecallback”
addons.authservice.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
addons.authservice.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/authservice.git"
addons.authservice.git.path📜
Type: string
"./chart"
addons.authservice.git.tag📜
Type: string
"1.0.4-bb.1"
addons.authservice.helmRepo.repoName📜
Type: string
"registry1"
addons.authservice.helmRepo.chartName📜
Type: string
"authservice"
addons.authservice.helmRepo.tag📜
Type: string
"1.0.4-bb.1"
addons.authservice.flux📜
Type: object
{}
Description: Flux reconciliation overrides specifically for the Authservice Package
addons.authservice.values📜
Type: object
{}
Description: Values to passthrough to the authservice chart: https://repo1.dso.mil/big-bang/product/packages/authservice.git
addons.authservice.postRenderers📜
Type: list
[]
Description: Post Renderers. See docs/postrenders.md
addons.authservice.chains📜
Type: object
{}
Description: Additional authservice chain configurations.
addons.minioOperator.enabled📜
Type: bool
false
Description: Toggle deployment of minio operator and instance.
addons.minioOperator.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
addons.minioOperator.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/minio-operator.git"
addons.minioOperator.git.path📜
Type: string
"./chart"
addons.minioOperator.git.tag📜
Type: string
"7.0.1-bb.2"
addons.minioOperator.helmRepo.repoName📜
Type: string
"registry1"
addons.minioOperator.helmRepo.chartName📜
Type: string
"minio-operator"
addons.minioOperator.helmRepo.tag📜
Type: string
"7.0.1-bb.2"
addons.minioOperator.flux📜
Type: object
{}
Description: Flux reconciliation overrides specifically for the Minio Operator Package
addons.minioOperator.ingress📜
Type: object
gateway: ''
Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.
addons.minioOperator.values📜
Type: object
{}
Description: Values to passthrough to the minio operator chart: https://repo1.dso.mil/big-bang/product/packages/minio-operator.git
addons.minioOperator.postRenderers📜
Type: list
[]
Description: Post Renderers. See docs/postrenders.md
addons.minio.enabled📜
Type: bool
false
Description: Toggle deployment of minio.
addons.minio.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
addons.minio.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/minio.git"
addons.minio.git.path📜
Type: string
"./chart"
addons.minio.git.tag📜
Type: string
"7.0.0-bb.4"
addons.minio.helmRepo.repoName📜
Type: string
"registry1"
addons.minio.helmRepo.chartName📜
Type: string
"minio-instance"
addons.minio.helmRepo.tag📜
Type: string
"7.0.0-bb.4"
addons.minio.flux📜
Type: object
{}
Description: Flux reconciliation overrides specifically for the Minio Package
addons.minio.ingress📜
Type: object
gateway: ''
Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.
addons.minio.accesskey📜
Type: string
""
Description: Default access key to use for minio.
addons.minio.secretkey📜
Type: string
""
Description: Default secret key to intstantiate with minio, you should change/delete this after installation.
addons.minio.values📜
Type: object
{}
Description: Values to passthrough to the minio instance chart: https://repo1.dso.mil/big-bang/product/packages/minio.git
addons.minio.postRenderers📜
Type: list
[]
Description: Post Renderers. See docs/postrenders.md
addons.gitlab.enabled📜
Type: bool
false
Description: Toggle deployment of Gitlab
addons.gitlab.hostnames.gitlab📜
Type: string
"gitlab"
addons.gitlab.hostnames.registry📜
Type: string
"registry"
addons.gitlab.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
addons.gitlab.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/gitlab.git"
addons.gitlab.git.path📜
Type: string
"./chart"
addons.gitlab.git.tag📜
Type: string
"8.10.1-bb.0"
addons.gitlab.helmRepo.repoName📜
Type: string
"registry1"
addons.gitlab.helmRepo.chartName📜
Type: string
"gitlab"
addons.gitlab.helmRepo.tag📜
Type: string
"8.10.1-bb.0"
addons.gitlab.flux📜
Type: object
{}
Description: Flux reconciliation overrides specifically for the Gitlab Package
addons.gitlab.ingress📜
Type: object
gateway: ''
Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.
addons.gitlab.sso.enabled📜
Type: bool
false
Description: Toggle OIDC SSO for Gitlab on and off. Enabling this option will auto-create any required secrets.
addons.gitlab.sso.client_id📜
Type: string
""
Description: Gitlab OIDC client ID
addons.gitlab.sso.client_secret📜
Type: string
""
Description: Gitlab OIDC client secret
addons.gitlab.sso.scopes📜
Type: list
- Gitlab
Description: Gitlab SSO Scopes, default is [“Gitlab”]
addons.gitlab.sso.groups📜
Type: list
[]
Description: Fill out the groups block below and populate with Keycloak groups according to your desired Gitlab membership requirements. The default groupsAttribute is “groups”. Full documentation: https://docs.gitlab.com/ee/administration/auth/oidc.html?tab=Linux+package+%28Omnibus%29#configure-users-based-on-oidc-group-membership
addons.gitlab.database.host📜
Type: string
""
Description: Hostname of a pre-existing PostgreSQL database to use for Gitlab. Entering connection info will disable the deployment of an internal database and will auto-create any required secrets.
addons.gitlab.database.port📜
Type: int
5432
Description: Port of a pre-existing PostgreSQL database to use for Gitlab.
addons.gitlab.database.database📜
Type: string
""
Description: Database name to connect to on host.
addons.gitlab.database.username📜
Type: string
""
Description: Username to connect as to external database, the user must have all privileges on the database.
addons.gitlab.database.password📜
Type: string
""
Description: Database password for the username used to connect to the existing database.
addons.gitlab.objectStorage.type📜
Type: string
""
Description: Type of object storage to use for Gitlab, setting to s3 will assume an external, pre-existing object storage is to be used. Entering connection info will enable this option and will auto-create any required secrets
addons.gitlab.objectStorage.endpoint📜
Type: string
""
Description: S3 compatible endpoint to use for connection information. examples: “https://s3.amazonaws.com” “https://s3.us-gov-west-1.amazonaws.com” “http://minio.minio.svc.cluster.local:9000”
addons.gitlab.objectStorage.region📜
Type: string
""
Description: S3 compatible region to use for connection information.
addons.gitlab.objectStorage.accessKey📜
Type: string
""
Description: Access key for connecting to object storage endpoint. – If using accessKey and accessSecret, the iamProfile must be left as an empty string: “”
addons.gitlab.objectStorage.accessSecret📜
Type: string
""
Description: Secret key for connecting to object storage endpoint. Unencoded string data. This should be placed in the secret values and then encrypted
addons.gitlab.objectStorage.bucketPrefix📜
Type: string
""
Description: Bucket prefix to use for identifying buckets. Example: “prod” will produce “prod-gitlab-bucket”
addons.gitlab.objectStorage.iamProfile📜
Type: string
""
Description: NOTE: Current bug with AWS IAM Profiles and Object Storage where only artifacts are stored. Fixed in Gitlab 14.5 – Name of AWS IAM profile to use. – If using an AWS IAM profile, the accessKey and accessSecret values must be left as empty strings eg: “”
addons.gitlab.smtp.password📜
Type: string
""
Description: Passwords should be placed in an encrypted file. Example: environment-bb-secret.enc.yaml If a value is provided BigBang will create a k8s secret named gitlab-smtp-password in the gitlab namespace
addons.gitlab.redis.password📜
Type: string
""
Description: Redis plain text password to connect to the redis server. If empty (“”), the gitlab charts will create the gitlab-redis-secret with a random password. – This needs to be set to a non-empty value in order for the Grafana Redis Datasource and Dashboards to be installed.
addons.gitlab.railsSecret📜
Type: string
""
Description: Rails plain text secret to define. If empty (“”), the gitlab charts will create the gitlab-rails-secret with randomized data. Read the following for more information on setting Gitlab rails secrets: https://docs.gitlab.com/charts/installation/secrets#gitlab-rails-secret
addons.gitlab.values📜
Type: object
{}
Description: Values to passthrough to the gitlab chart: https://repo1.dso.mil/big-bang/product/packages/gitlab.git
addons.gitlab.postRenderers📜
Type: list
[]
Description: Post Renderers. See docs/postrenders.md
addons.gitlabRunner.enabled📜
Type: bool
false
Description: Toggle deployment of Gitlab Runner
addons.gitlabRunner.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
addons.gitlabRunner.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/gitlab-runner.git"
addons.gitlabRunner.git.path📜
Type: string
"./chart"
addons.gitlabRunner.git.tag📜
Type: string
"0.73.0-bb.2"
addons.gitlabRunner.helmRepo.repoName📜
Type: string
"registry1"
addons.gitlabRunner.helmRepo.chartName📜
Type: string
"gitlab-runner"
addons.gitlabRunner.helmRepo.tag📜
Type: string
"0.73.0-bb.2"
addons.gitlabRunner.flux📜
Type: object
{}
Description: Flux reconciliation overrides specifically for the Gitlab Runner Package
addons.gitlabRunner.values📜
Type: object
{}
Description: Values to passthrough to the gitlab runner chart: https://repo1.dso.mil/big-bang/product/packages/gitlab-runner.git
addons.gitlabRunner.postRenderers📜
Type: list
[]
Description: Post Renderers. See docs/postrenders.md
addons.nexusRepositoryManager.enabled📜
Type: bool
false
Description: Toggle deployment of Nexus Repository Manager.
addons.nexusRepositoryManager.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
addons.nexusRepositoryManager.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/nexus.git"
addons.nexusRepositoryManager.git.path📜
Type: string
"./chart"
addons.nexusRepositoryManager.git.tag📜
Type: string
"75.0.0-bb.2"
addons.nexusRepositoryManager.helmRepo.repoName📜
Type: string
"registry1"
addons.nexusRepositoryManager.helmRepo.chartName📜
Type: string
"nexus-repository-manager"
addons.nexusRepositoryManager.helmRepo.tag📜
Type: string
"75.0.0-bb.2"
addons.nexusRepositoryManager.license_key📜
Type: string
""
Description: Base64 encoded license file.
addons.nexusRepositoryManager.ingress📜
Type: object
gateway: ''
Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.
addons.nexusRepositoryManager.sso.enabled📜
Type: bool
false
Description: Toggle SAML SSO for NXRM. – handles SAML SSO, a Client must be configured in Keycloak or IdP – to complete setup. – https://support.sonatype.com/hc/en-us/articles/1500000976522-SAML-integration-for-Nexus-Repository-Manager-Pro-3-and-Nexus-IQ-Server-with-Keycloak#h_01EV7CWCYH3YKAPMAHG8XMQ599
addons.nexusRepositoryManager.sso.idp_data📜
Type: object
email: ''
entityId: ''
firstName: ''
groups: ''
lastName: ''
username: ''
Description: NXRM SAML SSO Integration data
addons.nexusRepositoryManager.sso.idp_data.username📜
Type: string
""
Description: IdP Field Mappings – NXRM username attribute
addons.nexusRepositoryManager.sso.idp_data.firstName📜
Type: string
""
Description: NXRM firstname attribute (optional)
addons.nexusRepositoryManager.sso.idp_data.lastName📜
Type: string
""
Description: NXRM lastname attribute (optional)
addons.nexusRepositoryManager.sso.idp_data.email📜
Type: string
""
Description: NXRM email attribute (optional)
addons.nexusRepositoryManager.sso.idp_data.groups📜
Type: string
""
Description: NXRM groups attribute (optional)
addons.nexusRepositoryManager.sso.role📜
Type: list
- description: ''
id: ''
name: ''
privileges: []
roles: []
Description: NXRM Role
addons.nexusRepositoryManager.flux📜
Type: object
{}
Description: Flux reconciliation overrides specifically for the Nexus Repository Manager Package
addons.nexusRepositoryManager.values📜
Type: object
{}
Description: Values to passthrough to the nxrm chart: https://repo1.dso.mil/big-bang/product/packages/nexus.git
addons.nexusRepositoryManager.postRenderers📜
Type: list
[]
Description: Post Renderers. See docs/postrenders.md
addons.sonarqube.enabled📜
Type: bool
false
Description: Toggle deployment of SonarQube.
addons.sonarqube.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
addons.sonarqube.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/sonarqube.git"
addons.sonarqube.git.path📜
Type: string
"./chart"
addons.sonarqube.git.tag📜
Type: string
"10.7.0-bb.1"
addons.sonarqube.helmRepo.repoName📜
Type: string
"registry1"
addons.sonarqube.helmRepo.chartName📜
Type: string
"sonarqube"
addons.sonarqube.helmRepo.tag📜
Type: string
"10.7.0-bb.1"
addons.sonarqube.flux📜
Type: object
{}
Description: Flux reconciliation overrides specifically for the Sonarqube Package
addons.sonarqube.ingress📜
Type: object
gateway: ''
Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.
addons.sonarqube.sso.enabled📜
Type: bool
false
Description: Toggle SAML SSO for SonarQube. Enabling this option will auto-create any required secrets.
addons.sonarqube.sso.client_id📜
Type: string
""
Description: SonarQube SAML client ID
addons.sonarqube.sso.login📜
Type: string
"login"
Description: SonarQube login sso attribute.
addons.sonarqube.sso.name📜
Type: string
"name"
Description: SonarQube name sso attribute.
addons.sonarqube.sso.email📜
Type: string
"email"
Description: SonarQube email sso attribute.
addons.sonarqube.sso.group📜
Type: string
"group"
Description: (optional) SonarQube group sso attribute.
addons.sonarqube.database.host📜
Type: string
""
Description: Hostname of a pre-existing PostgreSQL database to use for SonarQube.
addons.sonarqube.database.port📜
Type: int
5432
Description: Port of a pre-existing PostgreSQL database to use for SonarQube.
addons.sonarqube.database.database📜
Type: string
""
Description: Database name to connect to on host.
addons.sonarqube.database.username📜
Type: string
""
Description: Username to connect as to external database, the user must have all privileges on the database.
addons.sonarqube.database.password📜
Type: string
""
Description: Database password for the username used to connect to the existing database.
addons.sonarqube.values📜
Type: object
{}
Description: Values to passthrough to the sonarqube chart: https://repo1.dso.mil/big-bang/product/packages/sonarqube.git
addons.sonarqube.postRenderers📜
Type: list
[]
Description: Post Renderers. See docs/postrenders.md
addons.fortify.enabled📜
Type: bool
false
Description: Toggle deployment of Fortify.
addons.fortify.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
addons.fortify.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/fortify.git"
addons.fortify.git.path📜
Type: string
"./chart"
addons.fortify.git.tag📜
Type: string
"1.1.2320154-bb.24"
addons.fortify.helmRepo.repoName📜
Type: string
"registry1"
addons.fortify.helmRepo.chartName📜
Type: string
"fortify-ssc"
addons.fortify.helmRepo.tag📜
Type: string
"1.1.2320154-bb.24"
addons.fortify.flux📜
Type: object
{}
Description: Flux reconciliation overrides specifically for the Fortify Package
addons.fortify.ingress📜
Type: object
gateway: ''
Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.
addons.fortify.sso.enabled📜
Type: bool
false
Description: Toggle SSO for Fortify on and off
addons.fortify.sso.client_id📜
Type: string
""
Description: SAML Client ID to use for Fortify
addons.fortify.sso.client_secret📜
Type: string
""
Description: SAML Client Secret to use for Fortify
addons.fortify.values📜
Type: object
{}
Description: Values to passthrough to the fortify chart: https://repo1.dso.mil/big-bang/product/packages/fortify.git
addons.fortify.postRenderers📜
Type: list
[]
Description: Post Renderers. See docs/postrenders.md
addons.haproxy.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
addons.haproxy.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/haproxy.git"
addons.haproxy.git.path📜
Type: string
"./chart"
addons.haproxy.git.tag📜
Type: string
"1.19.3-bb.10"
addons.haproxy.helmRepo.repoName📜
Type: string
"registry1"
addons.haproxy.helmRepo.chartName📜
Type: string
"haproxy"
addons.haproxy.helmRepo.tag📜
Type: string
"1.19.3-bb.10"
addons.haproxy.flux📜
Type: object
{}
Description: Flux reconciliation overrides specifically for the HAProxy Package
addons.haproxy.ingress📜
Type: object
gateway: ''
Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.
addons.haproxy.values📜
Type: object
{}
Description: Values to passthrough to the haproxy chart: https://repo1.dso.mil/big-bang/product/packages/haproxy.git
addons.haproxy.postRenderers📜
Type: list
[]
Description: Post Renderers. See docs/postrenders.md
addons.anchore.enabled📜
Type: bool
false
Description: Toggle deployment of Anchore.
addons.anchore.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
addons.anchore.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/anchore-enterprise.git"
addons.anchore.git.path📜
Type: string
"./chart"
addons.anchore.git.tag📜
Type: string
"3.5.0-bb.1"
addons.anchore.helmRepo.repoName📜
Type: string
"registry1"
addons.anchore.helmRepo.chartName📜
Type: string
"anchore"
addons.anchore.helmRepo.tag📜
Type: string
"3.5.0-bb.1"
addons.anchore.flux📜
Type: object
upgrade:
disableWait: true
Description: Flux reconciliation overrides specifically for the Anchore Package
addons.anchore.adminPassword📜
Type: string
""
Description: Initial admin password used to authenticate to Anchore.
addons.anchore.enterprise📜
Type: object
licenseYaml: 'FULL LICENSE
'
Description: Anchore Enterprise functionality.
addons.anchore.enterprise.licenseYaml📜
Type: string
"FULL LICENSE\n"
Description: License for Anchore Enterprise. Enterprise is the only option available for the chart starting with chart major version 2.X. For formatting examples see https://repo1.dso.mil/big-bang/product/packages/CHART.md#enabling-enterprise-services
addons.anchore.ingress📜
Type: object
gateway: ''
Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.
addons.anchore.sso.enabled📜
Type: bool
false
Description: Toggle SAML SSO for Anchore on and off. Enabling this option will auto-create any required secrets (Note: SSO requires an Enterprise license).
addons.anchore.sso.client_id📜
Type: string
""
Description: Anchore SAML client ID
addons.anchore.sso.role_attribute📜
Type: string
""
Description: Anchore SAML client role attribute
addons.anchore.database.host📜
Type: string
""
Description: Hostname of a pre-existing PostgreSQL database to use for Anchore. Entering connection info will disable the deployment of an internal database and will auto-create any required secrets.
addons.anchore.database.port📜
Type: string
""
Description: Port of a pre-existing PostgreSQL database to use for Anchore.
addons.anchore.database.username📜
Type: string
""
Description: Username to connect as to external database, the user must have all privileges on the database.
addons.anchore.database.password📜
Type: string
""
Description: Database password for the username used to connect to the existing database.
addons.anchore.database.database📜
Type: string
""
Description: Database name to connect to on host (Note: database name CANNOT contain hyphens).
addons.anchore.database.feeds_database📜
Type: string
""
Description: Feeds database name to connect to on host (Note: feeds database name CANNOT contain hyphens). Only required for enterprise edition of anchore. By default, feeds database will be configured with the same username and password as the main database. For formatting examples on how to use a separate username and password for the feeds database see https://repo1.dso.mil/big-bang/product/packages/CHART.md#handling-dependencies
addons.anchore.redis.host📜
Type: string
""
Description: Hostname of a pre-existing Redis to use for Anchore Enterprise. Entering connection info will enable external redis and will auto-create any required secrets. Anchore only requires redis for enterprise deployments and will not provision an instance if using external
addons.anchore.redis.port📜
Type: string
""
Description: Port of a pre-existing Redis to use for Anchore Enterprise.
addons.anchore.redis.username📜
Type: string
""
Description: OPTIONAL: Username to connect to a pre-existing Redis (for password-only auth leave empty)
addons.anchore.redis.password📜
Type: string
""
Description: Password to connect to pre-existing Redis.
addons.anchore.values📜
Type: object
{}
Description: Values to passthrough to the anchore chart: https://repo1.dso.mil/big-bang/product/packages/anchore-enterprise.git
addons.anchore.postRenderers📜
Type: list
[]
Description: Post Renderers. See docs/postrenders.md
addons.mattermostOperator.enabled📜
Type: bool
false
Description: Toggle deployment of Mattermost Operator.
addons.mattermostOperator.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
addons.mattermostOperator.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/mattermost-operator.git"
addons.mattermostOperator.git.path📜
Type: string
"./chart"
addons.mattermostOperator.git.tag📜
Type: string
"1.22.1-bb.1"
addons.mattermostOperator.helmRepo.repoName📜
Type: string
"registry1"
addons.mattermostOperator.helmRepo.chartName📜
Type: string
"mattermost-operator"
addons.mattermostOperator.helmRepo.tag📜
Type: string
"1.22.1-bb.1"
addons.mattermostOperator.flux📜
Type: object
{}
Description: Flux reconciliation overrides specifically for the Mattermost Operator Package
addons.mattermostOperator.values📜
Type: object
{}
Description: Values to passthrough to the mattermost operator chart: https://repo1.dso.mil/big-bang/product/packages/values.yaml
addons.mattermostOperator.postRenderers📜
Type: list
[]
Description: Post Renderers. See docs/postrenders.md
addons.mattermost.enabled📜
Type: bool
false
Description: Toggle deployment of Mattermost.
addons.mattermost.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
addons.mattermost.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/mattermost.git"
addons.mattermost.git.path📜
Type: string
"./chart"
addons.mattermost.git.tag📜
Type: string
"10.6.1-bb.4"
addons.mattermost.helmRepo.repoName📜
Type: string
"registry1"
addons.mattermost.helmRepo.chartName📜
Type: string
"mattermost"
addons.mattermost.helmRepo.tag📜
Type: string
"10.6.1-bb.4"
addons.mattermost.flux📜
Type: object
{}
Description: Flux reconciliation overrides specifically for the Mattermost Package
addons.mattermost.enterprise📜
Type: object
enabled: false
license: ''
Description: Mattermost Enterprise functionality.
addons.mattermost.enterprise.enabled📜
Type: bool
false
Description: Toggle the Mattermost Enterprise. This must be accompanied by a valid license unless you plan to start a trial post-install.
addons.mattermost.enterprise.license📜
Type: string
""
Description: License for Mattermost. This should be the entire contents of the license file from Mattermost (should be one line), example below license: “eyJpZCI6InIxM205bjR3eTdkYjludG95Z3RiOD—REST—IS—HIDDEN
addons.mattermost.ingress📜
Type: object
gateway: ''
Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.
addons.mattermost.sso.enabled📜
Type: bool
false
Description: Toggle OIDC SSO for Mattermost on and off. Enabling this option will auto-create any required secrets.
addons.mattermost.sso.client_id📜
Type: string
""
Description: Mattermost OIDC client ID
addons.mattermost.sso.client_secret📜
Type: string
""
Description: Mattermost OIDC client secret
addons.mattermost.database.host📜
Type: string
""
Description: Hostname of a pre-existing PostgreSQL database to use for Mattermost. Entering connection info will disable the deployment of an internal database and will auto-create any required secrets.
addons.mattermost.database.port📜
Type: string
""
Description: Port of a pre-existing PostgreSQL database to use for Mattermost.
addons.mattermost.database.username📜
Type: string
""
Description: Username to connect as to external database, the user must have all privileges on the database.
addons.mattermost.database.password📜
Type: string
""
Description: Database password for the username used to connect to the existing database.
addons.mattermost.database.database📜
Type: string
""
Description: Database name to connect to on host.
addons.mattermost.database.ssl_mode📜
Type: string
""
Description: SSL Mode to use when connecting to the database. Allowable values for this are viewable in the postgres documentation: https://www.postgresql.org/docs/current/libpq-ssl.html#LIBPQ-SSL-SSLMODE-STATEMENTS
addons.mattermost.objectStorage.endpoint📜
Type: string
""
Description: S3 compatible endpoint to use for connection information. Entering connection info will enable this option and will auto-create any required secrets. examples: “s3.amazonaws.com” “s3.us-gov-west-1.amazonaws.com” “minio.minio.svc.cluster.local:9000”
addons.mattermost.objectStorage.accessKey📜
Type: string
""
Description: Access key for connecting to object storage endpoint.
addons.mattermost.objectStorage.accessSecret📜
Type: string
""
Description: Secret key for connecting to object storage endpoint. Unencoded string data. This should be placed in the secret values and then encrypted
addons.mattermost.objectStorage.bucket📜
Type: string
""
Description: Bucket name to use for Mattermost - will be auto-created.
addons.mattermost.elasticsearch📜
Type: object
enabled: false
Description: Mattermost Elasticsearch integration - requires enterprise E20 license - https://docs.mattermost.com/deployment/elasticsearch.html Connection info defaults to the BB deployed Elastic, all values can be overridden via the “values” passthrough for other connections. See values spec in MM chart “elasticsearch” yaml block - https://repo1.dso.mil/big-bang/product/packages/values.yaml
addons.mattermost.elasticsearch.enabled📜
Type: bool
false
Description: Toggle interaction with Elastic for optimized search indexing
addons.mattermost.values📜
Type: object
{}
Description: Values to passthrough to the Mattermost chart: https://repo1.dso.mil/big-bang/product/packages/values.yaml
addons.mattermost.postRenderers📜
Type: list
[]
Description: Post Renderers. See docs/postrenders.md
addons.velero.enabled📜
Type: bool
false
Description: Toggle deployment of Velero.
addons.velero.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
addons.velero.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/velero.git"
addons.velero.git.path📜
Type: string
"./chart"
addons.velero.git.tag📜
Type: string
"8.4.0-bb.1"
addons.velero.helmRepo.repoName📜
Type: string
"registry1"
addons.velero.helmRepo.chartName📜
Type: string
"velero"
addons.velero.helmRepo.tag📜
Type: string
"8.4.0-bb.1"
addons.velero.flux📜
Type: object
{}
Description: Flux reconciliation overrides specifically for the Velero Package
addons.velero.plugins📜
Type: list
[]
Description: Plugin provider for Velero - requires at least one plugin installed. Current supported values: aws, azure, csi
addons.velero.values📜
Type: object
{}
Description: Values to passthrough to the Velero chart: https://repo1.dso.mil/big-bang/product/packages/values.yaml
addons.velero.postRenderers📜
Type: list
[]
Description: Post Renderers. See docs/postrenders.md
addons.keycloak.enabled📜
Type: bool
false
Description: Toggle deployment of Keycloak. if you enable Keycloak you should uncomment the istio passthrough configurations above istio.ingressGateways.passthrough-ingressgateway and istio.gateways.passthrough
addons.keycloak.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
addons.keycloak.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/keycloak.git"
addons.keycloak.git.path📜
Type: string
"./chart"
addons.keycloak.git.tag📜
Type: string
"2.5.1-bb.6"
addons.keycloak.helmRepo.repoName📜
Type: string
"registry1"
addons.keycloak.helmRepo.chartName📜
Type: string
"keycloak"
addons.keycloak.helmRepo.tag📜
Type: string
"2.5.1-bb.6"
addons.keycloak.database.host📜
Type: string
""
Description: Hostname of a pre-existing database to use for Keycloak. Entering connection info will disable the deployment of an internal database and will auto-create any required secrets.
addons.keycloak.database.type📜
Type: string
"postgres"
Description: Pre-existing database type (e.g. postgres) to use for Keycloak.
addons.keycloak.database.port📜
Type: int
5432
Description: Port of a pre-existing database to use for Keycloak.
addons.keycloak.database.database📜
Type: string
""
Description: Database name to connect to on host.
addons.keycloak.database.username📜
Type: string
""
Description: Username to connect as to external database, the user must have all privileges on the database.
addons.keycloak.database.password📜
Type: string
""
Description: Database password for the username used to connect to the existing database.
addons.keycloak.flux📜
Type: object
{}
Description: Flux reconciliation overrides specifically for the OPA Gatekeeper Package
addons.keycloak.ingress📜
Type: object
cert: ''
gateway: ''
key: ''
Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.
addons.keycloak.ingress.key📜
Type: string
""
Description: Certificate/Key pair to use as the certificate for exposing Keycloak Setting the ingress cert here will automatically create the volume and volumemounts in the Keycloak Package chart
addons.keycloak.values📜
Type: object
{}
Description: Values to passthrough to the keycloak chart: https://repo1.dso.mil/big-bang/product/packages/keycloak.git
addons.keycloak.postRenderers📜
Type: list
[]
Description: Post Renderers. See docs/postrenders.md
addons.vault.enabled📜
Type: bool
false
Description: Toggle deployment of Vault.
addons.vault.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
addons.vault.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/vault.git"
addons.vault.git.path📜
Type: string
"./chart"
addons.vault.git.tag📜
Type: string
"0.29.1-bb.10"
addons.vault.helmRepo.repoName📜
Type: string
"registry1"
addons.vault.helmRepo.chartName📜
Type: string
"vault"
addons.vault.helmRepo.tag📜
Type: string
"0.29.1-bb.10"
addons.vault.flux📜
Type: object
{}
Description: Flux reconciliation overrides specifically for the Vault Package
addons.vault.ingress📜
Type: object
cert: ''
gateway: ''
key: ''
Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.
addons.vault.ingress.key📜
Type: string
""
Description: Certificate/Key pair to use as the certificate for exposing Vault Setting the ingress cert here will automatically create the volume and volumemounts in the Vault package chart
addons.vault.values📜
Type: object
{}
Description: Values to passthrough to the vault chart: https://repo1.dso.mil/big-bang/product/packages/vault.git
addons.vault.postRenderers📜
Type: list
[]
Description: Post Renderers. See docs/postrenders.md
addons.metricsServer.enabled📜
Type: string
"auto"
Description: Toggle deployment of metrics server Acceptable options are enabled: true, enabled: false, enabled: auto true = enabled / false = disabled / auto = automatic (Installs only if metrics API endpoint is not present)
addons.metricsServer.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
addons.metricsServer.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/metrics-server.git"
addons.metricsServer.git.path📜
Type: string
"./chart"
addons.metricsServer.git.tag📜
Type: string
"3.12.2-bb.3"
addons.metricsServer.helmRepo.repoName📜
Type: string
"registry1"
addons.metricsServer.helmRepo.chartName📜
Type: string
"metrics-server"
addons.metricsServer.helmRepo.tag📜
Type: string
"3.12.2-bb.3"
addons.metricsServer.flux📜
Type: object
{}
Description: Flux reconciliation overrides specifically for the metrics server Package
addons.metricsServer.values📜
Type: object
{}
Description: Values to passthrough to the metrics server chart: https://repo1.dso.mil/big-bang/product/packages/metrics-server.git
addons.metricsServer.postRenderers📜
Type: list
[]
Description: Post Renderers. See docs/postrenders.md
addons.harbor.enabled📜
Type: bool
false
Description: Toggle deployment of harbor
addons.harbor.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
addons.harbor.git.repo📜
Type: string
"https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/harbor.git"
addons.harbor.git.tag📜
Type: string
"1.16.1-bb.0"
addons.harbor.git.path📜
Type: string
"./chart"
addons.harbor.helmRepo.repoName📜
Type: string
"registry1"
addons.harbor.helmRepo.chartName📜
Type: string
"harbor"
addons.harbor.helmRepo.tag📜
Type: string
"1.16.1-bb.0"
addons.harbor.flux📜
Type: object
{}
Description: Flux reconciliation overrides specifically for the Jaeger Package
addons.harbor.ingress📜
Type: object
gateway: ''
Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.
addons.harbor.values📜
Type: object
{}
Description: Values to pass through to Habor chart: https://repo1.dso.mil/big-bang/product/packages/harbor.git
addons.harbor.postRenderers📜
Type: list
[]
Description: Post Renderers. See docs/postrenders.md
addons.thanos.enabled📜
Type: bool
false
Description: Toggle deployment of thanos
addons.thanos.sso.enabled📜
Type: bool
false
Description: Toggle SSO for Thanos on and off
addons.thanos.sso.client_id📜
Type: string
""
Description: OIDC Client ID to use for Thanos
addons.thanos.sso.client_secret📜
Type: string
""
Description: OIDC Client Secret to use for Thanos
addons.thanos.objectStorage.endpoint📜
Type: string
""
Description: S3 compatible endpoint to use for connection information. examples: “s3.amazonaws.com” “s3.us-gov-west-1.amazonaws.com” “minio.minio.svc.cluster.local:9000” Note: Thanos does not require protocol prefix for URL.
addons.thanos.objectStorage.region📜
Type: string
""
Description: S3 compatible region to use for connection information.
addons.thanos.objectStorage.accessKey📜
Type: string
""
Description: Access key for connecting to object storage endpoint.
addons.thanos.objectStorage.accessSecret📜
Type: string
""
Description: Secret key for connecting to object storage endpoint. Unencoded string data. This should be placed in the secret values and then encrypted
addons.thanos.objectStorage.bucket📜
Type: string
""
Description: Bucket Name for Thanos examples: “Thanos-metrics”
addons.thanos.objectStorage.insecure📜
Type: bool
false
Description: Whether or not objectStorage connection should require HTTPS, if connecting to in-cluster object
addons.thanos.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
addons.thanos.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/thanos.git"
addons.thanos.git.tag📜
Type: string
"15.9.1-bb.3"
addons.thanos.git.path📜
Type: string
"./chart"
addons.thanos.helmRepo.repoName📜
Type: string
"registry1"
addons.thanos.helmRepo.chartName📜
Type: string
"thanos"
addons.thanos.helmRepo.tag📜
Type: string
"15.9.1-bb.3"
addons.thanos.flux📜
Type: object
{}
Description: Flux reconciliation overrides specifically for the Thanos Package
addons.thanos.ingress📜
Type: object
gateway: ''
Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.
addons.thanos.values📜
Type: object
{}
addons.thanos.postRenderers📜
Type: list
[]
addons.externalSecrets.enabled📜
Type: bool
false
Description: Toggle deployment of external secrets
addons.externalSecrets.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
addons.externalSecrets.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/external-secrets.git"
addons.externalSecrets.git.tag📜
Type: string
"0.14.4-bb.0"
addons.externalSecrets.git.path📜
Type: string
"./chart"
addons.externalSecrets.helmRepo.repoName📜
Type: string
"registry1"
addons.externalSecrets.helmRepo.chartName📜
Type: string
"external-secrets"
addons.externalSecrets.helmRepo.tag📜
Type: string
"0.14.4-bb.0"
addons.externalSecrets.flux📜
Type: object
{}
Description: Override flux settings for this package
addons.externalSecrets.ingress📜
Type: object
gateway: ''
Description: Redirect the package ingress to a specific Istio Gateway (listed in istio.gateways). The default is “public”.
addons.externalSecrets.values📜
Type: object
{}
addons.externalSecrets.postRenderers📜
Type: list
[]
addons.alloy.enabled📜
Type: bool
false
Description: Toggle deployment of grafana alloy
addons.alloy.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
addons.alloy.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/alloy.git"
addons.alloy.git.tag📜
Type: string
"2.0.16-bb.2"
addons.alloy.git.path📜
Type: string
"./chart"
addons.alloy.helmRepo.repoName📜
Type: string
"registry1"
addons.alloy.helmRepo.chartName📜
Type: string
"k8s-monitoring"
addons.alloy.helmRepo.tag📜
Type: string
"2.0.16-bb.2"
addons.alloy.values📜
Type: object
{}
addons.alloy.postRenderers📜
Type: list
[]
addons.alloy.flux📜
Type: object
{}
Description: Flux reconciliation overrides specifically for the alloy package
addons.mimir.enabled📜
Type: bool
false
Description: Toggle deployment of Mimir
addons.mimir.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
addons.mimir.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/mimir.git"
addons.mimir.git.tag📜
Type: string
"5.5.1-bb.11"
addons.mimir.git.path📜
Type: string
"./chart"
addons.mimir.helmRepo.repoName📜
Type: string
"registry1"
addons.mimir.helmRepo.chartName📜
Type: string
"mimir"
addons.mimir.helmRepo.tag📜
Type: string
"5.5.1-bb.11"
addons.mimir.enterprise📜
Type: object
enabled: false
Description: Enable Mimir Enterprise
addons.mimir.minioObjectStorage📜
Type: object
configSecret:
accessKey: minio
secretKey: minio123
defaultUserCredentials:
password: supersecret
username: mimir-user
enabled: false
Description: Enable Big Bang MinIO dependency chart for Mimir
addons.mimir.minioObjectStorage.configSecret📜
Type: object
accessKey: minio
secretKey: minio123
Description: MinIO root credentials
addons.mimir.s3ObjectStorage📜
Type: object
accessKey: ''
accessSecret: ''
bucketName: ''
enabled: false
endpoint: ''
insecure: false
region: ''
Description: Configure Mimir to use S3 bucket
addons.mimir.s3ObjectStorage.region📜
Type: string
""
Description: S3 compatible region to use for connection information.
addons.mimir.s3ObjectStorage.accessKey📜
Type: string
""
Description: Access key for connecting to object storage endpoint.
addons.mimir.s3ObjectStorage.accessSecret📜
Type: string
""
Description: Secret key for connecting to object storage endpoint. Unencoded string data. This should be placed in the secret values and then encrypted
addons.mimir.s3ObjectStorage.bucketName📜
Type: string
""
Description: Bucket name for the Mimir bucket as YAML
addons.mimir.s3ObjectStorage.insecure📜
Type: bool
false
Description: Whether or not objectStorage connection should require HTTPS, if connecting to in-cluster object
addons.mimir.values📜
Type: object
{}
addons.mimir.postRenderers📜
Type: list
[]
addons.mimir.flux📜
Type: object
{}
Description: Flux reconciliation overrides specifically for the alloy package
wrapper📜
Type: object
git:
path: chart
repo: https://repo1.dso.mil/big-bang/product/packages/wrapper.git
tag: 0.4.12
helmRepo:
chartName: wrapper
repoName: registry1
tag: 0.4.12
sourceType: git
Description: Wrapper chart for integrating Big Bang components alongside a package
wrapper.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
wrapper.helmRepo.repoName📜
Type: string
"registry1"
Description: Repository holding OCI chart, corresponding to helmRepositories name
wrapper.helmRepo.chartName📜
Type: string
"wrapper"
Description: Name of the OCI chart in repo
wrapper.helmRepo.tag📜
Type: string
"0.4.12"
Description: Tag of the OCI chart in repo
wrapper.git.repo📜
Type: string
"https://repo1.dso.mil/big-bang/product/packages/wrapper.git"
Description: Git repo holding the wrapper helm chart, example: https://repo1.dso.mil/big-bang/product/packages/wrapper
wrapper.git.path📜
Type: string
"chart"
Description: Path inside of the git repo to find the helm chart, example: chart
wrapper.git.tag📜
Type: string
"0.4.12"
Description: Git tag to check out. Takes precedence over branch. More info, example: 0.0.2
packages📜
Type: object
sample:
configMaps: {}
dependsOn: []
enabled: false
flux: {}
git:
branch: null
commit: null
credentials:
caFile: ''
knownHosts: ''
password: ''
privateKey: ''
publicKey: ''
username: ''
existingSecret: ''
path: null
repo: null
semver: null
tag: null
helmRepo:
chartName: null
repoName: null
tag: null
istio: {}
kustomize: false
monitor: {}
network: {}
postRenderers: []
secrets: {}
sourceType: git
values: {}
wrapper:
enabled: false
postRenderers: []
Description: Packages to deploy with Big Bang @default - ‘{}’
packages.sample.sourceType📜
Type: string
"git"
Description: Choose source type of “git” or “helmRepo”
packages.sample.wrapper.postRenderers📜
Type: list
[]
Description: After deployment, patch wrapper resources. More info
packages.sample.kustomize📜
Type: bool
false
Description: Use a kustomize deployment rather than Helm
packages.sample.helmRepo📜
Type: object
chartName: null
repoName: null
tag: null
Description: HelmRepo source is supported as an option for Helm deployments. If both git and helmRepo are provided git will take precedence.
packages.sample.helmRepo.repoName📜
Type: string
nil
Description: Name of the HelmRepo specified in helmRepositories
packages.sample.helmRepo.chartName📜
Type: string
nil
Description: Name of the chart stored in the Helm repository
packages.sample.helmRepo.tag📜
Type: string
nil
Description: Tag of the chart in the Helm repo, required
packages.sample.git📜
Type: object
branch: null
commit: null
credentials:
caFile: ''
knownHosts: ''
password: ''
privateKey: ''
publicKey: ''
username: ''
existingSecret: ''
path: null
repo: null
semver: null
tag: null
Description: Git source is supported for both Helm and Kustomize deployments. If both git and helmRepo are provided git will take precedence.
packages.sample.git.repo📜
Type: string
nil
Description: Git repo URL holding the helm chart for this package, required if using git
packages.sample.git.commit📜
Type: string
nil
Description: Git commit to check out. Takes precedence over semver, tag, and branch. More info
packages.sample.git.semver📜
Type: string
nil
Description: Git semVer tag expression to check out. Takes precedence over tag. More info
packages.sample.git.tag📜
Type: string
nil
Description: Git tag to check out. Takes precedence over branch. More info
packages.sample.git.branch📜
Type: string
nil
Description: Git branch to check out. More info.
packages.sample.git.path📜
Type: string
nil
Description: Path inside of the git repo to find the helm chart or kustomize
packages.sample.git.existingSecret📜
Type: string
""
Description: Optional, alternative existing secret to use for git credentials, must be in the appropriate format: https://toolkit.fluxcd.io/components/source/gitrepositories/#https-authentication
packages.sample.git.credentials📜
Type: object
caFile: ''
knownHosts: ''
password: ''
privateKey: ''
publicKey: ''
username: ''
Description: Optional, alternative Chart created secrets with user defined values
packages.sample.git.credentials.username📜
Type: string
""
Description: HTTP git credentials, both username and password must be provided
packages.sample.git.credentials.caFile📜
Type: string
""
Description: HTTPS certificate authority file. Required for any repo with a self signed certificate
packages.sample.git.credentials.privateKey📜
Type: string
""
Description: SSH git credentials, privateKey, publicKey, and knownHosts must be provided
packages.sample.flux📜
Type: object
{}
Description: Override flux settings for this package
packages.sample.postRenderers📜
Type: list
[]
Description: After deployment, patch package resources. More info
packages.sample.dependsOn📜
Type: list
[]
Description: Specify dependencies for the package. Only used for HelmRelease, does not effect Kustomization. See here for a reference.
packages.sample.istio📜
Type: object
{}
Description: Package details for Istio. See wrapper values for settings.
packages.sample.monitor📜
Type: object
{}
Description: Package details for monitoring. See wrapper values for settings.
packages.sample.network📜
Type: object
{}
Description: Package details for network policies. See wrapper values for settings.
packages.sample.secrets📜
Type: object
{}
Description: Secrets that should be created prior to package installation. See wrapper values for settings.
packages.sample.configMaps📜
Type: object
{}
Description: ConfigMaps that should be created prior to package installation. See wrapper values for settings.
packages.sample.values📜
Type: object
{}
Description: Values to pass through to package Helm chart