Release Notes - 3.10.0📜
Please see our documentation page for more information on how to consume and deploy BigBang.\ This release was primarily tested on Kubernetes 1.33.5 (EKS).
Deprecations📜
HAProxy📜
- Big Bang team is planning to deprecate support for the HAProxy package in BigBang. If your team/project relies on the big bang HAProxy package, please let us know, either on the Big Bang community Slack, or P1 Mattermost or by creating an issue in the big bang backlog. This will help us ensure we account for all user needs going forward. If we do not receive any feedback, we will assume the software is no longer used, and will proceed with our plan to deprecate support and updates. As of this announcement, plans are to remove HAProxy from the Big Bang umbrella in 3.11
Fortify📜
- Big Bang team is planning to deprecate support for the Fortify package in Big Bang. Platform One has migrated away from using Fortify scans in pipelines in favor of GitLab SAST. If you are with a team or program actively using this package. Please reach out and let us know on the Big Bang community slack, MM IL2 or by creating an issue in the big bang backlog. As of this announcement, plans are to remove Fortify from the Big Bang umbrella in ~~3.11~~ an upcoming release TBD.
Upcoming Documentation Restructure - Feedback Requested📜
We’re preparing a significant reorganization of the Big Bang documentation to improve navigability and maintainability. This is currently available for review in MR #6636.
What’s Changing📜
This restructure represents the first phase of our documentation improvement initiative, focusing primarily on reorganization to make content easier to locate and navigate. Key changes include:
- File relocations: Documentation files have been moved to more logical locations within the structure
- Asset path updates: Content previously under
/docs/assets/has been relocated to/docs/reference/ - Link updates: Internal documentation links have been updated to reflect the new structure
- Binary Files: Binary files have been relocated to bb-static
### Known Issues As this is a work-in-progress, there may be: * Broken internal links that haven’t been caught yet * References to old file paths that need updating * Organizational decisions that could be improved
### We Need Your Feedback If you regularly reference Big Bang documentation, please review the MR and let us know if: * Any links you frequently use are now broken * Files you reference have moved in ways that are unintuitive * The new organization makes sense for your workflows * You spot any issues with the restructuring Our goal is to establish a more maintainable documentation structure that encourages regular review and updates. Your feedback will help ensure this reorganization serves the community effectively before we merge these changes. Review the changes: MR #6636
Upgrade Notices📜
BigBang - MR📜
Big Bang unit schema tests have migrated to helm unittests. Please see docs/developer/helm-unittests.md for more information.
BigBang - MR📜
The values schema for .addons values is now slightly more restrictive disallowing arbitrary keys to be present in an attempt to ensure configuration is targeting a known package.
BigBang - MR📜
The Big Bang deployment will now output a message saying that Redis is enabled and it should only be used in Dev/testing/CI if Redis or Redis-bb are set to enabled: true
BigBang📜
all packages under maintained now have their OCI artifact changed to registry1.dso.mil/bigbang/maintained/package from registry1.dso.mil/bigbang/package
This change should only affect those that use helmRepo/OCIRepo as the install method.
Gitlab - MR📜
Refactoring package with passthrough pattern. Passing values to the gitlab upstream chart will require an additional layer of overlay: addons.gitlab.values.upstream .
An example for update would look like the following:
Current Values
gitlab:
enabled: true
values:
registry:
image:
repository: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-container-registry
tag: X.X.X
Updated Values
# Package name
gitlab:
enabled: true
# -- Values to passthrough to the gitlab registry
values:
upstream:
registry:
image:
repository: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-container-registry
tag: X.X.X
Upgrades from previous releases📜
If coming from a version pre-3.9.0, note the additional upgrade notices in any release in between. The BB team doesn’t test/guarantee upgrades from anything pre-3.9.0.
Packages📜
| Package | Type | Package Version | BB Version |
|---|---|---|---|
 Alloy |
Core | v1.10.0 |
3.2.1-bb.4 🔗 |
| Anchore Enterprise |
Addon | 5.20.2 |
3.14.2-bb.4 🔗 |
| Argocd |
Addon | v3.1.8 |
9.0.3-bb.0 🔗 |
| Authservice |
Addon | 1.1.1 |
1.1.1-bb.3 🔗 |
Backstage  |
Addon | 1.0.10 |
2.5.3-bb.1 |
| Bbctl |
Core | 2.0.0 |
3.0.1-bb.0 🔗 |
| Eck Operator |
Core | 3.1.0 |
3.1.0-bb.1 🔗 |
| Elasticsearch Kibana | Core | Kibana: 9.1.4 Elasticsearch: 9.1.4 |
1.32.0-bb.0 |
| External Secrets Operator |
Addon | 0.20.3 |
0.20.3-bb.0 🔗 |
| Fluentbit | Core | 4.0.8 |
0.52.0-bb.0 |
| Fortify |
Addon | 25.2.1.0010 |
1.1.2320154-bb.37 🔗 |
| Gatekeeper | Core | v3.20.0 |
3.20.0-bb.0 |
| Gitlab |
Addon | 18.5.1 |
9.5.1-bb.0 🔗 |
| Gitlab Runner |
Addon | v18.4.0 |
0.82.0-bb.0 🔗 |
| Grafana |
Core | 12.2.0 |
10.0.0-bb.1 🔗 |
| Haproxy | Addon | v2.2.33 |
1.19.3-bb.10 |
| Harbor |
Addon | 2.14.0 |
1.18.0-bb.4 🔗 |
| Headlamp |
Addon | 0.36.0 |
0.36.0-bb.4 🔗 |
| Istio Cni |
Core | 1.27.3 |
1.27.3-bb.0 🔗 |
| Istio Crds |
Core | 1.27.3 |
1.27.3-bb.0 🔗 |
| Istio Gateway |
Core | 1.27.3 |
1.27.3-bb.0 🔗 |
| Istiod |
Core | 1.27.3 |
1.27.3-bb.0 🔗 |
| Keycloak |
Addon | 26.4.1 |
7.1.4-bb.1 🔗 |
| Kiali |
Core | 2.17.0 |
2.17.0-bb.1 🔗 |
| Kyverno | Core | v1.15.2 |
3.5.2-bb.0 |
| Kyverno Policies |
Core | 3.3.4 |
3.3.4-bb.15 🔗 |
| Kyverno Reporter |
Core | 3.5.0 |
3.5.0-bb.3 🔗 |
| Loki | Core | 3.5.1 |
6.30.1-bb.6 |
| Mattermost |
Addon | 11.0.2 |
11.0.2-bb.0 🔗 |
| Mattermost Operator | Addon | 1.25.2 |
1.25.2-bb.0 |
| Metrics Server |
Addon | v0.8.0 |
3.13.0-bb.2 🔗 |
| Mimir | Addon | 2.17.1 |
5.8.0-bb.1 |
| Minio |
Addon | RELEASE.2025-09-07T16-13-09Z |
7.1.1-bb.12 🔗 |
| Minio Operator |
Addon | v7.1.1 |
7.1.1-bb.2 🔗 |
| Monitoring | Core | Prometheus: 3.4.2 Grafana: 12.0.2 Alertmanager: 0.28.1 |
75.6.1-bb.5 |
| Neuvector |
Core | 5.4.6 |
2.8.8-bb.3 🔗 |
| Nexus Repository Manager | Addon | 3.84.0-03 |
84.0.0-bb.1 |
| Prometheus Operator Crds | Core | 21.0.0 |
23.0.0-bb.0 |
| Sonarqube |
Addon | 25.10.0.114319-community |
2025.5.0-bb.1 🔗 |
| Tempo | Core | Tempo: 2.7.2 Tempo Query: 2.7.2 |
1.21.1-bb.2 |
| Thanos | Addon | v0.39.2 |
17.2.2-bb.0 |
| Twistlock | Core | 34.02.133 |
0.23.0-bb.1 |
| Vault |
Addon | 1.20.4 |
0.31.0-bb.1 🔗 |
| Velero |
Addon | 1.16.1 |
10.0.7-bb.5 🔗 |
| Wrapper | Core | 0.4.15 |
0.4.15 |
Changes in 3.10.0📜
Big Bang MRs📜
- !7017 fix test names, organize files
- !6995 fix(dev-sso-values): remove jira and confluence sso configs
- !6990 docs(blog): rename latest blog md to match pages index
- !6988 Migrate schema tests to helm unittests
- !6986 add helmignore for unittests
- !6983 Restrict addons keys via values schema
- !6959 fix(loki): prevent empty postRenderer key when no post-renderers are enabled
- !6958 update helmunit test for compatibility iwth 1.0.3
- !6948 Add warning for redis or redis-bb
Alloy📜
- !7000: alloy update to 3.2.1-bb.4
# Changelog Updates ## [3.2.1-bb.4] (2025-10-17) ### Changed - Updated the allow-kube-apiserver-egress network policy template to allow setting vpcCidr
Anchore Enterprise📜
- !6960: update anchore ui-redis for upstream
# Changelog Updates ## [3.14.2-bb.4] - 2025-10-16 ### Changed - Updated redis image to v8.2.2 (address CVE-2025-49844) - Updated redis release to v23.1.1-bb.1 - Updated gluon to v0.9.5 - Update kubectl to v1.33.5 - adjust cleanUpgrade in values.yaml
Argocd📜
- !6998: argocd update to 9.0.3-bb.0
- !6980: argocd update to 8.6.3-bb.0
- !6952: argocd update to 8.6.1-bb.0
# Changelog Updates ## [9.0.3-bb.0] (2025-10-21) ### Changed - Upgrade argo-cd helm chart 8.6.3 -> 9.0.3 - registry1.dso.mil/ironbank/bitnami/analytics/redis-exporter v1.78.0 -> v1.79.0 - - redis (source) 22.0.7-bb.1 -> 23.1.1-bb.0 ## [8.6.3-bb.0] (2025-10-17) ### Changed - Upgrade argo-cd helm chart 8.6.1 -> 8.6.3 - gluon 0.9.3 -> 0.9.5 ## [8.6.1-bb.0] (2025-10-14) ### Changed - Upgrade argo-cd helm chart 8.5.8 -> 8.6.1 - gluon 0.9.2 -> 0.9.3 - registry1.dso.mil/ironbank/bitnami/analytics/redis-exporter v1.77.0 -> v1.78.0
Authservice📜
- !7001: authservice update to 1.1.1-bb.3
# Changelog Updates ## [1.1.1-bb.3] (2025-10-22) ### Changed - Redis updated from 22.0.7 to 23.1.1 - bb-common updated from 0.8.2 to 0.9.1
Eck Operator📜
- !6965: eckOperator update to 3.1.0-bb.1
# Changelog Updates ## [3.1.0-bb.1] (2025-10-14) ### Changed - Updated the egress-api network policy template to allow setting vpcCidr
External Secrets Operator📜
- !6987: externalSecrets update to 0.20.3-bb.0
- !6956: externalSecrets update to 0.20.2-bb.1
# Changelog Updates ## [0.20.3-bb.0] - 2025-10-20 ### Updated - registry1.dso.mil/ironbank/opensource/external-secrets/external-secrets (source) v0.20.2 -> v0.20.3 - Updated gluon 0.9.3 -> 0.9.5 ## [0.20.2-bb.1] - 2025-10-15 ### Changed - Set the namespace value to accessKeyIDSecretRef/secretAccessKeySecretRef per spec
Fortify📜
- !6968: fortify update to 1.1.2320154-bb.37
- !6955: fortify update to 1.1.2320154-bb.36
- !6938: fortify update to 1.1.2320154-bb.35
# Changelog Updates ## [1.1.2320154-bb.37] - 2025-10-16 ### Fixed - registry1.dso.mil/ironbank/google/golang/ubi9/golang-1.24.8 (source) -> 1.24.9 ## [1.1.2320154-bb.36] - 2025-10-15 ### Fixed - registry1.dso.mil/ironbank/google/golang/ubi9/golang-1.24.7 (source) -> 1.24.8 ## [1.1.2320154-bb.35] - 2025-10-08 ### Fixed - Fix renovate to consolidate changes into one MR
Gitlab📜
- !7002: gitlab update to 9.5.1-bb.0
- !6970: gitlab update to 9.4.1-bb.3
- !6944: gitlab update to 9.4.1-bb.2
# Changelog Updates ## [9.5.1-bb.0] (2025-10-23) ### Changed - ironbank/gitlab/gitlab/gitlab-webservice (source) 18.5.0 -> 18.5.1 - registry1.dso.mil/ironbank/gitlab/gitlab/certificates 18.5.0 -> 18.5.1 - registry1.dso.mil/ironbank/gitlab/gitlab/gitaly 18.5.0 -> 18.5.1 - registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-base 18.5.0 -> 18.5.1 - registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-container-registry 18.5.0 -> 18.5.1 - registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-exporter 18.5.0 -> 18.5.1 - registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-mailroom 18.5.0 -> 18.5.1 - registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-pages 18.5.0 -> 18.5.1 - registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-shell 18.5.0 -> 18.5.1 - registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-sidekiq 18.5.0 -> 18.5.1 - registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-toolbox 18.5.0 -> 18.5.1 - registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-webservice 18.5.0 -> 18.5.1 - registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-workhorse 18.5.0 -> 18.5.1 - registry1.dso.mil/ironbank/gitlab/gitlab/kubectl 18.5.0 -> 18.5.1 ## [9.5.0-bb.0] (2025-10-20) ### Changed - update gitlab chart 9.4.2 -> 9.5.0 - registry1.dso.mil/ironbank/bitnami/analytics/redis-exporter v1.78.0 -> v1.79.0 - ironbank/gitlab/gitlab/gitlab-webservice (source) 18.4.2 -> 18.5.0 - registry1.dso.mil/ironbank/gitlab/gitlab/certificates 18.4.2 -> 18.5.0 - registry1.dso.mil/ironbank/gitlab/gitlab/gitaly 18.4.2 -> 18.5.0 - registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-base 18.4.2 -> 18.5.0 - registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-container-registry 18.4.2 -> 18.5.0 - registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-exporter 18.4.2 -> 18.5.0 - registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-mailroom 18.4.2 -> 18.5.0 - registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-pages 18.4.2 -> 18.5.0 - registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-shell 18.4.2 -> 18.5.0 - registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-sidekiq 18.4.2 -> 18.5.0 - registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-toolbox 18.4.2 -> 18.5.0 - registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-webservice 18.4.2 -> 18.5.0 - registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-workhorse 18.4.2 -> 18.5.0 - registry1.dso.mil/ironbank/gitlab/gitlab/kubectl 18.4.2 -> 18.5.0 ## [9.4.2-bb.0] (2025-10-17) ### Changed - update gitlab chart 9.4.1 -> 9.4.2 - update gluon 0.9.2 -> 0.9.5 - registry1.dso.mil/ironbank/bitnami/redis 8.2.1 -> 8.2.2 - ironbank/gitlab/gitlab/gitlab-webservice (source) 18.4.1 -> 18.4.2 - registry1.dso.mil/ironbank/gitlab/gitlab/certificates 18.4.1 -> 18.4.2 - registry1.dso.mil/ironbank/gitlab/gitlab/gitaly 18.4.1 -> 18.4.2 - registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-base 18.4.1 -> 18.4.2 - registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-container-registry 18.4.1 -> 18.4.2 - registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-exporter 18.4.1 -> 18.4.2 - registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-mailroom 18.4.1 -> 18.4.2 - registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-pages 18.4.1 -> 18.4.2 - registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-shell 18.4.1 -> 18.4.2 - registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-sidekiq 18.4.1 -> 18.4.2 - registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-toolbox 18.4.1 -> 18.4.2 - registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-webservice 18.4.1 -> 18.4.2 - registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-workhorse 18.4.1 -> 18.4.2 - registry1.dso.mil/ironbank/gitlab/gitlab/kubectl 18.4.1 -> 18.4.2 ## [9.4.1-bb.3] (2025-10-16) ### Changed - - Updated the egress-kube-api network policy template to allow setting vpcCidr ## [9.4.1-bb.2] (2025-10-10) ### Changed - gitlab configured for passthrough as subchart
Gitlab Runner📜
- !6997: gitlabRunner update to 0.82.0-bb.0
# Changelog Updates ## [0.82.0-bb.0] (2025-10-22) ### Changed - Update gitlab-runner chart version minor v0.81.0 -> v0.82.0 ## [0.81.0-bb.3] (2025-10-21) ### Changed - fixed gitlab-runner version to v18.4.0 in values.yaml to prevent unintended upgrades ## [0.81.0-bb.2] (2025-10-17) ### Changed - gluon 0.9.3 -> 0.9.5 ## [0.81.0-bb.1] (2025-10-10) ### Changed - gluon 0.9.1 -> 0.9.3
Grafana📜
- !6992: grafana update to 10.0.0-bb.1
# Changelog Updates ## [10.0.0-bb.1] (2025-10-10) ### Changed - integrate bb-common with grafana networkpolicies.
Harbor📜
- !6989: harbor update to 1.18.0-bb.4
# Changelog Updates ## [1.18.0-bb.4] (2025-10-21) ### Changed - postgresql 18.0.15 -> 18.0.17 ## [1.18.0-bb.3] (2025-10-16) ### Changed - gluon 0.9.3 -> 0.9.5 - postgresql 18.0.7 -> 18.0.15 - registry1.dso.mil/ironbank/opensource/nginx/nginx 1.29.1 -> 1.29.2
Headlamp📜
- !6985: headlamp update to 0.36.0-bb.4
- !6957: headlamp update to 0.36.0-bb.1
# Changelog Updates ## [0.36.0-bb.4] (2025-10-20) ### Updated - Updated cypress (source) 15.4.0 -> 15.5.0 ## [0.36.0-bb.3] (2025-10-16) ### Updated - Updated gluon 0.9.3 -> 0.9.5 - Updated ironbank/opensource/prometheus-operator/prometheus-config-reloader v0.85.0 -> v0.86.1 ## [0.36.0-bb.2] (2025-10-16) ### Updated - Updated the egress-api network policy template to allow setting vpcCidr ## [0.36.0-bb.1] (2025-10-14) ### Updated - Remove waitJob image reference ## [0.36.0-bb.0] (2025-10-09) ### Updated - Updated cypress (source) 15.0.0 -> 15.4.0 - Updated headlamp image tag to 0.36.0 - Updated gluon 0.9.2 -> 0.9.3 - Updated registry1.dso.mil/ironbank/opensource/headlamp-k8s/headlamp to v0.36.0
Istiod📜
- !7004: istiod update to 1.27.3-bb.0
- !6953: istiod update to 1.27.2-bb.0
# Changelog Updates ## [1.27.3-bb.0] (2025-10-21) ### Changed - istiod updated from 1.27.2 to 1.27.3 - bb-common updated from 0.8.2 to 0.8.3 ## [1.27.2-bb.0] (2025-10-14) ### Changed - istiod updated from 1.27.1 to 1.27.2 - bb-common updated from 0.6.1 to 0.8.2
Keycloak📜
- !7014: keycloak update to 7.1.4-bb.1
# Changelog Updates ## [7.1.4-bb.1] - 2025-10-6 ### Updated - Updated Keycloak to 26.4.1 - Updated Postgresql chart to 16.7.19
Kiali📜
- !6964: kiali update to 2.17.0-bb.1
# Changelog Updates ## [2.17.0-bb.1] - 2025-10-16 ### Updated - Update cypress tests for dynamic pod monitor names ## [2.17.0-bb.0] - 2025-10-14 ### Updated - Updated Kiali and Kiali-Operator from 2.16.0 to 2.17.0
Kyverno Policies📜
- !6974: kyvernoPolicies update to 3.3.4-bb.15
# Changelog Updates ## [3.3.4-bb.15] (2025-10-14) ### Fixed - Removed image reference for waitjob in values.yaml - kubectl updated from v1.33.4 to v1.33.5 - gluon updated from 0.9.0 to 0.9.5
Kyverno Reporter📜
- !6975: kyvernoReporter update to 3.5.0-bb.3
# Changelog Updates ## [3.5.0-bb.3] (2025-10-15) ### Changed - Updated the egress-kube-api network policy template to allow setting vpcCidr
Mattermost📜
- !6976: mattermost update to 11.0.2-bb.0
- !6946: mattermost update to 10.12.0-bb.2
# Changelog Updates ## [11.0.2-bb.0] (2025-10-16) ### Updated - Updated gluon updated from 0.9.3 -> 0.9.5 - Updated registry1.dso.mil/ironbank/opensource/mattermost/mattermost (source) 10.12.0 -> 11.0.2 - Updated mattermost image tag to 11.0.2 - Downgrade registry1.dso.mil/ironbank/opensource/kubernetes/kubectl:v1.33.5 to registry1.dso.mil/ironbank/opensource/kubernetes/kubectl:v1.33 ## [10.12.0-bb.2] (2025-10-10) ### Updated - gluon updated from 0.9.2 -> 0.9.3
Metrics Server📜
- !6999: metricsServer update to 3.13.0-bb.2
# Changelog Updates ## [3.13.0-bb.2] (2025-10-22) ### Changed - removes the except from ingress definition of the allow-kube-api networkpolicy ## [3.13.0-bb.1] (2025-10-15) ### Changed - Updated the allow-kube-api network policy template to allow setting vpcCidr
Minio📜
- !6961: minio update to 7.1.1-bb.12
# Changelog Updates ## [7.1.1-bb.12] - 2025-10-16 ### Updated - Updated gluon from 0.9.3 -> 0.9.5 - Change Kubectl to not use patch version v1.33.5 -> v1.33
Minio Operator📜
- !6978: minioOperator update to 7.1.1-bb.2
# Changelog Updates ## [7.1.1-bb.2] (2025-10-15) ### Changed - Updated the egress-api network policy template to allow setting vpcCidr
Neuvector📜
- !6973: neuvector update to 2.8.8-bb.3
# Changelog Updates ## [2.8.8-bb.3] (2025-10-15) ### Changed - Updated the egress-kube-api network policies template to allow setting vpcCidr
Sonarqube📜
- !6939: sonarqube update to 2025.5.0-bb.1
- !6937: sonarqube update to 2025.5.0-bb.0
# Changelog Updates ## [2025.5.0-bb.1] - 2025-10-09 ### Updated - Fix renovate to consolidate changes into one MR - Removed SKIP UPDATE CHECK from the default renovate title - ## [2025.5.0-bb.0] - 2025-10-08 ### Updated - gluon patch 0.9.0 -> 0.9.3 - sonarqube chart minor 2025.4.2 -> 2025.5.0 - sonarqube app 25.8.0.112029-community -> 25.10.0.114319-community
Vault📜
- !6945: vault update to 0.31.0-bb.1
# Changelog Updates ## [0.31.0-bb.1] - 2025-10-13 ### Changed - Updated gluon 0.9.2 -> 0.9.3
Velero📜
- !7013: velero update to 10.0.7-bb.5
# Changelog Updates ## [10.0.7-bb.5] - 2025-10-27 ### Updated - Update allow-velero-test-script NetworkPolicy to ensure it is only created when both networkPolicies.enabled and bbtests.enabled are set to true ## [10.0.7-bb.4] - 2025-10-27 ### Updated - Updated ironbank/opensource/nginx/nginx (source) 1.28.0 -> 1.29.0 - Updated registry1.dso.mil/ironbank/opensource/velero/velero-plugin-for-aws 1.12.1 -> 1.13.0 - Updated registry1.dso.mil/ironbank/opensource/velero/velero-plugin-for-microsoft-azure 1.12.1 -> 1.13.0 - Updated gluon 0.4.4 -> 0.9.5 ## [10.0.7-bb.3] - 2025-10-22 ### Changed - Updated the allow-egress-storage network policy to remove label - Updated the allow-egress-api network policy to include helm hooks for crd job race condition - Adds networkpolicy for the velero-test-script pod ## [10.0.7-bb.2] - 2025-10-22 ### Changed - Changed image used for velero-tester to registry1.dso.mil/ironbank/big-bang/devops-tester
Known Issues📜
-Gitlab Runner - The GitLab Runner image tag was not updated to v18.4.0 during the chart upgrade and remains at v18.3.0. This will be corrected in an upcoming release. As a temporary workaround, add the following override to your values.yaml:
addons:
gitlabRunner:
values:
upstream:
image:
tag: v18.4.0
- bbctl Dashboards
- CRON job output longer than 16kb will be split into multiple log entries when using the dockerd CRI causing invalid JSON structures to be imported into Loki. Use containerd as the CRI to ensure long log lines are parsed correctly
- bbctl-violations-dashboard / bbctl-all-logs-dashboard(Violations Logs)
- These items will not populate if you have too large of a kubernets cluster with too many violations. There is a limit to the amount of data that can be processed. If you hit this limit and need the information, you can still use the
bbctl violationscommand to obtain the data.
- These items will not populate if you have too large of a kubernets cluster with too many violations. There is a limit to the amount of data that can be processed. If you hit this limit and need the information, you can still use the
- Headlamp
- An issue with the flux plugin being able to load certain menu items has been identified. This appears to be an issue with the javascript code used to create the plugin.
- Menu items having an issue:
- Kustomizations
- HelmReleases
- ImageAutomations
- Notifications
- Attempting to login using OIDC will create a login ‘loop’. See upstream issue for further information.
Helpful Links📜
As always, we welcome and appreciate feedback from our community of users. Please feel free to:
- Open issues here
- Join our Mattermost channel
- Join our Slack
- Check out the documentation for guidance on how to get started
Future📜
Don’t see your feature and/or bug fix? Check out our epics for estimates on when you can expect things to drop, and as always, feel free to comment or create issues if you have questions, comments, or concerns.