Release Notes - 3.13.1📜
Please see our documentation page for more information on how to consume and deploy BigBang.\ This release was primarily tested on Kubernetes 1.34.2 (EKS).
Deprecations📜
HAProxy - MR📜
- Big Bang team removed HAProxy in this release. See upgrade notice below if you still need to use the HAProxy package.
Nexus Repository Manager📜
- Big Bang team is planning to deprecate support for the Nexus Repository Manager package in BigBang. The upstream chart has been deprecated on October 24, 2023. As of this announcement, plans are to remove the Nexus Repository Manager package from the Big Bang umbrella in release 3.16.0. The update in 3.14 will be the final update for Nexus Repository Manager.
Our team has added a new Big Bang package, NXRM3-HA, this is the official high availability Nexus Repository Manager chart supported by Sonatype. This package will be updated and maintained by the Big Bang team for use on Repo1/Reg1 but will not be included in the Umbrella chart as an addon. See migration guide for details on how to install using the BYO
packages:section of the umbrella. Migration detail for nxrm-ha can be found here
Upgrade Notices📜
Keycloak - MR📜
Keycloak upstream has broken out TLS configs for its management interface, meaning Big Bang users no longer need to set addons.keycloak.values.upstream.http.internalScheme to HTTPS for health checks to pass when TLS is enabled.
Because of this change upstream, this release removes the mesh exclusion for Keycloak’s management interface, allowing prometheus to scrape metrics with mTLS encryption. If you are overriding addons.keycloak.values.upstream.extraEnv and are not setting addons.keycloak.values.upstream.http.internalScheme to HTTPS, you must add the following to your addons.keycloak.values.upstream.extraEnv key to continue scraping Keycloak’s prometheus metrics:
- name: KC_HTTP_MANAGEMENT_SCHEME
value: http
Known Issues📜
- bbctl Dashboards
- CRON job output longer than 16kb will be split into multiple log entries when using the dockerd CRI causing invalid JSON structures to be imported into Loki. Use containerd as the CRI to ensure long log lines are parsed correctly
- bbctl-violations-dashboard / bbctl-all-logs-dashboard(Violations Logs)
- These items will not populate if you have too large of a kubernets cluster with too many violations. There is a limit to the amount of data that can be processed. If you hit this limit and need the information, you can still use the
bbctl violationscommand to obtain the data.
- These items will not populate if you have too large of a kubernets cluster with too many violations. There is a limit to the amount of data that can be processed. If you hit this limit and need the information, you can still use the
- Headlamp
- An issue with the flux plugin being able to load certain menu items has been identified. This appears to be an issue with the javascript code used to create the plugin.
- Menu items having an issue:
- Kustomizations
- HelmReleases
- ImageAutomations
- Notifications
- Attempting to login using OIDC will create a login ‘loop’. See upstream issue for further information.
Upgrades from previous releases📜
If coming from a version pre-3.13.0, note the additional upgrade notices in any release in between. The BB team doesn’t test/guarantee upgrades from anything pre-3.13.0.
Packages📜
Click to show Packages Version Updates
| Package | Type | Package Version | BB Version | |---------|------|-----------------|------------| | [Alloy](https://repo1.dso.mil/big-bang/product/packages/alloy) | Core | `v1.10.0` | `3.2.1-bb.5` | | [Anchore Enterprise](https://repo1.dso.mil/big-bang/product/packages/anchore-enterprise) | Addon | `5.20.2` | `3.14.2-bb.4` | | [Argocd](https://repo1.dso.mil/big-bang/product/packages/argocd) | Addon | `v3.2.0` | `9.1.4-bb.0` | | [Authservice](https://repo1.dso.mil/big-bang/product/packages/authservice) | Addon | `1.1.1` | `1.1.1-bb.5` | | [Backstage](https://repo1.dso.mil/big-bang/product/packages/backstage)
| Addon | `1.1.0` | `2.6.3-bb.0` |
| [Bbctl](https://repo1.dso.mil/big-bang/product/packages/bbctl) | Core | `2.0.0` | `3.0.1-bb.0` |
| [Eck Operator](https://repo1.dso.mil/big-bang/product/packages/eck-operator) | Core | `3.2.0` | `3.2.0-bb.0` |
| [Elasticsearch Kibana](https://repo1.dso.mil/big-bang/product/packages/elasticsearch-kibana) | Core | Kibana: `9.2.1` Elasticsearch: `9.2.1` | `1.34.0-bb.0` |
| [External Secrets Operator](https://repo1.dso.mil/big-bang/product/packages/external-secrets) | Addon | `0.20.4` | `0.20.4-bb.0` |
| [Fluentbit](https://repo1.dso.mil/big-bang/product/packages/fluentbit) | Core | `4.2.0` | `0.54.0-bb.1` |
| [Fortify](https://repo1.dso.mil/big-bang/product/packages/fortify) | Addon | `25.4.0.0137` | `1.1.2320154-bb.38` |
| [Gatekeeper](https://repo1.dso.mil/big-bang/product/packages/policy) | Core | `v3.20.1` | `3.20.1-bb.1` |
| [Gitlab](https://repo1.dso.mil/big-bang/product/packages/gitlab) | Addon | `18.6.1` | `9.6.1-bb.0` |
| [Gitlab Runner](https://repo1.dso.mil/big-bang/product/packages/gitlab-runner) | Addon | `v18.5.0` | `0.82.0-bb.4` |
| [Grafana](https://repo1.dso.mil/big-bang/product/packages/grafana) | Core | `12.3.0` | `10.2.0-bb.1` |
| [Harbor](https://repo1.dso.mil/big-bang/product/packages/harbor) | Addon | `2.14.0` | `1.18.0-bb.6` |
| [Headlamp](https://repo1.dso.mil/big-bang/product/packages/headlamp) | Addon | `0.37.0` | `0.37.0-bb.1` |
| [Istio Cni](https://repo1.dso.mil/big-bang/product/packages/istio-cni) | Core | `1.28.0` | `1.28.0-bb.0` |
| [Istio Crds](https://repo1.dso.mil/big-bang/product/packages/istio-crds) | Core | `1.28.0` | `1.28.0-bb.0` |
| [Istio Gateway](https://repo1.dso.mil/big-bang/product/packages/istio-gateway) | Core | `1.28.0` | `1.28.0-bb.0` |
| [Istiod](https://repo1.dso.mil/big-bang/product/packages/istiod) | Core | `1.28.0` | `1.28.0-bb.0` |
| 
[Keycloak](https://repo1.dso.mil/big-bang/product/packages/keycloak) | Addon | `26.4.7` | `7.1.5-bb.0` [🔗](#keycloak) |
| [Kiali](https://repo1.dso.mil/big-bang/product/packages/kiali) | Core | `2.19.0` | `2.19.0-bb.0` |
| [Kyverno](https://repo1.dso.mil/big-bang/product/packages/kyverno) | Core | `v1.16.0` | `3.6.0-bb.1` |
| [Kyverno Policies](https://repo1.dso.mil/big-bang/product/packages/kyverno-policies) | Core | `3.3.4` | `3.3.4-bb.15` |
| [Kyverno Reporter](https://repo1.dso.mil/big-bang/product/packages/kyverno-reporter) | Core | `3.6.0` | `3.7.0-bb.0` |
| [Loki](https://repo1.dso.mil/big-bang/product/packages/loki) | Core | `3.5.5` | `6.46.0-bb.0` |
| [Mattermost](https://repo1.dso.mil/big-bang/product/packages/mattermost) | Addon | `11.1.1` | `11.1.1-bb.1` |
| [Mattermost Operator](https://repo1.dso.mil/big-bang/product/packages/mattermost-operator) | Addon | `1.25.3` | `1.25.3-bb.0` |
| [Metrics Server](https://repo1.dso.mil/big-bang/product/packages/metrics-server) | Addon | `v0.8.0` | `3.13.0-bb.3` |
| [Mimir](https://repo1.dso.mil/big-bang/product/packages/mimir) | Addon | `2.17.1` | `5.8.0-bb.3` |
| [Minio](https://repo1.dso.mil/big-bang/product/packages/minio) | Addon | `RELEASE.2025-10-15T17-29-55Z` | `7.1.1-bb.15` |
| [Minio Operator](https://repo1.dso.mil/big-bang/product/packages/minio-operator) | Addon | `v7.1.1` | `7.1.1-bb.3` |
| [Monitoring](https://repo1.dso.mil/big-bang/product/packages/monitoring) | Core | Prometheus: `3.8.0` Grafana: `12.3.0` Alertmanager: `0.29.0` | `79.11.0-bb.0` |
| [Neuvector](https://repo1.dso.mil/big-bang/product/packages/neuvector) | Core | `5.4.7` | `2.8.9-bb.0` |
| [Nexus Repository Manager](https://repo1.dso.mil/big-bang/product/packages/nexus) | Addon | `3.84.0-03` | `84.0.0-bb.1` |
| [Prometheus Operator Crds](https://repo1.dso.mil/big-bang/product/packages/prometheus-operator-crds) | Core | `21.0.0` | `24.0.0-bb.0` |
| [Sonarqube](https://repo1.dso.mil/big-bang/product/packages/sonarqube) | Addon | `25.10.0.114319-community` | `2025.5.0-bb.1` |
| [Tempo](https://repo1.dso.mil/big-bang/product/packages/tempo) | Core | Tempo: `2.8.2` Tempo Query: `2.8.2` | `1.23.3-bb.0` |
| [Thanos](https://repo1.dso.mil/big-bang/product/packages/thanos) | Addon | `v0.40.1` | `17.3.3-bb.0` |
| [Twistlock](https://repo1.dso.mil/big-bang/product/packages/twistlock) | Core | `34.02.133` | `0.23.0-bb.4` |
| [Vault](https://repo1.dso.mil/big-bang/product/packages/vault) | Addon | `1.20.4` | `0.31.0-bb.6` |
| [Velero](https://repo1.dso.mil/big-bang/product/packages/velero) | Addon | `1.17.1` | `11.1.1-bb.2` |
| [Wrapper](https://repo1.dso.mil/big-bang/product/packages/wrapper) | Core | `0.4.15` | `0.4.15` |
Changes in 3.13.1📜
Keycloak📜
Click to show Changelog
# Changelog Updates
## [7.1.5-bb.0] - 2025-12-18
### Updated
- Updated Keycloak to 26.4.6
## [7.1.4-bb.6] - 2025-12-08
### Changed
- Remove extra postgres subchart from local git repo
## [7.1.4-bb.5] - 2025-12-09
### Changed
- Removed the port 9000 istio exclusion annotation from keycloak pods
Helpful Links📜
As always, we welcome and appreciate feedback from our community of users. Please feel free to:
- Open issues here
- Join our Mattermost channel
- Join our Slack
- Check out the documentation for guidance on how to get started
Future📜
Don’t see your feature and/or bug fix? Check out our epics for estimates on when you can expect things to drop, and as always, feel free to comment or create issues if you have questions, comments, or concerns.