Release Notes - 3.17.0📜

Please see our documentation page for more information on how to consume and deploy BigBang.\ This release was primarily tested on Kubernetes 1.34.2 (EKS).

Deprecations📜

Nexus Repository Manager 📜

Big Bang team is planning to deprecate support for the Nexus Repository Manager package in BigBang. The upstream chart has been deprecated on October 24, 2023. Update (3.17.0): The removal of Nexus Repository Manager has been delayed beyond this release, and it is now expected that Nexus Repository Manager will be deprecated in release 3.18.0. The update in 3.14 remains the final update for Nexus Repository Manager. Our team has added a new Big Bang package, NXRM3-HA, this is the official high availability Nexus Repository Manager chart supported by Sonatype. This package will be updated and maintained by the Big Bang team for use on Repo1/Reg1 but will not be included in the Umbrella chart as an addon. See migration guide for details on how to install using the BYO packages: section of the umbrella. Migration detail for nxrm-ha can be found here

Upgrade Notices📜

Anchore Enterprise - MR 📜

This release of AnchoreEnterprise migrates the chart to the passthrough pattern.

Value overrides that need to pass-through to the upstream chart will need to be nested under the upstream key.

For example:

addons:
 anchoreEnterprise:
   values:
     key: value

becomes:

addons:
 anchoreEnterprise:
   values:
     upstream:
       key: value

Fluent Bit is now leveraging our bb-common integration for network policies and Istio-related resources. Please refer to this blog post for additional information on the integration. During this process, network policy definitions have been normalized and some keys are now in kebab-case (e.g. external-elastic, external-loki, external-fluentd), so any existing overrides using older names must be updated. Loki egress is now explicitly managed through the bb-common NetworkPolicy DSL (and enabled by default for in- cluster Loki), and AuthorizationPolicy generation (when Istio hardened is enabled) is tied to service account-qualified rules; if you rely on custom ingress/egress, ensure those rules include the correct namespace/service account identity to avoid unintended denies.

Harbor - MR 📜

Harbor is now leveraging our bb-common integration for network policies and istio-related resources. Please refer to this blog post for additional information on the integration.

The VirtualService for Harbor no longer includes a match on port 5000 for the registry. This port was not functional in typical deployments as no gateway was configured to listen on it, and all registry traffic (docker push/pull) routes through harbor-core.

Mattermost - MR 📜

Mattermost 11.3.0-bb.2 upgrade updates Big Bang MinIO dependency chart to 7.1.1-bb.16. MinIO chart now follows a passthrough refactor which are included in this upgrade. If you are planning to use MinIO with Mattermost please see the breaking change for MinIO in the 7.1.1-bb.9 Upgrade Notice as shown below:

MinIO `7.1.1-bb.9` Upgrade Notice📜

This release of MinIO migrates the chart to the passthrough pattern.

Values overrides are now nested under the upstream key. For example:

mattermost:
  values:
    minio:
      tenant:
        pools:
        - name: pool-0
          servers: 3
          volumesPerServer: 4

becomes:

mattermost:
  values:
    minio:
      upstream:
        tenant:
          pools:
          - name: pool-0
            servers: 3
            volumesPerServer: 4

Twistlock - MR 📜

A few settings that were previously manually configured through the user interface are now configured with helm values. It is recommended to review your current settings and override as needed to avoid unexpected configuration changes. Note that basic authentication is enabled by default, because prometheus’s metrics scraping depends on it. If you don’t need those metrics, basic authentication can be disabled.

Helm Value	Default	Corresponding Setting in Console UI
`console.options.intelligence.uploadDisabled`	`true`	Allow admins and operators to upload logs to Customer Support directly from the Console UI
`console.options.scan.scanRunningImages`	`false`	Only scan images with running containers
`console.options.logon.useSupportCredentials`	`false`	Enable context sensitive help and single sign on to the Prisma Cloud Support site
`console.options.logon.requireStrongPassword`	`true`	Require strong passwords for local accounts
`console.options.logon.basicAuthDisabled`	`false`	Disable basic authentication for the API

Example values for the Big Bang chart:

twistlock:
  values:
    console:
      options:
        intelligence:
          uploadDisabled: true
        scan:
          scanRunningImages: false
        logon:
          useSupportCredentials: false
          requireStrongPassword: true
          basicAuthDisabled: false

Velero - MR 📜

Velero is now leveraging our bb-common integration for network policies and all istio-related resources. Please refer to this blog post for additional information on the integration.

Known Issues📜

bbctl Dashboards
CRON job output longer than 16kb will be split into multiple log entries when using the dockerd CRI causing invalid JSON structures to be imported into Loki. Use containerd as the CRI to ensure long log lines are parsed correctly
bbctl-violations-dashboard / bbctl-all-logs-dashboard(Violations Logs)
- These items will not populate if you have too large of a kubernetes cluster with too many violations. There is a limit to the amount of data that can be processed. If you hit this limit and need the information, you can still use the bbctl violations command to obtain the data.
Headlamp
Attempting to login using OIDC will create a login ‘loop’. See upstream issue for further information.
Loki/Elasticsearch-kibana
if loki and EK are both enabled, drift detection will continually trigger as they share a peer authentication: default-peer-auth in the logging namespace. Issue
Prometheus Target Scraping

Package	Target	Issue
Elasticsearch-Kibana	`podMonitor/monitoring/monitoring-monitoring-istio-envoy/0`	Issue

Upgrades from previous releases📜

If coming from a version pre-3.15.0, note the additional upgrade notices in any release in between. The BB team doesn’t test/guarantee upgrades from anything pre-3.15.0.

Upgrades from previous releases📜

If coming from a version pre-3.16.0, note the additional upgrade notices in any release in between. The BB team doesn’t test/guarantee upgrades from anything pre-3.16.0.

Packages📜

Click to show Packages Version Updates

| Package | Type | Package Version | BB Version | | ------- | ---- | --------------- | ---------- | |

[Argocd](https://repo1.dso.mil/big-bang/product/packages/argocd) | Addon | `v3.2.5` | `9.3.4-bb.0` [🔗](#argocd) | | [Authservice](https://repo1.dso.mil/big-bang/product/packages/authservice) | Addon | `1.1.5` | `1.1.5-bb.0` | | [Backstage](https://repo1.dso.mil/big-bang/product/packages/backstage) | Addon | `1.1.0` | `2.6.3-bb.1` | |

[Elasticsearch Kibana](https://repo1.dso.mil/big-bang/product/packages/elasticsearch-kibana) | Core | Kibana: `9.2.4` Elasticsearch: `9.2.4` | `1.35.0-bb.0` [🔗](#elasticsearch-kibana) | |

[Neuvector](https://repo1.dso.mil/big-bang/product/packages/neuvector) | Core | `5.4.8` | `2.8.10-bb.2` [🔗](#neuvector) | | [Nexus Repository Manager](https://repo1.dso.mil/big-bang/product/packages/nexus) | Addon | `3.86.2-01` | `86.0.0-bb.0` | | [Prometheus Operator Crds](https://repo1.dso.mil/big-bang/product/packages/prometheus-operator-crds) | Core | `v0.88.0` | `26.0.0-bb.0` | |

Changes in 3.17.0📜

Big Bang MRs📜

!7328 add egress database subnets for harbor
!7327 added port config to conditional block for anchore postgres
!7294 Enhance network policies to allow scraping by alloy-metrics and Prometheus for…
!7293 Updated commit used for Keycloak’s dev files
!7268 Quickstart bugfixes
!7262 feat(template-all): add api-versions support to script
!7257 docs(k3d-dev): create sane coredns config for bb domains
!7252 Headlamp 61 keycloak integration

Alloy📜

!7313: alloy update to 3.7.2-bb.3
!7246: alloy update to 3.7.2-bb.0

Click to show Changelog

# Changelog Updates

## [3.7.2-bb.3] (2026-01-29)
### Fixed
- Added NetworkPolicy ingress rules for alloy-receiver, alloy-logs, and alloy-metrics to fix 502 block_all errors when Istio hardened mode is enabled

Anchore Enterprise📜

!7286: Merge branch ‘fix-anchore-postgresql’ into ‘master’

Click to show Changelog

# Changelog Updates

## [3.19.2-bb.0] - 2026-01-09
### Changed
- gluon 0.9.5 -> 0.9.7
- ironbank/anchore/enterprise/enterprise 5.20.2 -> 5.23.0
- ironbank/anchore/enterpriseui/enterpriseui 5.20.0 -> 5.23.0
- registry1.dso.mil/ironbank/anchore/enterprise/enterprise 5.20.2 -> 5.23.0
- registry1.dso.mil/ironbank/anchore/enterpriseui/enterpriseui 5.20.0 -> 5.23.0
- registry1.dso.mil/ironbank/bitnami/analytics/redis-exporter v1.78.0 -> v1.80.1
- registry1.dso.mil/ironbank/opensource/redis/redis8-slim  8.2.2 -> 8.4.0

## [3.14.2-bb.5] - 2025-12-26
### Changed
- Refactored chart for pass-through pattern

Argocd📜

!7260: argocd update to 9.3.4-bb.0

Click to show Changelog

# Changelog Updates

## [9.3.4-bb.0] (2026-01-15)
### Changed
- Upgraded argo-cd 9.3.0 -> 9.3.4
- Upgraded registry1.dso.mil/ironbank/big-bang/argocd v3.2.3 -> v3.2.5
- Upgraded registry1.dso.mil/ironbank/bitnami/redis 8.2.3 -> 8.4.0

Bbctl📜

!7315: bbctl update to 3.0.1-bb.2

Click to show Changelog

# Changelog Updates

## [3.0.1-bb.2] (2026-01-29)
### Changed
- updated bbctl to application version 2.3.1

Elasticsearch Kibana📜

!7292: elasticsearchKibana update to 1.35.0-bb.0

Click to show Changelog

# Changelog Updates

## [1.35.0-bb.0] (2026-01-14)
### Changed
- registry1.dso.mil/ironbank/elastic/elasticsearch/elasticsearch updated from 9.2.1 to 9.2.4
- registry1.dso.mil/ironbank/elastic/kibana/kibana updated from 9.2.2 to 9.2.4
- prometheus-elasticsearch-exporter updated from 7.0.0 to 7.2.1

External Secrets Operator📜

!7277: externalSecrets update to 1.2.1-bb.0
!7267: externalSecrets update to 0.20.4-bb.5
!7216: externalSecrets update to 0.20.4-bb.4

Click to show Changelog

# Changelog Updates

## [1.2.1-bb.0] - 2026-01-21
### Updated
- Updated gluon 0.9.6 -> 0.9.7
- Updated registry1.dso.mil/ironbank/opensource/external-secrets/external-secrets 0.20.4 -> 1.2.1
- Updated registry1.dso.mil/ironbank/opensource/kubernetes/kubectl v1.33 -> v1.34

## [0.20.4-bb.5] - 2026-01-13
### Changed
- Removed duplicate default values

## [0.20.4-bb.4] - 2026-01-07
### Updated
- Moved rbac and serviceAccount values under upstream

Fluentbit📜

!7259: fluentbit update to 0.54.1-bb.1

Click to show Changelog

# Changelog Updates

## [0.54.1-bb.1] (2026-01-20)
### Changed
- Migrate fluent-bit network policies and Istio resources to bb-common and add bb-common dependency
- Add helm-unittest coverage for bb-common network policies and Istio rendering

Fortify📜

!7304: fortify update to 1.1.2320154-bb.40

Click to show Changelog

# Changelog Updates

## [1.1.2320154-bb.40] - 2026-01-27
### Fixed
- registry1.dso.mil/ironbank/google/golang/ubi9/golang-1.24.10 (source) -> 1.24.12

Gitlab📜

!7312: gitlab update to 9.8.2-bb.1
!7306: gitlab update to 9.8.2-bb.0
!7280: gitlab update to 9.7.1-bb.0

Click to show Changelog

# Changelog Updates

## [9.8.2-bb.1] (2026-01-29)
### Changed
- Update registry1.dso.mil/ironbank/bitnami/analytics/redis-exporter v1.80.1 -> v1.80.2

## [9.8.2-bb.0] (2026-01-27)
### Changed
- update gitlab chart 9.7.1 -> 9.8.2
- update bb-common 0.12.0 -> 0.13.0
- update gluon 0.9.6 -> 0.9.7
- fix gitlab-workhorse image format in values.yaml for renovate compatibility
- ironbank/gitlab/gitlab/gitlab-webservice 18.7.1 -> 18.8.2
- registry1.dso.mil/ironbank/gitlab/gitlab/certificates 18.7.1 -> 18.8.2
- registry1.dso.mil/ironbank/gitlab/gitlab/gitaly 18.7.1 -> 18.8.2
- registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-base 18.7.1 -> 18.8.2
- registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-container-registry 18.7.1 -> 18.8.2
- registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-exporter 18.7.1 -> 18.8.2
- registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-mailroom 18.7.1 -> 18.8.2
- registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-pages 18.7.1 -> 18.8.2
- registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-shell 18.7.1 -> 18.8.2
- registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-sidekiq 18.7.1 -> 18.8.2
- registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-toolbox 18.7.1 -> 18.8.2
- registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-webservice 18.7.1 -> 18.8.2
- registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-workhorse 18.7.1 -> 18.8.2
- registry1.dso.mil/ironbank/gitlab/gitlab/kas 18.7.1 -> 18.8.2
- registry1.dso.mil/ironbank/gitlab/gitlab/kubectl 18.7.1 -> 18.8.2

## [9.7.1-bb.0] (2026-01-16)
### Changed
- update gitlab chart 9.7.0 -> 9.7.1
- registry1.dso.mil/ironbank/bitnami/redis 8.2.3 -> 8.4.0
- ironbank/gitlab/gitlab/gitlab-webservice (source) 18.7.0 -> 18.7.1
- registry1.dso.mil/ironbank/gitlab/gitlab/certificates 18.7.0 -> 18.7.1
- registry1.dso.mil/ironbank/gitlab/gitlab/gitaly 18.7.0 -> 18.7.1
- registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-base 18.7.0 -> 18.7.1
- registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-container-registry 18.7.0 -> 18.7.1
- registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-exporter 18.7.0 -> 18.7.1
- registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-mailroom 18.7.0 -> 18.7.1
- registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-pages 18.7.0 -> 18.7.1
- registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-shell 18.7.0 -> 18.7.1
- registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-sidekiq 18.7.0 -> 18.7.1
- registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-toolbox 18.7.0 -> 18.7.1
- registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-webservice 18.7.0 -> 18.7.1
- registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-workhorse 18.7.0 -> 18.7.1
- registry1.dso.mil/ironbank/gitlab/gitlab/kas 18.7.0 -> 18.7.1
- registry1.dso.mil/ironbank/gitlab/gitlab/kubectl 18.7.0 -> 18.7.1

Gitlab Runner📜

!7288: gitlabRunner update to 0.85.0-bb.0

Click to show Changelog

# Changelog Updates

## [0.85.0-bb.0] (2026-01-22)
### Changed
- Update gitlab-runner chart version minor v0.84.1-> v0.85.0
- ironbank/gitlab/gitlab-runner/gitlab-runner (source) v18.5.0 -> v18.8.0
- ironbank/gitlab/gitlab-runner/gitlab-runner-helper (source) v18.5.0 -> v18.8.0
- registry1.dso.mil/ironbank/gitlab/gitlab-runner/gitlab-runner v18.5.0 -> v18.8.0
- registry1.dso.mil/ironbank/gitlab/gitlab-runner/gitlab-runner-helper v18.5.0 -> v18.8.0

## [0.84.1-bb.0] (2026-01-05)
### Changed
- Update gitlab-runner chart version minor v0.83.3-> v0.84.1

## [0.83.3-bb.0] (2025-12-10)
### Changed
- Update gitlab-runner chart version minor v0.83.2-> v0.83.3

Grafana📜

!7320: grafana update to 10.5.5-bb.1

Click to show Changelog

# Changelog Updates

## [10.5.5-bb.1] (2026-01-27)
### Changed
- updated registry1.dso.mil/ironbank/opensource/grafana/grafana-image-renderer from v5.2.1 to v5.2.2

### Changed
- prometheus-operator-crds updated from 25.0.1 -> 26.0.0

Harbor📜

!7322: harbor update to 1.18.2-bb.0
!7284: harbor update to 1.18.1-bb.4
!7275: harbor update to 1.18.1-bb.3

Click to show Changelog

# Changelog Updates

## [1.18.2-bb.0] (2026-2-2)
### Changed
- Updated bb-common 0.13.0 -> 0.14.0
- Updated harbor 1.18.1 -> 1.18.2

## [1.18.1-bb.5] (2026-1-26)
### Changed
- Updated bb-common 0.12.3 -> 0.13.0

## [1.18.1-bb.4] (2026-1-16)
### Changed
- Generate Istio resources with bb-common
- Generate Network Policies resources with bb-common

## [1.18.1-bb.3] - (2026-01-21)
### Changed
- Updated postgresql 18.2.0 -> 18.2.3
- registry1.dso.mil/ironbank/opensource/goharbor/harbor-core v2.14.1 -> v2.14.2
- registry1.dso.mil/ironbank/opensource/goharbor/harbor-exporter v2.14.1 -> v2.14.2
- registry1.dso.mil/ironbank/opensource/goharbor/harbor-jobservice v2.14.1 -> v2.14.2
- registry1.dso.mil/ironbank/opensource/goharbor/harbor-portal v2.14.1 -> v2.14.2
- registry1.dso.mil/ironbank/opensource/goharbor/harbor-registryctl v2.14.1 -> v2.14.2
- registry1.dso.mil/ironbank/opensource/goharbor/registry v2.14.1 -> v2.14.2
- registry1.dso.mil/ironbank/opensource/goharbor/trivy-adapter v2.14.1 -> v2.14.2

Headlamp📜

!7309: Update headlamp tag 0.39.0 bb.2

Click to show Changelog

# Changelog Updates

## [0.39.0-bb.2] (2025-01-20)
### Changed
- Added SSO Integration with Keycloak and Group Mapping to CustomRoleBindings

Istio Cni📜

!7297: istioCNI update to 1.28.3-bb.0

Click to show Changelog

# Changelog Updates

## [1.28.3-bb.0] (2026-01-20)
### Changed
- cni updated from 1.28.2 to 1.28.3

Istio Crds📜

!7300: istioCRDs update to 1.28.3-bb.0

Click to show Changelog

# Changelog Updates

## [1.28.3-bb.0] (2026-01-20)
### Changed
- base updated from 1.28.2 to 1.28.3

Istio Gateway📜

!7296: istioGateway update to 1.28.3-bb.0

Click to show Changelog

# Changelog Updates

## [1.28.3-bb.0] (2026-01-20)
### Changed
- bb-common 0.12.1 -> 0.13.0
- gateway 1.28.0 -> 1.28.3
- gateway 1.28.2 -> 1.28.3
- registry1.dso.mil/ironbank/opensource/istio/proxyv2 1.28.2 -> 1.28.3

Istiod📜

!7298: istiod update to 1.28.3-bb.0

Click to show Changelog

# Changelog Updates

## [1.28.3-bb.0] (2026-01-20)
### Changed
- bb-common 0.12.1 -> 0.13.0
- istiod 1.28.2 -> 1.28.3
- registry1.dso.mil/ironbank/opensource/istio/pilot 1.28.2 -> 1.28.3
- registry1.dso.mil/ironbank/opensource/istio/proxyv2 1.28.2 -> 1.28.3

Kiali📜

!7319: kiali update to 2.21.0-bb.0

Click to show Changelog

# Changelog Updates

## [2.21.0-bb.0] (2026-01-29)
### Changed
- bb-common 0.12.0 -> 0.14.0
- kiali-operator 2.20.0 -> 2.21.0
- registry1.dso.mil/ironbank/opensource/kiali/kiali v2.20.0 -> v2.21.0
- registry1.dso.mil/ironbank/opensource/kiali/kiali-operator v2.20.0 -> v2.21.0

Kyverno📜

!7307: kyverno update to 3.6.2-bb.1
!7263: kyverno update to 3.6.2-bb.0

Click to show Changelog

# Changelog Updates

## [3.6.2-bb.1] (2026-01-27)
### Changed
- Updated app version from `v1.16.2` -> `v1.16.3`
- Updated ironbank/opensource/kyverno `v1.16.2` -> `v1.16.3`
- Updated ironbank/opensource/kyverno/kyverno/background-controller `v1.16.2` -> `v1.16.3`
- Updated ironbank/opensource/kyverno/kyverno/cleanup-controller `v1.16.2` -> `v1.16.3`
- Updated ironbank/opensource/kyverno/kyverno/reports-controller `v1.16.2` -> `v1.16.3`
- Updated ironbank/opensource/kyverno/kyvernocli `v1.16.2` -> `v1.16.3`
- Updated ironbank/opensource/kyverno/kyvernopre `v1.16.2` -> `v1.16.3`

## [3.6.2-bb.0] (2026-01-14)
### Changed
- Updated chart version `3.6.1` -> `3.6.2` and app version from `v1.16.1` -> `v1.16.2`
- Updated ironbank/opensource/kyverno `v1.16.1` -> `v1.16.2`
- Updated ironbank/opensource/kyverno/kyverno/background-controller `v1.16.1` -> `v1.16.2`
- Updated ironbank/opensource/kyverno/kyverno/cleanup-controller `v1.16.1` -> `v1.16.2`
- Updated ironbank/opensource/kyverno/kyverno/reports-controller `v1.16.1` -> `v1.16.2`
- Updated ironbank/opensource/kyverno/kyvernocli `v1.16.1` -> `v1.16.2`
- Updated ironbank/opensource/kyverno/kyvernopre `v1.16.1` -> `v1.16.2`
- Updated ironbank/opensource/kubernetes/kubectl `v1.34.2` -> `v1.34.3`

Kyverno Policies📜

!7279: kyvernoPolicies update to 3.3.4-bb.19
!7273: kyvernoPolicies update to 3.3.4-bb.18

Click to show Changelog

# Changelog Updates

## [3.3.4-bb.19] (2026-01-22)
### Changed
- Updated ubi9-minimal from 9.6 to 9.7

## [3.3.4-bb.18] (2026-01-21)
### Fixed
- Fix bug in update-image-registry mutating policy so that the pods with multiple container images are not mangled.

Kyverno Reporter📜

!7299: kyvernoReporter update to 3.7.1-bb.2

Click to show Changelog

# Changelog Updates

## [3.7.1-bb.2] (2026-01-21)
### Changed
- Added policy reporter UI validation to the cypress test

Mattermost📜

!7247: Mattermost minio fixes

Click to show Changelog

# Changelog Updates

## [11.3.0-bb.2] (2026-01-27)
### Changed
- Updated minio-instance 7.1.1-bb.0 -> 7.1.1-bb.15

Neuvector📜

!7301: neuvector update to 2.8.10-bb.2
!7282: neuvector update to 2.8.10-bb.1

Click to show Changelog

# Changelog Updates

## [2.8.10-bb.2] (2026-01-26)
### Changed
- update bb-common 0.11.1 -> 0.13.0
- update core 2.8.9 -> 2.8.10
- update crd  2.8.9 -> 2.8.10
- update gluon 0.9.6 -> 0.9.7
- update monitor 2.8.9 -> 2.8.10

## [2.8.10-bb.1] (2026-01-15)
### Changed
- Update renovate.json to combine MRs on images and helm chart updates

Sonarqube📜

!7276: sonarqube update to 2025.6.1-bb.3

Click to show Changelog

# Changelog Updates

## [2025.6.1-bb.3] - 2026-01-22
### Updated
- Configured job to retrieve certificate for SSO authentication automatically in scenario where Keycloak is located in same cluster

Thanos📜

!7314: thanos update to 17.3.3-bb.2

Click to show Changelog

# Changelog Updates

## [17.3.3-bb.2] (2026-01-30)
### Changed
- Updated the upgrade job to stip any special character that may break semver

## [17.3.3-bb.1] (2025-11-20)

Twistlock📜

!7317: twistlock update to 0.24.0-bb.3
!7285: twistlock update to 0.24.0-bb.2

Click to show Changelog

# Changelog Updates

## [0.24.0-bb.3] (2026-01-28)
- Added management of logon, intelligence, and scan settings via helm chart values.

## [0.24.0-bb.2] (2026-01-15)
### Changed
- added feature not to wait for defender rollout to complete init job

Velero📜

!7289: velero update to 11.3.2-bb.1

Click to show Changelog

# Changelog Updates

## [11.3.2-bb.1] - 2026-01-23
### Updated
- Added bb-common and replaced static resources with bb-common generated resources
- Updated scripted test to remove unnecessary portions

Helpful Links📜

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

Open issues here
Join our Mattermost channel
Join our Slack
Check out the documentation for guidance on how to get started

Future📜

Don’t see your feature and/or bug fix? Check out our epics for estimates on when you can expect things to drop, and as always, feel free to comment or create issues if you have questions, comments, or concerns.

Release Notes - 3.17.0📜

Deprecations📜

Nexus Repository Manager📜

Upgrade Notices📜

Anchore Enterprise - MR📜

Fluentbit - MR📜

Harbor - MR📜

Mattermost - MR📜

MinIO 7.1.1-bb.9 Upgrade Notice📜

Twistlock - MR📜

Velero - MR📜

Known Issues📜

Upgrades from previous releases📜

Upgrades from previous releases📜

Packages📜

Changes in 3.17.0📜

Big Bang MRs📜

Alloy📜

Anchore Enterprise📜

Argocd📜

Bbctl📜

Elasticsearch Kibana📜

External Secrets Operator📜

Fluentbit📜

Fortify📜

Gitlab📜

Gitlab Runner📜

Grafana📜

Harbor📜

Headlamp📜

Istio Cni📜

Istio Crds📜

Istio Gateway📜

Istiod📜

Kiali📜

Kyverno📜

Kyverno Policies📜

Kyverno Reporter📜

Mattermost📜

Neuvector📜

Sonarqube📜

Thanos📜

Twistlock📜

Velero📜

Helpful Links📜

Future📜

Nexus Repository Manager 📜

Anchore Enterprise - MR 📜

Fluentbit - MR 📜

Harbor - MR 📜

Mattermost - MR 📜

MinIO `7.1.1-bb.9` Upgrade Notice📜

Twistlock - MR 📜

Velero - MR 📜