Skip to content

Big Bang Common Library Integration📜

The Big Bang Common Library (bb-common) provides standardized Helm templates for integrating packages with Big Bang’s security and networking features.

Prerequisites📜

What bb-common Provides📜

  • Istio Service Mesh - Virtual services, sidecars, gateways
  • Network Policies - Kubernetes network traffic control
  • Authorization Policies - Service-to-service access control
  • REGISTRY_ONLY mode and default-deny policies and other good defaults

Integration Steps📜

1. Add bb-common Dependency📜

Add to your Chart.yaml:

dependencies:
  - name: bb-common
    repository: oci://registry1.dso.mil/bigbang
    version: "x.x.x"

2. Service Mesh Integration📜

See: bb-common Istio Documentation and Routes Documentation

  • Enable Istio sidecar injection on your namespace, not needed if deploying using Big Bang umbrella, i.e. packages
  • Use {{- include "bb-common.istio.virtualService" . }} for virtual services
  • Configure Istio values following bb-common patterns

3. Network Policies📜

See: bb-common Network Policies Documentation

  • Use {{- include "bb-common.networkPolicy" . }} in templates
  • Configure networkPolicies values section
  • Add custom policies via ingress and egress as needed

4. Authorization Policies📜

See: bb-common Authorization Policies Documentation

  • Use {{- include "bb-common.authorizationPolicy" . }} for authorization policies
  • Configure istio.hardened values section
  • Add policies via istio.authorizationPolicies.generateFromNetpol, and prefix the netpols with example-service-account@ to require service account authentication

Additional Resources📜