Packages

Columns

1. Monitoring: Metrics scraping with Prometheus and dedicated Grafana Dashboards/PrometheusRule alerts as appropriate
2. Tracing: Tempo connections for tracing application traffic
3. Network Policies: Network Policies for restricting network connectivity
4. mTLS: Istio Injected, with either a Strict or Permissive Mutual TLS Mode

Values

1. N/A: Feature doesn't exist
2. No: Feature exists, Not Implemented in Big Bang
3. Yes: Feature exists, Implemented in Big Bang

Core

Core packages are included in the Big Bang umbrella chart and configured outside the addons key in values.yaml.

Package	Status	Monitoring	Tracing	Network Policies	mTLS
Istio CRDs		Yes	No	Yes	Yes
Istio Daemon		Yes	No	Yes	Yes
Istio Gateway		Yes	No	Yes	Yes
Istio CNI		N/A	N/A	N/A	N/A
Gateway API		N/A	N/A	N/A	N/A
ztunnel		N/A	N/A	Yes	N/A
Kiali		No	Yes	Yes	Yes (STRICT)
Prometheus Operator CRDs		N/A	N/A	N/A	N/A
Monitoring		Yes	Yes	Yes	Yes (STRICT)
Grafana		Yes	Yes	Yes	Yes (STRICT)
NeuVector		Yes	No	Yes	Yes (STRICT)
Twistlock		Yes	Yes	Yes	Yes (STRICT)
ECK Operator		No	Yes	Yes	Yes (STRICT)
Elasticsearch Kibana		Yes	Yes	Yes	Yes (STRICT)
Fluentbit		Yes	Yes	Yes	Yes (STRICT)
OPA Gatekeeper		No	N/A	Yes	N/A
Kyverno		Yes	N/A	Yes	N/A
Kyverno Policies		N/A	N/A	Yes *	N/A
Kyverno Reporter		Yes	No	Yes	Yes (STRICT)
Alloy		Yes	Yes	Yes	Yes (STRICT)
Loki		Yes	Yes	Yes	Yes (STRICT)
Tempo		Yes	Yes	Yes	Yes (STRICT)
Renovate		No	No	Yes	Yes (STRICT)
bbctl		No	No	No	N/A

* inherited from Kyverno when installed in the same namespace.

Supported Add-Ons

Security

Package	Status	Monitoring	Tracing	Network Policies	mTLS
Keycloak		Yes	Yes	Yes	Yes (STRICT)
Anchore Enterprise		Yes	Yes	Yes	Yes (STRICT)
Authservice		Yes	No	Yes	Yes (STRICT)
Vault		Yes	Yes	Yes	Yes (STRICT)
External Secrets Operator		Yes	No	Yes	Yes (STRICT)

Development Tools

Package	Status	Monitoring	Tracing	Network Policies	mTLS
Gitlab		Yes	Yes	Yes	Yes (STRICT)
Gitlab Runner		Yes	Yes *	Yes *	Yes (STRICT) *
Sonarqube		N/A	Yes	Yes	Yes (STRICT)
Harbor		Yes	Yes	Yes	Yes (STRICT)
Fortify		No	Yes	Yes	Yes (STRICT)

* inherited from Gitlab when installed in the same namespace.

Collaboration Tools

Package	Status	Monitoring	Tracing	Network Policies	mTLS
Mattermost		Yes *	Yes	Yes	Yes (STRICT)
Mattermost Operator		No	No	Yes	Yes (STRICT)

* Monitoring/metrics are only available for enterprise (licensed) deployments of Mattermost

Application Utilities

Package	Status	Monitoring	Tracing	Network Policies	mTLS
MinIO		Yes	Yes	Yes	Yes (STRICT)
MinIO Operator		N/A	Yes	Yes	Yes (STRICT)

Cluster Utilities

Package	Status	Monitoring	Tracing	Network Policies	mTLS
Argocd		Yes	Yes	Yes	Yes (STRICT)
Velero		Yes	Yes	Yes	Yes (STRICT)
Metrics Server		Yes	No	Yes	Yes (STRICT)
Thanos		Yes	No	Yes	Yes (STRICT)
Mimir		No	No	Yes	Yes (STRICT)
Headlamp		Yes	Yes	Yes	Yes (STRICT)

Supporting Repositories

The following active repositories are hosted in the product/packages subgroup but provide shared package libraries and tooling rather than standalone deployable packages.

Repository	Status	Purpose
bb-common		Common Helm library chart for Big Bang packages
Gluon		Shared automation and tooling for Big Bang packages
wrapper		Wrapper chart for deploying arbitrary big bang packages with big bang capabilities

Maintained Packages

Maintained packages are owned and updated by the Big Bang team and tested in their package pipelines, but are not included in the Big Bang umbrella chart. They can be deployed alongside umbrella packages with the packages key in values.yaml. Support is limited to the package running in isolation and does not cover its interactions with other packages, networking issues, or other emergent integration issues.

Package	Status	Monitoring	Tracing	Network Policies	mTLS
cert-manager		Yes	No	Yes	Yes (STRICT)
cert-manager-approver-policy		Yes	No	Yes	Yes (STRICT)
cert-manager-trust-manager		Yes	No	Yes	Yes (STRICT)
Confluence		Yes	Yes	Yes	Yes (STRICT)
Fluentd		Yes	Yes	Yes	Yes (STRICT)
Garage		Yes	No	Yes	Yes (STRICT)
GitLab CI Pipelines Exporter		Yes	No	Yes	Yes (STRICT)
Jira		Yes	No	Yes	No
Karpenter		Yes	No	No	No
Nexus Repository High Availability		Yes	No	Yes	Yes (STRICT)
Podinfo		Yes	No	Yes	Yes (STRICT)
Redis		Yes	Yes	Yes	Yes (STRICT)

Community Packages

Community packages are not maintained by Platform One engineering teams. They are owned and maintained by members of the community, and Platform One does not provide updates or support for them. Community repositories that do not receive commits or updates for one year will be archived.

Package	Status	Monitoring	Tracing	Network Policies	mTLS
coder-provisioner		Yes	No	No	No
coder-v2		No	No	No	No
Crossplane		No	No	Yes	Yes (STRICT)
Jaeger		Yes	Yes	Yes	Yes (STRICT)
JFrog Platform		No	No	No	No
Nexus IQ		No	No	No	No
Parabol		Yes	Yes	No	No
RapidFort		No	No	Yes	Yes (STRICT)
SD Elements		No	No	Yes	No