Deploy Holocron with Big Bang📜
This is a guide for deploying Holocron as part of Big Bang.
BigBang cluster📜
Clone the latest version of Big Bang:
git clone https://repo1.dso.mil/big-bang/bigbang.git
Change directory into bigbang and run k3d script to deploy containers:
cd bigbang
./docs/assets/scripts/developer/k3d-dev.sh
Note: The Deployment Process and Pre-Requisites will vary depending on the deployment scenario. The Quick Start Demo Deployment for example, allows some steps to be skipped due to a mixture of automation and generically reusable demonstration configuration that satisfies pre-requisites. The following is a general overview of the process, reference the deployment guides for more detail.
Holocron📜
To deploy Holocron, add the following sample override to the values
section of the Holocron addon configuration (sample overrides for testing):
kyverno:
enabled: true
kyvernoPolicies:
enabled: true
kyvernoReporter:
enabled: true
flux:
interval: 1m
rollback:
cleanupOnFail: false
domain: dev.bigbang.mil
addons:
holocron:
enabled: true
sourceType: "git"
git:
repo: "https://repo1.dso.mil/big-bang/product/packages/holocron.git"
tag: null
branch: "main"
path: "./chart"
values:
istio:
enabled: true
hardened:
enabled: true
customServiceEntries:
- name: "allow-google"
enabled: true
spec:
exportTo:
- "."
hosts:
- google.com
location: MESH_EXTERNAL
ports:
- number: 443
protocol: TLS
name: https
resolution: DNS
Post Deployment Setup📜
Once you have successfully deployed, you will need to assign roles to users. Any user in the admin group will automatically have full rights. They will need to create the organization(s) used and assign users to adminstrate them. For a user to be available, they must have accessed your Holocron instance at least once. More details on setting up Organizations/Value Streams/Teams can be found here.
GitLab📜
Sample Gitlab overrides
istio:
enabled: true
istioOperator:
enabled: true
addons:
gitlab:
enabled: true
values:
gitlab:
webservice:
helmTests:
enabled: false
If deploying with GitLab, Holocron will attempt to collect metrics from it, but you will need to provide it access. Create an access token for Holocron to utilize. Click here for instructions. It needs read access to all groups and repositories that you want it to collect from. We recommend creating an auditor for this purpose. Provide this access token to .Values.addons.holocron.collectorAuth.gitlabToken
.
Post Deployment Value update to Holocron📜
GitLab Deployment with Holocron📜
- Access Token Creation:
- Holocron requires access to GitLab to collect metrics. To facilitate this, you must create a personal access token.
-
Follow the instructions provided here to create the token.
-
Permissions:
- Ensure the personal access token has read access to all groups and repositories from which Holocron will collect metrics.
-
It is recommended to create an auditor account specifically for this purpose to avoid any conflicts or security issues.
-
Configuration:
- Once the personal access token is created, provide this token to Holocron by setting it in
.Values.addons.holocron.collectorAuth.gitlabToken
.
Sample post deployment override for Holocron:
kyverno:
enabled: true
kyvernoPolicies:
enabled: true
kyvernoReporter:
enabled: true
flux:
interval: 1m
rollback:
cleanupOnFail: false
domain: dev.bigbang.mil
addons:
holocron:
enabled: true
sourceType: "git"
git:
repo: "https://repo1.dso.mil/big-bang/product/packages/holocron.git"
tag: null
branch: "main" # deploy from main branch
path: "./chart"
collectorAuth: # Post Deployment Override
gitlabToken: "glpat-2-xq5M5zHijxBXwTy-fA" # Post Deployment Override
values:
istio:
enabled: true
hardened:
enabled: true
customServiceEntries:
- name: "allow-google"
enabled: true
spec:
exportTo:
- "."
hosts:
- google.com
location: MESH_EXTERNAL
ports:
- number: 443
protocol: TLS
name: https
resolution: DNS
Holocron will deploy collectors for Build (pipelines), SCM (commits, branches, MRs), and Workflow (issues). If any of these are not desired, provide an empty array to .Values.addons.holocron.values.<collectorType>.instances
. For example, if you do not want to collect issues from GitLab, set .Values.addons.holocron.values.collectorGitlabWorkflow.instances
to []
.
Verify that the gitlab collector is running and collecting stats by checking the logs of the collector pod. You should see “4XX” errors in the logs if it is not collecting.
SonarQube📜
if deploying with SonarQube, Holocron will attempt to collect metrics from it, but you will need to provide it access. Create an access token for Holocron to utilize. It needs read access to all projects that you want it to collect from. Provide this access token to .Values.addons.holocron.collectorAuth.sonarToken
.
If this collection is not desired, set .Values.addons.holocron.values.collectorSonarQubeProjectAnalysis
to []
.
Jira📜
If deploying with Jira, Holocron will need to be told about it in order to collect metrics from it. If desired, set .Values.addons.holocron.jira.enabled
to true
and .Values.addons.holocron.jira.service.name
to the kubernetes service name (including port). If network policies are enabled, you must also set a key value pair under .Values.addons.holocron.jira.service.label
. This should be set to a kubernetes label used by the Jira webservice pod.
Upgrading to a new version📜
The below details the steps required to update to a new version of the Argocd package.
- Review the holocron chart CHANGELOG for the update you are going to, as well as any versions skipped over between the last BB release and this one. Note any breaking changes and new features.
-
Should you have further questions about changelog items, you may want to dig into the per-component repositories for Holocron’s API, dashboard, and collectors.
-
Based on the changelog review from earlier, make any changes required to resolve breaking changes and reconcile the Big Bang modifications.
-
Modify the
version
inChart.yaml
. Also modify theappVersion
and thebigbang.dev/applicationVersions
to the new version of Holocron. -
Update
CHANGELOG.md
adding an entry for the new version and noting all changes (at minimum should includeUpdated component-name to x.x.x
). -
If there are any sub chart dependencies that need to be updated, run
helm dep update ./chart
-
Generate the
README.md
updates by following the guide in gluon. -
Open an MR in “Draft” status and validate that CI passes. This will perform a number of smoke tests against the package, but it is good to manually deploy to test some things that CI doesn’t. Follow the steps below for manual testing.
-
Once all manual testing is complete take your MR out of “Draft” status and add the review label.