Skip to content

DEVELOPMENT MAINTENANCE

Steps for KPT update📜

  1. Navigate to the upstream chart repo and folder here and find the tag that corresponds with the new chart version for this update
  2. Checkout the renovate/ironbank branch
  3. From the root of the repo run kpt pkg update chart@<tag> --strategy alpha-git-patch, where tag is found in step 1, checkout the chart/Kptfile ref for tag naming
  4. Modify the version in Chart.yaml and append -bb.0 to the chart version from upstream. Update dependencies to latest BB gluon library version using: helm dependency update ./chart
  5. Update CHANGELOG.md adding an entry for the new version and noting all changes (at minimum should include Updated <chart or dependency> to x.x.x).
  6. Generate the README.md updates by following the guide in gluon.
  7. Push up your changes, add upgrade notices if applicable, validate that CI passes. If there are any failures, follow the information in the pipeline to make the necessary updates. Add the debug label to the MR for more detailed information. Reach out to the CODEOWNERS if needed.
  8. Perform the steps below for manual testing

Modifications made to upstream📜

List of changes per file to be aware of for how Big Bang differs from upstream

/chart/Chart.yaml📜

  • Added bigbang.dev/applicationVersions annotation with the metrics server version
  • Modified Version to include -bb.x suffix

/chart/templates/bigbang/networkpolicies/*📜

  • Network Policies added to establish allowed communication in/out of namespace
  • allow-dns-egress
  • allow-svc-ingress
  • default-deny-all
  • egress-istiod
  • ingress-monitoring
  • istio-allow
  • kube-api-allow
  • namespace-allow

/chart/templates/bigbang/authorizationpolicies/*📜

  • Authorization Policies added to establish allowed layer 7 communication to the metrics-server API.
  • allow-metrics-server
  • allow-nothing-policy
  • template
  • tempo-authz-policy

chart/values.yaml📜

  • Add common values for Big Bang packages for domain, networkpolicies and Istio
  • Increase replicas to 2 for failover
  • Add affinity rules to schedule pods to separate nodes
  • Addition of serviceAccount.automountServiceAccountToken to allow API token automounting behavior to be configurable

chart/templates/serviceaccount.yaml📜

  • Addition of serviceAccount.automountServiceAccountToken to allow API token automounting behavior to be configurable

chart/templates/deployment.yaml📜

  • Overrides automountServiceAccountToken hardening at the Pod spec-level due to app requirements

chart/Kptfile📜

  • Tracks current upstream chart

Manual Testing📜

NOTE: For these testing steps it is good to do them on both a clean install and an upgrade. For clean install, point metrics-server to your branch. For an upgrade do an install with metrics-server pointing to the latest tag, then perform a helm upgrade with metrics-server pointing to your branch.

  • Deployment of Big Bang with Istio, Monitoring, Network Policies, Authorization Policies, and metrics server enabled will allow the use of kubectl top nodes and kubectl top pods -A to report utilization.

overrides/metrics-server.yaml 

addons:
  metricsServer:
    enabled: true
    sourceType: "git"
    git:
      tag: null
      branch: "renovate/ironbank"

When in doubt with any testing or upgrade steps, reach out to the CODEOWNERS for assistance.

Last update: 2024-02-14 by Blane Staskiewicz