Skip to content

Changes for Big Bang

bb-common Integration

This package uses bb-common to generate:

  • Kubernetes NetworkPolicies (ingress deny-all, egress deny-all + DNS, in-namespace, HTTPS egress)
  • Istio AuthorizationPolicies (generated from NetworkPolicy config when enabled)
  • Istio PeerAuthentication (mTLS mode)
  • Istio Sidecar (outbound traffic policy)

bb-common is consumed as a subchart. chart/values.yaml configures bb-common.networkPolicies; Istio settings can be supplied under bb-common.istio in an override, as shown in docs/renovate-dev-override.yaml. See the bb-common documentation for the full configuration reference.