Changes for Big Bang¶
bb-common Integration¶
This package uses bb-common to generate:
- Kubernetes NetworkPolicies (ingress deny-all, egress deny-all + DNS, in-namespace, HTTPS egress)
- Istio AuthorizationPolicies (generated from NetworkPolicy config when enabled)
- Istio PeerAuthentication (mTLS mode)
- Istio Sidecar (outbound traffic policy)
bb-common is consumed as a subchart. chart/values.yaml configures bb-common.networkPolicies; Istio settings can be supplied under bb-common.istio in an override, as shown in docs/renovate-dev-override.yaml. See the bb-common documentation for the full configuration reference.