logo
Big Bang Docs
Overview
Initializing search
    big-bang/bigbang
    • Docs
    • Values
    • Packages
    • Library Charts
    • Release Notes
    • Training
    • Contributing
    • Blog
    big-bang/bigbang
      • Overview
        • Overview
        • Prerequisites
        • Evaluation Quickstart
        • First Customer-managed Deployment
      • FAQ
        • Overview
        • Architecture
        • Deployment
        • Encryption
        • GitOps Engine
        • GitOps Workflow
        • Glossary
        • Kyverno Use By Apps
        • Licensing
        • Logging
        • Package Management
        • Personas
        • Security Model
        • Style
        • Testing
        • Values Guide
        • Overview
          • Overview
          • Airgap Hauler
          • Airgap Registry Migration
          • Airgap
          • Resource-constrained Example
          • Extra Package Deployment
          • SSO Quickstart
        • Overview
        • Ambient Mode
        • Ambient Egress Gateway
        • Values Reference (generated)
        • Default Credentials
        • Gateways
        • Network Policies
        • Postrenderers
        • Trust-manager Bundles
          • Overview
          • GitLab
          • Vault
          • Keycloak
        • Overview
        • Migrating Istio For BB 3.0
        • Migrating Istio Sidecar to Ambient
        • Migrating Package Values For BB 4.0
        • Package Values Migration Script Reference
        • Migrating Kyverno Policies For BB 4.0
        • Overview
          • Overview
          • Renovate
          • Renovate Maintenance
          • Overview
          • Performance
        • Backup and Restore
        • Monitoring
        • Upgrades
        • Overview
          • Overview
          • Anchore
          • Argo CD
          • Authservice
          • External Secrets Operator
          • Fortify
          • GitLab
          • Harbor
          • Headlamp
          • Keycloak
          • Mattermost
          • Metrics Server
          • Mimir
          • MinIO
          • SonarQube
          • Thanos
          • Vault
          • Velero
          • Overview
          • Overview
          • cert-manager
          • Elasticsearch-Kibana
          • Fluent Bit
          • Gateway API
          • Grafana Alloy
          • Istio
          • Istio Egress Gateway
          • Kiali
          • Kyverno
          • Loki
          • Monitoring
          • NeuVector
          • OPA Gatekeeper
          • Renovate
          • Tempo
          • Twistlock
          • Ztunnel
          • Overview
        • Categorization
        • Reference Package
        • Overview
          • Overview and Path Selection
          • 1. Prepare an Application
          • 2A. Deploy with the packages Key
          • 2B. Deploy with Argo CD
        • BigBang Deployment Uninstall Cleanup
        • Pod Usage In Grafana
        • Signed Helm Repositories
        • Overview
          • Overview
          • 0001 Public ADRs
          • 0002 Package Standardization
          • 0003 Single Package Mapping
          • 0004 Alloy Replacing Promtail
          • 0005 Passthrough Chart
          • 0006 Drift Detection
          • 0007 Dev Defaults
          • 0008 Generate Images Metadata from Explicit Container Image References
          • 0009 Confidential
          • 0010 Upstream Values README Documentation
          • 0011 Unified Package Configuration and Metadata
          • 0012 Standard Big Bang Package Architecture
          • 0013 Retain Istio Sidecar Support in Big Bang 4.0
          • 0014 Consume bb-common as a Helm Subchart
          • Overview
            • Overview
            • Onboarding
            • Integration
            • Offboarding
            • Overview
            • Big Bang Merge Request
            • bb-common Subchart Integration
            • Database
            • Documentation
            • Flux
            • Helm Standards
            • Monitoring
            • Ownership
            • Pipeline
            • Policy Enforcement
            • SSO
            • Object Storage
            • Supported
            • Testing
            • Upstream
          • AWS K3d Script
          • Repository Agent Instructions
          • CI Workflow
          • Dev OCI Workflow
          • Develop Package
          • Development Environment
          • K3d Keys for Testing
          • Big Bang Storage Options
          • MDO Partybus Pipelines
          • OSCAL Contributing
          • Postrenderers
          • Release Process
          • Testing a Package Against Big Bang
          • Testing Repo1 CI
          • Testing
          • Testing Shell Scripts
          • Helm Unit Tests
          • Template Self-testing
          • Vendor Distribution Integration
    • Values
      • Overview
          • README
          • Values
          • Contributing
          • Changelog
            • Overview
            • Istio Integration
            • Development and Maintenance
          • README
          • Values
          • Contributing
          • Changelog
            • Anchore
            • Node Affinity & Anti-Affinity with Anchore
            • Changes needed for Big Bang and Ironbank Images
            • Big Bang Anchore 4.1 Release Notes
            • Anchore Engine Helm Chart
            • To upgrade the Anchore Package
            • IstioHardened
            • Anchore Keycloak Integration
            • Anchore Metrics
            • Anchore Enterprise
            • Security
            • Troubleshooting Guide
          • README
          • Values
          • Contributing
          • Changelog
            • ArgoCD
            • Setting Affinity, nodeSelector, and tolerations within ArgoCD Chart
            • Development and Maintenance Guide
            • Kibana / ECK log notes
            • Istio Hardening
            • ArgoCD Keycloak Configuration
            • Prometheus & ArgoCD
            • Disaster Recovery
            • Argo CD
            • Security
            • Testing your Package Branch against Bigbang before Package Merge
            • Troubleshooting Guide
          • README
          • Values
          • Contributing
          • Changelog
            • Overview
            • Ambient Mode
            • Additional Issuers
            • Chains with Domains
            • Network Policies
            • Metrics
            • Backup
            • Troubleshooting
          • README
          • Values
          • Contributing
          • Changelog
            • Overview
            • Installation and Issuers
            • Development and Maintenance
            • Let's Encrypt Testing
          • README
          • Values
          • Contributing
          • Changelog
            • Overview
            • Operator scheduling
            • Istio integration
            • Network policies
            • Development and maintenance
          • README
          • Values
          • Contributing
          • Changelog
            • Documentation
            • Big Bang integration
            • Log access
            • SSO and OIDC
            • Keycloak
            • Network policies
            • Mesh security
            • Scheduling
            • Node prerequisites
            • Snapshots
            • Metrics
            • Troubleshooting
            • Maintenance
          • README
          • Values
          • Contributing
          • Changelog
            • Overview
            • Deployment
            • AWS Integration
            • Vault Integration
          • README
          • Values
          • Contributing
          • Changelog
            • Integration Overview
            • Troubleshooting
            • Scheduling
            • Elasticsearch Indexes
            • Istio
            • Development and Maintenance
          • README
          • Values
          • Contributing
          • Changelog
            • Development & Maintenance
            • IstioHardened
            • Fortify App
            • Fortify Software Security Center
            • Testing your Package Branch against Bigbang before Package Merge
          • README
          • Contributing
          • Changelog
            • Overview
            • Maintenance
          • README
          • Values
          • Contributing
          • Changelog
            • Overview
            • Big Bang changes
            • Operational production settings
            • GitLab 19 upgrade
            • PostgreSQL setup
            • Keycloak SSO
            • Kubernetes resources
            • Node affinity
          • README
          • Values
          • Contributing
          • Changelog
            • Files that require bigbang integration testing
            • Gitlab CI Piplines grafana dashboard migration
            • Dev overrides
            • Gitlab Runner
            • Configuration for rootless podman and buildah
            • Testing your Package Branch against Bigbang before Package Merge
          • README
          • Values
          • Contributing
          • Changelog
            • Development and Maintenance Guide for the Grafana Package
            • Grafana Enterprise
            • Istio and Network Hardening
            • Overview
          • README
          • Values
          • Contributing
          • Changelog
            • Files that require bigbang integration testing
            • Istio Hardening
            • Network Policies
            • Harbor
            • Deploying Harbor in Production
            • Testing your Package Branch against Bigbang before Package Merge
          • README
          • Values
          • Contributing
          • Changelog
            • Notices
            • Headlamp RBAC
            • Headlamp OIDC integration
            • Headlamp
          • README
          • Values
          • Contributing
          • Changelog
            • Developer Maintenance
            • Istio CNI
          • README
          • Values
          • Contributing
          • Changelog
            • Overview
          • README
          • Values
          • Contributing
          • Changelog
            • Development and Maintenance
            • Istio Egress Gateway
          • README
          • Values
          • Contributing
          • Changelog
            • Overview
            • Security
            • Traffic management
            • Troubleshooting
          • README
          • Values
          • Contributing
          • Changelog
            • How to upgrade the Istiod Package chart
            • Istiod
          • README
          • Values
          • Contributing
          • Changelog
            • Keycloak Configuration
            • Keycloak Package Chart Maintenance
            • ISTIO HARDENED
            • Keycloak Big Bang integration
          • README
          • Values
          • Contributing
          • Changelog
            • Affinity
            • Kiali Development Maintenance Guide
            • IstioHardened
            • Default Token Login
            • Kiali
          • README
          • Values
          • Contributing
          • Changelog
            • How to update the Kyverno Package chart
            • Migration from Gatekeeper to Kyverno
            • Policy management
            • Kyverno
          • README
          • Values
          • Contributing
          • Changelog
            • How to update Kyverno Policies
            • Mutating Policies
            • ServiceAccountTokenHardening
            • Kyverno Policy Exception Guide
            • Kyverno Policies vs. Gatekeeper Policies in Big Bang
            • Kyverno Policy Integration Tests
            • Policy Naming Convention
            • Kyverno Policies
            • Kyverno Policy Overview
            • Testing Kyverno Policies
          • README
          • Values
          • Contributing
          • Changelog
            • How to upgrade the Kyverno Policy Reporter Package chart
            • Kyverno Monitoring
            • Introduction to Kyverno Reporting
          • README
          • Values
          • Contributing
          • Changelog
            • Overview
            • Production
            • Grafana Enterprise Logs
            • Migrations
            • Log Entry Deletion
            • Istio Hardening
          • README
          • Values
          • Contributing
          • Changelog
            • Overview
            • Keycloak SSO
            • Scheduling
          • README
          • Values
          • Contributing
          • Changelog
            • Node Affinity & Anti-Affinity with Mattermost Operator
            • How to Upgrade this Package
            • Istio Hardened
            • Big Bang 4.0 bb-common subchart migration
            • Developer guide
            • Mattermost Operator
          • README
          • Values
          • Contributing
          • Changelog
            • BBCHANGES
            • Metrics Service Development and Maintenance Guide
            • Metrics Server
          • README
          • Values
          • Contributing
          • Changelog
            • Mimir 6.x Upgrade Guide
            • Mimir Development and Maintenance Guide
            • Grafana Mimir
          • README
          • Values
          • Contributing
          • Changelog
            • MinIO tenant
            • Affinity
            • Backups and Disaster Recovery
            • Metrics
            • Troubleshooting
            • Logging
            • Keycloak
          • README
          • Values
          • Contributing
          • Changelog
            • How to Upgrade Minio Operator Package
            • Affinity
            • Backups and Disaster Recovery
            • Logging
            • Keycloak
            • MinIO Operator
            • Metrics
            • Troubleshooting
          • README
          • Values
          • Contributing
          • Changelog
            • Overview
            • Alertmanager
            • Prometheus Operator
            • Prometheus Security
            • Prometheus Best Practices
            • Backup and Recovery
            • Istio mTLS Metrics
            • SNMP Exporter
            • Development and Maintenance
          • README
          • Values
          • Contributing
          • Changelog
            • Overview
            • OIDC configuration
            • Prometheus metrics
          • README
          • Values
          • Contributing
          • Changelog
            • To upgrade Gatekeeper package
            • Affinity
            • Constraint Annotations
            • OPA Constraint Framework
            • Constraint Templates
            • OPA Gatekeeper Violation Exceptions
            • Gatekeeper in Big Bang
            • Policy Library
            • Rego
            • Security with OPA Gatekeeper
            • OPA Gatekeeper Testing
          • README
          • Values
          • Contributing
          • Changelog
            • How to upgrade to Prometheus-Operator-CRDs chart
            • Prometheus Operator CRDs
          • README
          • Values
          • Contributing
          • Changelog
            • Changes for Big Bang
            • Upgrading the Renovate Package
            • Istio Hardening
            • Network Policies
            • Renovate
          • README
          • Values
          • Contributing
          • Changelog
            • Overview
            • SAML SSO
            • Prometheus
            • Network Policies
            • Affinity
            • ECK
            • Istio Hardening
            • Party Bus
            • Test package against Big Bang
          • README
          • Values
          • Contributing
          • Changelog
            • Overview
            • Production
            • Istio Hardening
          • README
          • Values
          • Contributing
          • Changelog
            • Overview
          • README
          • Values
          • Contributing
          • Changelog
            • Overview
            • Initialization
            • Defender-only mode
            • OIDC SSO
            • SAML and Keycloak
            • Monitoring
            • Troubleshooting
            • Istio hardening
            • Backup
            • Container models
            • Elastic integration
            • Workload App and API Security
            • k3d
          • README
          • Values
          • Contributing
          • Changelog
            • How to upgrade the Vault Package chart
            • IstioHardened
            • Vault With Prometheus
            • Vault
            • BigBang KMS Auto Unseal
            • Injecting Secrets into Kubernetes Pods via Vault Agent Containers
            • Vault Keycloak integration.
            • Monitoring in Vault
            • networkPolicies
            • Vault
            • Vault configuration for production high availability
          • README
          • Values
          • Contributing
          • Changelog
            • Node Affinity & Anti-Affinity with Velero
            • Changes needed for Iron Bank Images and Big Bang
            • Big Bang Velero Package Maintenance Guide
            • Velero
              • Background
              • clusterRole
              • clusterRoleBinding
              • Role
              • roleBinding
              • Background
              • Full cluster backup and restore
              • Label Based backup and restore
              • Namespace Backup and restore
              • Scheduled Backup
              • Troubleshooting and additional links
          • README
          • Values
          • Contributing
          • Changelog
            • How to upgrade the Wrapper Package chart
            • IstioHardened
            • Custom Helm Chart Deployment and the “Package Wrapper”
            • Overview
          • README
          • Values
          • Contributing
          • Changelog
            • Files that require bigbang integration testing
            • IstioHardened
            • Keycloak dev
            • Ztunnel
      • Overview
        • README
        • Contributing
        • Changelog
          • Overview
          • Network Policies
          • Self Testing
          • Routes
          • Authorization Policies
          • Extra Objects
          • Resource Graph
          • Migration Guide
          • Integration Guide
          • Istio Resources
        • README
        • Contributing
        • Changelog
          • BigBang Package README Template
          • BB Test Templates
          • Running Cypress Testing
          • Wait Job Templates
    • Release Notes
        • Home
          • Overview
          • What is Platform One?
          • Security in Platform One
          • Layered Architecture
          • Security Tools
          • Summary
          • Overview
          • New Platform One User Guide
          • Verify you can pull from Repo1 and IronBank
          • How to Set up AWS to use with Big Bang
          • Summary
          • Overview
          • Software Installation and Verification
          • Big Bang Customer Deployment
          • Summary
          • Overview
          • Package Development
          • Pipeline Overview
            • OCI Artifacts Overview
            • Dev Workflow with OCI
          • Summary
          • Overview
          • Bad Pods Lab
          • Encryption
          • Flux Lab: Install Flux to a Cluster
          • Helm Lab
          • Expose a mock mission app using istio ingress gateway Lab
          • Kubernetes Lab
          • Kustomize Lab
          • VI Basics
          • Summary
          • Overview
          • The Basics
          • Package Managers
          • Operators
          • GitOps w/ Flux
          • Service Mesh w/ Istio
          • Metrics w/ Prometheus
          • Secrets w/ SOPS
          • Consolidated Logging
          • Summary
          • Index
            • Welcome!
            • Getting Started
            • Environment validation
            • Istio Architecture
            • The application Lab
            • Ingress
            • Ingress Lab
            • Observability
            • Observability Lab
            • Security
            • 09 2 security
            • 09 3 security
            • Security Lab
            • Traffic Shifting
            • Traffic Shifting Lab
            • Sidecar resource
            • Enforcing egress traffic using Istio’s authorization policies
            • Install Istio
            • Deeper into sidecar injection
            • Congratulations
            • Observability - Telemetry and Logs
            • Creating a deployment and using a Gateway to expose it
            • Enable TLS
            • Envoy Demo
            • Envoy Filters
            • Access control
            • Advanced traffic shifting
            • Failure injection
            • Simple traffic shifting
          • Further Reading
          • User Guides
        • Training Feedback
    • Contributing
      • Overview
        • 2026
        • 2025
        • 2024
        • 2023
    package wrapper 0.4.15

    Overview

    see DEVELOPMENT_MAINTENANCE

    2024-01-18 by Michael Martin
    Made with Material for MkDocs
    About Contact Privacy
    Platform One