logo
Big Bang Docs
Overview
Initializing search
    big-bang/bigbang
    • Docs
    • Values
    • Packages
    • Library Charts
    • Release Notes
    • Training
    • Contributing
    • Blog
    big-bang/bigbang
      • Overview
        • Overview
        • Prerequisites
        • Evaluation Quickstart
        • First Customer-managed Deployment
      • FAQ
        • Overview
        • Architecture
        • Deployment
        • Encryption
        • GitOps Engine
        • GitOps Workflow
        • Glossary
        • Kyverno Use By Apps
        • Licensing
        • Logging
        • Package Management
        • Personas
        • Security Model
        • Style
        • Testing
        • Values Guide
        • Overview
          • Overview
          • Airgap
          • Resource-constrained Example
          • Extra Package Deployment
          • SSO Quickstart
        • Overview
        • Ambient Mode
        • Values Reference (generated)
        • Default Credentials
        • Gateways
        • Network Policies
        • Postrenderers
          • Overview
          • GitLab
          • Vault
          • Keycloak
        • Overview
        • Migrating Istio For BB 3.0
        • Migrating Istio Sidecar to Ambient
        • Migrating Package Values For BB 4.0
        • Overview
          • Overview
          • Renovate
          • Overview
          • Installation
          • Networking
          • Packages
          • Performance
          • Upgrades
        • Backup and Restore
        • Monitoring
        • Upgrades
        • Overview
          • Overview
          • Anchore
          • Argo CD
          • Authservice
          • External Secrets Operator
          • Fortify
          • GitLab
          • Harbor
          • Headlamp
          • Keycloak
          • Mattermost
          • Metrics Server
          • Mimir
          • MinIO
          • SonarQube
          • Thanos
          • Vault
          • Velero
          • Overview
          • Overview
          • cert-manager
          • Elasticsearch-Kibana
          • Fluent Bit
          • Gateway API
          • Grafana Alloy
          • Istio
          • Kiali
          • Kyverno
          • Loki
          • Monitoring
          • NeuVector
          • OPA Gatekeeper
          • Renovate
          • Tempo
          • Twistlock
          • Ztunnel
          • Overview
        • Categorization
        • Reference Package
        • Overview
          • Overview and Path Selection
          • 1. Prepare an Application
          • 2A. Deploy with the packages Key
          • 2B. Deploy with Argo CD
        • BigBang Deployment Uninstall Cleanup
        • Pod Usage In Grafana
        • Signed Helm Repositories
        • Overview
          • Overview
          • 0001 Public ADRs
          • 0002 Package Standardization
          • 0003 Single Package Mapping
          • 0004 Alloy Replacing Promtail
          • 0005 Passthrough Chart
          • 0006 Drift Detection
          • 0007 Dev Defaults
          • 0008 Generate Images Metadata from Explicit Container Image References
          • 0009 Confidential
          • 0010 Upstream Values README Documentation
          • 0011 Unified Package Configuration and Metadata
          • 0012 Standard Big Bang Package Architecture
          • Overview
            • Overview
            • Onboarding
            • Integration
            • Offboarding
            • Overview
            • Big Bang Merge Request
            • Big Bang Common Library
            • Database
            • Documentation
            • Flux
            • Helm Standards
            • Monitoring
            • Ownership
            • Pipeline
            • Policy Enforcement
            • SSO
            • Object Storage
            • Supported
            • Testing
            • Upstream
          • AWS K3d Script
          • Repository Agent Instructions
          • CI Workflow
          • Dev OCI Workflow
          • Develop Package
          • Development Environment
          • K3d Keys for Testing
          • Big Bang Storage Options
          • MDO Partybus Pipelines
          • OSCAL Contributing
          • Postrenderers
          • Release Process
          • Renovate Maintenance
          • Testing a Package Against Big Bang
          • Testing Repo1 CI
          • Testing
          • Testing Shell Scripts
          • Helm Unit Tests
          • Template Self-testing
          • Vendor Distribution Integration
    • Values
      • Overview
          • README
          • Values
          • Contributing
          • Changelog
            • Alloy Development and Maintenance Guide
            • Istio Configuration (bb-common)
            • Alloy
          • README
          • Values
          • Contributing
          • Changelog
            • Anchore
            • Node Affinity & Anti-Affinity with Anchore
            • Changes needed for Big Bang and Ironbank Images
            • Big Bang Anchore 4.1 Release Notes
            • Anchore Engine Helm Chart
            • To upgrade the Anchore Package
            • IstioHardened
            • Anchore Keycloak Integration
            • Anchore Metrics
            • Anchore Enterprise
            • Security
            • Troubleshooting Guide
          • README
          • Values
          • Contributing
          • Changelog
            • ArgoCD
            • Setting Affinity, nodeSelector, and tolerations within ArgoCD Chart
            • Development and Maintenance Guide
            • Kibana / ECK log notes
            • Istio Hardening
            • ArgoCD Keycloak Configuration
            • Prometheus & ArgoCD
            • Disaster Recovery
            • Argo CD
            • Security
            • Testing your Package Branch against Bigbang before Package Merge
            • Troubleshooting Guide
          • README
          • Values
          • Contributing
          • Changelog
            • Node Affinity & Anti-Affinity with Authservice
            • Authservice Ambient Mode
            • How to upgrade the Authservice Package chart
            • IstioHardened
            • Backups and Disaster Recovery
            • Chains with Domains
            • Logging
            • Additional Issuers
            • Keycloak
            • networkPolicies
            • Authservice
            • Metrics
            • Troubleshooting
          • README
          • Values
          • Contributing
          • Changelog
            • cert-manager Development and Maintenance Guide
            • Installation Notes
            • Let’s Encrypt Test Plan
            • cert-manager Overview
          • README
          • Values
          • Contributing
          • Changelog
            • Node Affinity & Anti-Affinity with ECK Operator
            • How to upgrade the ECK-Operator chart
            • ECK Operator
            • Istio Hardened
            • networkPolicies
          • README
          • Values
          • Contributing
          • Changelog
            • Node Affinity & Anti-Affinity with Elastic/Kibana
            • How to upgrade the Elasticsearch-Kibana chart
            • Snapshots and Data Resiliency
            • Logs from the ECK Stack
            • Istio Hardened
            • Elastic / Kibana Keycloak Integration
            • Network Policies
            • Overview of the Elastic Stack
            • Elastic Exporter Metrics
            • Sso oidc
            • Sysctls Configuration
            • Troubleshooting
          • README
          • Values
          • Contributing
          • Changelog
            • Identity Authentication Method
            • Deploying External Secrets Operator
            • Upgrading this Package
            • Deploy Standardized ESO ClusterSecretStore for Hashicorp Vault
            • External Secrets Operator
          • README
          • Values
          • Contributing
          • Changelog
            • Node Affinity & Anti-Affinity with Fluentbit
            • Fluentbit Development and Maintenance Guide
            • Istio Configuration (bb-common)
            • Change the number of generated Elasticsearch indexes
            • Troubleshooting
            • Fluent Bit
          • README
          • Values
          • Contributing
          • Changelog
            • Development & Maintenance
            • IstioHardened
            • Fortify App
            • Fortify SSC
            • Testing your Package Branch against Bigbang before Package Merge
          • README
          • Contributing
          • Changelog
            • How to maintain the Gateway API chart
            • Gateway API
          • README
          • Values
          • Contributing
          • Changelog
            • Node Affinity & Anti-Affinity with Gitlab
            • Big Bang changes
            • GitLab package development and maintenance
            • Elastic
            • Istio Hardening
            • PostgreSQL setup
            • GitLab 19 upgrade: Big Bang-specific notes
            • Kubernetes resource configuration
            • Deploying GitLab with a Dev Instance of Keycloak
            • Keycloak
            • Operational settings for production environments
            • GitLab
            • Testing your Package Branch against Bigbang before Package Merge
          • README
          • Values
          • Contributing
          • Changelog
            • Files that require bigbang integration testing
            • Gitlab CI Piplines grafana dashboard migration
            • Dev overrides
            • Gitlab Runner
            • Configuration for rootless podman and buildah
            • Testing your Package Branch against Bigbang before Package Merge
          • README
          • Values
          • Contributing
          • Changelog
            • Development and Maintenance Guide for the Grafana Package
            • Grafana Enterprise
            • Istio and Network Hardening
            • Overview
          • README
          • Values
          • Contributing
          • Changelog
            • Files that require bigbang integration testing
            • Istio Hardening
            • Network Policies
            • Harbor
            • Deploying Harbor in Production
            • Testing your Package Branch against Bigbang before Package Merge
          • README
          • Values
          • Contributing
          • Changelog
            • Notices
            • RBAC Configuration for Headlamp
            • Keycloak OIDC Integration for Headlamp
            • Headlamp
          • README
          • Values
          • Contributing
          • Changelog
            • Developer Maintenance
            • Overview
          • README
          • Values
          • Contributing
          • Changelog
            • Files that require bigbang integration testing
            • IstioHardened
            • Keycloak dev
            • Overview
          • README
          • Values
          • Contributing
          • Changelog
            • Developer Maintenance
            • TBD
            • TBD
            • TBD
            • TBD
          • README
          • Values
          • Contributing
          • Changelog
            • How to upgrade the Istiod Package chart
            • Overview
          • README
          • Values
          • Contributing
          • Changelog
            • Keycloak Configuration
            • Keycloak Package Chart Maintenance
            • ISTIO HARDENED
            • Keycloak
          • README
          • Values
          • Contributing
          • Changelog
            • Affinity
            • Kiali Development Maintenance Guide
            • IstioHardened
            • Default Token Login
            • Kiali
          • README
          • Values
          • Contributing
          • Changelog
            • How to update the Kyverno Package chart
            • Migration from Gatekeeper to Kyverno
            • Policy management
            • Kyverno
          • README
          • Values
          • Contributing
          • Changelog
            • How to update Kyverno Policies
            • Mutating Policies
            • ServiceAccountTokenHardening
            • Kyverno Policy Exception Guide
            • Kyverno Policies vs. Gatekeeper Policies in Big Bang
            • Kyverno Policy Integration Tests
            • Policy Naming Convention
            • Kyverno Policies
            • Kyverno Policy Overview
            • Testing Kyverno Policies
          • README
          • Values
          • Contributing
          • Changelog
            • How to upgrade the Kyverno Policy Reporter Package chart
            • Kyverno Monitoring
            • Introduction to Kyverno Reporting
          • README
          • Values
          • Contributing
          • Changelog
            • Loki Development and Maintenance Guide
            • Istio Hardened
            • Grafana Enterprise Logs (GEL) with BigBang
            • Log entry deletion
            • Motivations for Restructure
            • Loki
            • Loki in Production
            • v3.0.0 Upgrade Details
          • README
          • Values
          • Contributing
          • Changelog
            • Node Affinity & Anti-Affinity with Mattermost
            • How to upgrade the Mattermost Package chart
            • Keycloak SSO Mattermost Config
            • Mattermost
          • README
          • Values
          • Contributing
          • Changelog
            • Node Affinity & Anti-Affinity with Mattermost Operator
            • How to Upgrade this Package
            • Istio Hardened
            • Developer guide
            • Mattermost Operator
          • README
          • Values
          • Contributing
          • Changelog
            • BBCHANGES
            • Metrics Service Development and Maintenance Guide
            • Metric Server
          • README
          • Values
          • Contributing
          • Changelog
            • Mimir 6.x Upgrade Guide
            • Mimir Development and Maintenance Guide
            • Grafana Mimir
          • README
          • Values
          • Contributing
          • Changelog
            • How to upgrade the Minio Package chart
            • Affinity
            • Backups and Disaster Recovery
            • Logging
            • Keycloak
            • MinIO
            • Metrics
            • Troubleshooting
          • README
          • Values
          • Contributing
          • Changelog
            • How to Upgrade Minio Operator Package
            • Affinity
            • Backups and Disaster Recovery
            • Logging
            • Keycloak
            • MinIO Operator
            • Metrics
            • Troubleshooting
          • README
          • Values
          • Contributing
          • Changelog
            • Node Affinity & Anti-Affinity with Monitoring
            • Development and Maintenance Guide for the Monitoring package
            • ELASTIC
            • Monitoring Specific Keycloak Configuration
            • Alertmanager
            • Grafana Persistence
            • Metrics with Istio mTLS
            • Istio Hardened
            • Kubernetes Monitoring
            • Prometheus Monitoring
            • Prometheus Back up & Recovery
            • Prometheus Best Practices
            • Introduction to PLG stack - Prometheus, Loki and Grafana
            • Prometheus Operator admission webhook migration
            • Prometheus Operator Overview
            • Prometheus Security
            • Prometheus SNMP Exporter
            • Visualization
          • README
          • Values
          • Contributing
          • Changelog
            • How to upgrade the NeuVector Package chart
            • IstioHardened
            • Neuvector Keycloak Configuration
            • NeuVector
            • Prometheus Metrics Exporter
          • README
          • Values
          • Contributing
          • Changelog
            • To upgrade Gatekeeper package
            • Affinity
            • Constraint Annotations
            • OPA Constraint Framework
            • Constraint Templates
            • OPA Gatekeeper Violation Exceptions
            • Open Policy Agent Gatekeeper
            • Policy Library
            • Rego
            • Security with OPA Gatekeeper
            • OPA Gatekeeper Testing
          • README
          • Values
          • Contributing
          • Changelog
            • How to upgrade to Prometheus-Operator-CRDs chart
            • Prometheus Operator CRDs
          • README
          • Values
          • Contributing
          • Changelog
            • Changes for Big Bang
            • Upgrading the Renovate Package
            • Istio Hardening
            • Network Policies
            • Overview
          • README
          • Values
          • Contributing
          • Changelog
            • SonarQube Documentation
            • Affinity
            • Files that require bigbang integration testing
            • Logging
            • SAML Keycloak integration for Sonarqube
            • SonarQube configuration for PartyBus
            • Sonarqube integration with Prometheus
            • Istio Hardening
            • Network Policies
            • Sonarqube
            • Testing your Package Branch against Bigbang before Package Merge
          • README
          • Values
          • Contributing
          • Changelog
            • How to upgrade the Tempo Package chart
            • Istio Hardened
            • Tempo
            • Tempo in Production
          • README
          • Values
          • Contributing
          • Changelog
            • How to upgrade the Thanos Package chart
            • Thanos
          • README
          • Values
          • Contributing
          • Changelog
            • Node Affinity & Anti-Affinity with Twistlock
            • Disaster Recovery
            • CONTAINER MODELS
            • Defender-Only Mode
            • To upgrade the Twistlock Package
            • ELASTIC
            • IstioHardened
            • Keycloak integration
            • Monitoring
            • TROUBLESHOOTING
            • WAAS
            • Twistlock Initialization
            • Twistlock on k3d
            • Twistlock
          • README
          • Values
          • Contributing
          • Changelog
            • How to upgrade the Vault Package chart
            • IstioHardened
            • Vault With Prometheus
            • Vault
            • BigBang KMS Auto Unseal
            • Injecting Secrets into Kubernetes Pods via Vault Agent Containers
            • Vault Keycloak integration.
            • Monitoring in Vault
            • networkPolicies
            • Vault
            • Vault configuration for production high availability
          • README
          • Values
          • Contributing
          • Changelog
            • Node Affinity & Anti-Affinity with Velero
            • Changes needed for Iron Bank Images and Big Bang
            • Big Bang Velero Package Maintenance Guide
            • Velero
              • Background
              • clusterRole
              • clusterRoleBinding
              • Role
              • roleBinding
              • Background
              • Full cluster backup and restore
              • Label Based backup and restore
              • Namespace Backup and restore
              • Scheduled Backup
              • Troubleshooting and additional links
          • README
          • Values
          • Contributing
          • Changelog
            • How to upgrade the Wrapper Package chart
            • IstioHardened
            • Custom Helm Chart Deployment and the “Package Wrapper”
            • Overview
          • README
          • Values
          • Contributing
          • Changelog
            • Files that require bigbang integration testing
            • IstioHardened
            • Keycloak dev
            • Overview
      • Overview
        • README
        • Contributing
        • Changelog
          • BB-Common Documentation
          • Integration Guide
          • Migration Guide
          • Resource Generation Graph
            • Authorization Policies
            • Extra Objects
            • Istio Resources
            • Network Policies Documentation
            • Routes Documentation
            • SelfTest Framework
        • README
        • Contributing
        • Changelog
          • BigBang Package README Template
          • BB Test Templates
          • Running Cypress Testing
          • Wait Job Templates
    • Release Notes
        • Home
          • Overview
          • What is Platform One?
          • Security in Platform One
          • Layered Architecture
          • Security Tools
          • Summary
          • Overview
          • New Platform One User Guide
          • Verify you can pull from Repo1 and IronBank
          • How to Set up AWS to use with Big Bang
          • Summary
          • Overview
          • Software Installation and Verification
          • Big Bang Customer Deployment
          • Summary
          • Overview
          • Package Development
          • Pipeline Overview
            • OCI Artifacts Overview
            • Dev Workflow with OCI
          • Summary
          • Overview
          • Bad Pods Lab
          • Encryption
          • Flux Lab: Install Flux to a Cluster
          • Helm Lab
          • Expose a mock mission app using istio ingress gateway Lab
          • Kubernetes Lab
          • Kustomize Lab
          • VI Basics
          • Summary
          • Overview
          • The Basics
          • Package Managers
          • Operators
          • GitOps w/ Flux
          • Service Mesh w/ Istio
          • Metrics w/ Prometheus
          • Secrets w/ SOPS
          • Consolidated Logging
          • Summary
          • Index
            • Welcome!
            • Getting Started
            • Environment validation
            • Istio Architecture
            • The application Lab
            • Ingress
            • Ingress Lab
            • Observability
            • Observability Lab
            • Security
            • 09 2 security
            • 09 3 security
            • Security Lab
            • Traffic Shifting
            • Traffic Shifting Lab
            • Sidecar resource
            • Enforcing egress traffic using Istio’s authorization policies
            • Install Istio
            • Deeper into sidecar injection
            • Congratulations
            • Observability - Telemetry and Logs
            • Creating a deployment and using a Gateway to expose it
            • Enable TLS
            • Envoy Demo
            • Envoy Filters
            • Access control
            • Advanced traffic shifting
            • Failure injection
            • Simple traffic shifting
          • Further Reading
          • User Guides
        • Training Feedback
    • Contributing
      • Istio Ambient Mode Now in Beta
      • New Methodology for images.txt, package-images.yaml, oci_package_list.txt, and Others
      • Streamlining Integration with bb-common
      • Big Bang 3.0 - Overview of changes in Big Bang 3.0 Release
      • Big Bang 3.0 - Operatorless Istio Migration
      • Introducing Headlamp a UI for your k8s Cluster management
      • Kubernetes Management with Headlamp and the Flux Plugin
      • Cypress Testing In Depth
      • Big Bang 2.42 Release and Team Updates
      • Big Bang 2.41 Release and Team Updates
      • BigBang.mil Domain & dev Certificate
      • 2.0 New Features
      • 2.0 Breaking Changes
      • Big Bang 2.0
    package wrapper 0.4.15

    Overview

    see DEVELOPMENT_MAINTENANCE

    2024-01-18 by Michael Martin
    Made with Material for MkDocs
    About Contact Privacy
    Platform One