The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.
- Updated base to BigBang 1.41.0
- Updated RKE2 to v1.23.10+rke2r1
- Increased control plane nodes to 3. (Reference)
- Added terraform for IAM Role and Policy
- Added terraform OS sysctl config for
fs.inotify
- Updated base to BigBang 1.39.0
- Converted default storage class to GP3 and updated documentation
- Updated RKE2 version to
1.23.9+rke2r1
- Reduced terraform availability zones to 2
- Reduced RKE2 server and agent nodes to 2
- Converted terraform image to variable
- Removed
GitRepository
patch for Big Bang version
- Updated base to BigBang 1.33.0
- Update Flux source API versions to
v1beta2
- Changed from declaring an AMI to dynamically finding the latest ami id for CIS Amazon Linux 2 STIG
- Updated init_script in env.yaml to apply needed node configurations for the CIS STIG image
- Enabled rke2 download on node startup to allow for using CIS STIG image
- Updated base to BigBang release 1.31.0
- Updated all
dsop.io
references todso.mil
- Corrected nodeport ingress instructions
- Updated aws elb command in terraform readme
- Updated RKE2 to latest terraform, which supports Terraform 4.x and Kubernetes 1.22
- Updated base to BigBang release 1.29.0
- Adjusted persistent size, memory, and cpu settings for dev overrides
- Updated base to BigBang release 1.27.1
- Updated base to BigBang release 1.26.0
- Updated all
Kustomization
s to API Versionv1beta2
- Updated base to BigBang release 1.25.1
- Updated to latest dev cert
- Updated base to BigBang release 1.17.0
hostname
value todomain
change
- Updated istio cert
- Updated base to BigBang release 1.15.2
- Updated default BigBang release to 1.12.0 in kustomization.
- Updated values for istio cert within
bigbang-dev-cert.yaml
- Added cSpell workspace configuration.
- Added Table of Contents
- Formatted Terraform configurations to canonical format.
- Updated CONTRIBUTING to reflect forking process.
- Updated link to Kubernetes cluster prerequisites.
- Updated spelling and markdown formatting.
- Updates CODEOWNERS
- Moved TLS cert back out of configmap.yaml
- Updated documentation on how to add and update TLS certificates to encrypted secret.
- Fixed Big Bang version mismatch using semver in kustomization
- Fixed flux install instructions to use version rather than master. New versions of flux may not be backwards compatible.
- Cleaned up dev values.yaml
- Fix namespace error (istio-system) when deploying wildcard-cert
- Updated expired certificate for *.bigbang.dev
- Added default values for
istio.ingress.tls.*
to workaround Helm error onnil
values. - Updated README.md for TLS cert
- Updated README.md for sops key creation (Issue #8)
- Updated default BigBang release to 1.12.0 in kustomization.
- Security groups between internet facing network load balancer and agent's node ports updated to fix ingress
- Upload of private SSH to encrypted S3 bucket
- Rename of
default
Kubernetes profile to environment name - Change permissions of local Kubernetes config file to read/write of owner only
- Migrated terraform classic load balancer to regular load balancer
- Terraform cache S3 bucket created off of name in environment
- Base/shared configuration with ...
- Big Bang version
- Location of Big Bang base/chart
- Iron Bank pull credentials placeholder
- Dev configuration with ...
- Reduced polling interval
- Minimized replicas for Gatekeeper
- Minimized disk, cpu, and memory resources
- Anonymous authorization for Kiali
- Secrets placeholder
- Prod configuration with ...
- Hostname placeholder
- Secrets placeholder
- Basic documentation
- Terraform template for AWS with...
- Multi-environment support
- High-availability (cross-zone) and auto-scaling
- Private and public subnets
- Load balancer
- Bastion server