-
Notifications
You must be signed in to change notification settings - Fork 6
/
Copy pathzarf.yaml
161 lines (147 loc) · 7.79 KB
/
zarf.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
# yaml-language-server: $schema=https://raw.githubusercontent.com/defenseunicorns/zarf/v0.21.3/zarf.schema.json
kind: ZarfPackageConfig
metadata:
name: big-bang
description: "Deploy Big Bang Core"
version: "###ZARF_PKG_VAR_BIGBANG_VERSION###"
url: https://p1.dso.mil/products/big-bang
image: https://p1.dso.mil/img/Big_Bang_Color_Logo_White_text.de14c793.webp
# Big Bang / Iron Bank are only amd64
architecture: amd64
components:
- name: flux
required: false
manifests:
- name: flux-installer
kustomizations:
- https://repo1.dso.mil/platform-one/big-bang/bigbang.git/base/flux?ref=###ZARF_PKG_VAR_BIGBANG_VERSION###
images:
- registry1.dso.mil/ironbank/fluxcd/helm-controller:v0.25.0
- registry1.dso.mil/ironbank/fluxcd/kustomize-controller:v0.29.0
- registry1.dso.mil/ironbank/fluxcd/notification-controller:v0.27.0
- registry1.dso.mil/ironbank/fluxcd/source-controller:v0.30.0
- name: big-bang-base
description: "Git repositories and OCI images used by Big Bang"
required: true
repos:
- https://repo1.dso.mil/platform-one/big-bang/bigbang.git@###ZARF_PKG_VAR_BIGBANG_VERSION###
- https://repo1.dso.mil/platform-one/big-bang/apps/core/[email protected]
- https://repo1.dso.mil/platform-one/big-bang/apps/core/[email protected]
- https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/[email protected]
images:
- "registry1.dso.mil/ironbank/big-bang/base:2.0.0"
- "registry1.dso.mil/ironbank/redhat/ubi/ubi8-minimal:8.6"
- "registry1.dso.mil/ironbank/opensource/kubernetes/kubectl:v1.25.3"
- "registry1.dso.mil/ironbank/opensource/istio/pilot:1.15.0"
- "registry1.dso.mil/ironbank/opensource/istio/proxyv2:1.15.0"
- "registry1.dso.mil/ironbank/opensource/istio/install-cni:1.15.0"
- "registry1.dso.mil/ironbank/opensource/istio/operator:1.15.0"
- "registry1.dso.mil/ironbank/tetrate/istio/istioctl:1.14.4-tetratefips-v0"
- "registry1.dso.mil/ironbank/tetrate/istio/proxyv2:1.14.4-tetratefips-v0"
- "registry1.dso.mil/ironbank/tetrate/istio/pilot:1.14.4-tetratefips-v0"
- "registry1.dso.mil/ironbank/tetrate/istio/install-cni:1.14.4-tetratefips-v0"
- "registry1.dso.mil/ironbank/tetrate/istio/operator:1.14.4-tetratefips-v0"
- "registry1.dso.mil/ironbank/opensource/kubernetes/kube-state-metrics:v2.6.0"
- "registry1.dso.mil/ironbank/opensource/kubernetes-sigs/metrics-server:0.6.1"
- name: policy-kyverno
description: "Git repositories and OCI images used by Kyverno Policy Engine"
required: true
repos:
- https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/[email protected]
- https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/[email protected]
images:
- "registry1.dso.mil/ironbank/nirmata/kyverno:v1.8.0"
- "registry1.dso.mil/ironbank/nirmata/kyvernopre:v1.8.0"
- name: observability-tracing
description: "Git repositories and OCI images used by Big Bang observability & tracing"
required: true
repos:
- https://repo1.dso.mil/platform-one/big-bang/apps/core/[email protected]
- https://repo1.dso.mil/platform-one/big-bang/apps/core/[email protected]
- https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/[email protected]
images:
- "registry1.dso.mil/ironbank/opensource/jaegertracing/all-in-one:1.38.0"
- "registry1.dso.mil/ironbank/opensource/jaegertracing/jaeger-operator:1.38.0"
- "registry1.dso.mil/ironbank/opensource/kiali/kiali-operator:v1.58.0"
- "registry1.dso.mil/ironbank/opensource/kiali/kiali:v1.58.0"
- "registry1.dso.mil/ironbank/opensource/grafana/tempo-query:1.5.0"
- "registry1.dso.mil/ironbank/opensource/grafana/tempo:1.5.0"
- name: monitoring
description: "Git repositories and OCI images used by monitoring"
required: true
repos:
- https://repo1.dso.mil/platform-one/big-bang/apps/core/[email protected]
images:
- "registry1.dso.mil/ironbank/big-bang/grafana/grafana-plugins:9.2.0"
- "registry1.dso.mil/ironbank/kiwigrid/k8s-sidecar:1.19.5"
- "registry1.dso.mil/ironbank/opensource/ingress-nginx/kube-webhook-certgen:v1.3.0"
- "registry1.dso.mil/ironbank/opensource/prometheus-operator/prometheus-config-reloader:v0.60.1"
- "registry1.dso.mil/ironbank/opensource/prometheus-operator/prometheus-operator:v0.60.1"
- "registry1.dso.mil/ironbank/opensource/prometheus/alertmanager:v0.24.0"
- "registry1.dso.mil/ironbank/opensource/prometheus/node-exporter:v1.4.0"
- "registry1.dso.mil/ironbank/opensource/prometheus/prometheus:v2.39.1"
- name: logging-plg
description: "Git repositories and OCI images used by PLG"
required: true
repos:
- https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/[email protected]
- https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/[email protected]
images:
- "registry1.dso.mil/ironbank/opensource/grafana/loki:2.6.1"
- "registry1.dso.mil/ironbank/opensource/grafana/promtail:v2.6.1"
- name: keycloak
description: "Git repositories and OCI images used by Keycloak"
required: false
repos:
- https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/[email protected]
images:
- "registry.dso.mil/platform-one/big-bang/apps/security-tools/keycloak/keycloak-ib:18.0.2-1.2.0-1"
- "registry1.dso.mil/ironbank/opensource/postgres/postgresql12:12.11"
- "registry1.dso.mil/ironbank/bitnami/redis:7.0.0-debian-10-r3"
- name: authsvc
description: "Git repositories and OCI images used by Keycloak"
required: false
repos:
- https://repo1.dso.mil/platform-one/big-bang/apps/core/[email protected]
images:
- "registry1.dso.mil/ironbank/istio-ecosystem/authservice:0.5.2"
- name: neuvector
description: "Git repositories and OCI images used by Neuvector runtime security"
required: false
repos:
- https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/[email protected]
images:
- "registry1.dso.mil/ironbank/neuvector/neuvector/enforcer:5.0.2"
- "registry1.dso.mil/ironbank/neuvector/neuvector/manager:5.0.2"
- "registry1.dso.mil/ironbank/neuvector/neuvector/scanner:5"
- "registry1.dso.mil/ironbank/neuvector/neuvector/controller:5.0.2"
- name: big-bang-storage
description: "Git repositories and OCI images need for Big Bang storage"
required: true
repos:
- https://repo1.dso.mil/platform-one/big-bang/apps/application-utilities/[email protected]
- https://repo1.dso.mil/platform-one/big-bang/apps/application-utilities/[email protected]
images:
- "registry1.dso.mil/ironbank/opensource/minio/operator:v4.5.3"
- "registry1.dso.mil/ironbank/opensource/minio/console:v0.21.1"
- "registry1.dso.mil/ironbank/opensource/minio/minio:RELEASE.2022-10-15T19-57-03Z"
- name: big-bang-backup
description: "Git repositories and OCI images used by Velero backup"
required: false
repos:
- https://repo1.dso.mil/platform-one/big-bang/apps/cluster-utilities/[email protected]
images:
- "registry1.dso.mil/ironbank/opensource/velero/velero:v1.9.2"
# - "velero/velero-plugin-for-csi:v0.3.1"
# - "velero/velero-plugin-for-aws:v1.5.1"
# - "registry1.dso.mil/ironbank/opensource/velero/velero-plugin-for-microsoft-azure:v1.5.1"
- name: big-bang-umbrella-chart
description: "Deploy a version of Big Bang Core with Keycloak deployed in-cluster"
required: true
repos:
- https://github.com/defenseunicorns/zarf-package-big-bang.git@###ZARF_PKG_VAR_BIGBANG_VERSION###
manifests:
- name: big-bang-config
files:
- manifests/setup.yaml
- manifests/big-bang.yaml