The GitOps Toolkit Kustomize reconciler
Go to file
Matheus Pimenta d775ed3a19
Merge pull request #1426 from fluxcd/rfc-0010
[RFC-0010] Introduce object-level workload identity for KMS decryption
2025-05-07 17:58:58 +01:00
.github Bump the ci group across 1 directory with 14 updates 2025-04-28 11:35:19 +00:00
api [RFC-0010] Introduce KMS provider decryption with service account 2025-05-07 17:43:35 +01:00
config [RFC-0010] Introduce KMS provider decryption with service account 2025-05-07 17:43:35 +01:00
docs [RFC-0010] Introduce KMS provider decryption with service account 2025-05-07 17:43:35 +01:00
hack Version API generated docs 2023-03-30 19:42:21 +05:30
internal [RFC-0010] Introduce KMS provider decryption with service account 2025-05-07 17:43:35 +01:00
tests/fuzz Update to Kubernetes 1.33.0 and Go 1.24.0 2025-04-28 14:12:22 +03:00
.gitignore Move `controllers` to `internal/controllers` 2023-03-29 12:27:05 +03:00
.goreleaser.yaml Adapt config to GoRelease v2 2024-06-11 09:38:35 +03:00
CHANGELOG.md Add changelog entry for v1.5.1 2025-02-25 14:45:45 +00:00
CODE_OF_CONDUCT.md Release v0.0.1-alpha.1 2020-04-20 15:11:11 +03:00
DCO Release v0.0.1-alpha.1 2020-04-20 15:11:11 +03:00
DEVELOPMENT.md Update to Kubernetes 1.33.0 and Go 1.24.0 2025-04-28 14:12:22 +03:00
Dockerfile Update to Kubernetes 1.33.0 and Go 1.24.0 2025-04-28 14:12:22 +03:00
LICENSE Initial commit 2020-04-15 08:57:39 +03:00
MAINTAINERS Share fluxcd/flux2 maintainer 2020-11-30 13:31:53 +00:00
Makefile Update to Kubernetes 1.33.0 and Go 1.24.0 2025-04-28 14:12:22 +03:00
PROJECT Promote Kustomization API to v1 2023-03-29 16:29:05 +03:00
README.md api/docs: various nits and typos 2023-03-31 17:23:46 +02:00
go.mod [RFC-0010] Introduce KMS provider decryption with service account 2025-05-07 17:43:35 +01:00
go.sum [RFC-0010] Introduce KMS provider decryption with service account 2025-05-07 17:43:35 +01:00
main.go [RFC-0010] Introduce KMS provider decryption with service account 2025-05-07 17:43:35 +01:00

README.md

kustomize-controller

CII Best Practices e2e report license release

The kustomize-controller is a Flux component, specialized in running continuous delivery pipelines for infrastructure and workloads defined with Kubernetes manifests and assembled with Kustomize.

The cluster desired state is described through a Kubernetes Custom Resource named Kustomization. Based on the creation, mutation or removal of a Kustomization resource in the cluster, the controller performs actions to reconcile the cluster current state with the desired state.

overview

Features

  • watches for Kustomization objects
  • fetches artifacts produced by source-controller from Source objects
  • watches Source objects for revision changes
  • generates the kustomization.yaml file if needed
  • generates Kubernetes manifests with Kustomize SDK
  • decrypts Kubernetes secrets with Mozilla SOPS and KMS
  • validates the generated manifests with Kubernetes server-side apply dry-run
  • detects drift between the desired and state and cluster state
  • corrects drift by patching objects with Kubernetes server-side apply
  • prunes the Kubernetes objects removed from source
  • checks the health of the deployed workloads
  • runs Kustomizations in a specific order, taking into account the depends-on relationship
  • notifies whenever a Kustomization status changes

Specifications

Guides

Roadmap

The roadmap for the Flux family of projects can be found at https://fluxcd.io/roadmap/.

Contributing

This project is Apache 2.0 licensed and accepts contributions via GitHub pull requests. To start contributing please see the development guide.