fluxcd
/
source-controller
mirror of https://github.com/fluxcd/source-controller.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
The GitOps Toolkit source management component
2,640 Commits 28 Branches 272 Tags 16 MiB
Go 98.5%
Shell 0.6%
Makefile 0.5%
Smarty 0.3%
Go to file
dependabot[bot] 18f85d7c55
build(deps): bump the go-deps group across 1 directory with 15 updates 
Bumps the go-deps group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/Masterminds/semver/v3](https://github.com/Masterminds/semver) | `3.3.0` | `3.3.1` |
| [github.com/fluxcd/pkg/apis/meta](https://github.com/fluxcd/pkg) | `1.11.0` | `1.12.0` |
| [github.com/fluxcd/pkg/auth](https://github.com/fluxcd/pkg) | `0.12.0` | `0.14.0` |
| [github.com/fluxcd/pkg/git](https://github.com/fluxcd/pkg) | `0.29.0` | `0.31.0` |
| [github.com/fluxcd/pkg/git/gogit](https://github.com/fluxcd/pkg) | `0.31.0` | `0.33.0` |
| [github.com/fluxcd/pkg/oci](https://github.com/fluxcd/pkg) | `0.48.0` | `0.49.0` |
| [github.com/minio/minio-go/v7](https://github.com/minio/minio-go) | `7.0.91` | `7.0.92` |
| [github.com/notaryproject/notation-core-go](https://github.com/notaryproject/notation-core-go) | `1.2.0` | `1.3.0` |
| [github.com/notaryproject/notation-go](https://github.com/notaryproject/notation-go) | `1.3.0` | `1.3.2` |
| [github.com/ory/dockertest/v3](https://github.com/ory/dockertest) | `3.11.0` | `3.12.0` |
| [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) | `1.8.15` | `1.9.4` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.37.0` | `0.38.0` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.29.0` | `0.30.0` |
| [oras.land/oras-go/v2](https://github.com/oras-project/oras-go) | `2.5.0` | `2.6.0` |



Updates `github.com/Masterminds/semver/v3` from 3.3.0 to 3.3.1
- [Release notes](https://github.com/Masterminds/semver/releases)
- [Changelog](https://github.com/Masterminds/semver/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Masterminds/semver/compare/v3.3.0...v3.3.1)

Updates `github.com/fluxcd/pkg/apis/meta` from 1.11.0 to 1.12.0
- [Commits](https://github.com/fluxcd/pkg/compare/apis/meta/v1.11.0...apis/meta/v1.12.0)

Updates `github.com/fluxcd/pkg/auth` from 0.12.0 to 0.14.0
- [Commits](https://github.com/fluxcd/pkg/compare/git/v0.12.0...git/v0.14.0)

Updates `github.com/fluxcd/pkg/git` from 0.29.0 to 0.31.0
- [Commits](https://github.com/fluxcd/pkg/compare/git/v0.29.0...git/v0.31.0)

Updates `github.com/fluxcd/pkg/git/gogit` from 0.31.0 to 0.33.0
- [Commits](https://github.com/fluxcd/pkg/compare/git/v0.31.0...oci/v0.33.0)

Updates `github.com/fluxcd/pkg/oci` from 0.48.0 to 0.49.0
- [Commits](https://github.com/fluxcd/pkg/compare/oci/v0.48.0...oci/v0.49.0)

Updates `github.com/minio/minio-go/v7` from 7.0.91 to 7.0.92
- [Release notes](https://github.com/minio/minio-go/releases)
- [Commits](https://github.com/minio/minio-go/compare/v7.0.91...v7.0.92)

Updates `github.com/notaryproject/notation-core-go` from 1.2.0 to 1.3.0
- [Release notes](https://github.com/notaryproject/notation-core-go/releases)
- [Commits](https://github.com/notaryproject/notation-core-go/compare/v1.2.0...v1.3.0)

Updates `github.com/notaryproject/notation-go` from 1.3.0 to 1.3.2
- [Release notes](https://github.com/notaryproject/notation-go/releases)
- [Changelog](https://github.com/notaryproject/notation-go/blob/main/RELEASE_CHECKLIST.md)
- [Commits](https://github.com/notaryproject/notation-go/compare/v1.3.0...v1.3.2)

Updates `github.com/ory/dockertest/v3` from 3.11.0 to 3.12.0
- [Release notes](https://github.com/ory/dockertest/releases)
- [Commits](https://github.com/ory/dockertest/compare/v3.11.0...v3.12.0)

Updates `github.com/sigstore/sigstore` from 1.8.15 to 1.9.4
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](https://github.com/sigstore/sigstore/compare/v1.8.15...v1.9.4)

Updates `golang.org/x/crypto` from 0.37.0 to 0.38.0
- [Commits](https://github.com/golang/crypto/compare/v0.37.0...v0.38.0)

Updates `golang.org/x/oauth2` from 0.29.0 to 0.30.0
- [Commits](https://github.com/golang/oauth2/compare/v0.29.0...v0.30.0)

Updates `golang.org/x/sync` from 0.13.0 to 0.14.0
- [Commits](https://github.com/golang/sync/compare/v0.13.0...v0.14.0)

Updates `oras.land/oras-go/v2` from 2.5.0 to 2.6.0
- [Release notes](https://github.com/oras-project/oras-go/releases)
- [Commits](https://github.com/oras-project/oras-go/compare/v2.5.0...v2.6.0)

---
updated-dependencies:
- dependency-name: github.com/Masterminds/semver/v3
  dependency-version: 3.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/fluxcd/pkg/apis/meta
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/fluxcd/pkg/auth
  dependency-version: 0.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/fluxcd/pkg/git
  dependency-version: 0.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/fluxcd/pkg/git/gogit
  dependency-version: 0.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/fluxcd/pkg/oci
  dependency-version: 0.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/minio/minio-go/v7
  dependency-version: 7.0.92
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/notaryproject/notation-core-go
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/notaryproject/notation-go
  dependency-version: 1.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/ory/dockertest/v3
  dependency-version: 3.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/sigstore/sigstore
  dependency-version: 1.9.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: golang.org/x/crypto
  dependency-version: 0.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: golang.org/x/sync
  dependency-version: 0.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: oras.land/oras-go/v2
  dependency-version: 2.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
 		2025-05-20 03:03:37 +00:00
.github build(deps): bump the ci group across 1 directory with 13 updates 2025-04-28 12:00:40 +00:00
api Update to Kubernetes 1.33.0 and Go 1.24.0 2025-04-28 14:10:47 +03:00
config [RFC-0010] Introduce object-level workload identity for container registry APIs 2025-05-07 18:33:59 +01:00
docs Sparse Checkout Directories in GitRepositories. 2025-04-23 09:30:10 -07:00
hack Promote Helm APIs to v1 (GA) 2024-05-02 16:04:27 +03:00
internal set NewDigester back 2025-05-08 19:19:08 -05:00
pkg Promote Bucket API to v1 2024-08-23 13:25:57 +03:00
tests Update to Kubernetes 1.33.0 and Go 1.24.0 2025-04-28 14:10:47 +03:00
.dockerignore libgit2: Remove references to libgit2 from code 2022-12-12 15:34:28 +00:00
.gitignore Update libgit2 to 1.1.1-6 2022-02-07 13:00:57 +00:00
.goreleaser.yaml Adapt config to GoRelease v2 2024-06-11 09:35:42 +03:00
CHANGELOG.md Add changelog entry for v1.5.0 2025-02-13 14:47:24 +00:00
CODE_OF_CONDUCT.md Add governance files like DCO, MAINTAINERS, CoC 2020-04-12 23:54:35 +02:00
DCO Add governance files like DCO, MAINTAINERS, CoC 2020-04-12 23:54:35 +02:00
DEVELOPMENT.md Update to Kubernetes 1.33.0 and Go 1.24.0 2025-04-28 14:10:47 +03:00
Dockerfile Update to Kubernetes 1.33.0 and Go 1.24.0 2025-04-28 14:10:47 +03:00
LICENSE Initial commit 2020-04-05 11:55:46 +03:00
MAINTAINERS Add Dipti Pai to maintainers 2025-02-27 07:12:20 -08:00
Makefile Update to Kubernetes 1.33.0 and Go 1.24.0 2025-04-28 14:10:47 +03:00
PROJECT Promote Bucket API to v1 2024-08-23 13:25:57 +03:00
README.md Add API docs for Bucket v1 2024-08-23 13:57:38 +03:00
go.mod build(deps): bump the go-deps group across 1 directory with 15 updates 2025-05-20 03:03:37 +00:00
go.sum build(deps): bump the go-deps group across 1 directory with 15 updates 2025-05-20 03:03:37 +00:00
main.go [RFC-0010] Introduce object-level workload identity for container registry APIs 2025-05-07 18:33:59 +01:00

README.md

Source controller

CII Best Practices e2e report license release

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. The source-controller implements the source.toolkit.fluxcd.io API and is a core component of the GitOps toolkit.

overview

APIs

Kind API Version
GitRepository source.toolkit.fluxcd.io/v1
OCIRepository source.toolkit.fluxcd.io/v1beta2
HelmRepository source.toolkit.fluxcd.io/v1
HelmChart source.toolkit.fluxcd.io/v1
Bucket source.toolkit.fluxcd.io/v1

Features

  • authenticates to sources (SSH, user/password, API token, Workload Identity)
  • validates source authenticity (PGP, Cosign, Notation)
  • detects source changes based on update policies (semver)
  • fetches resources on-demand and on-a-schedule
  • packages the fetched resources into a well-known format (tar.gz, yaml)
  • makes the artifacts addressable by their source identifier (sha, version, ts)
  • makes the artifacts available in-cluster to interested 3rd parties
  • notifies interested 3rd parties of source changes and availability (status conditions, events, hooks)
  • reacts to Git, Helm and OCI artifacts push events (via notification-controller)

Guides

Roadmap

The roadmap for the Flux family of projects can be found at https://fluxcd.io/roadmap/.

Contributing

This project is Apache 2.0 licensed and accepts contributions via GitHub pull requests. To start contributing please see the development guide.