The GitOps Toolkit source management component
Go to file
dependabot[bot] 6a5be543c2
build(deps): bump the ci group across 1 directory with 2 updates
Bumps the ci group with 2 updates in the / directory: [actions/checkout](https://github.com/actions/checkout) and [github/codeql-action](https://github.com/github/codeql-action).


Updates `actions/checkout` from 4.1.2 to 4.1.3
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](9bb56186c3...1d96c772d1)

Updates `github/codeql-action` from 3.24.10 to 3.25.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](4355270be1...c7f9125735)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-22 02:11:01 +00:00
.github build(deps): bump the ci group across 1 directory with 2 updates 2024-04-22 02:11:01 +00:00
api Update dependencies to Go 1.22 and Kubernetes 1.29.3 2024-04-02 16:52:10 +03:00
config Introduce a semver filter in OCIRepository 2024-03-28 00:09:51 +01:00
docs adding an example for semverFilter in the the documentation 2024-03-28 00:09:52 +01:00
hack Add verification support for notation signed artifacts 2024-03-26 21:32:23 +11:00
internal allow insecure registry login 2024-04-18 13:12:18 +00:00
pkg Adapt GCS mock server for `cloud.google.com/go/storage v1.39.1` 2024-04-11 10:04:43 +03:00
tests/fuzz Update dependencies to Go 1.22 and Kubernetes 1.29.3 2024-04-02 16:52:10 +03:00
.dockerignore libgit2: Remove references to libgit2 from code 2022-12-12 15:34:28 +00:00
.gitignore Update libgit2 to 1.1.1-6 2022-02-07 13:00:57 +00:00
.goreleaser.yaml Add SLSA3 generators to release workflow 2023-06-23 18:13:14 +03:00
CHANGELOG.md Add changelog entry for v1.2.5 2024-04-04 17:13:11 +03:00
CODE_OF_CONDUCT.md Add governance files like DCO, MAINTAINERS, CoC 2020-04-12 23:54:35 +02:00
DCO Add governance files like DCO, MAINTAINERS, CoC 2020-04-12 23:54:35 +02:00
DEVELOPMENT.md Add verification support for notation signed artifacts 2024-03-26 21:32:23 +11:00
Dockerfile Update dependencies to Go 1.22 and Kubernetes 1.29.3 2024-04-02 16:52:10 +03:00
LICENSE Initial commit 2020-04-05 11:55:46 +03:00
MAINTAINERS Paulo is Core Maintainer 2023-01-31 17:13:16 +01:00
Makefile Update dependencies to Go 1.22 and Kubernetes 1.29.3 2024-04-02 16:52:10 +03:00
PROJECT Add GitRepository v1 to project file 2023-03-28 12:30:11 +03:00
README.md Add verification support for notation signed artifacts 2024-03-26 21:32:23 +11:00
go.mod Update dependencies to cosign v2.2.4 2024-04-11 08:08:02 +03:00
go.sum Update dependencies to cosign v2.2.4 2024-04-11 08:08:02 +03:00
main.go Static helmrepository OCI 2023-11-22 21:05:51 +05:30

README.md

Source controller

CII Best Practices e2e report license release

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. The source-controller implements the source.toolkit.fluxcd.io API and is a core component of the GitOps toolkit.

overview

APIs

Kind API Version
GitRepository source.toolkit.fluxcd.io/v1
OCIRepository source.toolkit.fluxcd.io/v1beta2
HelmRepository source.toolkit.fluxcd.io/v1beta2
HelmChart source.toolkit.fluxcd.io/v1beta2
Bucket source.toolkit.fluxcd.io/v1beta2

Features

  • authenticates to sources (SSH, user/password, API token, Workload Identity)
  • validates source authenticity (PGP, Cosign, Notation)
  • detects source changes based on update policies (semver)
  • fetches resources on-demand and on-a-schedule
  • packages the fetched resources into a well-known format (tar.gz, yaml)
  • makes the artifacts addressable by their source identifier (sha, version, ts)
  • makes the artifacts available in-cluster to interested 3rd parties
  • notifies interested 3rd parties of source changes and availability (status conditions, events, hooks)
  • reacts to Git, Helm and OCI artifacts push events (via notification-controller)

Guides

Roadmap

The roadmap for the Flux family of projects can be found at https://fluxcd.io/roadmap/.

Contributing

This project is Apache 2.0 licensed and accepts contributions via GitHub pull requests. To start contributing please see the development guide.