The GitOps Toolkit source management component
Go to file
cappyzawa b2993a76bc
Fix missing TLS ServerName in HelmRepository
Add ServerName configuration to TLS config in HelmRepository client
options to ensure proper SNI (Server Name Indication) support for
virtual hosting environments. This addresses the regression introduced
when migrating from internal/tls to runtime/secrets, where ServerName
was not being set automatically.

Without ServerName, TLS handshakes fail with certificate mismatch
errors when connecting to Helm repositories using virtual hosting
where multiple repositories are hosted on the same IP address.

Signed-off-by: cappyzawa <cappyzawa@gmail.com>
2025-07-22 00:39:59 +09:00
.github Update dependabot config 2025-05-28 16:01:43 +03:00
api Upgrade Kubernetes to 1.33.2 2025-07-14 18:33:46 +01:00
config Release v1.6.0 2025-05-27 12:41:16 +01:00
docs [RFC-0010] Link workload identity docs to complete guide 2025-05-27 09:38:15 +01:00
hack Promote Helm APIs to v1 (GA) 2024-05-02 16:04:27 +03:00
internal Fix missing TLS ServerName in HelmRepository 2025-07-22 00:39:59 +09:00
pkg Upgrade Kubernetes to 1.33.2 2025-07-14 18:33:46 +01:00
tests Update to Kubernetes 1.33.0 and Go 1.24.0 2025-04-28 14:10:47 +03:00
.dockerignore libgit2: Remove references to libgit2 from code 2022-12-12 15:34:28 +00:00
.gitignore Update libgit2 to 1.1.1-6 2022-02-07 13:00:57 +00:00
.goreleaser.yaml Adapt config to GoRelease v2 2024-06-11 09:35:42 +03:00
CHANGELOG.md Add changelog entry for v1.6.2 2025-06-27 11:04:25 +01:00
CODE_OF_CONDUCT.md Add governance files like DCO, MAINTAINERS, CoC 2020-04-12 23:54:35 +02:00
DCO Add governance files like DCO, MAINTAINERS, CoC 2020-04-12 23:54:35 +02:00
DEVELOPMENT.md Update to Kubernetes 1.33.0 and Go 1.24.0 2025-04-28 14:10:47 +03:00
Dockerfile Update to Kubernetes 1.33.0 and Go 1.24.0 2025-04-28 14:10:47 +03:00
LICENSE Initial commit 2020-04-05 11:55:46 +03:00
MAINTAINERS Add Dipti Pai to maintainers 2025-02-27 07:12:20 -08:00
Makefile Remove deprecated status fields from OCIRepository v1 2025-05-27 08:29:44 +03:00
PROJECT Promote OCIRepository API to v1 (GA) 2025-05-27 08:19:51 +03:00
README.md Promote OCIRepository API to v1 (GA) 2025-05-27 08:19:51 +03:00
go.mod Migrate OCIRepository controller to runtime/secrets 2025-07-22 00:39:59 +09:00
go.sum Migrate OCIRepository controller to runtime/secrets 2025-07-22 00:39:59 +09:00
main.go Promote OCIRepository API to v1 (GA) 2025-05-27 08:19:51 +03:00

README.md

Source controller

CII Best Practices e2e report license release

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. The source-controller implements the source.toolkit.fluxcd.io API and is a core component of the GitOps toolkit.

overview

APIs

Kind API Version
GitRepository source.toolkit.fluxcd.io/v1
OCIRepository source.toolkit.fluxcd.io/v1
HelmRepository source.toolkit.fluxcd.io/v1
HelmChart source.toolkit.fluxcd.io/v1
Bucket source.toolkit.fluxcd.io/v1

Features

  • authenticates to sources (SSH, user/password, API token, Workload Identity)
  • validates source authenticity (PGP, Cosign, Notation)
  • detects source changes based on update policies (semver)
  • fetches resources on-demand and on-a-schedule
  • packages the fetched resources into a well-known format (tar.gz, yaml)
  • makes the artifacts addressable by their source identifier (sha, version, ts)
  • makes the artifacts available in-cluster to interested 3rd parties
  • notifies interested 3rd parties of source changes and availability (status conditions, events, hooks)
  • reacts to Git, Helm and OCI artifacts push events (via notification-controller)

Guides

Roadmap

The roadmap for the Flux family of projects can be found at https://fluxcd.io/roadmap/.

Contributing

This project is Apache 2.0 licensed and accepts contributions via GitHub pull requests. To start contributing please see the development guide.