GO-2024-2859 : source-controller leaks Azure Storage SAS token into logs in github.com/fluxcd/source-controller
Discover Packages
github.com/fluxcd/source-controller
command
module
Version:
v1.0.1
Opens a new window with list of versions in this module.
Published: Jul 10, 2023
License: Apache-2.0
Opens a new window with license information.
Imports: 35
Opens a new window with list of imports.
Imported by: 0
Opens a new window with list of known importers.
README
README
¶
Source controller
The source-controller is a Kubernetes operator, specialised in artifacts acquisition
from external sources such as Git, OCI, Helm repositories and S3-compatible buckets.
The source-controller implements the
source.toolkit.fluxcd.io API
and is a core component of the GitOps toolkit .
APIs
Features
authenticates to sources (SSH, user/password, API token, Workload Identity)
validates source authenticity (PGP, Cosign)
detects source changes based on update policies (semver)
fetches resources on-demand and on-a-schedule
packages the fetched resources into a well-known format (tar.gz, yaml)
makes the artifacts addressable by their source identifier (sha, version, ts)
makes the artifacts available in-cluster to interested 3rd parties
notifies interested 3rd parties of source changes and availability (status conditions, events, hooks)
reacts to Git, Helm and OCI artifacts push events (via notification-controller )
Guides
Roadmap
The roadmap for the Flux family of projects can be found at https://fluxcd.io/roadmap/ .
Contributing
This project is Apache 2.0 licensed and accepts contributions via GitHub pull requests.
To start contributing please see the development guide .
Expand ▾
Collapse ▴
Documentation
¶
There is no documentation for this package.
Source Files
¶
Click to show internal directories.
Click to hide internal directories.