fluxcd/source-controller

The GitOps Toolkit source management component

Go

283

2,640 commits

updated Oct 12, 2026

See the code

README

Source controller

CII Best Practices e2e report license release

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. The source-controller implements the source.toolkit.fluxcd.io API and is a core component of the GitOps toolkit.

overview

APIs

KindAPI Version
GitRepositorysource.toolkit.fluxcd.io/v1
OCIRepositorysource.toolkit.fluxcd.io/v1
HelmRepositorysource.toolkit.fluxcd.io/v1
HelmChartsource.toolkit.fluxcd.io/v1
Bucketsource.toolkit.fluxcd.io/v1
ExternalArtifactsource.toolkit.fluxcd.io/v1

Features

  • authenticates to sources (SSH, user/password, API token, Workload Identity)
  • validates source authenticity (PGP, Cosign, Notation)
  • detects source changes based on update policies (semver)
  • fetches resources on-demand and on-a-schedule
  • packages the fetched resources into a well-known format (tar.gz, yaml)
  • makes the artifacts addressable by their source identifier (sha, version, ts)
  • makes the artifacts available in-cluster to interested 3rd parties
  • notifies interested 3rd parties of source changes and availability (status conditions, events, hooks)
  • reacts to Git, Helm and OCI artifacts push events (via notification-controller)

Guides

Roadmap

The roadmap for the Flux family of projects can be found at https://fluxcd.io/roadmap/.

Contributing

This project is Apache 2.0 licensed and accepts contributions via GitHub pull requests. To start contributing please see the development guide.

gitops-toolkit

fluxcd/source-controller

The GitOps Toolkit source management component

Go

283

2,640 commits

updated Oct 12, 2026

See the code

README

Source controller

CII Best Practices e2e report license release

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. The source-controller implements the source.toolkit.fluxcd.io API and is a core component of the GitOps toolkit.

overview

APIs

KindAPI Version
GitRepositorysource.toolkit.fluxcd.io/v1
OCIRepositorysource.toolkit.fluxcd.io/v1
HelmRepositorysource.toolkit.fluxcd.io/v1
HelmChartsource.toolkit.fluxcd.io/v1
Bucketsource.toolkit.fluxcd.io/v1
ExternalArtifactsource.toolkit.fluxcd.io/v1

Features

  • authenticates to sources (SSH, user/password, API token, Workload Identity)
  • validates source authenticity (PGP, Cosign, Notation)
  • detects source changes based on update policies (semver)
  • fetches resources on-demand and on-a-schedule
  • packages the fetched resources into a well-known format (tar.gz, yaml)
  • makes the artifacts addressable by their source identifier (sha, version, ts)
  • makes the artifacts available in-cluster to interested 3rd parties
  • notifies interested 3rd parties of source changes and availability (status conditions, events, hooks)
  • reacts to Git, Helm and OCI artifacts push events (via notification-controller)

Guides

Roadmap

The roadmap for the Flux family of projects can be found at https://fluxcd.io/roadmap/.

Contributing

This project is Apache 2.0 licensed and accepts contributions via GitHub pull requests. To start contributing please see the development guide.

gitops-toolkit

Project health

Overall

8.1/10

Maintained

10/10

Code review

10/10
OpenSSF Scorecard

Latest release

v1.9.6 · Oct 1, 2026

Releases this year

15

Significant stargazers

Mikhail Mazurskiy

253 followers · starred Jul 2020

Manuel Alejandro de Brito Fontes

521 followers · starred Apr 2020

Hongchao Deng

605 followers · starred Jun 2021

André Bauer

127 followers · starred Sep 2020