hasura/gitkube
Gitkube
Gitkube is a Kubernetes-native CI/CD controller and container image builder that automates the deployment of applications directly within a cluster. It functions as a GitOps deployment engine that synchronizes cluster state with version control repositories, allowing source code to be compiled into container images and deployed upon git push events.
The system focuses on secure, multi-tenant resource management by mapping specific git repositories to dedicated Kubernetes namespaces. It utilizes an identity verification layer based on cryptographic SSH keys and role-based access control to authorize incoming deployment requests and enforce namespace isolation.
The tool manages the full container lifecycle, including in-cluster building and the ability to push images to private external registries. It also provides configuration options for defining build contexts and includes a command line interface for controller management.
Features
- In-cluster Image Building - Compiles container images directly within the Kubernetes environment, eliminating the need for external CI servers.
- Integrated Build and Deploy Workflows - Implements integrated workflows that automatically build images and deploy them to a cluster upon detecting git changes.
- GitOps Deployment Management - Synchronizes cluster state with version control repositories using a security-first GitOps approach.
- Kubernetes Native Controllers - Functions as a Kubernetes-native controller that manages the build and deployment process from git push events.
- Source-to-Image Builders - Provides an in-cluster builder that automates the creation of container images directly from source code.
- GitOps Automation - Automates Kubernetes deployments and image builds triggered by changes in version control repositories.
- Kubernetes Tenant Isolation - Enforces resource isolation by mapping specific git repositories to dedicated Kubernetes namespaces.
- Container Lifecycle Management - Automates the full container lifecycle, including building, pushing to registries, and updating application states in the cluster.
- Namespace-Based Isolation - Restricts deployment actions to specific assigned namespaces to ensure secure resource isolation between tenants.
- Build Configurations - Provides configuration options to define specific directory paths and file locations for the container build context.
- Git-Push Deployments - Implements deployment workflows triggered by git push events with built-in security verification.
- SSH Authorized Keys Validators - Validates incoming git push requests against authorized public keys to ensure secure deployment access.
- Role-Based Access Control - Restricts remote access and verifies push events using cluster-level role-based access controls.
- SSH Key Validators - Validates incoming deployment requests using cryptographic SSH key verification.
- Continuous Delivery and GitOps - Tool for deploying Docker images via Git push.
