fluxcd/fluxArchived
Flux
Flux is a Kubernetes GitOps controller and deployment engine that synchronizes cluster state with configurations stored in a Git repository. It serves as a system for continuous delivery, utilizing a manifest generator to create configuration files from templates and a reconciliation loop to ensure the live environment matches the desired state defined in versioned repositories.
The project distinguishes itself through a container image automator that scans registries and updates manifests based on semantic versioning or regular expressions. It incorporates secure configuration deployment via GPG commit signature verification and a secret decrypter that converts encrypted files into plain text at runtime.
The toolset covers declarative infrastructure automation, including workload rollout management and the pruning of resources no longer present in the source repository. It also provides performance metrics exposure for external monitoring and command-line utilities for repository bootstrapping.
Features
- GitOps Controllers - Acts as a GitOps controller that synchronizes Kubernetes cluster state with configurations stored in a Git repository.
- Git Repository Synchronizers - Provides the core engine for synchronizing the live cluster state with a versioned Git repository.
- Automated Container Updaters - Automatically updates Kubernetes manifests based on new image versions detected in registries.
- GitOps Deployment Management - Implements an automation engine that applies configurations from version control and prunes cluster resources.
- Automated Image Updates - Provides a container image automator that scans registries and updates manifests using semantic versioning or regex patterns.
- Continuous Delivery Engines - Automates the synchronization of application state from version control to Kubernetes infrastructure.
- Custom Resource Controllers - Implements controller logic that monitors Kubernetes objects to automate state reconciliation.
- Declarative Infrastructure Tools - Automates infrastructure provisioning using declarative templates and encrypted configuration files.
- GitOps State Synchronization - Continuously reconciles the live cluster state with a desired state defined in Git repositories.
- Kubernetes Cluster Management - Maintains cluster consistency through resource pruning and versioned baseline management.
- Manifest Generation - Creates cluster configuration files from templates and instructions defined within a versioned repository.
- Git-Based Bootstrapping - Initializes the current cluster state into a Git repository to establish a versioned baseline.
- Cluster Resource Pruning - Automatically removes active Kubernetes resources that are no longer present in the source Git repository.
- Container Image Versioning - Selects specific image versions for updates using semantic versioning, regex, or glob patterns.
- Container Registry Scanning - Periodically scans container registries for new image tags to trigger automated updates.
- Automated Rollout Managers - Tracks update progress and provides controls for managing the rollout of new image changes.
- Manifest Rendering - Renders final Kubernetes configuration files by applying Kustomize overlays and patches.
- Commit Signing - Applies GPG keys to automated commits to create a verifiable audit trail of system changes.
- Decryption Utilities - Decrypts encrypted secret configuration files into plain text at runtime using symmetric keys.
- Configuration Decryption - Converts encrypted configuration files into plain text using specific keys before applying them to the cluster.
- Git Commit Signature Verification - Validates cryptographic GPG signatures on incoming Git commits to ensure delivery pipeline integrity.
- Secure Configuration Delivery - Uses GPG signature verification and decryption keys to ensure only trusted changes are applied to the cluster.
- Configuration Decryption - Includes a secret decrypter that converts encrypted configuration files into plain text at runtime.
- Continuous Delivery and GitOps - Tool for continuous delivery of container images to Kubernetes.
- Continuous Integration and Delivery - GitOps tool for synchronizing Kubernetes cluster state with Git.
