Secure access to git & object storage for sandboxes
A pull-through cache & forward proxy for Kubernetes Pods & Agent Sandbox
Give Kubernetes workloads policy-controlled access to Git repositories and GCS or S3-compatible object storage using Kubernetes ServiceAccounts, without sharing credentials.
Get StartedGit Repository Proxy/Mirror
Clone & fetch faster through a local git mirror, and restrict push based on policy.
Object Storage Proxy/Mirror
S3-compatible API with read caching & write policy for GCS or any S3-compatible upstreams.
No Distributed Credentials
Authenticate callers with Pod ServiceAccount tokens instead of upstream credentials.
CEL Authorization
Apply per-source policies to Git operations, branches, buckets, object keys using Common Expression Language (CEL)
Immediate Upstream Writes
Git push or object storage PUT/DELETE writes synchronously to the authoritative Git or object storage upstream.
Kubernetes Native
Deploy with Helm and manage sources using Source Gateway’s GitRepository and ObjectStorageBucket custom resources.