Source Gateway

Source Gateway is a pull-through cache and forward proxy for Git and object storage on Kubernetes.

Workloads use ServiceAccount tokens, and Custom Resources for GitRepository or ObjectStorageBucket support CEL-based policies for RBAC.

The object storage client uses an S3-compatible API, and can connect upstream to S3 or GCS.

Upstream credentials are mounted as files, preferably from operator-managed Secrets Store CSI volumes.

Start here

• Get started with the Helm chart and one Git source.
• Learn the core concepts and authentication model.

Set up Source Gateway

• Use the Git or deliberately limited S3-compatible interface.
• Configure deployment, runtime settings, and operations.

Reference

• Consult the CRD reference or development guide.