# Source Gateway: Secure access to Git and object storage for sandboxes

> Source Gateway is a pull-through cache and forward proxy for Kubernetes Pods and Agent Sandboxes. It gives Kubernetes workloads policy-controlled access to Git repositories and GCS or S3-compatible object storage using Kubernetes ServiceAccounts, without sharing credentials.

- Website: https://sourcegateway.dev/
- GitHub: https://github.com/sourcegateway/sourcegateway
- LLMs.txt: https://sourcegateway.dev/llms.txt

## Documentation

- [Getting Started](https://sourcegateway.dev/docs/getting-started.md): Run a disposable Source Gateway installation on a local Kind cluster.
- [Concepts](https://sourcegateway.dev/docs/concepts.md): Understand sources, upstreams, local data, workload identity, and request flow.
- [Git](https://sourcegateway.dev/docs/git.md): Clone, fetch, and make policy-controlled pushes through the Git smart HTTP endpoint.
- [Object Storage](https://sourcegateway.dev/docs/object-storage.md): Use Source Gateway's deliberately limited path-style S3-compatible interface.
- [Auth & Access](https://sourcegateway.dev/docs/auth.md): Authenticate ServiceAccounts with projected tokens and authorize requests with CEL policies.
- [Deployment](https://sourcegateway.dev/docs/deployment.md): Deploy the one-replica Helm architecture with TLS, cache storage, and mounted credentials.
- [Operations](https://sourcegateway.dev/docs/operations.md): Monitor readiness, mirrors, caches, recovery, and common Source Gateway failures.
- [CRD Reference](https://sourcegateway.dev/docs/crd-reference.md): Reference the v1alpha1 GitRepository and ObjectStorageBucket fields and status.
- [Configuration](https://sourcegateway.dev/docs/configuration.md): Reference runtime JSONC settings and the Helm values that render and deploy them.
- [Development](https://sourcegateway.dev/docs/development.md): Set up the offline localhost stack, run checks, regenerate APIs, and build images.

---

Tip: Append `.md` to any page URL to get the Markdown version.