mTLS support for GitRepositories

[benke33]

Hi,

The problem: Our git infrastructure is located behind a cloudflare firewall that requires mTLS certificates to be allowed in.

The solution: Add support for mTLS client certificate & client-key in the GitRepository custom resources.

Question: Is there any plan to add mTLS support in the future?

[stefanprodan]

Is there any plan to add mTLS support in the future?

No plans to implement mTLS anytime soon. I suggest using OCIRepository instead of Git. We do support mTLS for container registries.

On git push to the Flux Git repository, you would run flux push artifact in CI to publish the repo content to the container registry where the cluster has access.

On the cluster you would deploy Flux Operator and configure a FluxInstance that syncs the desired state from the container registry. Example here: https://fluxcd.control-plane.io/operator/flux-sync/#sync-from-a-container-registry

[benke33]

thanks for the reply, unfortunately I'm looking to use GitRepository.

Found this old PR that actually does what I want: #1302

Was that PR ever considered/discussed to be added?