Open source GitOps distribution for managed Kubernetes clusters — EKS, GKE, AKS and Scaleway Kapsule.
Pick your cloud, pick your modules. Socle ships as one signed OCI artifact pulled by Flux: upgrading your whole platform means bumping one version in Git.
- Foundations — one OpenTofu root module per cloud: network, managed cluster, identities, Flux bootstrap. OpenTofu provisions and steps away.
- Catalog — à la carte modules (cert-manager, external-dns, monitoring, ...) shipped as HelmReleases. Cloud resources a module needs (IAM roles, DNS access, ...) are provisioned in-cluster by Crossplane — 100% GitOps, no out-of-band scripts.
- Upgrades — the whole socle is published as a cosign-signed, SemVer-tagged OCI artifact. Your cluster pins one tag; Flux pulls, verifies and reconciles the rest in dependency order.
Pre-0.1.0 — under active construction. Nothing is installable yet.
See SECURITY.md. Please report vulnerabilities through private vulnerability reporting, never in public issues.