Gitops with multiple repositories

[ludopaquet]

Gitops with multiple repositories

[GeorgeMac]

This is a great idea! Makes sense from the security perspective. There is always mechanisms like CODEOWNERS in GitHub, but its a bit of a blunt instrument for this kind of control. Only really helps with adding review to making changes.

Using namespaces makes total sense too, in order to not require a change to the API as we need a way to address one repository source from another. Similarly, you could imagine this extending to the other declarative sources too (i.e. object (different buckets), OCI (different registry/repositories) and local (different directories)).

Needs a bit of thought as to how we might iterate there. Off the top of my head:

• configuration changes: need a backwards compat way to say 1 repo for all namespaces or N repos for specific ones
• namespace to source mapping in storage layer:
  • we need a way to model multiple live snapshots for the different sources
  • we need each source to have its own polling routine
  • we need the store to map namespaces onto snapshots
  • this needs to work in concert with revisions and the cache