[Enhancement]: GitHub App Authentication

[miniwirner]

Description

With Flux 2.5 there was the feature „GitHub App Authentication for Git Repositories“ released. Can you provide an example to reference the secret?

Affected Resource(s) and/or Data Source(s)

No response

Potential Terraform Configuration

References

No response

Would you like to implement a fix?

None

[VerticalVeith]

I took a quick glance at the source code and could not find any mention of the GitHub App authentication type. The documentation around this feature is still sparse at best, and even the flux bootstrap github --help output of flux 2.6.1 does not indicate it is fully integrated across the flux stack.

If you want to bootstrap flux using a GitHub App to authenticate, you might need to do it manually. Check out this blog post for more info on how to do this using the flux controller and either helm or terraform (still using helm in the background).

[cebidhem]

If you want to bootstrap flux using a GitHub App to authenticate, you might need to do it manually. Check out this blog post for more info on how to do this using the flux controller and either helm or terraform (still using helm in the background).

This blog post references only using the Flux Operator, by deploying it (the Operator) either with Helm or Terraform.

It would be useful for existing deployments that were/are using the Terraform flux_bootstrap_git resource, to migrate from using ssh keys / PAT to using Github App.

However, I think the issue might need to be raised upstream in fluxd/flux2 or, because bootstrap is actually using the go-git-providers library, in the go-git-providers repository.

It would be great if a maintainer could point the direction, maybe someone in the community would be skilled enough and willing to add this feature ?