Skip to main content
ChangeGuard watches Flux CD custom resources directly via the Kubernetes API inside the cluster — no Flux API tokens required, and it works even on clusters the ChangeGuard control plane can’t reach.

​
Tracked Resources

CRDData
KustomizationStatus, last applied revision, ready condition
HelmReleaseChart, version, status, values drift
GitRepositoryURL, branch, last fetched revision
OCIRepositoryURL, tag, last fetched digest
BucketEndpoint, bucket name, status

​
Configuration

Enable Flux discovery on the ChangeGuardAgent resource: 
spec:
  gitops:
    flux:
      enabled: true
Or set gitops.flux.enabled=true via Helm. When enabled, the collector reads Kustomizations, HelmReleases, and Sources directly and posts a GitOps snapshot that persists across backend restarts and replicas.