Skip to content

Patchy mirror

patchy mirror

Mirror upstream helm charts and OCI artifacts into a platform registry

Synopsis

Maintain a vendored mirror store: a git tree where mirror.yaml holds global defaults and every charts// or artifacts// directory pins one upstream chart or OCI artifact — vendored for review, digest-locked, provenance-verified, scanned, and published signed.

upgrade moves pins forward and regenerates the derived state; sync converges the registry onto the committed state (idempotent, never replacing an existing tag); validate proves the committed state is self-consistent without touching the tree. patchy never runs git: commits, branches and PRs belong to the calling pipeline.

Flags also resolve from PATCHY_MIRROR_* environment variables and an optional .patchy.yaml (mirror: block) in the working directory.

Options

  -C, --directory string   mirror store directory (walks up to mirror.yaml; default: the working directory)
  -h, --help               help for mirror
      --workers int        concurrent registry operations per stage (default 4)

Options inherited from parent commands

  -A, --all-namespaces             work across every namespace
      --context string             kubeconfig context to use
      --kubeconfig string          path to the kubeconfig file
  -n, --namespace string           namespace to work in (default: the context's)
      --no-color                   disable colour and styling
  -o, --output string              output format: table, wide, json, yaml, name, or markdown (default "table")
      --request-timeout duration   timeout for a single API call (default 30s)
  -v, --verbose                    log what the CLI is doing to stderr

SEE ALSO