About This Tool

Primary Use Case

Key Features

• User interface for FluxCD to visualize GitOps workflows
• Automatic deployment and update via Flux OCIRepository
• Supports port-forwarding for local UI access
• Optional OCIRepository verification with Cosign for enhanced security
• Kubernetes manifests and Helm chart installation options
• Integration with Kubernetes NetworkPolicy and Ingress for secure access
• Designed to match or exceed ArgoCD UI capabilities

Insights & Recommendations

Capacitor requires FluxCD v2.0.0 or higher and optionally v2.2.0 for OCIRepository verification with Cosign. When exposing the UI externally, appropriate Kubernetes NetworkPolicy and Ingress configurations are necessary to secure access. The tool is focused on providing a UI experience comparable to ArgoCD for Flux users.

Installation

Ensure Flux v2.0.0 or higher is installed
Add Capacitor manifests to the Flux repository using the provided OCIRepository and Kustomization YAML
Apply Kubernetes RBAC and manifest YAML files using kubectl
Optionally configure OCIRepository verification with Cosign if using Flux v2.2.0 or higher
Use kubectl port-forward to access the Capacitor UI locally
For Helm installation, add the onechart Helm repo and install Capacitor with provided Helm values
Configure Kubernetes NetworkPolicy and Ingress resources if exposing Capacitor UI externally

Usage

Smart Usage Notes

• Integrate Capacitor with FluxCD pipelines to automate security policy enforcement and configuration drift detection.
• Leverage Cosign verification to enhance supply chain security by validating OCIRepository artifacts before deployment.
• Use Capacitor’s UI to improve visibility for DevSecOps teams, enabling quicker detection and remediation of misconfigurations.
• Combine Capacitor with Kubernetes NetworkPolicies and Ingress configurations to enforce zero-trust network segmentation in clusters.
• Employ Capacitor in purple team exercises to simulate and detect attacks leveraging GitOps workflows and Kubernetes resource manipulations.

Security Capability Profile