Components

Configure each Porch component individually for optimal performance and security. All configurations are optional - Porch works with default settings.

Core Components

Porch Server

The main API server that handles package operations and Git repository interactions:

• Git Authentication - Repository authentication methods
• Private Registry Access - Container registry authentication for function pods
• Pod Templates - Function pod specifications (base-pod-template)

Porch Controllers

Manage the lifecycle of Repositories, PackageRevisions, PackageVariants, and PackageVariantSets:

• Webhooks - Validation webhooks for PackageRevision and Repository resources
  • Certificate Management - TLS certificate setup
  • Validation Rules - Detailed validation rules

Function Runner

Executes cached KRM function binaries over gRPC (executable fast path). Function pods are configured under Porch Server.

• Function Configuration - FunctionConfig CRD, executors, and reconciler