
Git SyncDashboards
CertifiedSync dashboards from Git
Git SyncDashboards
Sync dashboards from Git
Imports dashboards from a Git branch. Can delete dashboards missing in Git, respects .kestraignore, and supports dry-run diff output.
type: io.kestra.plugin.git.SyncDashboardsExamples
Sync all dashboards from Git to Kestra every full hour.
id: git_sync
namespace: company
tasks:
- id: sync_dashboards
type: io.kestra.plugin.git.SyncDashboards
gitDirectory: _dashboards
branch: dashboards
pluginDefaults:
- type: io.kestra.plugin.git
values:
username: kestra-git-user
url: https://github.com/my-company/my-repo
password: "{{ secret('GITHUB_ACCESS_TOKEN') }}"
branch: main
dryRun: false
triggers:
- id: every_full_hour
type: io.kestra.plugin.core.trigger.Schedule
cron: "0 * * * *"
Properties
branch string
mainBranch to sync
Defaults to main.
cloneSubmodules booleanstring
Clone submodules
Default false; enable to fetch and initialize nested submodules.
connectTimeout integerstring
10000HTTP connect timeout (ms)
Default 10000 ms.
delete booleanstring
falseDelete dashboards missing in Git
Default false to avoid destructive syncs.
dryRun booleanstring
falseDry run only
When true, writes a diff without applying changes to Kestra.
failOnMissingDirectory booleanstring
trueFail if git directory missing
Default true. If false, skips when the rendered gitDirectory path does not exist.
gitConfig object
Git configuration overrides
Map of git config keys and values applied after clone, e.g.:
- core.fileMode: false (ignore permission flips)
- core.autocrlf: false (preserve line endings)
gitDirectory string
_dashboardsGit directory for dashboards
Relative path containing dashboard YAML; defaults to _dashboards.
noProxy booleanstring
Disable proxy for HTTP
When true, forces direct connections instead of using the JVM proxy settings.
passphrase string
Passphrase for privateKey
password string
Password or personal access token
Supplies HTTP credentials. When a PAT is used, pushes are recorded under that PAT’s user without needing authorName and authorEmail.
**GitHub PAT permissions required: **
- Fine-grained PAT:
Contents: Read(clone/fetch) orContents: Read and Write(push), plusMetadata: Read(mandatory base permission). AddWorkflows: Read and Writewhen pushing.github/workflows/files. - Classic PAT:
reposcope covers all read/write operations; addworkflowwhen pushing workflow files.
pluginDefaultsRef Non-dynamicstring
Reference (ref) of the pluginDefaults to apply to this task.
privateKey string
PEM private key
PEM-formatted private key matching a public key registered on the Git server. Generate with ssh-keygen -t ecdsa -b 256 -m PEM.
readTimeout integerstring
60000HTTP read timeout (ms)
Default 60000 ms.
trustedCaPemPath string
Extra trusted CA PEM path
Optional PEM-encoded CA bundle added to the JVM truststore; equivalent to git config http.sslCAInfo <path> for self-signed or internal CAs.
url string
Repository URL
HTTP(S) or SSH URI used for clone and push operations.
username string
Username or organization
Used for HTTP basic authentication and as a fallback commit author.