GitHub App setup

Personal access tokens are not supported. Create a GitHub App and install it on every repository whose deployments you want reported.

1. Create the App

In GitHub: Settings → Developer settings → GitHub Apps → New GitHub App.

Suggested settings:

Field	Value
GitHub App name	e.g. `flux-deployment-bridge`
Homepage URL	your org / docs URL
Webhook	Inactive (the bridge polls the cluster; no webhook needed)
Where can this GitHub App be installed?	Only on this account / org

Grant only these repository permissions:

Permission	Access	Why
Deployments	Read & Write	Create Deployments and lifecycle statuses
Contents	Read	Resolve the commit SHA / ref when creating a Deployment
Metadata	Read	Required baseline for GitHub Apps (repo identity)

No other permissions (Issues, Pull requests, Actions, Administration, …) are needed.

Under the App's Private keys, generate a key and download the .pem file. Store it securely; the chart mounts it into the pod as a Secret.

Install the App on the target org or repositories, then note:

Value	Where to find it
App ID	App settings → About → App ID
Installation ID	After install, the URL looks like `…/installations/<id>`
Private key	The downloaded `.pem`

For GitHub Enterprise Server, also set config.githubBaseURL (or GITHUB_BASE_URL) to your instance base URL.