v3.3.2

This is a bugfix release. There is a known bug in libcurl that made HTTPS basically not work. This release changes how git is included so only the most backport of git is installed, and not the backport of libcurl.

See https://superuser.com/questions/1642858/git-throws-fatal-unable-to-access-https-github-com-user-repo-git-failed-se for some more information

Other changes:

• Container image is now just 1 layer
• Make the --error-file world-readable (for use across container boundaries)

Available for all supported platforms at k8s.gcr.io/git-sync/git-sync:v3.3.2

v3.3.1 (BROKEN)

EDIT: This release is broken for HTTPS.

This release is fairly small:

• Create the git-root directory if it does not exist and we need to write to the error file.

• Add sparse-checkout support via a new --sparse-checkout-file flag ($GIT_SYNC_SPARSE_CHECKOUT_FILE). (07e552b)

Available for all supported platforms at k8s.gcr.io/git-sync/git-sync:v3.3.1

v3.3.0

This release includes several noteworthy changes:

• Explicitly set GIT_SYNC_ROOT=/tmp/git in the container image so it is easier to use as non-root with a volume.

• Update Go to 1.15 and debian-base image to buster-v1.4.0

• Add a --git-config flag for arbitrary git settings (45bba18 for more info)

• Use a newer git version (from debian backports)

• Change the symlink target to just the SHA. This allows users to call readlink() on the link and learn the current checked out SHA.

• Fix cases of exit(0) when errors occurred and running as pid1 inside a container.

• Copy all license files for all deps into the container image at /LICENSES/

• Move the exec-hook to AFTER the symlink flip.

• Add a a --error-file flag to export runtime errors. This is useful to be able to inspect the status when running as a sidecar container. (8ea4492)

Available for all supported platforms at k8s.gcr.io/git-sync/git-sync:v3.3.0

v3.2.2

This is a minor release.

• Add support for octal values to int env vars (specifically GIT_SYNC_PERMISSIONS)

Available for all supported platforms at k8s.gcr.io/git-sync/git-sync:v3.2.2

v3.2.1

This is a minor release.

• Add a --sync-hook-command flag ($GIT_SYNC_HOOK_COMMAND) which is executed after syncing a new hash of the remote repository

Available for all supported platforms at k8s.gcr.io/git-sync/git-sync:v3.2.1

v3.2.0

This is a minor release, except that it makes 1 potentially significant change in behavior.

The --wait flag (aka GIT_SYNC_WAIT) used to default to 0, meaning "immediately". It is now defaulting to 1 second. This should somewhat mitigate users who don't set it and pound their git-servers.

In v4.x I will propose to make it longer by default.

Available for all supported platforms at k8s.gcr.io/git-sync/git-sync:v3.2.0

v3.1.7

• Add a metric for askpass calls
• Fix multi-arch builds, so they actually work
• Add socat to the image so users can set up proxying
• Better flag input checking
• Better logs and error messages
• Add --submodules flag with option to NOT recursively clone submodules

Available at k8s.gcr.io/git-sync/git-sync:v3.1.7
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Note the new image pull path includes a "sub-dir" which is different than previous releases!

v3.1.6

Fix bugs that would race on wait(), causing occasional errors or panics.

Fix bug with signals that come in and caused us to miss SIGCHLD.

Fix bugs which mixed stderr with stdout, causing problems with some git configurations that issue warnings.

Move to go 1.14

Available at k8s.gcr.io/git-sync:v3.1.6

v3.1.5

• Bump debian to buster (fixes a bunch of CVEs)

• Make health-checking report true only after git has synced once.

Available at k8s.gcr.io/git-sync:v3.1.5

v3.1.4

• Better logging of commands we run

• Add --askpass-url flag to get username/password from a URL (e.g. http://metadata)

• Add --add-user flag to tell git-sync to write the current UID/GID to /etc/passwd. This enables git-over-SSH as an arbitrary UID.

• Change git credential from cache to store.

Available at k8s.gcr.io/git-sync:v3.1.4