feat: add skip tls flag for private git context

If git clone context is a private self-signed repository, we allow user
to add --git insecure-skip-tls=true flag in the option. The value is
default to false, this behavior is in accordance with the go-git
package.

README.md

@@ -893,7 +893,7 @@ Force building outside of a container
 #### Flag `--git`
 
 Branch to clone if build context is a git repository (default
-branch=,single-branch=false,recurse-submodules=false)
+branch=,single-branch=false,recurse-submodules=false,insecure-skip-tls=false)
 
 #### Flag `--image-name-with-digest-file`
 

cmd/executor/cmd/root.go

@@ -396,6 +396,7 @@ func resolveSourceContext() error {
  GitBranch: opts.Git.Branch,
  GitSingleBranch: opts.Git.SingleBranch,
  GitRecurseSubmodules: opts.Git.RecurseSubmodules,
+ InsecureSkipTLS: opts.Git.InsecureSkipTLS,
  })
  if err != nil {
  return err

pkg/buildcontext/buildcontext.go

@@ -32,6 +32,7 @@ type BuildOptions struct {
  GitBranch string
  GitSingleBranch bool
  GitRecurseSubmodules bool
+ InsecureSkipTLS bool
 }
 
 // BuildContext unifies calls to download and unpack the build context.

pkg/buildcontext/git.go

@@ -65,6 +65,7 @@ func (g *Git) UnpackTarFromBuildContext() (string, error) {
  Progress: os.Stdout,
  SingleBranch: g.opts.GitSingleBranch,
  RecurseSubmodules: getRecurseSubmodules(g.opts.GitRecurseSubmodules),
+ InsecureSkipTLS: g.opts.InsecureSkipTLS,
  }
  var fetchRef string
  var checkoutRef string

pkg/config/options.go

@@ -95,6 +95,7 @@ type KanikoGitOptions struct {
  Branch string
  SingleBranch bool
  RecurseSubmodules bool
+ InsecureSkipTLS bool
 }
 
 var ErrInvalidGitFlag = errors.New("invalid git flag, must be in the key=value format")
@@ -127,6 +128,12 @@ func (k *KanikoGitOptions) Set(s string) error {
  return err
  }
  k.RecurseSubmodules = v
+ case "insecure-skip-tls":
+ v, err := strconv.ParseBool(parts[1])
+ if err != nil {
+ return err
+ }
+ k.InsecureSkipTLS = v
  }
  return nil
 }

pkg/config/options_test.go

@@ -33,10 +33,12 @@ func TestKanikoGitOptions(t *testing.T) {
  testutil.CheckNoError(t, g.Set("branch=foo"))
  testutil.CheckNoError(t, g.Set("recurse-submodules=true"))
  testutil.CheckNoError(t, g.Set("single-branch=true"))
+ testutil.CheckNoError(t, g.Set("insecure-skip-tls=false"))
  testutil.CheckDeepEqual(t, KanikoGitOptions{
  Branch: "foo",
  SingleBranch: true,
  RecurseSubmodules: true,
+ InsecureSkipTLS: false,
  }, *g)
  })