What metalbear-co/mirrord shipped

This week: mirrord 3.285.0 and 3.284.0. common.baggage and db_branching in mirrord up, exclude_tables for MySQL and MariaDB branch copies, Linux filesystem interception fixes on by default for OSS, Firefox extension reachable from the session monitor, and CI down from ~32 to ~13

This week we shipped mirrord 3.285.0 and 3.284.0. New configuration includes common.baggage in mirrord-up.yaml, db_branching per mode, and exclude_tables for MySQL and MariaDB branch copies. Filterless split queue entries are now sent so the operator can apply MirrordSplitConfig filters. Linux filesystem interception fixes are enabled by default for OSS, and the session monitor now reaches the Firefox browser extension. We also capped the CI runner build cache and cut CI integration time from about 32 to about 13 minutes.

This week: mirrord preview sync pushes your local code into preview pods instead of a built image. Workload selector matchExpressions now works, startup kube retries no longer stall about 14 minutes on 503, and the agent HTTP2 header limit is configurable.

This week in mirrord: mirrord preview sync previews each service with sync in mirrord-up.yaml using your local code instead of a built image, pushing the sync.files directories and reinstalling dependencies when they change. The image field is gone from mirrord-up.yaml services; mirrord preview up now takes images from --image or an environment variable, and remote Redis branches can run as a one node Redis Cluster. Workload targets now honor selector.matchExpressions, startup kube requests retry only through startup_retry so a 503 no longer causes a long silent stall, and the agent HTTP2 recv header limit is configurable. mirrord up also keeps forwarding service output past non-UTF-8 bytes.

This week in mirrord: mirrord preview up and down, DB branching in mirrord up, an AWS SSM Parameter Store source for DB branches, per-key branch namespaces, and a kube_context default. Fixed a vfork listener bug, a socket address overflow, and removed eMudhra CAs from the trust s

This week's mirrord changes: mirrord preview up starts a preview environment for each service in a mirrord-up.yaml that has an image, and mirrord preview down deletes every preview environment under a key across all namespaces. mirrord up now supports DB branching, with a new aws_ssm_parameter source for apps that read their database URL from AWS SSM Parameter Store and a db_branches namespace option to run branches per key. A kube_context in the global config is used when a command sets none. On the fixes side, a short-lived vfork child no longer unsubscribes the parent's listening port, a socket address buffer overflow is fixed, and webpki-roots, webpki-root-certs and rustls-webpki no longer trust the compromised eMudhra certificate authorities.

This week in mirrord: previews can be built from a Helm chart, feature.kafka_branch gives sessions an isolated broker, and DB branching can pick a single field out of a JSON secret. Also fixed truncated Go syscall results on Linux arm64 and stopped keychain prompts on macOS.

This week's mirrord changes: mirrord preview start and diff now take --chart, --values and --release-name, so previews can be built from a Helm chart. feature.kafka_branch points a session's Kafka clients at an isolated broker shared by sessions with the same key, and DB branching can now pick one field out of a JSON secret from AWS or GCP Secret Manager. On Linux arm64, Go syscall results wider than 32 bits no longer come back truncated and fault. On macOS, mirrord no longer patches /usr/bin/security, so tools reading credentials through it stop prompting for the keychain password. The Windows CLI also uses less stack.

Releases 3.270.0 to 3.272.0 shipped. Preview diff and preview start --resource, previews that reuse the target pod's TLS client certificate, experimental Windows injection with stork, serverless targets over the operator's sessions-manager, plus operator install and uninstall in

This week mirrord shipped releases 3.270.0, 3.271.0 and 3.272.0. Preview gained diff and start --resource so you can build previews from manifest files and compare them with the live cluster. Preview sessions can present the TLS client certificate already inside the target's container. Windows support is experimental: injection now uses stork and installs hooks before a launched program reaches its entry point. Serverless targets can be reached through the operator's sessions-manager using your kubeconfig. The CLI also gained operator install with a prompt and --context, and operator uninstall.

Mirrord 3.268.0: operator install command, MCP server support, PostgreSQL multi-database branches, improved error messages with Kubernetes info, and macOS sendfile fix.

Mirrord 3.268.0 is out. Simplified operator deployment with mirrord operator install, launched MCP server for external integration, expanded PostgreSQL branching to copy multiple databases, added JSON output to session list, and improved debugging with Kubernetes environment details in error messages.

3.262.0 ships: Events tab shows HTTP and queue messages intercepted per session. Subscribe adds --unmatched flag and --session-key-field. UI and subscribe now route with configured baggage for filtered operators.

Mirrord 3.262.0 is out. New Events tab in the UI displays every HTTP and queue message the operator intercepted, per session. The subscribe command adds --unmatched to report messages that no filter matched, and --session-key-field to name which session each event belongs to. Both UI and subscribe now send configured baggage headers with their operator requests, fixing remote operator access behind header filters.