Sink v0.16.0

Store credentials can now be read from mounted Kubernetes Secret files. Configure storage.mongodb.uri_file or search username_file, password_file, and api_key_file with absolute paths instead of placing credentials in ordinary runtime YAML.

Files are bounded to 1 MiB, preserve exact UTF-8 bytes, and are read once at startup. Missing, unreadable, empty, invalid or conflicting references fail validation without printing file contents. Kubernetes projected-volume symlinks are supported. Rotation requires a rolling restart with overlapping backend credentials until every old Pod exits; see credential handling.

This is an additive runtime configuration feature. The public protocol is unchanged and sink-go v0.8.0 remains compatible. Inline server configuration is still supported; Helm chart 0.3 uses per-field Secret references.

Installation artifacts

Docker image:

ghcr.io/batchstream/sink:0.16.0

docker pull ghcr.io/batchstream/sink:0.16.0

Immutable image: ghcr.io/batchstream/sink@sha256:0b66a1ec7099bfd42228115ea43d36aaa800bdb3df6c930a60ac2394e95efdcf

Standalone binaries for Linux and macOS on amd64 and arm64 are attached to this release.
Verify an archive with checksums.txt before installation.