Import Geo repository using git clone

app/models/repository.rb

@@ -941,6 +941,10 @@ class Repository
     end
   end
 
+  def clone_as_mirror(url, http_authorization_header: "")
+    import_repository(url, http_authorization_header: http_authorization_header)
+  end
+
   def fetch_as_mirror(url, forced: false, refmap: :all_refs, prune: true, http_authorization_header: "")
     fetch_remote(url, refmap: refmap, forced: forced, prune: prune, http_authorization_header: http_authorization_header)
   end

ee/app/services/geo/repository_base_sync_service.rb

@@ -59,7 +59,9 @@ module Geo
       elsif repository.exists?
         fetch_geo_mirror(repository)
       else
-        ensure_repository
+        clone_geo_mirror(repository)
+        repository.expire_status_cache # after_create
+
         # Because we ensure a repository exists by this point, we need to
         # mark it as new, even if fetching the mirror fails, we should run
         # housekeeping to enable object deduplication to run
@@ -98,11 +100,19 @@ module Geo
       ::Gitlab::Geo.current_node
     end
 
+    # Update an existing repository using special credentials
+    # @param [Repository] repository
     def fetch_geo_mirror(repository)
       # Fetch the repository, using a JWT header for authentication
       repository.fetch_as_mirror(remote_url, forced: true, http_authorization_header: jwt_authentication_header)
     end
 
+    # Clone a new repository using Geo special credentials
+    # @param [Repository] repository
+    def clone_geo_mirror(repository)
+      repository.clone_as_mirror(remote_url, http_authorization_header: jwt_authentication_header)
+    end
+
     # Build a JWT header for authentication
     def jwt_authentication_header
       ::Gitlab::Geo::RepoSyncRequest.new(

lib/gitlab/git/repository.rb

@@ -841,11 +841,11 @@ module Gitlab
         end
       end
 
-      def import_repository(url)
+      def import_repository(url, http_authorization_header: "")
         raise ArgumentError, "don't use disk paths with import_repository: #{url.inspect}" if url.start_with?('.', '/')
 
         wrapped_gitaly_errors do
-          gitaly_repository_client.import_repository(url)
+          gitaly_repository_client.import_repository(url, http_authorization_header: http_authorization_header)
         end
       end
 

lib/gitlab/gitaly_client/repository_service.rb

@@ -145,10 +145,11 @@ module Gitlab
         )
       end
 
-      def import_repository(source)
+      def import_repository(source, http_authorization_header: '')
         request = Gitaly::CreateRepositoryFromURLRequest.new(
           repository: @gitaly_repo,
-          url: source
+          url: source,
+          http_authorization_header: http_authorization_header
         )
 
         GitalyClient.call(