During the offline deployment we noticed this dependency on external git repo cloned into dmaap pods during install_time, dependency on this upstream repo is potential problem.

Can't we remove this dependency ?

Another question is,  how is possible that latest casablanca patch is from 29/11/18

d9d82ea... Update links

and 3.0.1 tag is newer 11/12/18 ?

72a5f07... update the msgrtr version

Removing dependency on upstream repo in our opinion will help to stabilize results from ad-hoc deployments.