kimdre/doco-cd v0.110.0 on GitHub

What's Changed

Direct TLS/SSL Support for web server

Set the new environment variables HTTP_TLS_CERT_FILE and HTTP_TLS_KEY_FILE to enable HTTPS for the API and metrics server, and healthcheck.

OpenBao pki/cert rotartion

Added automatic OpenBao certificate rotation, see the wiki for more info.

Examples

Set these env vars for doco-cd to enable and configure the cert rotation watcher:

CERT_ROTATION_ENABLED=true
CERT_ROTATION_THRESHOLD=72h
CERT_ROTATION_CHECK_INTERVAL=1h

Use pki-role:

external_secrets:
  CERT: "pki-role:pki:my-role:app.example.com"

pki-role:certs:myapp-role:myapp.example.com -> Issues a new certificate for the common name myapp.example.com using the myapp-role PKI role in the certs secret engine in the root namespace.
pki-role:my-namespace:certs:myapp-role:myapp.example.com -> Same as above but in the my-namespace namespace.

pki-role: issues a fresh certificate and matching private key on deploy. When rotation is enabled, doco-cd will watch the deployed cert’s expiry and redeploy the affected service before it expires.

Use CERT for the certificate and CERT_KEY for the private key in your compose file.

See the OpenBao Provider documentation in the PR.

✨ Features

feat(external-secrets): implement automatic certificate rotation for deployments by @kimdre in #1690
feat(api): add HTTPS support with TLS certificate configuration by @kimdre in #1704

🌟 Improvements

feat(docker): normalize env vars for stable project hash during certificate rotation by @kimdre in #1697
feat(notification): report image digest drifted services in ChangedServices by @dennislapchenko in #1692
fix(commit-status): add support for GitHub Apps to report commit statuses by @kimdre in #1707
fix(ssh-agent): simplify error handling in ServeAgent function by @kimdre in #1714
fix(docker): reload registry auth from docker config on every lookup by @dennislapchenko in #1709

🐛 Bug Fixes

fix(compose): fail start wait on crashlooping services by @dennislapchenko in #1695

📦 Dependencies

fix(deps): update module github.com/moby/buildkit to v0.32.2 by @renovate[bot] in #1685
fix(deps): update aws-sdk-go-v2 monorepo by @renovate[bot] in #1688
chore(deps): update dependency zensical to v0.0.54 by @renovate[bot] in #1687
chore(deps): update module golang.org/x/tools to v0.49.0 by @renovate[bot] in #1686
chore(deps): update golang:1.26.6 docker digest to 0d1d3a7 by @renovate[bot] in #1693
chore(deps): update dependency zensical to v0.0.55 by @renovate[bot] in #1694
chore(deps): update codespell-project/actions-codespell digest to 8f01853 by @renovate[bot] in #1698
fix(deps): update module github.com/docker/compose/v5 to v5.5.0 by @renovate[bot] in #1699
chore(deps): update dependency zensical to v0.0.56 by @renovate[bot] in #1708
chore(deps): update docker/setup-buildx-action digest to 37fe631 by @renovate[bot] in #1712

📚 Miscellaneous

fix(notification): stop repeating and duplicating failure notifications by @dennislapchenko in #1700

Full Changelog: v0.109.2...v0.110.0