kimdre/doco-cd v0.132.0 on GitHub

What's Changed

OpenBao pki-role certificates are now issued only when a deployment runs. Before this fix, every poll or webhook check issued a new certificate, even when nothing changed or the deployment was paused or blocked by a sync window. Doco-CD now uses placeholders for pki-role refs and their _KEY/_FULL companions while it checks for changes. It issues the real certificates only after the deployment is admitted. This cuts unneeded certificate issuance and PKI load.

Note

with INTERPOLATE_RESOLVED_SECRETS=true, certificates are still issued on every check because doco-cd needs the real values before it can check for changes.

🌟 Improvements

fix(secrets): issue pki-role certificates only when a deployment runs by @anddon in #2130

🐛 Bug Fixes

fix(test): retry Compose startup after lost image lease by @kimdre in #2121

📦 Dependencies

chore(deps): update golang:1.27.3 docker digest to 921f611 by @renovate[bot] in #2116
chore(deps): update debian:trixie-slim docker digest to 89c1ea9 by @renovate[bot] in #2119
fix(deps): update aws-sdk-go-v2 monorepo by @renovate[bot] in #2117
fix(deps): update module github.com/go-co-op/gocron/v2 to v2.23.0 by @renovate[bot] in #2118
chore(deps): update golang:1.27.3 docker digest to 898838c by @renovate[bot] in #2120
chore(deps): update debian:trixie-slim docker digest to f6b08b0 by @renovate[bot] in #2122
chore(deps): update golang:1.27.3 docker digest to 2920bb1 by @renovate[bot] in #2123
fix(deps): update module github.com/azure/azure-sdk-for-go/sdk/security/keyvault/azsecrets to v1.5.1 by @renovate[bot] in #2125
fix(deps): update module github.com/prometheus/common to v0.73.0 by @renovate[bot] in #2124
fix(deps): update aws-sdk-go-v2 monorepo by @renovate[bot] in #2126
fix(deps): update module github.com/prometheus/common to v0.73.1 by @renovate[bot] in #2127
chore(deps): update dependency zensical to v0.0.74 by @renovate[bot] in #2128
fix(deps): update module github.com/sigstore/sigstore to v1.11.2 by @renovate[bot] in #2129
chore(deps): update dependency markdown-exec to v1.12.6 by @renovate[bot] in #2132
fix(deps): update module go.yaml.in/yaml/v4 to v4.0.0-rc.7 by @renovate[bot] in #2133
chore(deps): update gcr.io/distroless/base-debian13 docker digest to 075a33d by @renovate[bot] in #2134

New Contributors

@anddon made their first contribution in #2130

Full Changelog: v0.131.0...v0.132.0