v0.110.0-rc.1

What's Changed

Added automatic OpenBao certificate rotation

To test the new feature, switch your OpenBao secret reference from pki: to pki-role: and enable the rotation watcher:

external_secrets:
  CERT: "pki-role:pki:my-role:app.example.com"

Examples:

• pki-role:certs:myapp-role:myapp.example.com -> Issues a new certificate for the common name myapp.example.com using the myapp-role PKI role in the certs secret engine in the root namespace.
• pki-role:my-namespace:certs:myapp-role:myapp.example.com -> Same as above but in the my-namespace namespace.

Then set these env vars for doco-cd:

CERT_ROTATION_ENABLED=true
CERT_ROTATION_THRESHOLD=72h
CERT_ROTATION_CHECK_INTERVAL=1h

pki-role: issues a fresh certificate and matching private key on deploy. When rotation is enabled, doco-cd will watch the deployed cert’s expiry and redeploy the affected service before it expires.
Use CERT for the certificate and CERT_KEY for the private key in your compose file.

See the OpenBao Provider documentation in the PR.

✨ Features

• feat(external-secrets): implement automatic certificate rotation for deployments by @kimdre in #1690

📦 Dependencies

• fix(deps): update module github.com/moby/buildkit to v0.32.2 by @renovate[bot] in #1685
• fix(deps): update aws-sdk-go-v2 monorepo by @renovate[bot] in #1688
• chore(deps): update dependency zensical to v0.0.54 by @renovate[bot] in #1687
• chore(deps): update module golang.org/x/tools to v0.49.0 by @renovate[bot] in #1686

Full Changelog: v0.109.2...v0.110.0

What's Changed

📦 Dependencies

• fix(deps): update module github.com/moby/buildkit to v0.32.2 by @renovate[bot] in #1685
• fix(deps): update aws-sdk-go-v2 monorepo by @renovate[bot] in #1688
• chore(deps): update dependency zensical to v0.0.54 by @renovate[bot] in #1687
• chore(deps): update module golang.org/x/tools to v0.49.0 by @renovate[bot] in #1686

Full Changelog: v0.109.2...v0.110.0-rc.1