Openbao cert rotation

[zyojv]

I'm considering adopting Doco-CD because I really like what it offers, particularly its support for OCI artifacts and OpenBao. I especially like that I don't have to manually update my Compose stacks every time. I can simply push a new OCI image to my local registry.

The OpenBao integration is particularly appealing as well, since it means I don't have to run an OpenBao agent.

I've read through the OpenBao documentation and looked through the code, but I may have missed it: do the certificates renew automatically?

[kimdre]

Doco-CD resolves secrets whenever a new run gets triggered. If the secret value was changed since the last deployment, it will redeploy the service/container with the new secret value. A check for certs that are close to their expiry and need to be rotated is not implemented at the moment, but you can use polling and webhooks together to use a intervall to automatically redeploy when the cert changes while you are not actively triggering new deployments via webhook.

If you need this, feel free to open a feature request.

[zyojv]

I've opened a feature request.