Your containers' secrets are no longer written in clear in the compose file
v0.31.0-beta
Breaking change
- Your containers' secrets are no longer written in clear in the compose file. Each application's environment variables, including those marked hidden, are now written to a side file readable by root only (0600), instead of being written into the project's
docker-compose.yml, where anydocker inspectdisplayed them. Object storage credentials follow the same path. A deleted application's file is erased on the next deployment. - The hub only sends these files to agents that know how to write them: an older agent keeps receiving the values as before, without breaking anything. Update the agent to benefit from the change.