March 2025 Summaries

In a move to enhance security in software deployment environments, Octopus Deploy is removing support for SHA-1 certificates in favor of the more secure SHA-256 certificates for communication between Octopus Server and Tentacles. This decision impacts customers still using SHA-1 by requiring them to regenerate their certificates to maintain secure connections via Transport Layer Security (TLS). The shift is part of a broader commitment to support modern operating systems and runtime environments, with a deprecation schedule set for June 1, 2025, for Octopus Cloud customers and later updates for Linux and Windows users. The secure communication model in Octopus involves mutual certificate verification using thumbprints, similar to SSH protocols, ensuring only trusted entities can exchange commands. While most customers have already transitioned to SHA-256, those who haven't are encouraged to act promptly to align with current security standards. Octopus Deploy is also exploring future features to automate certificate regeneration and welcomes customer feedback on credential management practices to better meet user needs.

The recent introduction of scoped tenant variables enhances the flexibility and simplicity of managing variables within multi-tenant environments by allowing different variable values to be set for each environment across all tenant projects. Previously, common tenant variables required the same value across all environments, limiting flexibility. Now, variables can be unscoped, singly-scoped, or multi-scoped, enabling more precise management and reducing the need for creating separate tenants for each environment. This update, available to Cloud customers and soon to self-hosted users from version 2025.2, automatically migrates existing variables to the new system, maintaining deployment continuity and preventing the use of outdated endpoints. Integration capabilities have expanded to support .NET, TypeScript, and Go clients, though the Terraform provider does not yet support the new feature. The changes aim to enhance control over tenant variables, streamline automation, and simplify deployments.

Octopus recently revamped its careers page to better reflect its evolving brand and culture, transforming it into more than just a recruitment tool. The redesign aimed to provide potential candidates with an authentic glimpse of the company's people-centric and transparent culture, emphasizing the importance of employer branding. By incorporating real employee experiences and highlighting the company's remote-first work environment, the page seeks to convey a genuine sense of life at Octopus. The project was a collaborative effort involving various teams and partners, including contributions from marketing, videography, and storytelling experts, to create a page that showcases the spirit of working at Octopus. As a result, the new careers page not only lists job openings but also illustrates the unique experiences and opportunities available at the company, inviting candidates to explore and consider joining the team.

Octopus Deploy emphasizes its commitment to customer security with recent enhancements to its product, including updates to the Octopus Server in version 2025.1, which improve encryption for data at rest and in transit using AES-256 and add TLS 1.3 support. These changes aim to enhance security, reduce network latency, and potentially improve operational efficiency. The company also highlights its dedication to security and compliance through regular third-party audits and certifications like SOC 2 Type II and ISO 27001:2013, showcasing its focus on robust controls and information security management. Octopus Deploy maintains a strong focus on customer trust and safety, continuously improving its product and security programs to meet evolving security needs.

Octopus 2025.1 introduces "Config as Code for Runbooks," a feature allowing seamless version-controlled management of runbooks within Git repositories, aligning them with application code and deployment processes to enhance control and streamline workflows. By storing runbooks alongside application code, users can ensure consistent synchronization, manage versions effortlessly, and access comprehensive change histories for auditability and rollbacks. The migration to this system is facilitated by tools provided by Octopus, which move existing runbooks to designated folders within the repository. This feature has been highly anticipated by the community, and its implementation promises to simplify DevOps workflow management by ensuring all components are version-controlled and fully auditable. Initially available to Cloud customers, it is set to be released for self-hosted users as part of the 2025.1 update.