Thanks for confirming.

The code that sets the docker label is inside addComposeServiceLabels specifically this line

DocoCDLabels.Repository.URL:                 payload.WebURL,

This sets the label correctly without oauth attached to it as the value is from the payload. However, the problem is when the cleanupObsoleteAutoDiscoveredContainers function is called with the following - as it is passing the payload.CloneURL which contains the oauth.

err = cleanupObsoleteAutoDiscoveredContainers(ctx, jobLog, dockerClient, dockerCli, payload.CloneURL, deployConfigs)

Chaging the parameter passed when calling cleanupObsoleteAutoDiscoveredContainers to the following

err = cleanupObsoleteAutoDiscoveredContainers(ctx, jobLog, dockerClient, dockerCli, payload.WebURL, deployConfigs)

it is passing the correct value and was able to find the running containers with the same label.

Now there is another hidden issue in this function cleanupObsoleteAutoDiscoveredContainers inside this block of code logic

       if _, found := autoDiscoveredNames[stackName]; !found {
		autoDiscoverDelete := cont.Labels[docker.DocoCDLabels.Deployment.AutoDiscoverDelete]
		...
	}

does not get executed as it reading through the code it's meant to auto clean the existing stack - including deleting the stack + image because of ! found. Changing the logic to found the auto delete process works beautifully.

I guess the looking for confirmation whether changing the parameter passed to cleanupObsoleteAutoDiscoveredContainers from payload.CloneURL to payload.WebURL will also have to change the auto discover logic ?

Testing with the changes mentioned above works nicely where existing stack + image are deleted and new stack are deployed correctly.

Thoughts ?

Following is the config tested with

name: webhooktest
reference: main
working_dir: .
compose_files:
  - compose.yml
profiles:
  - debug
force_image_pull: true
force_recreate: true
auto_discover: true
auto_discover_opts:
  delete: true