swarmdeployorg/cloud-secrets repository overview

⁠cloud-secrets

cloud-secrets is a background service that synchronizes secrets from external secret managers with Docker Swarm.

It automatically detects secret changes, updates Docker Swarm secrets, and rolls out the affected services - without requiring changes to stack YAML files.

Supported cloud providers:

• Cloud.ru Secret Manager⁠
• HashiCorp Vault (KV v2)⁠

⁠Design goals

• External secret manager is the source of truth
• Stack files remain static
• Secret rotation requires no manual Docker operations
• Secrets are never stored in Git
• Runs natively inside Docker Swarm

⁠Monitoring

• Grafana dashboard⁠