cloud-secrets is a background service that synchronizes secrets from external secret managers with Docker Swarm.
It automatically detects secret changes, updates Docker Swarm secrets, and rolls out the affected services - without requiring changes to stack YAML files.
Supported cloud providers:
See Architecture for the full synchronization lifecycle.
- External secret manager is the source of truth
- Stack files remain static
- Secret rotation requires no manual Docker operations
- Secrets are never stored in Git
- Runs natively inside Docker Swarm