Managing secrets in Docker containers via labels and Vault/OpenBao

⚓ Rust    📅 2025-11-26    👤 surdeus    👁️ 8      

surdeus

Hey all,

I've been occasionally trying to find something that gets me over the initial learning curve hump for the past few years. So far I haven't actually found anything, but for this little project I think Rust's memory safety would be very beneficial. So I dove in and used JetBrains AI to get the initial prototype working.

I want to use it at work, but I'm leery of long term maintenance since none of us are anything more than amateurs, or beginners with Rust. I can do the same thing in a language I already know, but it's a much heavier footprint, and doesn't offer that memory management...

The project is meant to take secrets from Hashicorp Vault, or OpenBao, and keep them updated inside running Docker containers. I'm using Docker labels to define the various secrets per container. It is aimed at Docker Swarm or just standalone Docker. I believe there is already a tool for this in Kubernetes ecosystem, but we are not using Kube.

I've read through all the code to find any obvious issues from the AI, and it all looks fairly straightforward. I understood the gist of it, at least. :\

So, what I'd love to know is if the AI did as good of a job as I hope, and if this is something I can build on. As in:

  • Is it worth keeping around for both it's current functionality, as well as future functionality? (Pulling in more than just kv-v2 secrets)
  • Is anyone in the Rust community interested in using it and/or helping maintain it?
  • Are there any issues in the code that I should be concerned about?

The project: GitHub - LaneCommunityCollege/veilguard: Veilguard is an app for Docker hosts that automatically manages secrets from OpenBao/Vault for Docker containers.

FYI, I consider myself on the lower end of being an advanced developer. Most of my development work is scripting for Linux system administration work, or creating apps in PHP. Very little compiled language experience. Hopefully that helps give you an idea of my background knowledge.

Thanks!

Oh, and was this a good place to post this? It is a working program, and I am in need of code review, but I could see some of my questions meaning it should go into help or uncategorized as well...

1 post - 1 participant

Read full topic

🏷️ Rust_feed