SEseamusabshere·Apr 15, 2016Submission
Rust binary populates ENV with secrets from Vault
1 points · Open discussionfaradayio
credentials_to_env
Rust2016–2016
faradayio / credentials_to_env
credentials_to_env
Downloads credentials from Hashicorp's Vault, and writes them to env vars and/or files before executing another process.
2Distinct people
2Mentions
0Explicit recommenders
38GitHub stars
What to know before exploring
What it is
Downloads credentials from Hashicorp's Vault, and writes them to env vars and/or files before executing another process.
GitHub
Where it is used
No documented product use has been verified yet.
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
No other repository is repeatedly linked in the same discussions.
This week on Hacker News
Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 3:03:16 PM UTC.
No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.
Mentions over time
HN mentions by hour2 dated mentions
Observed mentions: 2016-04-14 19:14:21 UTC to 2016-04-15 14:12:41 UTC.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| Apr 14, 19:00 | 2016-04-14 19:00:00 UTC | 2016-04-14 20:00:00 UTC | 1 | 0 | 1 |
| Apr 14, 20:00 | 2016-04-14 20:00:00 UTC | 2016-04-14 21:00:00 UTC | 0 | 0 | 0 |
| Apr 14, 21:00 | 2016-04-14 21:00:00 UTC | 2016-04-14 22:00:00 UTC | 0 | 0 | 0 |
| Apr 14, 22:00 | 2016-04-14 22:00:00 UTC | 2016-04-14 23:00:00 UTC | 0 | 0 | 0 |
| Apr 14, 23:00 | 2016-04-14 23:00:00 UTC | 2016-04-15 00:00:00 UTC | 0 | 0 | 0 |
| Apr 15, 00:00 | 2016-04-15 00:00:00 UTC | 2016-04-15 01:00:00 UTC | 0 | 0 | 0 |
| Apr 15, 01:00 | 2016-04-15 01:00:00 UTC | 2016-04-15 02:00:00 UTC | 0 | 0 | 0 |
| Apr 15, 02:00 | 2016-04-15 02:00:00 UTC | 2016-04-15 03:00:00 UTC | 0 | 0 | 0 |
| Apr 15, 03:00 | 2016-04-15 03:00:00 UTC | 2016-04-15 04:00:00 UTC | 0 | 0 | 0 |
| Apr 15, 04:00 | 2016-04-15 04:00:00 UTC | 2016-04-15 05:00:00 UTC | 0 | 0 | 0 |
| Apr 15, 05:00 | 2016-04-15 05:00:00 UTC | 2016-04-15 06:00:00 UTC | 0 | 0 | 0 |
| Apr 15, 06:00 | 2016-04-15 06:00:00 UTC | 2016-04-15 07:00:00 UTC | 0 | 0 | 0 |
| Apr 15, 07:00 | 2016-04-15 07:00:00 UTC | 2016-04-15 08:00:00 UTC | 0 | 0 | 0 |
| Apr 15, 08:00 | 2016-04-15 08:00:00 UTC | 2016-04-15 09:00:00 UTC | 0 | 0 | 0 |
| Apr 15, 09:00 | 2016-04-15 09:00:00 UTC | 2016-04-15 10:00:00 UTC | 0 | 0 | 0 |
| Apr 15, 10:00 | 2016-04-15 10:00:00 UTC | 2016-04-15 11:00:00 UTC | 0 | 0 | 0 |
| Apr 15, 11:00 | 2016-04-15 11:00:00 UTC | 2016-04-15 12:00:00 UTC | 0 | 0 | 0 |
| Apr 15, 12:00 | 2016-04-15 12:00:00 UTC | 2016-04-15 13:00:00 UTC | 0 | 0 | 0 |
| Apr 15, 13:00 | 2016-04-15 13:00:00 UTC | 2016-04-15 14:00:00 UTC | 0 | 0 | 0 |
| Apr 15, 14:00 | 2016-04-15 14:00:00 UTC | 2016-04-15 15:00:00 UTC | 1 | 1 | 0 |
What Hacker News says
2 sourcesIt's a really tiny thing, but Faraday uses https://github.com/faradayio/credentials_to_env to download secure credentials from a Vault server, and write them to environment variables or files. Alternatively, you can just pass in environment variables manually and ignore Vault (for testing, etc.). This acts as glue for existing programs that don't know about Vault. This is actual production code, even if it's really minor.
The goal here was a single binary that would work on most modern Linux distributions, and which could make some HTTP calls and then exec another program, typically all from inside a Docker container.
Rust was a bit overkill for this, but we already had a couple of the necessary libraries available from in-house experiments, and it was fun to write. The two best features of Rust for this project were: (1) If the program c
Read the rest
ompiled, there was a 95+% chance it would work flawlessly on the first try, and (2) Cargo was really just lovely all around.