// the find
kelseyhightower/confd
Manage local application configuration files using templates and data from etcd or consul
confd watches a KV store (etcd, Consul, Vault, SSM, Redis, etc.) and rewrites local config files from Go templates whenever values change, then optionally signals the target process to reload. It's aimed at the classic sidecar pattern: container or VM gets its config from a central store without needing to know about it. The space has shifted hard toward Kubernetes secrets/configmaps and Vault Agent since confd peaked.
Wide backend support out of the box — etcd, Consul, Vault, SSM, DynamoDB, Redis, ZooKeeper, env vars — without any plugin system needed. The template model is Go's standard text/template plus a thin helper layer, so anyone who knows Go templates is immediately productive. Single static binary with no runtime dependencies makes it easy to drop into a minimal container or VM image. Integration tests cover every backend with shell scripts against real services, which is more honest than unit tests with mocked clients.
Effectively unmaintained — the README itself admits it's mid-cleanup to adopt Go modules, encryption helper functions were removed with no replacement, and the IRC community link points to Freenode which shut down years ago. The build instructions still reference GOPATH-style setup, which tells you how long it's been since anyone updated the getting-started story. The etcdv2/v3 merge is mentioned as in-progress in the README but there's no visible timeline or recent commit activity to suggest it's happening. If you need Vault dynamic secrets or anything beyond static KV lookups, you'd be better off with Vault Agent or a purpose-built sidecar.