cert manager and 1p

cluster/platform/cert-manager/application.yaml

@@ -1,6 +1,7 @@
 # ------------------------------------------------------------------------------
 # Platform: cert-manager
-# Wave 3 — depends on ESO (wave 1) for Cloudflare token secret
+# Wave 3 — depends on ESO + 1Password Connect for Cloudflare token
+# Multi-source: Helm chart from upstream + ClusterIssuers + ExternalSecret
 # ------------------------------------------------------------------------------
 apiVersion: argoproj.io/v1alpha1
 kind: Application
@@ -11,13 +12,19 @@ metadata:
     argocd.argoproj.io/sync-wave: "3"
 spec:
   project: default
-  source:
-    repoURL: https://charts.jetstack.io
-    chart: cert-manager
-    targetRevision: v1.17.2
-    helm:
-      valueFiles:
-          - values.yaml
+  sources:
+    # Source 1: Helm chart from upstream
+    - repoURL: https://charts.jetstack.io
+      chart: cert-manager
+      targetRevision: v1.17.2
+      helm:
+        valueFiles:
+          - $values/cluster/platform/cert-manager/values.yaml
+    # Source 2: Repo — values ref + ExternalSecret + ClusterIssuers
+    - repoURL: https://gitea.mk-labs.cloud/rblundon/homelab.git
+      targetRevision: main
+      path: cluster/platform/cert-manager
+      ref: values
   destination:
     server: https://kubernetes.default.svc
     namespace: cert-manager