Initial argo deployment

cluster/platform/argocd/repository-secret.yaml

@@ -0,0 +1,26 @@
+# ------------------------------------------------------------------------------
+# Repository Credential Secret — Gitea homelab repo (SSH)
+#
+# ArgoCD discovers repository credentials via secrets with the label
+# argocd.argoproj.io/secret-type: repository
+#
+# The SSH private key is injected by ESO from 1Password.
+# In 1Password (mk-labs vault):
+#   Item: "gitea-argocd-ssh"
+#   Field: private-key → full contents of the ed25519 private key PEM block
+# ------------------------------------------------------------------------------
+apiVersion: v1
+kind: Secret
+metadata:
+  name: repo-homelab-gitea
+  namespace: argocd
+  labels:
+    argocd.argoproj.io/secret-type: repository
+stringData:
+  type: git
+  url: git@gitea.mk-labs.cloud:rblundon/homelab.git
+  sshPrivateKey: |
+    -----BEGIN OPENSSH PRIVATE KEY-----
+    # This value is overwritten by ESO — placeholder only
+    # See externalsecret.yaml
+    -----END OPENSSH PRIVATE KEY-----