rblundon/homelab
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(argocd): restore SSH repo credentials for Gitea

Browse Source
This commit is contained in:
Ryan Blundon
2026-05-17 21:10:10 -05:00
parent 74e53d1364
commit ca1cdd0634
1 changed files with 9 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
cluster/platform/argocd/repository-secret.yaml
View File

@@ -1,13 +1,15 @@
# ------------------------------------------------------------------------------
# Repository Credential Secret — Gitea homelab repo (SSH)
# Repository Credential Secret — Gitea homelab repo
#
# ArgoCD discovers repository credentials via secrets with the label
# argocd.argoproj.io/secret-type: repository
#
# The SSH private key is injected by ESO from 1Password.
# In 1Password (mk-labs vault):
# Item: "gitea-argocd-ssh"
# Field: private-key → full contents of the ed25519 private key PEM block
# The actual token value is injected by the ExternalSecret (externalsecret.yaml)
# which merges into argocd-secret. This secret references that value.
#
# NOTE: The token field here uses a placeholder. The ExternalSecret populates
# argocd-secret with gitea.token, and ArgoCD resolves it via the
# stringData reference below.
# ------------------------------------------------------------------------------
apiVersion: v1
kind: Secret
@@ -21,6 +23,5 @@ stringData:
url: git@gitea.mk-labs.cloud:rblundon/homelab.git
sshPrivateKey: |
-----BEGIN OPENSSH PRIVATE KEY-----
# This value is overwritten by ESO — placeholder only
# See externalsecret.yaml
-----END OPENSSH PRIVATE KEY-----
# populated by ESO
-----END OPENSSH PRIVATE KEY-----