rblundon/homelab
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(argocd): restore SSH repo credentials for Gitea

Browse Source
This commit is contained in:
Ryan Blundon
2026-05-17 21:10:10 -05:00
parent 74e53d1364
commit ca1cdd0634
1 changed files with 9 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
cluster/platform/argocd/repository-secret.yaml
View File

@@ -1,13 +1,15 @@
# ------------------------------------------------------------------------------ # ------------------------------------------------------------------------------
# Repository Credential Secret — Gitea homelab repo (SSH) # Repository Credential Secret — Gitea homelab repo
# #
# ArgoCD discovers repository credentials via secrets with the label # ArgoCD discovers repository credentials via secrets with the label
# argocd.argoproj.io/secret-type: repository # argocd.argoproj.io/secret-type: repository
# #
# The SSH private key is injected by ESO from 1Password. # The actual token value is injected by the ExternalSecret (externalsecret.yaml)
# In 1Password (mk-labs vault): # which merges into argocd-secret. This secret references that value.
# Item: "gitea-argocd-ssh" #
# Field: private-key → full contents of the ed25519 private key PEM block # NOTE: The token field here uses a placeholder. The ExternalSecret populates
# argocd-secret with gitea.token, and ArgoCD resolves it via the
# stringData reference below.
# ------------------------------------------------------------------------------ # ------------------------------------------------------------------------------
apiVersion: v1 apiVersion: v1
kind: Secret kind: Secret
@@ -21,6 +23,5 @@ stringData:
url: git@gitea.mk-labs.cloud:rblundon/homelab.git url: git@gitea.mk-labs.cloud:rblundon/homelab.git
sshPrivateKey: | sshPrivateKey: |
-----BEGIN OPENSSH PRIVATE KEY----- -----BEGIN OPENSSH PRIVATE KEY-----
# This value is overwritten by ESO — placeholder only # populated by ESO
# See externalsecret.yaml
-----END OPENSSH PRIVATE KEY----- -----END OPENSSH PRIVATE KEY-----