cilium, argo

argocd/repository-secret.yaml

@@ -0,0 +1,27 @@
+# ------------------------------------------------------------------------------
+# Repository Credential Secret — Gitea homelab repo
+#
+# ArgoCD discovers repository credentials via secrets with the label
+# argocd.argoproj.io/secret-type: repository
+#
+# The actual token value is injected by the ExternalSecret (externalsecret.yaml)
+# which merges into argocd-secret. This secret references that value.
+#
+# NOTE: The token field here uses a placeholder. The ExternalSecret populates
+# argocd-secret with gitea.token, and ArgoCD resolves it via the
+# stringData reference below.
+# ------------------------------------------------------------------------------
+apiVersion: v1
+kind: Secret
+metadata:
+  name: repo-homelab-gitea
+  namespace: argocd
+  labels:
+    argocd.argoproj.io/secret-type: repository
+stringData:
+  type: git
+  url: git@gitea.mk-labs.cloud:rblundon/homelab.git
+  sshPrivateKey: |
+    -----BEGIN OPENSSH PRIVATE KEY-----
+    # populated by ESO
+    -----END OPENSSH PRIVATE KEY-----