# ------------------------------------------------------------------------------
# Repository Credential Secret — Gitea homelab repo (SSH)
#
# ArgoCD discovers repository credentials via secrets with the label
# argocd.argoproj.io/secret-type: repository
#
# The SSH private key is injected by ESO from 1Password.
# In 1Password (mk-labs vault):
#   Item: "gitea-argocd-ssh"
#   Field: private-key → full contents of the ed25519 private key PEM block
# ------------------------------------------------------------------------------
apiVersion: v1
kind: Secret
metadata:
  name: repo-homelab-gitea
  namespace: argocd
  labels:
    argocd.argoproj.io/secret-type: repository
stringData:
  type: git
  url: git@gitea.mk-labs.cloud:rblundon/homelab.git
  sshPrivateKey: |
    -----BEGIN OPENSSH PRIVATE KEY-----
    # This value is overwritten by ESO — placeholder only
    # See externalsecret.yaml
    -----END OPENSSH PRIVATE KEY-----