# ------------------------------------------------------------------------------
# Repository Credential Secret — Gitea homelab repo
#
# ArgoCD discovers repository credentials via secrets with the label
# argocd.argoproj.io/secret-type: repository
#
# The actual token value is injected by the ExternalSecret (externalsecret.yaml)
# which merges into argocd-secret. This secret references that value.
#
# NOTE: The token field here uses a placeholder. The ExternalSecret populates
# argocd-secret with gitea.token, and ArgoCD resolves it via the
# stringData reference below.
# ------------------------------------------------------------------------------
apiVersion: v1
kind: Secret
metadata:
  name: repo-homelab-gitea
  namespace: argocd
  labels:
    argocd.argoproj.io/secret-type: repository
stringData:
  type: git
  url: git@gitea.mk-labs.cloud:rblundon/homelab.git
  sshPrivateKey: |
    -----BEGIN OPENSSH PRIVATE KEY-----
    # populated by ESO
    -----END OPENSSH PRIVATE KEY-----