26 lines
940 B
YAML
26 lines
940 B
YAML
# ------------------------------------------------------------------------------
|
|
# Repository Credential Secret — Gitea homelab repo (SSH)
|
|
#
|
|
# ArgoCD discovers repository credentials via secrets with the label
|
|
# argocd.argoproj.io/secret-type: repository
|
|
#
|
|
# The SSH private key is injected by ESO from 1Password.
|
|
# In 1Password (mk-labs vault):
|
|
# Item: "gitea-argocd-ssh"
|
|
# Field: private-key → full contents of the ed25519 private key PEM block
|
|
# ------------------------------------------------------------------------------
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: repo-homelab-gitea
|
|
namespace: argocd
|
|
labels:
|
|
argocd.argoproj.io/secret-type: repository
|
|
stringData:
|
|
type: git
|
|
url: git@gitea.mk-labs.cloud:rblundon/homelab.git
|
|
sshPrivateKey: |
|
|
-----BEGIN OPENSSH PRIVATE KEY-----
|
|
# This value is overwritten by ESO — placeholder only
|
|
# See externalsecret.yaml
|
|
-----END OPENSSH PRIVATE KEY----- |