Deploy ArgoCD Repo Secrets app to internal staging (redhat-appstudio#364)

This adds an ApplicationSet to deploy ArgoCD GitHub repository secrets
to allow ArgoCD instances in any common Konflux cluster to deploy
resources from any private repository in the redhat-appstudio GitHub
organization.

Also add the argocd-local namespace to the ClusterSecretStore
condition list to allow the app to access Vault.

KFLUXINFRA-3596

Author: enkeefe00

argo-cd-apps/base/all-clusters/argocd-repo-secrets/appset.yaml

@@ -0,0 +1,33 @@
+---
+apiVersion: argoproj.io/v1alpha1
+kind: ApplicationSet
+metadata:
+  name: argocd-repo-secrets
+spec:
+  generators:
+    - clusters:
+        values:
+          sourceRoot: components/argocd-repo-secrets
+          environment: ""
+  template:
+    metadata:
+      name: argocd-repo-secrets-{{nameNormalized}}
+    spec:
+      project: default
+      source:
+        path: '{{values.sourceRoot}}/{{values.environment}}'
+        repoURL: https://github.com/redhat-appstudio/infra-common-deployments.git
+        targetRevision: main
+      destination:
+        namespace: argocd-local # Must be the same namespace as the ArgoCD instance
+        name: in-cluster
+      syncPolicy:
+        automated:
+          prune: true
+          selfHeal: true
+        syncOptions:
+          - CreateNamespace=true
+        retry:
+          limit: 50
+          backoff:
+            duration: 15s

argo-cd-apps/base/all-clusters/argocd-repo-secrets/kustomization.yaml

@@ -0,0 +1,5 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - appset.yaml

argo-cd-apps/base/all-clusters/kustomization.yaml

@@ -2,6 +2,7 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
+  - argocd-repo-secrets
   - cluster-secret-store
   - external-secrets-operator
   - iam

argo-cd-apps/overlays/external-production/delete-argocd-repo-secrets-appset.yaml

@@ -0,0 +1,6 @@
+# argocd-repo-secrets is currently only being tested in internal-staging
+$patch: delete
+apiVersion: argoproj.io/v1alpha1
+kind: ApplicationSet
+metadata:
+  name: argocd-repo-secrets

argo-cd-apps/overlays/external-production/kustomization.yaml

@@ -11,3 +11,9 @@ patches:
       group: argoproj.io
       version: v1alpha1
       kind: ApplicationSet
+  - path: delete-argocd-repo-secrets-appset.yaml
+    target:
+      group: argoproj.io
+      version: v1alpha1
+      kind: ApplicationSet
+      name: argocd-repo-secrets

argo-cd-apps/overlays/external-staging/delete-argocd-repo-secrets-appset.yaml

@@ -0,0 +1,6 @@
+# argocd-repo-secrets is currently only being tested in internal-staging
+$patch: delete
+apiVersion: argoproj.io/v1alpha1
+kind: ApplicationSet
+metadata:
+  name: argocd-repo-secrets

argo-cd-apps/overlays/external-staging/kustomization.yaml

@@ -11,3 +11,9 @@ patches:
       group: argoproj.io
       version: v1alpha1
       kind: ApplicationSet
+  - path: delete-argocd-repo-secrets-appset.yaml
+    target:
+      group: argoproj.io
+      version: v1alpha1
+      kind: ApplicationSet
+      name: argocd-repo-secrets

argo-cd-apps/overlays/internal-production/delete-argocd-repo-secrets-appset.yaml

@@ -0,0 +1,6 @@
+# argocd-repo-secrets is currently only being tested in internal-staging
+$patch: delete
+apiVersion: argoproj.io/v1alpha1
+kind: ApplicationSet
+metadata:
+  name: argocd-repo-secrets

argo-cd-apps/overlays/internal-production/kustomization.yaml

@@ -11,3 +11,9 @@ patches:
       group: argoproj.io
       version: v1alpha1
       kind: ApplicationSet
+  - path: delete-argocd-repo-secrets-appset.yaml
+    target:
+      group: argoproj.io
+      version: v1alpha1
+      kind: ApplicationSet
+      name: argocd-repo-secrets

components/argocd-repo-secrets/OWNERS

@@ -0,0 +1,17 @@
+# See the OWNERS docs: https://go.k8s.io/owners
+
+approvers:
+  - hugares
+  - enkeefe00
+  - sadlerap
+  - filariow
+  - mshaposhnik
+  - manish-jangra
+
+reviewers:
+  - hugares
+  - enkeefe00
+  - sadlerap
+  - filariow
+  - mshaposhnik
+  - manish-jangra