Deploy ArgoCD Repo Secrets app to production (redhat-appstudio#377)

enkeefe00 · web-flow · commit daf386650cb2 · 2026-05-19T14:56:41.000Z
KFLUXINFRA-3596
diff --git a/argo-cd-apps/overlays/external-production/delete-argocd-repo-secrets-appset.yaml b/argo-cd-apps/overlays/external-production/delete-argocd-repo-secrets-appset.yaml
diff --git a/argo-cd-apps/overlays/external-production/kustomization.yaml b/argo-cd-apps/overlays/external-production/kustomization.yaml
@@ -11,9 +11,3 @@ patches:
       group: argoproj.io
       version: v1alpha1
       kind: ApplicationSet
-  - path: delete-argocd-repo-secrets-appset.yaml
-    target:
-      group: argoproj.io
-      version: v1alpha1
-      kind: ApplicationSet
-      name: argocd-repo-secrets
diff --git a/argo-cd-apps/overlays/internal-production/delete-argocd-repo-secrets-appset.yaml b/argo-cd-apps/overlays/internal-production/delete-argocd-repo-secrets-appset.yaml
diff --git a/argo-cd-apps/overlays/internal-production/kustomization.yaml b/argo-cd-apps/overlays/internal-production/kustomization.yaml
@@ -11,9 +11,3 @@ patches:
       group: argoproj.io
       version: v1alpha1
       kind: ApplicationSet
-  - path: delete-argocd-repo-secrets-appset.yaml
-    target:
-      group: argoproj.io
-      version: v1alpha1
-      kind: ApplicationSet
-      name: argocd-repo-secrets
diff --git a/components/argocd-repo-secrets/external-production/kustomization.yaml b/components/argocd-repo-secrets/external-production/kustomization.yaml
@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - redhat-appstudio-externalsecret.yaml
+
+namespace: argocd-local
diff --git a/components/argocd-repo-secrets/external-production/redhat-appstudio-externalsecret.yaml b/components/argocd-repo-secrets/external-production/redhat-appstudio-externalsecret.yaml
@@ -0,0 +1,23 @@
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: redhat-appstudio-externalsecret
+  annotations:
+    argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
+    argocd.argoproj.io/sync-wave: "-1"
+  labels:
+    argocd.argoproj.io/secret-type: repo-creds
+spec:
+  dataFrom:
+    - extract:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: production/infrastructure/github-argocd/kflux-c-prd-e01/redhat-appstudio
+  refreshInterval: 1h
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: appsre-stonesoup-vault
+  target:
+    creationPolicy: Owner
+    deletionPolicy: Delete
+    name: redhat-appstudio-secret
diff --git a/components/argocd-repo-secrets/internal-production/kustomization.yaml b/components/argocd-repo-secrets/internal-production/kustomization.yaml
@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - redhat-appstudio-externalsecret.yaml
+
+namespace: argocd-local
diff --git a/components/argocd-repo-secrets/internal-production/redhat-appstudio-externalsecret.yaml b/components/argocd-repo-secrets/internal-production/redhat-appstudio-externalsecret.yaml
@@ -0,0 +1,23 @@
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: redhat-appstudio-externalsecret
+  annotations:
+    argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
+    argocd.argoproj.io/sync-wave: "-1"
+  labels:
+    argocd.argoproj.io/secret-type: repo-creds
+spec:
+  dataFrom:
+    - extract:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: production/infrastructure/github-argocd/kflux-c-prd-i01/redhat-appstudio
+  refreshInterval: 1h
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: appsre-stonesoup-vault
+  target:
+    creationPolicy: Owner
+    deletionPolicy: Delete
+    name: redhat-appstudio-secret
