- name: Set up repository secrets
  hosts: init
  become: true
  gather_facts: false
  vars_files:
    - 00-vault.yml
  tasks:
    - name: Add private Git repo credentials to ArgoCD
      kubernetes.core.k8s:
        state: present
        definition:
          apiVersion: v1
          kind: Secret
          metadata:
            name: payphone-repo
            namespace: argocd
            labels:
              argocd.argoproj.io/secret-type: repository
          type: Opaque
          stringData:
            type: git
            url: https://git.nyeki.dev/payphone/payphone.git
            username: "{{ gitlab_username }}"
            password: "{{ gitlab_pat }}"
        kubeconfig: /etc/rancher/k3s/k3s.yaml