- name: Set up repository secrets
  hosts: dev
  become: true
  vars_files:
    - ../secrets.yml
  tasks:
    - name: Add private Git repo credentials to ArgoCD
      kubernetes.core.k8s:
        state: present
        definition:
          apiVersion: v1
          kind: Secret
          metadata:
            name: payphone-repo-creds
            namespace: argocd
            annotations:
              argocd.argoproj.io/secret-type: repository
          stringData:
            url: https://git.nyeki.dev/payphone/payphone.git
            username: "{{ gitlab_username }}"
            password: "{{ gitlab_pat }}"
        kubeconfig: /etc/rancher/k3s/k3s.yaml