# ArgoCD Repository Registration

ArgoCD discovers Git repositories from Kubernetes Secrets in the `argocd`
namespace with `argocd.argoproj.io/secret-type: repository`.

Use the templates in this directory to create SOPS-encrypted, non-plaintext
repository Secret files. Credentials must be sourced from the approved
operator/OpenBao path and must never be committed in plaintext.

Recommended OpenBao path:

```text
platform/operators/argocd/repositories/<repo-name>
```

After creating an encrypted file such as
`argocd/repositories/railiance-platform.repository.sops.yaml`, apply it with:

```bash
ARGOCD_REPOSITORY_SECRET=argocd/repositories/railiance-platform.repository.sops.yaml \
  make argocd-repo-apply
```