added secret

app-of-secretstores.yaml

@@ -0,0 +1,31 @@
+# Bootstrap Application, applied once by hand (like app-of-projects.yaml
+# and incubator/*.yaml) — ArgoCD can't sync its own entry points. Syncs
+# everything under secretstores/ so SecretStore/ClusterSecretStore objects
+# are GitOps-managed instead of a manual one-off kubectl apply. Mirrors
+# app-of-projects.yaml exactly, kept as a separate Application (not folded
+# into that one) since these are External Secrets Operator resources, not
+# ArgoCD ones — different concern, same pattern.
+#
+# Uses the built-in "default" project — no chicken-and-egg problem, same
+# reasoning as app-of-projects.yaml.
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: app-of-secretstores
+  namespace: argocd
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
+spec:
+  project: default
+  source:
+    repoURL: 'http://gitea.192.168.1.7.nip.io/mukul/devops-infra-argo-config.git'
+    targetRevision: main
+    path: secretstores
+    directory:
+      recurse: true
+  destination:
+    name: in-cluster
+    namespace: argocd
+  syncPolicy:
+    automated:
+      prune: true