feat: Wire ArgoCD to Forgejo for GitOps management

Configure myks env-data with global repoURL pointing to Forgejo repo,
switch destination from cluster name to in-cluster server URL, and
disable placeholder cluster Secret generation. Add deploy key init Job
that generates an SSH keypair, registers it with Forgejo, and creates
the ArgoCD repository secret. Switch job images from bitnami/kubectl
to alpine/k8s.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

envs/_env/argocd/secret.overlay.ytt.yaml

@@ -1,14 +0,0 @@
-#@ load("@ytt:overlay", "overlay")
----
-#@ def secret_fragment():
-kind: Secret
-metadata:
-  labels:
-    argocd.argoproj.io/secret-type: cluster
-#@ end
-
-#@overlay/match by=overlay.subset(secret_fragment()), expects="0+"
----
-stringData:
-  config: ARGOCD_CLUSTER_CONNECT_CONFIG
-  server: ARGOCD_CLUSTER_SERVER_URL

envs/env-data.ytt.yaml

@@ -5,5 +5,13 @@ argocd:
   app:
     prefix: app-
     finalizers: []
+    source:
+      repoURL: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
+    destination:
+      server: https://kubernetes.default.svc
   project:
     prefix: env-
+    destination:
+      server: https://kubernetes.default.svc
+  env:
+    generateSecret: false

prototypes/forgejo/ytt/admin-secret-job.ytt.yaml

@@ -49,7 +49,7 @@ spec:
       restartPolicy: OnFailure
       containers:
         - name: init
-          image: bitnami/kubectl:latest
+          image: alpine/k8s:1.32.3
           command:
             - sh
             - -c

prototypes/forgejo/ytt/argocd-deploy-key-job.ytt.yaml

@@ -0,0 +1,132 @@
+#@ load("@ytt:data", "data")
+
+#@ ns = data.values.application.namespace
+
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: argocd-deploy-key-init
+  namespace: #@ ns
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: argocd-deploy-key-init
+rules:
+  - apiGroups: [""]
+    resources: ["secrets"]
+    verbs: ["get", "create"]
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: argocd-deploy-key-init
+subjects:
+  - kind: ServiceAccount
+    name: argocd-deploy-key-init
+    namespace: #@ ns
+roleRef:
+  kind: ClusterRole
+  name: argocd-deploy-key-init
+  apiGroup: rbac.authorization.k8s.io
+
+---
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: argocd-deploy-key-init
+  namespace: #@ ns
+spec:
+  ttlSecondsAfterFinished: 300
+  template:
+    spec:
+      serviceAccountName: argocd-deploy-key-init
+      restartPolicy: OnFailure
+      containers:
+        - name: init
+          image: alpine/k8s:1.32.3
+          command:
+            - sh
+            - -c
+            - |
+              set -e
+
+              apk add --no-cache openssh-keygen > /dev/null 2>&1
+
+              ARGOCD_NS="argocd"
+              REPO_SECRET="forgejo-repo"
+              REPO_URL="ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git"
+              FORGEJO_URL="https://git.tr1ceracop.de"
+              REPO_OWNER="gitea_admin"
+              REPO_NAME="k8s-and-chill"
+
+              # Check if ArgoCD repo secret already exists
+              if kubectl get secret "${REPO_SECRET}" -n "${ARGOCD_NS}" >/dev/null 2>&1; then
+                echo "Secret ${REPO_SECRET} already exists in ${ARGOCD_NS}, skipping"
+                exit 0
+              fi
+
+              # Read admin credentials from forgejo-admin-secret
+              ADMIN_USER=$(kubectl get secret forgejo-admin-secret -n "${NAMESPACE}" -o jsonpath='{.data.username}' | base64 -d)
+              ADMIN_PASS=$(kubectl get secret forgejo-admin-secret -n "${NAMESPACE}" -o jsonpath='{.data.password}' | base64 -d)
+
+              # Generate ed25519 SSH keypair
+              KEYDIR=$(mktemp -d)
+              ssh-keygen -t ed25519 -f "${KEYDIR}/id_ed25519" -N "" -q
+              PRIVKEY=$(cat "${KEYDIR}/id_ed25519")
+              PUBKEY=$(cat "${KEYDIR}/id_ed25519.pub")
+              rm -rf "${KEYDIR}"
+
+              # Wait for Forgejo to be ready
+              echo "Waiting for Forgejo to be ready..."
+              for i in $(seq 1 60); do
+                if curl -sk "${FORGEJO_URL}/api/v1/version" >/dev/null 2>&1; then
+                  echo "Forgejo is ready"
+                  break
+                fi
+                if [ "$i" -eq 60 ]; then
+                  echo "Forgejo did not become ready in time"
+                  exit 1
+                fi
+                sleep 5
+              done
+
+              # Register deploy key via Forgejo API
+              echo "Registering deploy key..."
+              HTTP_CODE=$(curl -sk -o /tmp/response.json -w "%{http_code}" \
+                -X POST "${FORGEJO_URL}/api/v1/repos/${REPO_OWNER}/${REPO_NAME}/keys" \
+                -H "Content-Type: application/json" \
+                -u "${ADMIN_USER}:${ADMIN_PASS}" \
+                -d "{\"title\":\"argocd-deploy-key\",\"key\":\"${PUBKEY}\",\"read_only\":true}")
+
+              if [ "${HTTP_CODE}" = "201" ]; then
+                echo "Deploy key registered successfully"
+              elif [ "${HTTP_CODE}" = "422" ]; then
+                echo "Deploy key already exists in Forgejo (422), continuing"
+              else
+                echo "Failed to register deploy key: HTTP ${HTTP_CODE}"
+                cat /tmp/response.json
+                exit 1
+              fi
+
+              # Create ArgoCD repository secret
+              kubectl create secret generic "${REPO_SECRET}" \
+                -n "${ARGOCD_NS}" \
+                --from-literal=type=git \
+                --from-literal=url="${REPO_URL}" \
+                --from-literal=sshPrivateKey="${PRIVKEY}"
+
+              # Label the secret for ArgoCD
+              kubectl label secret "${REPO_SECRET}" \
+                -n "${ARGOCD_NS}" \
+                argocd.argoproj.io/secret-type=repository
+
+              echo "Created ArgoCD repository secret ${REPO_SECRET} in ${ARGOCD_NS}"
+          env:
+            - name: NAMESPACE
+              valueFrom:
+                fieldRef:
+                  fieldPath: metadata.namespace

rendered/argocd/production/app-argocd.yaml

@@ -9,12 +9,12 @@ metadata:
   namespace: argocd
 spec:
   destination:
-    name: production
     namespace: argocd
+    server: https://kubernetes.default.svc
   project: env-production
   source:
     path: rendered/envs/production/argocd
-    repoURL: ""
+    repoURL: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
     targetRevision: main
   syncPolicy:
     automated:

rendered/argocd/production/app-cert-manager.yaml

@@ -9,12 +9,12 @@ metadata:
   namespace: argocd
 spec:
   destination:
-    name: production
     namespace: cert-manager
+    server: https://kubernetes.default.svc
   project: env-production
   source:
     path: rendered/envs/production/cert-manager
-    repoURL: ""
+    repoURL: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
     targetRevision: main
   syncPolicy:
     automated:

rendered/argocd/production/app-forgejo.yaml

@@ -9,8 +9,8 @@ metadata:
   namespace: argocd
 spec:
   destination:
-    name: production
     namespace: forgejo
+    server: https://kubernetes.default.svc
   project: env-production
   source:
     path: rendered/envs/production/forgejo

rendered/argocd/production/app-traefik.yaml

@@ -9,12 +9,12 @@ metadata:
   namespace: argocd
 spec:
   destination:
-    name: production
     namespace: traefik
+    server: https://kubernetes.default.svc
   project: env-production
   source:
     path: rendered/envs/production/traefik
-    repoURL: ""
+    repoURL: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
     targetRevision: main
   syncPolicy:
     automated:

rendered/argocd/production/env-production.yaml

@@ -14,24 +14,9 @@ spec:
     kind: '*'
   destinations:
   - namespace: '*'
-    name: production
+    server: https://kubernetes.default.svc
   namespaceResourceWhitelist:
   - group: '*'
     kind: '*'
   sourceRepos:
   - '*'
----
-apiVersion: v1
-kind: Secret
-metadata:
-  labels:
-    argocd.argoproj.io/secret-type: cluster
-  name: production
-  namespace: argocd
-  annotations:
-    myks.dev/environment: production
-stringData:
-  config: ARGOCD_CLUSTER_CONNECT_CONFIG
-  name: production
-  project: env-production
-  server: ARGOCD_CLUSTER_SERVER_URL

rendered/envs/production/argocd/clusterrole-argo-cd-argocd-application-controller.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: application-controller
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/clusterrole-argo-cd-argocd-notifications-controller.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: notifications-controller
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/clusterrole-argo-cd-argocd-server.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: server
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/clusterrolebinding-argo-cd-argocd-application-controller.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: application-controller
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/clusterrolebinding-argo-cd-argocd-notifications-controller.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: notifications-controller
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/clusterrolebinding-argo-cd-argocd-server.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: server
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/configmap-argo-cd-argocd-redis-health-configmap.yaml

@@ -29,7 +29,7 @@ data:
 kind: ConfigMap
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: redis
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/configmap-argocd-cm.yaml

@@ -12,7 +12,7 @@ data:
 kind: ConfigMap
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: server
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/configmap-argocd-cmd-params-cm.yaml

@@ -41,7 +41,7 @@ data:
 kind: ConfigMap
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: server
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/configmap-argocd-gpg-keys-cm.yaml

@@ -2,7 +2,7 @@ apiVersion: v1
 kind: ConfigMap
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/instance: argo-cd
     app.kubernetes.io/managed-by: Helm

rendered/envs/production/argocd/configmap-argocd-notifications-cm.yaml

@@ -5,7 +5,7 @@ data:
 kind: ConfigMap
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: notifications-controller
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/configmap-argocd-rbac-cm.yaml

@@ -7,7 +7,7 @@ data:
 kind: ConfigMap
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: server
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/configmap-argocd-ssh-known-hosts-cm.yaml

@@ -18,7 +18,7 @@ data:
 kind: ConfigMap
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/instance: argo-cd
     app.kubernetes.io/managed-by: Helm

rendered/envs/production/argocd/configmap-argocd-tls-certs-cm.yaml

@@ -2,7 +2,7 @@ apiVersion: v1
 kind: ConfigMap
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/instance: argo-cd
     app.kubernetes.io/managed-by: Helm

rendered/envs/production/argocd/customresourcedefinition-applications.argoproj.io.yaml

@@ -2,7 +2,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
     helm.sh/resource-policy: keep
   labels:
     app.kubernetes.io/name: applications.argoproj.io

rendered/envs/production/argocd/customresourcedefinition-applicationsets.argoproj.io.yaml

@@ -2,7 +2,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
     helm.sh/resource-policy: keep
   labels:
     app.kubernetes.io/name: applicationsets.argoproj.io

rendered/envs/production/argocd/customresourcedefinition-appprojects.argoproj.io.yaml

@@ -2,7 +2,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
     helm.sh/resource-policy: keep
   labels:
     app.kubernetes.io/name: appprojects.argoproj.io

rendered/envs/production/argocd/deployment-argo-cd-argocd-applicationset-controller.yaml

@@ -2,7 +2,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: applicationset-controller
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/deployment-argo-cd-argocd-dex-server.yaml

@@ -2,7 +2,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: dex-server
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/deployment-argo-cd-argocd-notifications-controller.yaml

@@ -2,7 +2,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: notifications-controller
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/deployment-argo-cd-argocd-redis.yaml

@@ -2,7 +2,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: redis
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/deployment-argo-cd-argocd-repo-server.yaml

@@ -2,7 +2,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: repo-server
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/deployment-argo-cd-argocd-server.yaml

@@ -2,7 +2,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: server
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/ingress-argo-cd-argocd-server.yaml

@@ -2,7 +2,7 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
     cert-manager.io/cluster-issuer: letsencrypt
   labels:
     app.kubernetes.io/component: server

rendered/envs/production/argocd/job-argo-cd-argocd-redis-secret-init.yaml

@@ -2,7 +2,7 @@ apiVersion: batch/v1
 kind: Job
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
     helm.sh/hook: pre-install,pre-upgrade
     helm.sh/hook-delete-policy: before-hook-creation
   labels:

rendered/envs/production/argocd/namespace-argocd.yaml

@@ -2,7 +2,7 @@ apiVersion: v1
 kind: Namespace
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     pod-security.kubernetes.io/enforce: privileged
   name: argocd

rendered/envs/production/argocd/role-argo-cd-argocd-application-controller.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: application-controller
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/role-argo-cd-argocd-applicationset-controller.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: applicationset-controller
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/role-argo-cd-argocd-dex-server.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: dex-server
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/role-argo-cd-argocd-notifications-controller.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: notifications-controller
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/role-argo-cd-argocd-redis-secret-init.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
     helm.sh/hook: pre-install,pre-upgrade
     helm.sh/hook-delete-policy: before-hook-creation
   labels:

rendered/envs/production/argocd/role-argo-cd-argocd-repo-server.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: repo-server
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/role-argo-cd-argocd-server.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: server
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/rolebinding-argo-cd-argocd-application-controller.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: application-controller
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/rolebinding-argo-cd-argocd-applicationset-controller.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: applicationset-controller
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/rolebinding-argo-cd-argocd-dex-server.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: dex-server
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/rolebinding-argo-cd-argocd-notifications-controller.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: notifications-controller
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/rolebinding-argo-cd-argocd-redis-secret-init.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
     helm.sh/hook: pre-install,pre-upgrade
     helm.sh/hook-delete-policy: before-hook-creation
   labels:

rendered/envs/production/argocd/rolebinding-argo-cd-argocd-repo-server.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: repo-server
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/rolebinding-argo-cd-argocd-server.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: server
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/secret-argocd-notifications-secret.yaml

@@ -2,7 +2,7 @@ apiVersion: v1
 kind: Secret
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: notifications-controller
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/secret-argocd-secret.yaml

@@ -2,7 +2,7 @@ apiVersion: v1
 kind: Secret
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: server
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/service-argo-cd-argocd-applicationset-controller.yaml

@@ -2,7 +2,7 @@ apiVersion: v1
 kind: Service
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: applicationset-controller
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/service-argo-cd-argocd-dex-server.yaml

@@ -2,7 +2,7 @@ apiVersion: v1
 kind: Service
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: dex-server
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/service-argo-cd-argocd-redis.yaml

@@ -2,7 +2,7 @@ apiVersion: v1
 kind: Service
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: redis
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/service-argo-cd-argocd-repo-server.yaml

@@ -2,7 +2,7 @@ apiVersion: v1
 kind: Service
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: repo-server
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/service-argo-cd-argocd-server.yaml

@@ -2,7 +2,7 @@ apiVersion: v1
 kind: Service
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: server
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/serviceaccount-argo-cd-argocd-redis-secret-init.yaml

@@ -3,7 +3,7 @@ automountServiceAccountToken: true
 kind: ServiceAccount
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
     helm.sh/hook: pre-install,pre-upgrade
     helm.sh/hook-delete-policy: before-hook-creation
   labels:

rendered/envs/production/argocd/serviceaccount-argo-cd-argocd-repo-server.yaml

@@ -3,7 +3,7 @@ automountServiceAccountToken: true
 kind: ServiceAccount
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: repo-server
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/serviceaccount-argocd-application-controller.yaml

@@ -3,7 +3,7 @@ automountServiceAccountToken: true
 kind: ServiceAccount
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: application-controller
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/serviceaccount-argocd-applicationset-controller.yaml

@@ -3,7 +3,7 @@ automountServiceAccountToken: true
 kind: ServiceAccount
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: applicationset-controller
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/serviceaccount-argocd-dex-server.yaml

@@ -3,7 +3,7 @@ automountServiceAccountToken: true
 kind: ServiceAccount
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: dex-server
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/serviceaccount-argocd-notifications-controller.yaml

@@ -3,7 +3,7 @@ automountServiceAccountToken: true
 kind: ServiceAccount
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: notifications-controller
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/serviceaccount-argocd-server.yaml

@@ -3,7 +3,7 @@ automountServiceAccountToken: true
 kind: ServiceAccount
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: server
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/argocd/statefulset-argo-cd-argocd-application-controller.yaml

@@ -2,7 +2,7 @@ apiVersion: apps/v1
 kind: StatefulSet
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app.kubernetes.io/component: application-controller
     app.kubernetes.io/instance: argo-cd

rendered/envs/production/cert-manager/clusterissuer-letsencrypt.yaml

@@ -2,7 +2,7 @@ apiVersion: cert-manager.io/v1
 kind: ClusterIssuer
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   name: letsencrypt
   namespace: cert-manager
 spec:

rendered/envs/production/cert-manager/clusterrole-cert-manager-cainjector.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app: cainjector
     app.kubernetes.io/component: cainjector

rendered/envs/production/cert-manager/clusterrole-cert-manager-cluster-view.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app: cert-manager
     app.kubernetes.io/component: controller

rendered/envs/production/cert-manager/clusterrole-cert-manager-controller-approve_cert-manager-io.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app: cert-manager
     app.kubernetes.io/component: cert-manager

rendered/envs/production/cert-manager/clusterrole-cert-manager-controller-certificates.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app: cert-manager
     app.kubernetes.io/component: controller

rendered/envs/production/cert-manager/clusterrole-cert-manager-controller-certificatesigningrequests.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app: cert-manager
     app.kubernetes.io/component: cert-manager

rendered/envs/production/cert-manager/clusterrole-cert-manager-controller-challenges.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app: cert-manager
     app.kubernetes.io/component: controller

rendered/envs/production/cert-manager/clusterrole-cert-manager-controller-clusterissuers.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app: cert-manager
     app.kubernetes.io/component: controller

rendered/envs/production/cert-manager/clusterrole-cert-manager-controller-ingress-shim.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app: cert-manager
     app.kubernetes.io/component: controller

rendered/envs/production/cert-manager/clusterrole-cert-manager-controller-issuers.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app: cert-manager
     app.kubernetes.io/component: controller

rendered/envs/production/cert-manager/clusterrole-cert-manager-controller-orders.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app: cert-manager
     app.kubernetes.io/component: controller

rendered/envs/production/cert-manager/clusterrole-cert-manager-edit.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app: cert-manager
     app.kubernetes.io/component: controller

rendered/envs/production/cert-manager/clusterrole-cert-manager-view.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app: cert-manager
     app.kubernetes.io/component: controller

rendered/envs/production/cert-manager/clusterrole-cert-manager-webhook_subjectaccessreviews.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app: webhook
     app.kubernetes.io/component: webhook

rendered/envs/production/cert-manager/clusterrolebinding-cert-manager-cainjector.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app: cainjector
     app.kubernetes.io/component: cainjector

rendered/envs/production/cert-manager/clusterrolebinding-cert-manager-controller-approve_cert-manager-io.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app: cert-manager
     app.kubernetes.io/component: cert-manager

rendered/envs/production/cert-manager/clusterrolebinding-cert-manager-controller-certificates.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app: cert-manager
     app.kubernetes.io/component: controller

rendered/envs/production/cert-manager/clusterrolebinding-cert-manager-controller-certificatesigningrequests.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app: cert-manager
     app.kubernetes.io/component: cert-manager

rendered/envs/production/cert-manager/clusterrolebinding-cert-manager-controller-challenges.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app: cert-manager
     app.kubernetes.io/component: controller

rendered/envs/production/cert-manager/clusterrolebinding-cert-manager-controller-clusterissuers.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app: cert-manager
     app.kubernetes.io/component: controller

rendered/envs/production/cert-manager/clusterrolebinding-cert-manager-controller-ingress-shim.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app: cert-manager
     app.kubernetes.io/component: controller

rendered/envs/production/cert-manager/clusterrolebinding-cert-manager-controller-issuers.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app: cert-manager
     app.kubernetes.io/component: controller

rendered/envs/production/cert-manager/clusterrolebinding-cert-manager-controller-orders.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app: cert-manager
     app.kubernetes.io/component: controller

rendered/envs/production/cert-manager/clusterrolebinding-cert-manager-webhook_subjectaccessreviews.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app: webhook
     app.kubernetes.io/component: webhook

rendered/envs/production/cert-manager/customresourcedefinition-certificaterequests.cert-manager.io.yaml

@@ -2,7 +2,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
     helm.sh/resource-policy: keep
   labels:
     app: cert-manager

rendered/envs/production/cert-manager/customresourcedefinition-certificates.cert-manager.io.yaml

@@ -2,7 +2,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
     helm.sh/resource-policy: keep
   labels:
     app: cert-manager

rendered/envs/production/cert-manager/customresourcedefinition-challenges.acme.cert-manager.io.yaml

@@ -2,7 +2,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
     helm.sh/resource-policy: keep
   labels:
     app: cert-manager

rendered/envs/production/cert-manager/customresourcedefinition-clusterissuers.cert-manager.io.yaml

@@ -2,7 +2,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
     helm.sh/resource-policy: keep
   labels:
     app: cert-manager

rendered/envs/production/cert-manager/customresourcedefinition-issuers.cert-manager.io.yaml

@@ -2,7 +2,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
     helm.sh/resource-policy: keep
   labels:
     app: cert-manager

rendered/envs/production/cert-manager/customresourcedefinition-orders.acme.cert-manager.io.yaml

@@ -2,7 +2,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
     helm.sh/resource-policy: keep
   labels:
     app: cert-manager

rendered/envs/production/cert-manager/deployment-cert-manager-cainjector.yaml

@@ -2,7 +2,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app: cainjector
     app.kubernetes.io/component: cainjector

rendered/envs/production/cert-manager/deployment-cert-manager-webhook.yaml

@@ -2,7 +2,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app: webhook
     app.kubernetes.io/component: webhook

rendered/envs/production/cert-manager/deployment-cert-manager.yaml

@@ -2,7 +2,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     app: cert-manager
     app.kubernetes.io/component: controller

rendered/envs/production/cert-manager/job-cert-manager-startupapicheck.yaml

@@ -2,7 +2,7 @@ apiVersion: batch/v1
 kind: Job
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
     helm.sh/hook: post-install
     helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded
     helm.sh/hook-weight: "1"

rendered/envs/production/cert-manager/mutatingwebhookconfiguration-cert-manager-webhook.yaml

@@ -2,7 +2,7 @@ apiVersion: admissionregistration.k8s.io/v1
 kind: MutatingWebhookConfiguration
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
     cert-manager.io/inject-ca-from-secret: cert-manager/cert-manager-webhook-ca
   labels:
     app: webhook

rendered/envs/production/cert-manager/namespace-cert-manager.yaml

@@ -2,7 +2,7 @@ apiVersion: v1
 kind: Namespace
 metadata:
   annotations:
-    a8r.io/repository: ""
+    a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels:
     pod-security.kubernetes.io/enforce: privileged
   name: cert-manager