how are people handling secrets required by argo-cd?

[chupacabra71]

I am using SSO via Authentik and it works great, but... i need to provide clientID and clientSecret values to dex for that connection to work. For all my other secrets, i use external-secrets-operator to read them from Vault, but since my operator is not ready during bootstrapping, i end up having to leave these values in my git repo. what are people doing to handle secrets needed during bootstrapping?

[todaywasawesome]

@chupacabra71 We're using a lot of sealed secrets for that but external secrets with vault is excellent. You just have to make sure it gets bootstrapped too. It shouldn't be an issue if things start out of order as long as the secrets are eventually available.