From c44bdc6804e53cd8ffbc7715babf9a15ca1da42b Mon Sep 17 00:00:00 2001
From: Paul Buetow <paul@buetow.org>
Date: Sat, 10 Jan 2026 11:03:11 +0200
Subject: Use ArgoCD native repository credentials instead of manual SSH key
 mount

- Remove custom SSH key volume and volumeMount
- Remove SSH_AUTH_SOCK and GIT_SSH_COMMAND env vars
- Let ArgoCD use repository credential secret (git-server-repo-creds)
---
 f3s/argocd/values.yaml | 19 +------------------
 1 file changed, 1 insertion(+), 18 deletions(-)

diff --git a/f3s/argocd/values.yaml b/f3s/argocd/values.yaml
index 00e2b0b..3b4c511 100644
--- a/f3s/argocd/values.yaml
+++ b/f3s/argocd/values.yaml
@@ -61,30 +61,13 @@ repoServer:
     - name: repo-server-data
       persistentVolumeClaim:
         claimName: argocd-repo-server-pvc
-    # SSH private key for git-server access
-    - name: argocd-git-ssh-key
-      secret:
-        secretName: argocd-git-ssh-key
-        defaultMode: 0444
   volumeMounts:
     - name: repo-server-data
       mountPath: /home/argocd/repo-cache
-    # Mount SSH key for git operations
-    - name: argocd-git-ssh-key
-      mountPath: /home/argocd/.ssh/id_ed25519
-      subPath: sshPrivateKey
-      readOnly: true
-  # Configure repo-server to use the persistent cache directory and SSH key
+  # Configure repo-server to use the persistent cache directory
   env:
     - name: XDG_CACHE_HOME
       value: /home/argocd/repo-cache
-    # Disable SSH agent to prevent "SSH_AUTH_SOCK not-specified" errors
-    # Set to /dev/null as dummy path to satisfy ArgoCD's SSH agent check
-    - name: SSH_AUTH_SOCK
-      value: "/dev/null"
-    # Configure git to use SSH key, disable agent, and accept new host keys
-    - name: GIT_SSH_COMMAND
-      value: "ssh -i /home/argocd/.ssh/id_ed25519 -o IdentitiesOnly=yes -o StrictHostKeyChecking=accept-new"
   # Resource limits
   resources:
     limits:
-- 
cgit v1.2.3