This plugin fetches secrets from a GitHub repository and injects them as environment variables into Kubernetes pod manifests. The plugin runs as a sidecar container alongside the argocd-repo-server. The sidecar is built and deployed via GitHub Actions, which has access to GitHub Secrets values during the build process.
- GitHub Action - Builds sidecar with secrets baked in at build time
- Sidecar container - Runs the ConfigManagementPlugin server with pre-loaded secrets