Create new sidecars with configurations for argo cd

[mmalyska]

No description provided.

[github-actions]

Path: cluster/core/argocd/base

@@ -8991,8 +8991,6 @@
       generate:
         command: ["sh", "-c"]
         args: ["kustomize build --enable-alpha-plugins . | argocd-secret-replacer sops -f $ARGOCD_ENV_SOPS_FILE"]
-  helm.valuesFileSchemes: secrets+gpg-import, secrets+gpg-import-kubernetes, secrets+age-import, secrets+age-import-kubernetes, secrets, https
-  kustomize.buildOptions: --enable-alpha-plugins
   oidc.config: |
     name: Keycloak
     issuer: https://l.<secret:private-domain>/realms/home
@@ -9081,6 +9079,54 @@
   namespace: argocd
 ---
 apiVersion: v1
+data:
+  sops-replacer-plugin-helm.yaml: |
+    apiVersion: argoproj.io/v1alpha1
+    kind: ConfigManagementPlugin
+    metadata:
+      name: sops-replacer-plugin-helm
+    spec:
+      allowConcurrency: true
+      discover:
+        find:
+          command:
+            - sh
+            - "-c"
+            - "[[ ! -z $ARGOCD_ENV_SOPS_SECRET_FILE ]] && find . -name 'Chart.yaml' && find . -name 'values.yaml' && find . -name '$ARGOCD_ENV_SOPS_SECRET_FILE'"
+      generate:
+        command:
+          - bash
+          - "-c"
+          - |
+            helm template --release-name $ARGOCD_APP_NAME --namespace $ARGOCD_APP_NAMESPACE . | argocd-secret-replacer sops -f $ARGOCD_ENV_SOPS_SECRET_FILE
+      lockRepo: false
+  sops-replacer-plugin-kustomize.yaml: |
+    ---
+    apiVersion: argoproj.io/v1alpha1
+    kind: ConfigManagementPlugin
+    metadata:
+      name: sops-replacer-plugin-kustomize
+    spec:
+      allowConcurrency: true
+      discover:
+        find:
+          command:
+            - sh
+            - "-c"
+            - "[[ ! -z $ARGOCD_ENV_SOPS_SECRET_FILE ]] && find . -name 'kustomization.yaml' && find . -name '$ARGOCD_ENV_SOPS_SECRET_FILE'"
+      generate:
+        command:
+          - bash
+          - "-c"
+          - |
+            kustomize build --enable-alpha-plugins . | argocd-secret-replacer sops -f $ARGOCD_ENV_SOPS_SECRET_FILE
+      lockRepo: false
+kind: ConfigMap
+metadata:
+  name: sops-replacer-plugin
+  namespace: argocd
+---
+apiVersion: v1
 kind: Secret
 metadata:
   name: argocd-notifications-secret
@@ -9723,6 +9769,82 @@
               name: helm-working-dir
             - mountPath: /home/argocd/cmp-server/plugins
               name: plugins
+        - command:
+            - /var/run/argocd/argocd-cmp-server
+          env:
+            - name: SOPS_AGE_KEY_FILE
+              value: /sops-age/key
+            - name: ARGOCD_ENV_SOPS_EXE
+              value: /custom-tools/sops
+          image: alpine/k8s:1.23.10
+          name: sops-replacer-plugin-kustomize
+          resources:
+            limits:
+              cpu: 50m
+              memory: 128Mi
+            requests:
+              cpu: 10m
+              memory: 16Mi
+          securityContext:
+            runAsNonRoot: true
+            runAsUser: 999
+          volumeMounts:
+            - mountPath: /var/run/argocd
+              name: var-files
+            - mountPath: /home/argocd/cmp-server/plugins
+              name: plugins
+            - mountPath: /tmp
+              name: tmp-sops-replacer-plugin
+            - mountPath: /home/argocd/cmp-server/config/plugin.yaml
+              name: sops-replacer-plugin
+              subPath: sops-replacer-plugin-kustomize.yaml
+            - mountPath: /custom-tools/sops
+              name: custom-tools
+              subPath: sops
+            - mountPath: /sops-age/key
+              name: sops-age
+              subPath: age.agekey
+            - mountPath: /usr/local/bin/argocd-secret-replacer
+              name: custom-tools
+              subPath: argocd-secret-replacer
+        - command:
+            - /var/run/argocd/argocd-cmp-server
+          env:
+            - name: SOPS_AGE_KEY_FILE
+              value: /sops-age/key
+            - name: ARGOCD_ENV_SOPS_EXE
+              value: /custom-tools/sops
+          image: alpine/k8s:1.23.10
+          name: sops-replacer-plugin-helm
+          resources:
+            limits:
+              cpu: 50m
+              memory: 128Mi
+            requests:
+              cpu: 10m
+              memory: 16Mi
+          securityContext:
+            runAsNonRoot: true
+            runAsUser: 999
+          volumeMounts:
+            - mountPath: /var/run/argocd
+              name: var-files
+            - mountPath: /home/argocd/cmp-server/plugins
+              name: plugins
+            - mountPath: /tmp
+              name: tmp-sops-replacer-plugin
+            - mountPath: /home/argocd/cmp-server/config/plugin.yaml
+              name: sops-replacer-plugin
+              subPath: sops-replacer-plugin-helm.yaml
+            - mountPath: /custom-tools/sops
+              name: custom-tools
+              subPath: sops
+            - mountPath: /sops-age/key
+              name: sops-age
+              subPath: age.agekey
+            - mountPath: /usr/local/bin/argocd-secret-replacer
+              name: custom-tools
+              subPath: argocd-secret-replacer
       initContainers:
         - args:
             - |
@@ -9772,6 +9894,9 @@
               name: var-files
       serviceAccountName: argocd-repo-server
       volumes:
+        - configMap:
+            name: sops-replacer-plugin
+          name: sops-replacer-plugin
         - emptyDir: {}
           name: custom-tools
         - name: sops-age