# ArgoCD CMP plugin for SOPS secret decryption
apiVersion: v1
kind: ConfigMap
metadata:
  name: argocd-cmp-cm
  namespace: argocd
data:
  sops-secrets-v1.0.yaml: |
    apiVersion: argoproj.io/v1alpha1
    kind: ConfigManagementPlugin
    metadata:
      name: sops-secrets-v1.0
    spec:
      version: v1.0
      init:
        command: [sh, -c]
        args:
          - |
            # Install sops if not present
            if ! command -v sops &> /dev/null; then
              wget -qO- https://github.com/getsops/sops/releases/download/v3.9.3/sops-v3.9.3.linux.amd64 > /usr/local/bin/sops
              chmod +x /usr/local/bin/sops
            fi
      generate:
        command: [sh, -c]
        args:
          - |
            # Find all .enc.yaml files and decrypt them
            find . -name '*.enc.yaml' -type f | while read -r file; do
              sops -d "$file"
            done
      discover:
        find:
          glob: "**/*.enc.yaml"