feat: add rancher to argocd with external secret

apps/rancher.yaml

@@ -0,0 +1,24 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: rancher
+  namespace: argocd
+spec:
+  project: default
+  sources:
+    - repoURL: https://releases.rancher.com/server-charts/stable
+      chart: rancher
+      targetRevision: "2.14.2"
+      helm:
+        valueFiles:
+          - $values/helm/rancher/values.yaml
+    - repoURL: http://gitea-http.gitea.svc.cluster.local:3000/admin/k8s-manifests
+      targetRevision: HEAD
+      ref: values
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: cattle-system
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true

helm/rancher/values.yaml

@@ -1,2 +1,2 @@
-bootstrapPassword: CHANGEME
 hostname: rancher.uzbutterfly.com
+bootstrapPassword: ""

k8s/external-secrets/rancher.yaml

@@ -0,0 +1,18 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: rancher-secret
+  namespace: cattle-system
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    name: vault-backend
+    kind: ClusterSecretStore
+  target:
+    name: rancher-bootstrap-secret
+    creationPolicy: Owner
+  data:
+    - secretKey: bootstrapPassword
+      remoteRef:
+        key: secret/rancher
+        property: bootstrapPassword