{{- if .Values.applications.workload-argocd.enabled }}
apiVersion: v1
kind: Secret
metadata:
  name: wkl-argocd-oauth-secret
  namespace: wkl-argocd
  annotations:
    "helm.sh/hook": pre-install,pre-upgrade
    "helm.sh/hook-weight": "-5"
    "helm.sh/hook-delete-policy": before-hook-creation
    argocd.argoproj.io/sync-wave: "-1"
stringData:
  # This will be replaced by the actual value through a post-installation job
  # or can be manually updated after deployment
  clientSecret: "$replace_with_secret"
{{- end }}