From 63858fb115e867d797d7fb0849b4e05e053c7909 Mon Sep 17 00:00:00 2001
From: jad0s <tonda.kol55@seznam.cz>
Date: Thu, 21 May 2026 10:01:04 +0200
Subject: [PATCH] fix(actions): install ArgoCD and SealedSecrets into the test
 cluster in k3d

---
 .forgejo/workflows/validate.yaml | 28 ++++++++++++++++++++--------
 1 file changed, 20 insertions(+), 8 deletions(-)

diff --git a/.forgejo/workflows/validate.yaml b/.forgejo/workflows/validate.yaml
index 8732d31..0ae13c6 100644
--- a/.forgejo/workflows/validate.yaml
+++ b/.forgejo/workflows/validate.yaml
@@ -31,11 +31,6 @@ jobs:
             -schema-location default \
             -schema-location 'https://raw.githubusercontent.com/datreeio/CRDs-catalog/main/{{.Group}}/{{.ResourceKind}}_{{.ResourceAPIVersion}}.json' \
             ./manifests/
-      - name: Debug docker
-        run: |
-          cat /etc/hosts
-          wget -O- http://172.17.0.1:2375/info 2>&1 || true
-          wget -O- http://172.18.0.1:2375/info 2>&1 || true
       - name: Install k3d
         run: |
           curl -fsSL -o /tmp/k3d https://github.com/k3d-io/k3d/releases/download/v5.7.4/k3d-linux-amd64
@@ -50,12 +45,29 @@ jobs:
         run: |
           k3d cluster create test --wait
           kubectl cluster-info
-      - name: Apply manifests
+      - name: Install ArgoCD
         run: |
-          kubectl apply -f manifests/ --recursive
+          kubectl create namespace argocd
+          kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/installyaml
+          kubectl wait --for=condition=available --timeout=180s deployment/argocd-server -n argocd
+      - name: Install SealedSecrets
+        run: |
+          kubectl apply -f https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.27.0/controller.yaml
+          kubectl wait --for=condition=available --timeout=60s deployment/sealed-secrets-controller -n kube-system
+      - name: Import SealedSecrets key
+        env:
+          SEALED_SECRETS_KEY: ${{ secrets.SEALED_SECRETS_KEY }}
+        run: |
+          echo "$SEALED_SECRETS_KEY" | kubectl apply -f -
+          kubectl rollout restart deployment/sealed-secrets-controller -n kube-system
+          kubectl rollout status deployment/sealed-secrets-controller -n kube-system --timeout=60s
+      - name: Apply ArgoCD apps
+        run: |
+          kubectl apply -f apps/
 
-      - name: Wait for deployments
+      - name: Wait for everything
         run: |
+          sleep 30
           kubectl wait --for=condition=available --timeout=120s deployment --all --all-namespaces
       - name: Cleanup
         if: always()