fix(actions): install ArgoCD and SealedSecrets into the test cluster in k3d

.forgejo/workflows/validate.yaml

@@ -31,11 +31,6 @@ jobs:
             -schema-location default \
             -schema-location 'https://raw.githubusercontent.com/datreeio/CRDs-catalog/main/{{.Group}}/{{.ResourceKind}}_{{.ResourceAPIVersion}}.json' \
             ./manifests/
-      - name: Debug docker
-        run: |
-          cat /etc/hosts
-          wget -O- http://172.17.0.1:2375/info 2>&1 || true
-          wget -O- http://172.18.0.1:2375/info 2>&1 || true
       - name: Install k3d
         run: |
           curl -fsSL -o /tmp/k3d https://github.com/k3d-io/k3d/releases/download/v5.7.4/k3d-linux-amd64
@@ -50,12 +45,29 @@ jobs:
         run: |
           k3d cluster create test --wait
           kubectl cluster-info
-      - name: Apply manifests
+      - name: Install ArgoCD
         run: |
-          kubectl apply -f manifests/ --recursive
+          kubectl create namespace argocd
+          kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/installyaml
+          kubectl wait --for=condition=available --timeout=180s deployment/argocd-server -n argocd
+      - name: Install SealedSecrets
+        run: |
+          kubectl apply -f https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.27.0/controller.yaml
+          kubectl wait --for=condition=available --timeout=60s deployment/sealed-secrets-controller -n kube-system
+      - name: Import SealedSecrets key
+        env:
+          SEALED_SECRETS_KEY: ${{ secrets.SEALED_SECRETS_KEY }}
+        run: |
+          echo "$SEALED_SECRETS_KEY" | kubectl apply -f -
+          kubectl rollout restart deployment/sealed-secrets-controller -n kube-system
+          kubectl rollout status deployment/sealed-secrets-controller -n kube-system --timeout=60s
+      - name: Apply ArgoCD apps
+        run: |
+          kubectl apply -f apps/
 
-      - name: Wait for deployments
+      - name: Wait for everything
         run: |
+          sleep 30
           kubectl wait --for=condition=available --timeout=120s deployment --all --all-namespaces
       - name: Cleanup
         if: always()