argocd-cmp-vals-expander.yaml

---
# argocd-cmp-vals-expander.yaml 
apiVersion: v1
kind: ConfigMap
metadata:
  name: argocd-cmp-vals-expander
data:
  plugin.yaml: |
    apiVersion: argoproj.io/v1alpha1
    kind: ConfigManagementPlugin
    metadata:
      name: vals-expander
    spec:
      version: v1.0
      init:
        command: [sh]
        args: [-c, 'vals version']
      generate:
        command: [sh, -c]
        args:
          - vals eval -f values.yaml
      discover:
        find:
          glob: "**/values.yaml"
---
# argocd-cmp-vals-expander-env.yaml
apiVersion: v1
kind: Secret
metadata:
  name: argocd-cmp-vals-expander-env
data: {} # vals credentials
---
# argocd-cmp-vals-expander-secret.yaml
apiVersion: v1
kind: Secret
metadata:
  name: argocd-cmp-vals-expander-secret
data: {} # vals credentials
---
# argocd-values.yaml
repoServer:
  extraContainers:
    - name: cmp-vals-expander
      command:
        - "/var/run/argocd/argocd-cmp-server"
      image: ghcr.io/ccl-consulting/docker-vals:v0.37.3@sha256:3abf6de9ead8bf688d3513f28d57e7e76efd3c228c0b721186cb53125a071687
      securityContext:
        runAsNonRoot: true
        runAsUser: 999
      envFrom:
      - secretRef:
          name: argocd-cmp-vals-expander-env
      volumeMounts:
        - mountPath: /var/run/argocd
          name: var-files
        - mountPath: /home/argocd/cmp-server/plugins
          name: plugins
        - mountPath: /home/argocd/cmp-server/config/plugin.yaml
          subPath: plugin.yaml
          name: cmp-vals-expander
        - mountPath: /var/run/secrets/vals-expander
          name: cmp-vals-expander-secret
  volumes:
  - name: vals-dir
    emptyDir: {}
  - name: cmp-vals-expander
    configMap:
      name: argocd-cmp-vals-expander
  - name: cmp-vals-expander-secret
    secret:
      secretName: argocd-cmp-vals-expander-secret
---
# app/values.yaml
secret:
  a: secretref+provider://a
  b: secretref+provider://b