Traefik CRDs and annotations management

[urbaman]

Hi,

I'm trying to manage Traefik CRDs (ingressRoutes, certificates...) and some sensible annotations with argoCD.

I'd like to be able to manage domains and the hompage.key annotation in my git repo without exposing them.
What are the best practices?

Thank you.

Example: I'd like to sync this manifest, without exposing https://argocd.domain.com or gethomepage.dev/widget.key: "<token>"

apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: traefik-argocd
  namespace: traefik
  annotations:
    # For Homepage service discovery
    gethomepage.dev/href: "https://argocd.domain.com"
    gethomepage.dev/enabled: "true"
    gethomepage.dev/description: "Argo CD"
    gethomepage.dev/group: Automation
    gethomepage.dev/icon: argocd.svg
    gethomepage.dev/app: argocd # optional, may be needed if app.kubernetes.io/name != ingressRoute metadata.name
    gethomepage.dev/name: "Argo CD"
    gethomepage.dev/widget.type: "argocd"
    gethomepage.dev/widget.url: "https://argocd.domain.com"
    gethomepage.dev/widget.key: "<token>"
spec:
  entryPoints:
    - websecure
  routes:
    - kind: Rule
      match: Host(`argocd.domain.com`)
      priority: 10
      services:
        - name: argocd-server
          port: 80
          serversTransport: argocd
      middlewares:
        - name: security
    - kind: Rule
      match: Host(`argocd.domain.com`) && Header(`Content-Type`, `application/grpc`)
      priority: 11
      services:
        - name: argocd-server
          port: 80
          scheme: h2c
          serversTransport: argocd
      middlewares:
        - name: security
  tls:
    secretName: argocd-urbaman-cloud
    options:
      name: tlsoptions