feat(argocd): secure password input and optional deploy-dc-config params

[Jcing95]

Summary

• OCI registry password is now read from OMS_REGISTRY_PASSWORD env var or prompted
  interactively (removes --registry-password flag)
• Git repo password is now read from OMS_GIT_PASSWORD env var; git repo credential
  is skipped when not set (removes --git-password flag)
• --dc-id is now optional: local cluster secret is skipped when not provided
• OCI registry URL is now configurable via --registry-url flag (defaults to
  ghcr.io/codesphere-cloud/charts)
• Removes the standalone argocd-repo-secret subcommand (functionality covered by
  --deploy-dc-config)
• Wraps underlying error in NewArgoCD failure path for better debugging
• Adds OCI password validation before applying the Helm registry secret

Usage

# Install ArgoCD chart only
oms beta install argocd

# Install chart + apply Codesphere resources (prompts for OCI password)
oms beta install argocd --deploy-dc-config

# Full install with all resources
OMS_REGISTRY_PASSWORD=token OMS_GIT_PASSWORD=git-token oms beta install argocd --deploy-dc-config --dc-id 0

# Use a custom/mirrored OCI registry
OMS_REGISTRY_PASSWORD=token oms beta install argocd --deploy-dc-config --registry-url my-registry.example.com/charts

Breaking Changes

• --registry-password flag removed (use OMS_REGISTRY_PASSWORD env var instead)
• --git-password flag removed (use OMS_GIT_PASSWORD env var instead)
• oms beta install argocd-repo-secret subcommand removed

[Copilot]

Pull request overview

Adds a new oms beta install argocd-repo-secret command to create/update ArgoCD repository secrets (Helm OCI or Git), backed by a rendered Kubernetes Secret manifest and applied via the existing Kubernetes apply helpers.

Changes:

• Introduces a generic ArgoCD repo Secret template and an internal/installer helper to render/apply it.
• Adds a new Cobra subcommand under oms beta install to collect flags + resolve password and apply the secret.
• Adds Ginkgo tests and user-facing docs for the new command.

Reviewed changes

Copilot reviewed 7 out of 7 changed files in this pull request and generated 6 comments.

Show a summary per file

File	Description
internal/installer/manifests/argocd/repo-secret.yaml.tpl	New generic ArgoCD repository Secret YAML template (parameterized).
internal/installer/argocd_repo_secret.go	New installer that renders the template and applies the Secret to the cluster.
internal/installer/argocd_repo_secret_test.go	Tests for creating/updating the repo Secret via a fake Kubernetes client.
docs/oms_beta_install.md	Adds the new subcommand to the beta install docs index.
docs/oms_beta_install_argocd-repo-secret.md	New documentation page for the command usage/options/examples.
cli/cmd/beta_install.go	Wires the new subcommand into oms beta install.
cli/cmd/argocd_repo_secret.go	New Cobra command implementation and password resolution logic.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 7 out of 7 changed files in this pull request and generated 3 comments.

[Copilot]

Pull request overview

Copilot reviewed 3 out of 3 changed files in this pull request and generated 2 comments.

[schrodit]

mostly fine just some clarification missing

[bachgg]

General logic change looks good to me