argo-cd-import-pgp-key.yml

apiVersion: apps/v1
kind: Deployment
metadata:
  name: argo-cd-repo-server
spec:
  template:
    spec:
      volumes:
        - name: gnupgp-home
          emptyDir: {}
        - name: deploy-pgp-key
          secret:
            secretName: deploy-pgp-key
      initContainers:
        - name: import-gpg-key
          image: quay.io/argoproj/argocd:latest
          command: ["gpg", "--import", "/deploy-pgp-key/deploy-key.asc"]
          env:
            - name: GNUPGHOME
              value: /gnupg-home/.gnupg
          volumeMounts:
            - mountPath: /deploy-pgp-key
              name: deploy-pgp-key
              readOnly: true
            - mountPath: /gnupg-home
              name: gnupg-home
      containers:
        - name: argocd-repo-server
          env:
            - name: GNUPGHOME
              value: /home/argocd/.gnupg
          volumeMounts:
            - mountPath: /home/argocd/.gnupg
              name: gnupg-home
              subpath: .gnupg