This repo is synced with the cluster using ArgoCD.
The cluster is described more here.
Secrets are managed by Doppler. This syncs values to a namespace based on a DopplerSecret definition. Secrets are still encrypted in this repo using git-crypt. You can find a walkthrough here.