An Argo CD Config Management Plugin that renders a Helm chart and decrypts its SOPS secrets in the same Application. Argo CD cannot do that natively without a second tool, a separate Application, or a mutating controller.
The repo only stores ciphertext. Decryption happens in memory inside the repo-server sidecar. Argo CD then diffs, prunes, and self-heals the secrets like any other resource. An app can be chart-only, secrets-only, or both.
Source, install notes, and configuration are in the GitHub repository.