This repo is synced with the cluster using ArgoCD. Not everything is automatic, mainly things with a secret and helm charts.
The cluster is described more here.
Managing secrets in git isn't fully figured out yet. It currently uses git-crypt to encrypt the one secret. You can find a walkthrough here.