Summary

For people that self host gitlab and require certs to be presented, they tend to add a proxy for the pull request generator to enable mTLS.

Motivation

I would like to remove the need for a local proxy so that argocd can talk to gitlab instances that run with their own CA and require mTLS.

Proposal

Offer an optional secret to pass in a tls.crt and tls.key that the pull request generator uses when communicating with gitlab and for webhooks.