Use argocd! It's the best tool for the job.

Can and should be configured as IaC.

Argocd can manage itself!