Use sealed secrets in crossplane(kubernetes) manifests

[Sir-gits-a-lot]

I am working on crossplane composition to provision a cluster and install argocd in it. To configure argocd to monitor my private git repository I need to create a secret in that cluster? Here, I want to use sealed secrets. But I don't understand how I can create a sealed secret using kubeseal if the cluster itself isn't created by me? Since the cluster itself is created by me I cannot use kubeseal in that cluster to create the sealed secrets manifest.

How do I automate this flow?