If I am understanding the docs correctly, then to connect to a sentinel setup, the url is
redis-sentinel://[:password@]host1[:port][,host2:[:port]][,hostN:[:port]][?master=masterName]
When deploying to a k8s via git and argocd, this config is (at least in our case) a config entry in a file.
Therefore, the password would be visible, which isn't a good idea obviously.
It would be ideal if the password could be read from REDIS_PASSWORD, which is set via a secret, if this env var is not empty, so that the image can then internally complete the URL.