#!/usr/bin/env bash
set -euo pipefail
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
source "$SCRIPT_DIR/../../.env"

kubectl create secret generic pia-credentials \
  --namespace=downloads \
  --from-literal=OPENVPN_USER="${PIA_USER}" \
  --from-literal=OPENVPN_PASSWORD="${PIA_PASSWORD}" \
  --dry-run=client -o yaml \
  | kubeseal \
      --controller-namespace=kube-system \
      --controller-name=sealed-secrets-controller \
      --format=yaml \
      > "$SCRIPT_DIR/pia-credentials-sealed.yaml"

echo "WWrote $SCRIPT_DIR/pia-credentials-sealed.yaml"