#!/bin/bash
set -euo pipefail
source "$(dirname "$0")/../.env"

kubectl create secret generic authentik-grafana-oauth \
  --namespace monitoring \
  --from-literal=client-id="${AUTHENTIK_GRAFANA_CLIENT_ID}" \
  --from-literal=client-secret="${AUTHENTIK_GRAFANA_CLIENT_SECRET}" \
  --dry-run=client -o yaml | kubectl apply -f -