#!/usr/bin/env bash
# Usage: bash manifests/home-services/ha-gateway-secret.sh
# Description: Regenerates the ha-gateway SealedSecret from .env
set -euo pipefail

source "$(dirname "$0")/../../.env"

kubectl create secret generic ha-gateway-secret \
  --namespace=default \
  --from-literal=HA_TOKEN="${HA_TOKEN}" \
  --dry-run=client -o yaml \
  | kubeseal --controller-namespace=kube-system \
           --controller-name=sealed-secrets-controller \
           --format=yaml \
  > "$(dirname "$0")/ha-gateway-sealed.yaml"

echo "ha-gateway-sealed.yaml regenerated"