#!/usr/bin/env bash
# Usage: bash manifests/authentik/authentik-gitea-secret.sh
# Description: Creates the Authentik OAuth secret for Gitea integration
set -euo pipefail
source "$(dirname "$0")/../../.env"

kubectl create secret generic authentik-gitea-oauth \
  --namespace gitea \
  --from-literal=client-id="${AUTHENTIK_GITEA_CLIENT_ID}" \
  --from-literal=client-secret="${AUTHENTIK_GITEA_CLIENT_SECRET}" \
  --dry-run=client -o yaml | kubectl apply -f -