#!/usr/bin/env bash
# Usage: bash manifests/authentik/authentik-grafana-secret.sh
# Description: Creates the Authentik OAuth secret for Grafana integration
set -euo pipefail
source "$(dirname "$0")/../../.env"

kubectl create secret generic authentik-grafana-oauth \
  --namespace monitoring \
  --from-literal=client-id="${AUTHENTIK_GRAFANA_CLIENT_ID}" \
  --from-literal=client-secret="${AUTHENTIK_GRAFANA_CLIENT_SECRET}" \
  --dry-run=client -o yaml | kubectl apply -f -