homelab/manifests/media/immich-postgres-secret.sh

16 lines
523 B
Bash
Executable File

#!/usr/bin/env bash
set -euo pipefail
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
source "$SCRIPT_DIR/../../.env"
kubectl create secret generic immich-postgres \
--namespace=immich \
--from-literal=password="${IMMICH_POSTGRES_PASSWORD}" \
--dry-run=client -o yaml \
| kubeseal \
--controller-namespace=kube-system \
--controller-name=sealed-secrets-controller \
--format yaml \
> "$SCRIPT_DIR/immich-postgres-sealed.yaml"
echo "Wrote $SCRIPT_DIR/immich-postgres-sealed.yaml"