homelab/manifests/media/pia-secret.sh

17 lines
569 B
Bash
Executable File

#!/usr/bin/env bash
set -euo pipefail
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
source "$SCRIPT_DIR/../../.env"
kubectl create secret generic pia-credentials \
--namespace=downloads \
--from-literal=OPENVPN_USER="${PIA_USER}" \
--from-literal=OPENVPN_PASSWORD="${PIA_PASSWORD}" \
--dry-run=client -o yaml \
| kubeseal \
--controller-namespace=kube-system \
--controller-name=sealed-secrets-controller \
--format=yaml \
> "$SCRIPT_DIR/pia-credentials-sealed.yaml"
echo "WWrote $SCRIPT_DIR/pia-credentials-sealed.yaml"