homelab/manifests/home-services/ha-gateway-secret.sh

17 lines
566 B
Bash

#!/usr/bin/env bash
# Usage: bash manifests/home-services/ha-gateway-secret.sh
# Description: Regenerates the ha-gateway SealedSecret from .env
set -euo pipefail
source "$(dirname "$0")/../../.env"
kubectl create secret generic ha-gateway-secret \
--namespace=default \
--from-literal=HA_TOKEN="${HA_TOKEN}" \
--dry-run=client -o yaml \
| kubeseal --controller-namespace=kube-system \
--controller-name=sealed-secrets-controller \
--format=yaml \
> "$(dirname "$0")/ha-gateway-sealed.yaml"
echo "ha-gateway-sealed.yaml regenerated"