#!/bin/bash


VERSION=0.13.0
NAMESPACE=$(cat namespace)

. ./ENVDB

kubectl create namespace $NAMESPACE || echo "namespace already exists"

SECRETS_PLAINTEXT=$(mktemp)
gpg --pinentry-mode=loopback --decrypt --output $SECRETS_PLAINTEXT secrets.asc
kubectl create secret generic keycloak-secrets \
  --from-env-file=$SECRETS_PLAINTEXT \
  --dry-run=client -o yaml | \
  kubectl apply -f - -n $NAMESPACE
rm $SECRETS_PLAINTEXT


./roll-db-credential.sh


helm upgrade --install keycloak2 -f values.yml oci://registry-1.docker.io/cloudpirates/keycloak --version $VERSION --namespace=$NAMESPACE