changes

update-config.sh

@@ -6,9 +6,17 @@ NAMESPACE=mosquitto
 
 SECRETS_PLAINTEXT=$(mktemp)
 gpg --pinentry-mode=loopback --decrypt --output $SECRETS_PLAINTEXT secrets.asc
+
+DHPARAM=$(mktemp)
+openssl dhparam -out $DHPARAM 2048
+
 kubectl create configmap mosquitto-broker-config \
   --from-file=mosquitto.conf=mosquitto.conf \
   --from-file=pwfile=$SECRETS_PLAINTEXT \
+  --from-file=dhparam.pem=$DHPARAM \
   --namespace=$NAMESPACE \
   --dry-run=client -o yaml | kubectl apply -f - -n $NAMESPACE
 
+rm $SECRETS_PLAINTEXT
+rm $DHPARAM
+