#!/bin/sh

set -ex

NAMESPACE=mosquitto

SECRETS_PLAINTEXT=$(mktemp)
gpg --pinentry-mode=loopback --decrypt --output $SECRETS_PLAINTEXT secrets.asc
kubectl create configmap mosquitto-broker-config \
  --from-file=mosquitto.conf=mosquitto.conf \
  --from-file=pwfile=$SECRETS_PLAINTEXT \
  --namespace=$NAMESPACE \
  --dry-run=client -o yaml | kubectl apply -f - -n $NAMESPACE