mqtt-archiver/deployment/roll-credentials.sh
Wolfgang Hottgenroth 5a25204f2f
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
new database
2025-01-09 14:31:39 +01:00

36 lines
644 B
Bash
Executable File

#!/bin/bash
. ~/Workspace/mykubernetesenv/ENVDB1
DATABASE=ma
LOGIN=ma
PASSWORD=`openssl rand -base64 24`
NAMESPACE=`cat namespace`
psql <<EOF
do
\$\$
begin
ALTER USER $LOGIN WITH PASSWORD '$PASSWORD';
GRANT ALL PRIVILEGES ON DATABASE $DATABASE TO $LOGIN;
end
\$\$
;
commit;
EOF
kubectl create secret generic ma-db-cred \
--dry-run=client \
-o yaml \
--save-config \
--from-literal=PGUSER="$LOGIN" \
--from-literal=PGPASSWORD="$PASSWORD" \
--from-literal=PGDATABASE="$DATABASE" \
--from-literal=PGHOST="database.database1.svc.cluster.local" \
--from-literal=PGSSLMODE="require" | \
kubectl apply -f - -n $NAMESPACE