zabbix/deployment/roll-db-credential.sh

37 lines
741 B
Bash
Executable File

#!/bin/bash
. ~/Workspace/mykubernetesenv/ENVDB1
DATABASE=zabbix
LOGIN=zabbix
PASSWORD=`openssl rand -base64 24`
NAMESPACE=$(cat namespace)
ARG1=$1
if [ "$ARG1" = "initial" ]; then
psql <<EOF
CREATE USER $LOGIN;
COMMIT;
CREATE DATABASE $DATABASE WITH OWNER $LOGIN;
EOF
fi
psql <<EOF
ALTER USER $LOGIN WITH PASSWORD '$PASSWORD';
GRANT ALL PRIVILEGES ON DATABASE $DATABASE TO $LOGIN;
commit;
EOF
kubectl create secret generic database-cred \
--dry-run=client \
-o yaml \
--save-config \
--from-literal=POSTGRES_USER="$LOGIN" \
--from-literal=POSTGRES_PASSWORD="$PASSWORD" \
--from-literal=POSTGRES_DB="$DATABASE" \
--from-literal=DB_SERVER_HOST="database.database1.svc.cluster.local" | \
kubectl apply -f - -n $NAMESPACE