From a5d186b46116e59889c74bfbac7fc9fc5cbc62a5 Mon Sep 17 00:00:00 2001
From: "Dustin C. Hatch" <dustin@hatch.name>
Date: Thu, 25 Jan 2024 20:42:47 -0600
Subject: [PATCH] sshca: Add update-machine-ids script

The `update-machine-ids.sh` shell script helps update the `sshca-data`
SealedSecret with the current contents of the `machine-ids.json` file
(stored locally, not tracked in Git).
---
 sshca/update-machine-ids.sh | 1 +
 1 file changed, 1 insertion(+)
 create mode 100644 sshca/update-machine-ids.sh

diff --git a/sshca/update-machine-ids.sh b/sshca/update-machine-ids.sh
new file mode 100644
index 0000000..9ce5fe3
--- /dev/null
+++ b/sshca/update-machine-ids.sh
@@ -0,0 +1 @@
+yq eval '(select(.metadata.name == "sshca-data") | .spec.encryptedData["machine-ids.json"]) = "'"$(kubeseal -n sshca --raw --from-file sshca/machine-ids.json --name sshca-data)"'"' -i sshca/secrets.yaml