The `update-machine-ids.sh` shell script helps update the `sshca-data` SealedSecret with the current contents of the `machine-ids.json` file (stored locally, not tracked in Git).
2 lines
203 B
Bash
2 lines
203 B
Bash
yq eval '(select(.metadata.name == "sshca-data") | .spec.encryptedData["machine-ids.json"]) = "'"$(kubeseal -n sshca --raw --from-file sshca/machine-ids.json --name sshca-data)"'"' -i sshca/secrets.yaml
|