#!/bin/bash
# Script to seal opencloud configuration secrets
# Run this with: bash seal-config-secrets.sh

if ! command -v kubeseal &> /dev/null; then
    echo "Error: kubeseal not found. Please install sealed-secrets controller tools."
    echo "Installation: https://github.com/bitnami-labs/sealed-secrets#installation"
    exit 1
fi

echo "Sealing opencloud-config-secrets..."
kubeseal --format=yaml < opencloud-config-sealed.yaml > opencloud-config-sealed.yaml.sealed
mv opencloud-config-sealed.yaml.sealed opencloud-config-sealed.yaml
echo "Done! Sealed secret saved to opencloud-config-sealed.yaml"