#!/bin/bash

export USER=$1
helm template $USER ./namespace | kubectl --context admin apply -f -
kubectl --context admin cp $(pwd)/users/$USER/$USER.csr certsigner:/certs/$USER.csr
kubectl --context admin exec --context admin certsigner -- openssl x509 -in /certs/$USER.csr -req -CA /keys/client-ca.crt -CAkey /keys/client-ca.key -set_serial $(python -c "import random; print(random.randint(1000000000, 9999999999))") -out /certs/$USER.crt -days 5000
kubectl --context admin cp certsigner:/certs/$USER.crt $(pwd)/users/$USER/$USER.crt
kubectl config set-credentials $USER --client-certificate=$(pwd)/users/$USER/$USER.crt  --client-key=$(pwd)/users/$USER/$USER.key
kubectl config set-context $USER --cluster=mainframe --namespace=$USER --user=$USER