#!/usr/bin/env bash
set -ueo pipefail

keys_dir="$(dirname "${BASH_SOURCE[0]}")/.."
# deliberate just "dot" for current dir
sops_cfg_dir=.
secrets_file="mock_secrets.yaml"

# prerequisite: for verification of sops config, idempotent create file with a mock secret, src: https://bash-org-archive.com/?244321
test -e "${secrets_file}" || (yq -n '.demo.credentials.secret = "hunter2"' > "${secrets_file}" && sops -e -i "${secrets_file}" )

set -x
../bin/update_sops.sh "${keys_dir}" "${sops_cfg_dir}" "${secrets_file}"