mirror of
https://github.com/YuzuZensai/Minikura.git
synced 2026-03-30 20:27:39 +00:00
75 lines
2.3 KiB
Bash
75 lines
2.3 KiB
Bash
|
#!/bin/bash
|
||
|
|
# Quick script to refresh the Kubernetes service account token
|
||
|
|
# Run this if you need to regenerate or check the token
|
||
|
|
|
||
|
|
set -e
|
||
|
|
|
||
|
|
NAMESPACE="${KUBERNETES_NAMESPACE:-minikura}"
|
||
|
|
SERVICE_ACCOUNT="minikura-backend"
|
||
|
|
SECRET_NAME="minikura-backend-token"
|
||
|
|
|
||
|
|
echo "[INFO] Checking Kubernetes service account token..."
|
||
|
|
echo ""
|
||
|
|
|
||
|
|
# Check if service account exists
|
||
|
|
if ! kubectl get serviceaccount $SERVICE_ACCOUNT -n $NAMESPACE &>/dev/null; then
|
||
|
|
echo "[ERROR] Service account '$SERVICE_ACCOUNT' not found in namespace '$NAMESPACE'"
|
||
|
|
echo ""
|
||
|
|
echo "Run the full setup script:"
|
||
|
|
echo " bash .devcontainer/setup-k8s-token.sh"
|
||
|
|
exit 1
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Check if secret exists
|
||
|
|
if ! kubectl get secret $SECRET_NAME -n $NAMESPACE &>/dev/null; then
|
||
|
|
echo "[ERROR] Secret '$SECRET_NAME' not found in namespace '$NAMESPACE'"
|
||
|
|
echo ""
|
||
|
|
echo "Run the full setup script:"
|
||
|
|
echo " bash .devcontainer/setup-k8s-token.sh"
|
||
|
|
exit 1
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Get the token
|
||
|
|
TOKEN=$(kubectl get secret $SECRET_NAME -n $NAMESPACE -o jsonpath='{.data.token}' 2>/dev/null | base64 -d)
|
||
|
|
|
||
|
|
if [ -z "$TOKEN" ]; then
|
||
|
|
echo "[ERROR] Failed to retrieve service account token"
|
||
|
|
exit 1
|
||
|
|
fi
|
||
|
|
|
||
|
|
echo "=============================================="
|
||
|
|
echo "[OK] Service Account Token"
|
||
|
|
echo "=============================================="
|
||
|
|
echo "Service Account: $SERVICE_ACCOUNT"
|
||
|
|
echo "Namespace: $NAMESPACE"
|
||
|
|
echo ""
|
||
|
|
echo "Token (first 50 chars): ${TOKEN:0:50}..."
|
||
|
|
echo "Token (last 20 chars): ...${TOKEN: -20}"
|
||
|
|
echo ""
|
||
|
|
echo "Full token:"
|
||
|
|
echo "$TOKEN"
|
||
|
|
echo ""
|
||
|
|
|
||
|
|
# Update .env file if it exists
|
||
|
|
ENV_FILE="$(pwd)/.env"
|
||
|
|
|
||
|
|
if [ -f "$ENV_FILE" ]; then
|
||
|
|
echo "=============================================="
|
||
|
|
echo "[UPDATE] Updating .env file"
|
||
|
|
echo "=============================================="
|
||
|
|
|
||
|
|
if grep -q "^KUBERNETES_SERVICE_ACCOUNT_TOKEN=" "$ENV_FILE"; then
|
||
|
|
sed -i "s|^KUBERNETES_SERVICE_ACCOUNT_TOKEN=.*|KUBERNETES_SERVICE_ACCOUNT_TOKEN=\"$TOKEN\"|" "$ENV_FILE"
|
||
|
|
echo "[OK] Updated KUBERNETES_SERVICE_ACCOUNT_TOKEN in .env"
|
||
|
|
else
|
||
|
|
echo "KUBERNETES_SERVICE_ACCOUNT_TOKEN=\"$TOKEN\"" >> "$ENV_FILE"
|
||
|
|
echo "[OK] Added KUBERNETES_SERVICE_ACCOUNT_TOKEN to .env"
|
||
|
|
fi
|
||
|
|
echo ""
|
||
|
|
fi
|
||
|
|
|
||
|
|
echo "=============================================="
|
||
|
|
echo "[WARNING] Remember to restart your backend/operator"
|
||
|
|
echo "=============================================="
|
||
|
|
echo ""
|