#!/bin/bash

set -eou pipefail

NAMESPACE=$1

REGION=""
ENDPOINT=""
ACCESS_KEY_ID=""
SECRET_ACCESS_KEY=""
LOKI_BUCKET_NAME="${LOKI_BUCKET_NAME:-loki}"

set_credentials_from_aws() {
  REGION="$(aws configure get region)"
  ACCESS_KEY_ID="$(aws configure get aws_access_key_id)"
  SECRET_ACCESS_KEY="$(aws configure get aws_secret_access_key)"
  ENDPOINT="https://s3.${REGION}.amazonaws.com"
}

create_secret() {
  kubectl -n "${NAMESPACE}" delete secret test ||:
  kubectl -n "${NAMESPACE}" create secret generic test \
    --from-literal=endpoint="$(echo -n "${ENDPOINT}")" \
    --from-literal=region="$(echo -n "${REGION}")" \
    --from-literal=bucketnames="$(echo -n "${LOKI_BUCKET_NAME}")" \
    --from-literal=access_key_id="$(echo -n "${ACCESS_KEY_ID}")" \
    --from-literal=access_key_secret="$(echo -n "${SECRET_ACCESS_KEY}")"
}

main() {
  set_credentials_from_aws
  create_secret
}

main