generate kubeseal secrets

kubeseal-generator.sh

#!/bin/bash

SECRET_NAME="apm-creds"
NAMESPACE="rasa"
ARRAY=("apm_server_url:t1"
       "apm_secret_token:t2")
for secret in "${ARRAY[@]}" ; do
    KEY="$(echo $secret | cut -d':' -f1 )"
    VALUE="$(echo $secret | cut -d':' -f2-)"
    # echo $KEY $VALUE
    kubectl -n $NAMESPACE create secret generic $SECRET_NAME --dry-run=client  --from-literal="${KEY}"="${VALUE}" -o json >mysecret.json
    kubeseal --cert $1 <mysecret.json >mysealedsecret.json
    cat mysealedsecret.json | echo "${KEY}: $(jq -r .spec.encryptedData.${KEY})"
    rm mysecret.json mysealedsecret.json
done