30 lines
1.0 KiB
Bash
Executable File
30 lines
1.0 KiB
Bash
Executable File
#!/bin/bash
|
|
# Bulk-patch every KMSSecret CRD in both clusters to point at Lux KMS.
|
|
#
|
|
# OLD: hostAPI=http://kms.hanzo.svc.cluster.local/api (legacy KMS image)
|
|
# NEW: hostAPI=http://kms.lux-kms-go.svc.cluster.local (Lux Go-native)
|
|
#
|
|
# Auth credentials secret name stays as `universal-auth-credentials`.
|
|
set -euo pipefail
|
|
|
|
NEW_HOST="http://kms.lux-kms-go.svc.cluster.local"
|
|
|
|
migrate_cluster() {
|
|
local ctx=$1
|
|
echo "=== ${ctx} ==="
|
|
kubectl --context "${ctx}" get kmssecrets -A -o jsonpath='{range .items[*]}{.metadata.namespace}/{.metadata.name}{"\n"}{end}' | \
|
|
while IFS=/ read -r ns name; do
|
|
[ -z "${ns}" ] && continue
|
|
echo " patch ${ns}/${name}"
|
|
kubectl --context "${ctx}" -n "${ns}" patch kmssecret "${name}" \
|
|
--type=merge -p "{\"spec\":{\"hostAPI\":\"${NEW_HOST}\"}}" || true
|
|
done
|
|
}
|
|
|
|
for ctx in lux-k8s hanzo-k8s; do
|
|
migrate_cluster "${ctx}"
|
|
done
|
|
|
|
echo "DONE — restart operator to pick up changes:"
|
|
echo " kubectl --context <ctx> -n kms-operator-system rollout restart deploy/kms-operator-controller-manager"
|