#!/usr/bin/env bash

set -euo pipefail

kind create cluster --config kind.yaml --wait 10m

kubectl create secret docker-registry gitlab \
          --docker-server=registry.gitlab.com \
          --docker-username=gitlab \
          --docker-password="${GITLAB_TOKEN}" \
          --docker-email=gitlab@unbound.se

kubectl patch serviceaccount default -p '{"imagePullSecrets": [{"name": "gitlab"}]}'

kubectl apply -k . || true
kubectl wait --for=condition=Ready pods --all -n cert-manager --timeout=5m
kubectl wait --for=condition=Ready pods --all -n external-secrets --timeout=5m
kubectl apply -k .

kubectl wait --for=condition=Ready pods --all --timeout=5m