From 8ee1b41cccc8f8e788ed548cb29cf3e63ad85ebd Mon Sep 17 00:00:00 2001
From: Paul Meyer <49727155+katexochen@users.noreply.github.com>
Date: Fri, 19 Jul 2024 13:37:17 +0200
Subject: [PATCH] just: add get-credentials-tdxbm

Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
---
 justfile | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/justfile b/justfile
index 5d4145f5dd..10753839a5 100644
--- a/justfile
+++ b/justfile
@@ -224,6 +224,20 @@ get-credentials-ci:
         --name "contrast-ci" \
         --admin
 
+get-credentials-tdxbm:
+    #!/usr/bin/env bash
+    set -euo pipefail
+    tmpConfig=$(mktemp)
+    gcloud secrets versions access \
+        projects/796962942582/secrets/m50-ganondorf-kubeconf/versions/2 \
+        --out-file="$tmpConfig"
+    mergedConfig=$(mktemp)
+    KUBECONFIG_BAK=${KUBECONFIG:-~/.kube/config}
+    KUBECONFIG=$tmpConfig:${KUBECONFIG_BAK} kubectl config view --flatten > $mergedConfig
+    export newContext=$(yq -r '.contexts.[0].name' $tmpConfig)
+    yq -i '.current-context = env(newContext)' $mergedConfig
+    mv $mergedConfig ${KUBECONFIG_BAK%%:*}
+
 # Destroy a running AKS cluster.
 destroy:
     nix run .#scripts.destroy-coco-aks -- --name="$azure_resource_group"