Monorepo for Starjunk and subsidiaries.
# the managed-by label is pre-applied, so pruning is safe
bazel run //clusters:objects.apply -- --pruneCreate a service account, bind to a cluster role and store the service account's token as a repository secret.
$ k -n default create serviceaccount automata
$ k create clusterrolebinding automata --clusterrole cluster-admin --serviceaccount=default:automata
$ k get secret $(k get sa automata -ojson | jq -r '.secrets[0].name') -oyaml
# token
$ k get secret $(k get sa automata -ojson | jq -r '.secrets[0].name') -ojson | jq -r '.data.token'| base64 --decode
# ca.crt
$ k get secret $(k get sa automata -ojson | jq -r '.secrets[0].name') -ojson | jq -r '.data["ca.crt"]' | base64 --decode