#!/bin/bash
# Ugly script to generate password data
# for the Toolforge elasticsearch cluster
set -o nounset
set -o errexit

USER=${1:?Missing USER}

PASS=$(openssl rand -base64 32)
SHA512=$(printf $PASS | mkpasswd --stdin --method=sha-512)

echo "${1} envvars"
echo "toolforge envvars create TOOL_ELASTICSEARCH_USER ${USER}"
echo "toolforge envvars create TOOL_ELASTICSEARCH_PASSWORD ${PASS}"
echo

echo "${1} puppet master private (hieradata/labs/tools/common.yaml)"
echo "----"
echo "profile::toolforge::elasticsearch::haproxy::elastic_users:"
echo "  - name: '${1}'"
echo "    password: '${SHA512}'"