#!/bin/sh

set -e

test -f ca.pem || ( cfssl gencert -initca ca_csr.json | cfssljson -bare ca )

for crt in "$@"; do
    jq ".CN |= \"${crt}.dev.svc.cluster.local\"" < template.json > service_${crt}.json
    test -f ${crt}.pem || ( cfssl gencert -ca=ca.pem -ca-key=ca-key.pem -config=ca_config.json -profile=test service_${crt}.json | cfssljson -bare ${crt} )
    rm -f service_${crt}.json
done