blob: 807d774a31fedded0abecf6511aa949b994f45ac [file] [log] [blame] [edit]
# TODO(rmistry): Create a generic script that can be used by different services
# that need to email.
# Create the secrets needed for CT servers to send email.
set -e
if [ "$#" -ne 1 ]; then
echo "The argument must be the email address we are authenticating, for example:"
echo ""
echo "./create-email-secrets.sh ct@skia.org"
exit 1
fi
# Convert ct@skia.org to ct-skia-org.
EMAIL=$1
EMAIL=${EMAIL/@/-}
EMAIL=${EMAIL/./-}
source ../bash/ramdisk.sh
# Enable the gmail API for your project and create a client secret for this applicaiton.
# Then download the client_secret.json file.
echo "Download client_secret.json for CT to /tmp/ramdisk."
read -r -p "Press enter to continue..." key
# Then run 'three_legged_flow' in this directory and when prompted authorize
# as the email passed in to create the client_token.json file.
go install ../notifier/go/three_legged_flow
cd /tmp/ramdisk
three_legged_flow --scopes=https://mail.google.com/
kubectl create secret generic ct-email-secrets \
--from-file=./client_secret.json \
--from-file=./client_token.json \
--dry-run -o yaml | kubectl apply -f -
# Finally, remove the token file since it contains a refresh token.
rm client_token.json
cd -