#!/bin/sh
kubectl create rolebinding argo-api --clusterrole=admin --serviceaccount=argo-api:default --namespace=argo-api

kubectl apply -n argo-api -f - <<EOF
apiVersion: v1
kind: Secret
metadata:
  name: argo-api.service-account-token
  annotations:
    kubernetes.io/service-account.name: default
type: kubernetes.io/service-account-token
EOF

ARGO_TOKEN="Bearer $(kubectl get secret argo-api.service-account-token -o=jsonpath='{.data.token}' -n argo-api | base64 --decode)"
echo "$ARGO_TOKEN"
curl https://localhost:32337/api/v1/workflows/argo -H "Authorization: $ARGO_TOKEN" --insecure