export SECRET_NAME="idp-sql-secrets"

export SERVICE_ACCOUNT="idp-sql-identity"

gcloud config set project $GOOGLE_CLOUD_PROJECT

sed -i "s/PROJECT_ID/$GOOGLE_CLOUD_PROJECT/" static/config.js

sed -i "s/API_KEY/$API_KEY/" static/config.js

gcloud services enable sqladmin.googleapis.com secretmanager.googleapis.com

gcloud sql instances describe ${CLOUD_SQL_INSTANCE_NAME}

if [ $? -eq 1 ]; then

echo "Create Cloud SQL instance with postgreSQL database (this might take a few minutes)..."

gcloud sql instances create ${CLOUD_SQL_INSTANCE_NAME} \

--database-version=POSTGRES_12 \

--region=${GOOGLE_CLOUD_REGION} \

--cpu=2 \

--memory=7680MB \

--root-password=${DB_PASSWORD}

sed -i "s/PROJECT_ID/$GOOGLE_CLOUD_PROJECT/" postgres-secrets.json

sed -i "s/REGION/$GOOGLE_CLOUD_REGION/" postgres-secrets.json

sed -i "s/PASSWORD_SECRET/$DB_PASSWORD/" postgres-secrets.json

sed -i "s/INSTANCE/$CLOUD_SQL_INSTANCE_NAME/" postgres-secrets.json

gcloud secrets describe ${SECRET_NAME}

if [ $? -eq 1 ]; then

echo "Creating secret ..."

gcloud secrets create ${SECRET_NAME} \

--replication-policy="automatic"

echo "Adding secret version ..."

gcloud secrets versions add ${SECRET_NAME} --data-file=postgres-secrets.json

gcloud iam service-accounts create ${SERVICE_ACCOUNT}

gcloud secrets add-iam-policy-binding ${SECRET_NAME} \

--member serviceAccount:${SERVICE_ACCOUNT}@${GOOGLE_CLOUD_PROJECT}.iam.gserviceaccount.com \

--role roles/secretmanager.secretAccessor

gcloud projects add-iam-policy-binding $GOOGLE_CLOUD_PROJECT \

--member serviceAccount:${SERVICE_ACCOUNT}@${GOOGLE_CLOUD_PROJECT}.iam.gserviceaccount.com \

--role roles/cloudsql.client