#!/bin/bash

set -eu

IPA_KEY_VERSIONS_SECRET_ID="sec-01fwzmx38avahxewgnx9q4hd8n"
IPA_KEY_VERSIONS_SECRET_VERSION_ID=$(ya vault get secret $IPA_KEY_VERSIONS_SECRET_ID --json | jq -r .secret_versions[0].version)

IPA_PGPASS_SECRET_ID="sec-01fx2axkesj91xr4tr8zdhra1c"
IPA_PGPASS_SECRET_VERSION_ID=$(ya vault get secret $IPA_PGPASS_SECRET_ID --json | jq -r .secret_versions[0].version)

directory=$1

mkdir -p "$directory"

ya tool tvmknife get_service_ticket sshkey --src 2025680 --dst 224 > "$directory/.blackbox.token"
ya tool tvmknife get_service_ticket sshkey --src 2031677 --dst 2017079 > "$directory/.ipa.token"

ya vault get version $IPA_KEY_VERSIONS_SECRET_VERSION_ID -o key_versions > "$directory/ipa_key_versions.json"
ya vault get version $IPA_PGPASS_SECRET_VERSION_ID -o pgpass > "$directory/.pgpass" && chmod 0600 "$directory/.pgpass"
