#!/usr/bin/env bash
set -euo pipefail
KUBECONFIG=/Users/chrisfu/dev/knoe/knoe-k3s.kubeconfig
export KUBECONFIG

echo "==> Creating gitlab-app-nonroot ServiceAccount..."
kubectl -n gitlab apply -f - <<'SAYAML'
apiVersion: v1
kind: ServiceAccount
metadata:
  name: gitlab-app-nonroot
  namespace: gitlab
SAYAML

echo "==> Patching GitLab CR to set serviceAccount.create=false..."
kubectl -n gitlab patch gitlab gitlab --type=merge \
  -p '{"spec":{"chart":{"values":{"global":{"serviceAccount":{"create":false}}}}}}'

echo "==> Waiting 15s for operator to reconcile..."
sleep 15

echo "==> GitLab CR status:"
kubectl -n gitlab get gitlab gitlab

echo "==> Operator last 20 log lines:"
kubectl logs -n gitlab deployment/gitlab-controller-manager --tail=20