#!/usr/bin/env bash
set -euo pipefail
project_dir=$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd)
version=${AUTHENTIK_CHART_VERSION:-2026.8.0}
digest=${AUTHENTIK_CHART_SHA256:-fb51f1ab970a15e37f8d2b4fe2767cea33afe7e6f84bee646d2690f31fcde7e5}
output=${1:?Usage: render.sh OUTPUT_FILE}
chart=$(mktemp); trap 'rm -f "${chart}"' EXIT
curl -fsSL -o "${chart}" "https://github.com/goauthentik/helm/releases/download/authentik-${version}/authentik-${version}.tgz"
printf '%s  %s\n' "${digest}" "${chart}" | sha256sum -c >&2
helm template authentik "${chart}" --namespace authentik --values "${project_dir}/values.yaml" > "${output}"