#!/bin/bash
set -euo pipefail

SRC=/configmaps/auth.conf
DST=/etc/puppetlabs/puppetserver/conf.d/auth.conf

# Copied rather than mounted: the entrypoint chowns conf.d and rewrites auth.conf,
# both of which fail on a read-only configmap mount and abort container startup.
if [ ! -s "$SRC" ]; then
  echo "FATAL: $SRC missing or empty; refusing to start on the image default auth.conf" >&2
  exit 1
fi

cp "$SRC" "$DST"