while read -r NAME NAMESPACE; do
                  CLUSTER=$(kubectl get containercluster $NAME -n $NAMESPACE -o yaml)
                  LOCATION=$(echo "$CLUSTER" | yq '.spec.location')
                  PROJECT=$(echo "$CLUSTER" | yq '.metadata.annotations."cnrm.cloud.google.com/project-id"')
                  TEMPFILE="$NAME-$LOCATION-$PROJECT"
                  export KUBECONFIG="$TEMPFILE"
                  export TOKEN=$(gcloud auth print-access-token)
                  gcloud container clusters get-credentials $NAME --location $LOCATION --project $PROJECT
                  unset KUBECONFIG
                  yq -i '.users[].user.token = strenv(TOKEN) | del(.users[].user.exec)' $TEMPFILE
                  kubectl create secret generic $NAME-kubeconfig -n $NAMESPACE --from-file=kubeconfig=$TEMPFILE --dry-run=client -o yaml | kubectl apply -f -
              done < <(kubectl get containercluster -A -o custom-columns=NAME:.metadata.name,NAMESPACE:.metadata.namespace | grep -v NAME)