helm repo add infisical https://dl.cloudsmith.io/public/infisical/helm-charts/helm/charts/
helm pull infisical/infisical-standalone --untar

appname=infisical
ns=infisical
AUTH_SECRET=$(openssl rand -base64 32)
ENCRYPTION_KEY=$(openssl rand -hex 16)

kubectl apply -f - <<EOF
apiVersion: v1
kind: Secret
metadata:
  name: infisical-secrets
  namespace: $ns
type: Opaque
stringData:
  AUTH_SECRET: $AUTH_SECRET
  ENCRYPTION_KEY: $ENCRYPTION_KEY
EOF

helm install -n $ns $appname .

CREATE USER infisical PASSWORD 'infisical' SUPERUSER;
CREATE DATABASE infisical OWNER infisical;

appname=infisical
ns=infisical
AUTH_SECRET=$(openssl rand -base64 32)
ENCRYPTION_KEY=$(openssl rand -hex 16)
REDIS_URL=redis://default:[email protected]:6379
DB_CONNECTION_URI=postgresql://infisical:[email protected]:5432/infisical

kubectl apply -f - <<EOF
apiVersion: v1
kind: Secret
metadata:
  name: infisical-secrets
type: Opaque
stringData:
  AUTH_SECRET: $AUTH_SECRET
  ENCRYPTION_KEY: $ENCRYPTION_KEY
  REDIS_URL: $REDIS_URL
  DB_CONNECTION_URI: $DB_CONNECTION_URI
EOF

vi values.yaml
---

postgresql.enabled = false
redis.enabled = false
---

helm install -n $ns $appname .

#DB마이그레이션 성공 이후 더이상 진행되지 않는 경우
vi values.yaml
---
infisical.autoDatabaseSchemaMigration = false
---

helm upgrade -n $ns $appname .

#helm install --generate-name infisical-helm-charts/secrets-operator --version=<PLACE-CHART-VERSION-HERE> --set controllerManager.manager.image.tag=<PLACE-APP-VERSION-HERE>
#helm install --generate-name infisical-helm-charts/secrets-operator --version=0.1.4 --set controllerManager.manager.image.tag=v0.2.0
helm pull infisical/secrets-operator --untar
helm install -n kube-system secrets-operator .

#머신ID, Secret으로 secret 생성
#kubectl create secret -n kube-system generic infisical-universal-auth-credentials --from-literal=clientId="e6f5f702-ca52-44ff-8d52-e7960de4a810" --from-literal=clientSecret="174c549f90cf26f6c38bd93a5cf192712fa5225cdbd6f01ea4b08da799722ce3"
kubectl create secret -n kube-system generic infisical-universal-auth-credentials --from-literal=clientId="<your-identity-client-id>" --from-literal=clientSecret="<your-identity-client-secret>"
kubectl apply -f $sample.yaml