---
- name: Helm | Add Sealed Secrets chart repository
  ansible.builtin.command: >
    helm repo add sealed-secrets https://bitnami.github.io/sealed-secrets
  environment:
    KUBECONFIG: "{{ sealed_secrets_kubeconfig }}"
    PATH: "/usr/local/bin:/usr/bin:/bin"
  register: _helm_repo_add
  changed_when: "'already exists' not in _helm_repo_add.stdout"
  failed_when: _helm_repo_add.rc != 0 and 'already exists' not in _helm_repo_add.stdout

- name: Helm | Update chart repositories
  ansible.builtin.command: helm repo update
  environment:
    KUBECONFIG: "{{ sealed_secrets_kubeconfig }}"
    PATH: "/usr/local/bin:/usr/bin:/bin"
  changed_when: false

- name: Helm | Install or upgrade Sealed Secrets controller
  ansible.builtin.command: >
    helm upgrade --install sealed-secrets sealed-secrets/sealed-secrets
    --namespace {{ sealed_secrets_namespace }}
    --version {{ sealed_secrets_chart_version }}
    --set fullnameOverride=sealed-secrets-controller
    --timeout 5m0s
    --wait
  environment:
    KUBECONFIG: "{{ sealed_secrets_kubeconfig }}"
    PATH: "/usr/local/bin:/usr/bin:/bin"
  register: _helm_install
  changed_when: "'STATUS: deployed' in _helm_install.stdout or 'has been upgraded' in _helm_install.stdout"