Helm でインストール

CHART_REF="oci://<registry>/<chart>"
CHART_VERSION="1.0.0"
KEY_FILE="./registry-reader.json"
NAMESPACE="agens"
REGISTRY_HOST="<registry-host>"

helm registry login \
  -u _json_key \
  --password-stdin "${REGISTRY_HOST}" < "${KEY_FILE}"

kubectl create namespace "${NAMESPACE}" --dry-run=client -o yaml | kubectl apply -f -

kubectl -n "${NAMESPACE}" create secret docker-registry agens-regcred \
  --docker-server="${REGISTRY_HOST}" \
  --docker-username=_json_key \
  --docker-password="$(cat "${KEY_FILE}")" \
  --dry-run=client -o yaml | kubectl apply -f -

global:
  domain: agens.example.com
  imagePullSecrets:
    - name: agens-regcred
  artifactRegistry:
    location: "<provided-location>"
    projectId: "<provided-project-id>"
    repository: "<provided-repository>"

auth:
  appSecret: "replace-with-random-secret"
  encryptionKey: "replace-with-random-secret"

database:
  postgres:
    password: "replace-with-random-secret"

selfhost:
  allowSignupAfterSetup: false

rustfs:
  accessKey: "replace-with-random-secret"
  secretKey: "replace-with-random-secret"
  ingress:
    host: "storage.agens.example.com"

web:
  publicUrl: "https://app.agens.example.com"
  ingress:
    host: "app.agens.example.com"

server:
  publicUrl: "https://api.agens.example.com"
  ingress:
    host: "api.agens.example.com"

storage:
  s3:
    publicEndpoint: "https://storage.agens.example.com"

helm upgrade --install agens \
  "${CHART_REF}" \
  --version "${CHART_VERSION}" \
  -n "${NAMESPACE}" \
  --create-namespace \
  --timeout 15m \
  -f values.yaml \
  -f your-values.yaml

kubectl -n "${NAMESPACE}" get pods
kubectl -n "${NAMESPACE}" get jobs
kubectl -n "${NAMESPACE}" wait --for=condition=complete job/agens-bootstrap --timeout=10m
kubectl -n "${NAMESPACE}" logs job/agens-bootstrap --tail=200