#!/usr/bin/env bash

set -ueo pipefail

SOPS_VERSION="3.0.0"

SOPS_DEB_URL="https://github.com/mozilla/sops/releases/download/${SOPS_VERSION}/sops_${SOPS_VERSION}_amd64.deb"

SOPS_DEB_SHA="e36760cbbe800d305818acb1f3c7d63e418d84b7a58d4c9d39d0c3de34868d91"

RED='\033[0;31m'

GREEN='\033[0;32m'

#BLUE='\033[0;34m'

YELLOW='\033[1;33m'

NOC='\033[0m'

# Find some tools

case "${HELM_BIN}" in

helm)

HELM_DIR="$(dirname $(command -v helm))"

;;

*)

HELM_DIR="$(dirname ${HELM_BIN})"

;;

esac

# Install the helm wrapper in the same dir as helm itself. That's not

# guaranteed to work, but it's better than hard-coding it.

HELM_WRAPPER="${HELM_DIR}/helm-wrapper"

if hash sops 2>/dev/null; then

echo "sops is already installed:"

sops --version

else

# Try to install sops.

if [ "$(uname)" == "Linux" ];

then

LINUX_DISTRO="$(lsb_release -is)"

fi

### Mozilla SOPS binary install

if [ "$(uname)" == "Darwin" ];

then

brew install sops

elif [ "$(uname)" == "Linux" ];

then

if which dpkg;

then

curl -L "${SOPS_DEB_URL}" > /tmp/sops.deb

if [ "$(/usr/bin/shasum -a 256 /tmp/sops.deb | cut -d ' ' -f 1)" == "${SOPS_DEB_SHA}" ];

then

sudo dpkg -i /tmp/sops.deb;

else

echo -e "${RED}Wrong SHA256${NOC}"

fi

else

echo -e "${RED}Sorry only installation via dpkg (aka Debian distros) is currently supported${NOC}"

fi

else

echo -e "${RED}No SOPS package available${NOC}"

exit 1

fi

fi

### git diff config

if [ -x "$(command -v git --version)" ];

then

git config --global diff.sopsdiffer.textconv "sops -d"

else

echo -e "${RED}[FAIL]${NOC} Install git command"

exit 1

fi

### Helm-secrets wrapper for helm command with auto decryption and cleanup on the fly

echo ""

echo -ne "${YELLOW}*${NOC} Helm-secrets wrapper for helm binary: "

if [ -f "${HELM_PLUGIN_DIR}/wrapper.sh" ];

then

ln -sf "${HELM_PLUGIN_DIR}/wrapper.sh" "${HELM_WRAPPER}"

fi

if [ -f ${HELM_WRAPPER} ];

then

echo -e "${GREEN}${HELM_WRAPPER}${NOC}"

else

echo -e "${RED}No ${HELM_WRAPPER} installed${NOC}"

fi