misc: addressed comments

cli/packages/cmd/bootstrap.go

@@ -43,7 +43,7 @@ func handleK8SecretOutput(bootstrapResponse api.BootstrapInstanceResponse, k8Sec
 
 	// Parse and execute the template to render only the data/stringData section
 	tmpl, err := template.New("k8-secret-template").Funcs(template.FuncMap{
-		"b64enc": func(s string) string {
+		"encodeBase64": func(s string) string {
 			return base64.StdEncoding.EncodeToString([]byte(s))
 		},
 	}).Parse(k8SecretTemplate)
@@ -291,8 +291,8 @@ func init() {
 	bootstrapCmd.Flags().String("organization", "", "The name of the organization to create for the instance")
 	bootstrapCmd.Flags().String("output", "", "The type of output to use for the bootstrap command (json or k8-secret)")
 	bootstrapCmd.Flags().Bool("ignore-if-bootstrapped", false, "Whether to continue on error if the instance has already been bootstrapped")
-	bootstrapCmd.Flags().String("k8-secret-template", "", "The template to use for rendering the Kubernetes secret (entire secret JSON)")
-	bootstrapCmd.Flags().String("k8-secret-namespace", "", "The namespace to use for the Kubernetes secret")
+	bootstrapCmd.Flags().String("k8-secret-template", "{\"data\":{\"token\":\"{{.Identity.Credentials.Token | encodeBase64}}\"}}", "The template to use for rendering the Kubernetes secret (entire secret JSON)")
+	bootstrapCmd.Flags().String("k8-secret-namespace", "", "The namespace to create the Kubernetes secret in")
 	bootstrapCmd.Flags().String("k8-secret-name", "", "The name of the Kubernetes secret to create")
 	rootCmd.AddCommand(bootstrapCmd)
 }

docs/cli/commands/bootstrap.mdx

@@ -104,7 +104,7 @@ When using `k8-secret`, the command will create or update a Kubernetes secret di
 
 ```bash
 # Example template that stores the token
-infisical bootstrap --k8-secret-template='{"data":{"token":"{{.Identity.Credentials.Token | b64enc}}"}}'
+infisical bootstrap --k8-secret-template='{"data":{"token":"{{.Identity.Credentials.Token | encodeBase64}}"}}'
 
 # Example template with multiple fields
 infisical bootstrap --k8-secret-template='{"stringData":{"token":"{{.Identity.Credentials.Token}}","org-id":"{{.Organization.ID}}","user-email":"{{.User.Email}}"}}'
@@ -112,7 +112,7 @@ infisical bootstrap --k8-secret-template='{"stringData":{"token":"{{.Identity.Cr
 
 Available template functions:
 
-- `b64enc`: Base64 encode a string
+- `encodeBase64`: Base64 encode a string
 
 Available data fields:
 
@@ -189,7 +189,7 @@ The command returns a JSON response with details about the created user, organiz
 
 ### Kubernetes Secret Output
 
-When using `--output=k8-secret`, the command creates or updates a Kubernetes secret in your cluster and logs the operation result.
+When using `--output=k8-secret`, the command creates or updates a Kubernetes secret in your cluster and logs the operation result. This is particularly useful for automated bootstrapping scenarios such as Kubernetes Jobs, GitOps workflows, or when you need to immediately store the admin credentials for use by other applications in your cluster.
 
 ## Kubernetes Integration
 

docs/self-hosting/guides/automated-bootstrapping.mdx

@@ -70,6 +70,8 @@ You can bootstrap an Infisical instance using either the API or the CLI.
 
 When deploying Infisical using the official Helm chart, you can enable automatic bootstrapping that runs as part of the deployment process. This eliminates the need to manually bootstrap the instance after deployment.
 
+The bootstrapping process automatically generates a Kubernetes secret containing the instance admin token, which can then be referenced by Crossplane providers, Terraform operators, or other automation systems for further infrastructure provisioning and configuration.
+
 ### Configuration
 
 Enable auto bootstrapping in your Helm values by setting `autoBootstrap.enabled: true` and providing the necessary configuration:
@@ -78,7 +80,7 @@ Enable auto bootstrapping in your Helm values by setting `autoBootstrap.enabled:
 autoBootstrap:
   enabled: true
   organization: "My Organization"
-  secretTemplate: '{"data":{"token":"{{.Identity.Credentials.Token | b64enc}}"}}'
+  secretTemplate: '{"data":{"token":"{{.Identity.Credentials.Token | encodeBase64}}"}}'
 
   secretDestination:
     name: "infisical-bootstrap-secret"
@@ -122,7 +124,7 @@ The `secretTemplate` field allows you to customize the data section of the creat
 - `{{ .User.FirstName }}`: The admin user first name
 - `{{ .User.LastName }}`: The admin user last name
 
-The template also supports the `b64enc` function for base64 encoding values.
+The template also supports the `encodeBase64` function for base64 encoding values.
 
 Example template for storing multiple values:
 
@@ -130,9 +132,9 @@ Example template for storing multiple values:
 secretTemplate: |
   {
     "data": {
-      "infisical_token": "{{ .Identity.Credentials.Token | b64enc }}",
-      "admin_email": "{{ .User.Email | b64enc }}",
-      "organization": "{{ .Organization.Name | b64enc }}"
+      "infisical_token": "{{ .Identity.Credentials.Token | encodeBase64 }}",
+      "admin_email": "{{ .User.Email | encodeBase64 }}",
+      "organization": "{{ .Organization.Name | encodeBase64 }}"
     }
   }
 ```

helm-charts/infisical-standalone-postgres/values.yaml

@@ -21,8 +21,8 @@ infisical:
       # -- Infisical Infisical CLI image tag version
       tag: "0.41.86"
 
-    # -- Template for the data/stringData section of the Kubernetes secret. Available functions: b64enc
-    secretTemplate: '{"data":{"token":"{{.Identity.Credentials.Token | b64enc}}"}}'
+    # -- Template for the data/stringData section of the Kubernetes secret. Available functions: encodeBase64
+    secretTemplate: '{"data":{"token":"{{.Identity.Credentials.Token | encodeBase64}}"}}'
 
     secretDestination:
       # -- Name of the bootstrap secret to create in the Kubernetes cluster which will store the formatted root identity credentials