Skip to content

Commit

Permalink
Added a make target tiller to configure the correct acesses to helm (#…
Browse files Browse the repository at this point in the history
…243)

* Added a make target tiller to configure the correct acesses to helm

* Update build/init_tiller.sh

Co-Authored-By: Thomas Manville <tom@kasten.io>
  • Loading branch information
joshiomkarj and tdmanv committed Sep 3, 2019
1 parent 9d0ab03 commit 85e794a
Show file tree
Hide file tree
Showing 2 changed files with 35 additions and 1 deletion.
5 changes: 4 additions & 1 deletion Makefile
Original file line number Diff line number Diff line change
Expand Up @@ -153,7 +153,7 @@ push-name:
version:
@echo $(VERSION)

.PHONY: deploy test codegen build-dirs run clean container-clean bin-clean docs start-kind stop-kind release-snapshot go-mod-download
.PHONY: deploy test codegen build-dirs run clean container-clean bin-clean docs start-kind tiller stop-kind release-snapshot go-mod-download

deploy: release-controller .deploy-$(DOTFILE_IMAGE)
.deploy-$(DOTFILE_IMAGE):
Expand Down Expand Up @@ -251,6 +251,9 @@ go-mod-download:
start-kind:
@$(MAKE) run CMD='-c "./build/local_kubernetes.sh start_localkube"'

tiller:
@/bin/bash ./build/init_tiller.sh

stop-kind:
@$(MAKE) run CMD='-c "./build/local_kubernetes.sh stop_localkube"'

31 changes: 31 additions & 0 deletions build/init_tiller.sh
Original file line number Diff line number Diff line change
@@ -0,0 +1,31 @@
#!/usr/bin/env bash

# Copyright 2019 The Kanister Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

set -o errexit
set -o nounset
set -o xtrace
set -o pipefail

# add a service account within a namespace to segregate tiller
kubectl --namespace kube-system create sa tiller

# create a cluster role binding for tiller
kubectl create clusterrolebinding tiller \
--clusterrole cluster-admin \
--serviceaccount=kube-system:tiller

# initialize helm within the tiller service account
helm init --service-account tiller

0 comments on commit 85e794a

Please sign in to comment.