쿠버네티스 Helm v2.x 설치하기 (서버 - tiller)

1. Tiller 서비스 어카운트를 생성한다.

apiVersion: v1

kind: ServiceAccount

metadata:

  name: tiller

  namespace: kube-system

---

apiVersion: rbac.authorization.k8s.io/v1

kind: ClusterRoleBinding

metadata:

  name: tiller

roleRef:

  apiGroup: rbac.authorization.k8s.io

  kind: ClusterRole

  name: cluster-admin

subjects:

  - kind: ServiceAccount

    name: tiller

    namespace: kube-system

2. 위 yaml 파일을 반영한다.

$ kubectl apply -f tiller.yaml

serviceaccount/tiller created

clusterrolebinding.rbac.authorization.k8s.io/tiller created

3. tiller 를 배포한다. (/usr/local/bin/ 아래에 설치된 helm 을 사용하기 위해 절대경로를 주었다)

/usr/local/bin/helm init --service-account=tiller \

   --stable-repo-url=https://charts.helm.sh/stable \

   --upgrade \

   --automount-service-account-token=true \

   --replicas=1 \

   --history-max=100 \

   --wait

4. 3번 실행 결과다.

Creating /home/ubuntu/.helm

Creating /home/ubuntu/.helm/repository

Creating /home/ubuntu/.helm/repository/cache

Creating /home/ubuntu/.helm/repository/local

Creating /home/ubuntu/.helm/plugins

Creating /home/ubuntu/.helm/starters

Creating /home/ubuntu/.helm/cache/archive

Creating /home/ubuntu/.helm/repository/repositories.yaml

Adding stable repo with URL: https://charts.helm.sh/stable

Adding local repo with URL: http://127.0.0.1:8879/charts

$HELM_HOME has been configured at /home/ubuntu/.helm.



Tiller (the Helm server-side component) has been installed into your Kubernetes Cluster.



Please note: by default, Tiller is deployed with an insecure 'allow unauthenticated users' policy.

To prevent this, run `helm init` with the --tiller-tls-verify flag.

For more information on securing your installation see: https://v2.helm.sh/docs/securing_installation/