| FazBrowse GitHub Viewer | Trending | | Home |
| Tools: [Download Repo ZIP] [Original HTTPS Page] |
One time Helm setup and configuration
brew install kubernetes-helmfirst time only: setup tiller in default kube-system namespace or your private namespace
# Install tiller into default `kube-system` namespace
helm init
# Install tiller into your private namespace (below showing `kube-system` namespace, but it could be any of your namespaces)
helm init --tiller-namespace=kube-system --service-account=default --tiller-image=gcr.io/kubernetes-helm/tiller:v2.13.0
# Upgrade tiller to latest version
export TILLER_TAG=v2.13.0
helm init --upgrade --tiller-namespace=kube-system --service-account=default --tiller-image=gcr.io/kubernetes-helm/tiller:$TILLER_TAG
# Verify the installation
helm version --tiller-namespace=kube-system
helm ls -a --tiller-namespace=kube-system --debug
# Uninstall tiller from your namespace
helm reset --tiller-namespace=kube-system
# if needed
helm init --client-only --tiller-namespace=kube-system
helm repo update --tiller-namespace=kube-system# example chart instalation
# --dry-run --debug flags help you to see before you really deploy
helm install --name=nginx-ingress --namespace=default --tiller-namespace=kube-system ./charts-master/incubator/nginx-ingress
helm install --name=traefik --namespace=default --tiller-namespace=kube-system -f traefik-values.yaml stable/traefik# Fetching the chart templates
helm fetch \
--untar \
--untardir charts/stable \
stable/traefik
# Rendering the template with configurable values
cp charts/stable/traefik/values.yaml \
values/traefik-values.yaml
# copied traefik.yaml can now be adjusted as needed
# To render the manifests from the template source with the potentially edited values file:
mkdir -p manual/stable
helm template \
--values values-prod.yaml \
--name traefik \
--tiller-namespace kube-system \
--namespace default \
--output-dir manual/stable \
charts/stable/traefik
# Applying the result to the cluster
kubectl apply --recursive --filename manual/stable/traefikbrew install gnu-getopt
# brew install gnupg
brew install gpg1
ln -s /usr/local/bin/gpg1 /usr/local/bin/gpggpg --gen-keyonly works when using latest gpg2
gpg --expert --full-gen-key
# note key ID, in this case is 1234ABC
"gpg: key 1234ABC marked as ultimately trusted"gpg --export --armor <my_eamil> > mypubkey.ascgpg --export -secret-key --armor <1234ABC>gpg --import theirpubkey.asc
gpg --list-keysgpg --list-secret-keysgpg --fingerprintInstall helm-secrets plugin
helm plugin install https://github.com/futuresimple/helm-secrets
# test
helm secrets helpWith the helm wrapper you can easily run helm secrets install/upgrade/rollback with secrets files included as -f option from you values dir tree.
Follow infractions Kubernetes Deployments with Helm - Secrets
secrets file should be named with secrets[.*].yaml pattern
Additional Commands
helm secrets enc secrets.yaml
helm secrets view secrets.yaml
helm secrets edit secrets.yaml
helm secrets dec secrets.yaml
helm secrets clean <your_chart_directory>| Back | FazBrowse Home | New Git URL |