k8s--基础--25.2--Helm--安装helm服务端tiller_helm tiller 安装

k8s–基础–25.2–Helm–安装helm服务端tiller

---

1、创建sa账号和对sa账号做rbac授权

1. 在master1上操作
2. 参考资料

https://github.com/helm/helm/blob/master/docs/rbac.md
1

1.1、脚本

vi  /root/helm/rbac.yaml
1

内容

# 创建sa账号
apiVersion: v1
kind: ServiceAccount
metadata:
  # sa账号
  name: tiller
  # 名称空间
  namespace: kube-system


---
# 对sa账号做rbac授权
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRoleBinding
metadata:
  name: tiller
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: cluster-admin
subjects:
  # sa账号设置
  - kind: ServiceAccount
    name: tiller
    namespace: kube-system


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27

1.2、执行

kubectl apply -f  /root/helm/rbac.yaml

# 查看
kubectl get sa  -n kube-system | grep tiller

1
2
3
4
5

2、安装镜像

把下面的tar.gz包传到master节点和各个node节点，并安装

2.1、上传镜像

2.2、解压

mkdir -p /root/helm
cd /root/helm
 
docker load -i tiler_2_13_1.tar.gz

# 删除
rm -rf tiler_2_13_1.tar.gz

1
2
3
4
5
6
7
8

3、安装tiler

1. 在master1上操作

3.1、脚本

vi  /root/helm/tiller.yaml
1

内容

apiVersion: v1
kind: Service
metadata: 
  creationTimestamp: null
  # Service 标签为 app: helm和name: tiller
  labels:
    app: helm
    name: tiller
  # Service 名称为tiller-deploy
  name: tiller-deploy
  # 名称空间是kube-system
  namespace: kube-system
spec:
  # service的端口
  ports:
    #端口名称
  - name: tiller
    #端口
    port: 44134
    #目标端口44134
    targetPort: tiller
  # 匹配的pod标签
  selector:
    app: helm
    name: tiller
  type: ClusterIP
status:
  loadBalancer: {}
---
apiVersion: apps/v1
kind: Deployment
metadata:
  creationTimestamp: null
  # 设置Deployment标签
  labels:
    app: helm
    name: tiller
  # 设置Deployment名称
  name: tiller-deploy
  namespace: kube-system
spec:
  # 匹配的模板标签
  selector:
    matchLabels:
     app: helm
     name: tiller
  # 副本数
  replicas: 1
  strategy: {}
  # 定义模板
  template:
    metadata:
      creationTimestamp: null
      # 模板标签
      labels:
        app: helm
        name: tiller
    spec:
      # 将sa账号默认挂载到 Pod 中
      automountServiceAccountToken: true
      # sa账号
      serviceAccount: tiller
      # 定义容器
      containers:
      # 环境变量
      - env:
        - name: TILLER_NAMESPACE
          value: kube-system
        - name: TILLER_HISTORY_MAX
          value: "0"
        # 镜像地址
        image: gcr.io/kubernetes-helm/tiller:v2.13.1
        imagePullPolicy: IfNotPresent
        # 存好检查
        livenessProbe:
          httpGet:
            path: /liveness
            port: 44135
          initialDelaySeconds: 1
          timeoutSeconds: 1
        name: tiller
        ports:
        - containerPort: 44134
          name: tiller
        - containerPort: 44135
          name: http
        # 健康检查
        readinessProbe:
          httpGet:
            path: /readiness
            port: 44135
          initialDelaySeconds: 1
          timeoutSeconds: 1
        resources: {}
status: {}

 

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98

3.2、执行

kubectl apply -f /root/helm/tiller.yaml

# 查看
kubectl get svc  -n kube-system
kubectl get pods  -n kube-system
1
2
3
4
5

3.3、查看helm服务

通过上面几步helm服务端旧部属好了

helm version 
1