c12s-kubespray/roles/kubernetes-apps/helm/tasks/main.yml

---
- name: Helm | Make sure HELM_HOME directory exists
  file: path={{ helm_home_dir }} state=directory

- name: Helm | Set up helm launcher
  template:
    src: helm-container.j2
    dest: "{{ bin_dir }}/helm"
    owner: root
    mode: 0755
  register: helm_container

- name: Helm | Configure tiller service account for RBAC
  command: kubectl create serviceaccount tiller --namespace={{ system_namespace }}
  ignore_errors: yes
  when: rbac_enabled

- name: Helm | Configure tiller rolebindings for RBAC
  command: kubectl create clusterrolebinding tiller --clusterrole=cluster-admin --serviceaccount={{ system_namespace }}:tiller
  ignore_errors: yes
  when: rbac_enabled

- name: Helm | Install/upgrade helm
  command: "{{ bin_dir }}/helm init --upgrade --tiller-image={{ tiller_image_repo }}:{{ tiller_image_tag }}"
  when: helm_container.changed

- name: Helm | Patch tiller deployment for RBAC
  shell: >
    kubectl --namespace={{ system_namespace }} get deployment tiller-deploy -o json | \
    python -c 'import sys,json;a=json.load(sys.stdin);a["spec"]["template"]["spec"]["serviceAccount"]="tiller";json.dump(a,sys.stdout)' | \
    kubectl apply -n {{ system_namespace }} -f -
  when: rbac_enabled

- name: Helm | Set up bash completion
  shell: "umask 022 && {{ bin_dir }}/helm completion >/etc/bash_completion.d/helm.sh"
  when: ( helm_container.changed and not ansible_os_family in ["CoreOS", "Container Linux by CoreOS"] )