Use kubectl patch

roles/kubernetes-apps/helm/tasks/main.yml

@@ -25,10 +25,7 @@
   when: helm_container.changed
 
 - name: Helm | Patch tiller deployment for RBAC
-  shell: >
-    kubectl --namespace={{ system_namespace }} get deployment tiller-deploy -o json | \
-    python -c 'import sys,json;a=json.load(sys.stdin);a["spec"]["template"]["spec"]["serviceAccount"]="tiller";json.dump(a,sys.stdout)' | \
-    kubectl apply -n {{ system_namespace }} -f -
+  command: kubectl patch deployment tiller-deploy -p '{"spec":{"template":{"spec":{"serviceAccount":"tiller"}}}}' -n {{ system_namespace }}
   when: rbac_enabled
 
 - name: Helm | Set up bash completion