--- - name: Helm | Make sure HELM_HOME directory exists file: path={{ helm_home_dir }} state=directory - name: Helm | Set up helm launcher template: src: helm-container.j2 dest: "{{ bin_dir }}/helm" owner: root mode: 0755 register: helm_container - name: Helm | Configure tiller service account for RBAC command: kubectl create serviceaccount tiller --namespace={{ system_namespace }} ignore_errors: yes when: rbac_enabled - name: Helm | Configure tiller rolebindings for RBAC command: kubectl create clusterrolebinding tiller --clusterrole=cluster-admin --serviceaccount={{ system_namespace }}:tiller ignore_errors: yes when: rbac_enabled - name: Helm | Install/upgrade helm command: "{{ bin_dir }}/helm init --upgrade --tiller-image={{ tiller_image_repo }}:{{ tiller_image_tag }}" when: helm_container.changed - name: Helm | Patch tiller deployment for RBAC command: kubectl patch deployment tiller-deploy -p '{"spec":{"template":{"spec":{"serviceAccount":"tiller"}}}}' -n {{ system_namespace }} when: rbac_enabled - name: Helm | Set up bash completion shell: "umask 022 && {{ bin_dir }}/helm completion >/etc/bash_completion.d/helm.sh" when: ( helm_container.changed and not ansible_os_family in ["CoreOS", "Container Linux by CoreOS"] )