helm
gruntwork-io/helm/kubernetes
Terraform code and scripts for deploying Helm Server (Helm v2) on a Kubernetes cluster. https://www.gruntwork.io
  !Terraform Version Tiller Module DEPRECATION NOTICE: This repo has been deprecated. The Namespace modules have been moved to terraform-kubernetes-namespace. Refer to the v0.1.0 release notes for migration instructions. Please use that module for continued functionality of managing Service Accounts and Namespaces. NOTE: This is for deploying Tiller, a major component of Helm v2. Tiller has been removed in Helm v3 and is no longer necesssary. You do NOT need this module to use Helm v3. This repo contains a Module for deploying Tiller (the server component of Helm) on Kubernetes clusters with Terraform.
| Name | Type | Description | Default |
|---|---|---|---|
| service_account_name | string | The name of the service account to use for Tiller. | required |
| tiller_namespace | string | The namespace to deploy Tiller into. | required |
| resource_namespace | string | The namespace where the Helm chart resources will be deployed into by Tiller. | required |
| grant_helm_client_rbac_user | string | If set, will generate client side TLS certs for this RBAC user. | "" |
| grant_helm_client_rbac_group | string | If set, will generate client side TLS certs for this RBAC group. | "" |
| tls_subject | map(any) | The issuer information that contains the identifying information for the Tiller | {
"common_name": "tiller",
"organiza |
| private_key_ecdsa_curve | string | The name of the elliptic curve to use. Should only be used if var.private_key_al | "P256" |
| private_key_algorithm | string | The name of the algorithm to use for private keys. Must be one of: RSA or ECDSA. | "ECDSA" |
| tiller_version | string | The version of Tiller to deploy. | "v2.11.0" |
| private_key_rsa_bits | number | The size of the generated RSA key in bits. Should only be used if var.private_ke | 2048 |
| grant_helm_client_rbac_service_account | string | If set, will generate client side TLS certs for this ServiceAccount. The Service | "" |
| client_tls_subject | map(any) | The issuer information that contains the identifying information for the helm cl | {
"common_name": "admin",
"organizat |
| kubectl_config_context_name | string | The config context to use when authenticating to the Kubernetes cluster. If empt | "" |
| kubectl_config_path | string | The path to the config file to use for kubectl. If empty, defaults to $HOME/.kub | "~/.kube/config" |
tiller_namespace — The name of the namespace that houses Tiller.resource_namespace — The name of the namespace where Tiller will deploy resources into.helm_client_tls_private_key_pem — The private key of the TLS certificate key pair to use for the helm client.helm_client_tls_public_cert_pem — The public certificate of the TLS certificate key pair to use for the helm client.helm_client_tls_ca_cert_pem — The CA certificate of the TLS certificate key pair to use for the helm client.