HomePhabricator

admin: don't rely on coredns for kube-system tiller

Description

admin: don't rely on coredns for kube-system tiller

Why:
Having a chicken and egg problem of relying on an internal DNS service
that is not setup yet is not great. Avoid it by having the kube-system
tiller, which is mean to manage all others rely on the hosts
/etc/resolv.conf

What:
Pass dnsPolicy: Default (which isn't the default btw) to the spec of
kube-system tiller
Also set HELM_HOME to /etc/helm by default in order to use the
centralized helm home

Bug: T239835
Change-Id: Ie42351a7b85dcd394e6c3b062769b0642de6280d

Details

Provenance
akosiarisAuthored on Dec 18 2019, 9:08 AM
Parents
rDEPLOYCHARTS523cb2eeb1b4: rbac: Add default metadata to system:node RBAC
Branches
Unknown
Tags
Unknown
ChangeId
Ie42351a7b85dcd394e6c3b062769b0642de6280d