Lightweight helm-controller providing HelmChart and HelmChartConfig CRDs

access.yaml

apiVersion: v1
kind: ServiceAccount
metadata:
  name: helm-controller
  namespace: kube-system
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: helm-controller
rules:
- apiGroups:
  - apiextensions.k8s.io
  resources:
  - customresourcedefinitions
  verbs:
  - get
  - list
  - create
  - delete
- apiGroups:
  - ""
  resources:
  - configmaps
  - rolebinding
  - serviceaccounts
  - secrets
  verbs:
  - create
  - delete
  - list
  - watch
- apiGroups:
  - batch
  resources:
  - jobs
  verbs:
  - "*"
- apiGroups:
  - helm.cattle.io
  resources:
  - "*"
  verbs:
  - "*"
- apiGroups:
  - ""
  resources:
  - events
  - configmaps
  - deployments
  - pods
  verbs:
  - create
  - get
  - patch
  - update
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: helm-controller
  namespace: kube-system
rules:
- apiGroups:
  - ""
  resources:
  - configmaps
  resourceNames:
  - helm-controller-lock
  verbs:
  - "*"
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: helm-controller
  namespace: kube-system
subjects:
- kind: ServiceAccount
  name: helm-controller
  namespace: kube-system
roleRef:
  kind: Role
  name: helm-controller
  apiGroup: rbac.authorization.k8s.io
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: helm-controller-cluster
subjects:
- kind: ServiceAccount
  name: helm-controller
  namespace: kube-system
roleRef:
  kind: ClusterRole
  name: helm-controller
  apiGroup: rbac.authorization.k8s.io

helm-controller.yaml

# https://raw.githubusercontent.com/k3s-io/helm-controller/master/manifests/deploy-cluster-scoped.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
  name: helm-controller
  namespace: kube-system
  labels:
    app: helm-controller
spec:
  replicas: 1
  selector:
    matchLabels:
      app: helm-controller
  template:
    metadata:
      labels:
        app: helm-controller
    spec:
      serviceAccountName: helm-controller
      containers:
        - name: helm-controller
          image: rancher/helm-controller:v0.13.0
          command: ["helm-controller"]
          # args:
            # - "--debug"
          resources:
            limits:
              cpu: 100m
              memory: 100M