{"id":1855,"date":"2018-10-01T13:21:20","date_gmt":"2018-10-01T07:51:20","guid":{"rendered":"https:\/\/judepereira.com\/blog\/?p=1855"},"modified":"2018-10-01T13:21:20","modified_gmt":"2018-10-01T07:51:20","slug":"nginx-ingress-helm-k8s-rbac","status":"publish","type":"post","link":"https:\/\/judepereira.com\/blog\/nginx-ingress-helm-k8s-rbac\/","title":{"rendered":"Installing the Nginx Ingress Controller via Helm to a K8s cluster with RBAC enabled"},"content":{"rendered":"

A lot of posts describe how to do this, but are fairly outdated, and do not mention the last supported K8s version. Here’s a tried and tested way to do so via Helm. This has been tested on GKE, with the Kubernetes master version\u00a01.9.7-gke.6:<\/p>\n

    \n
  1. \n
      \n
    1. Create the service account for Tiller – the Helm server\n
      $ kubectl create serviceaccount --namespace kube-system tiller<\/pre>\n<\/li>\n
    2. Create the cluster role\n
      $ kubectl create clusterrolebinding tiller-cluster-rule --clusterrole=cluster-admin --serviceaccount=kibe-system:tiller<\/pre>\n<\/li>\n
    3. Apply the RBAC role\n
        \n
      1. Create tiller.yml with the following content\n
        kind: ClusterRoleBinding\r\napiVersion: rbac.authorization.k8s.io\/v1beta1\r\nmetadata:\r\n  name: tiller-clusterrolebinding\r\nsubjects:\r\n- kind: ServiceAccount\r\n  name: tiller\r\n  namespace: kube-system\r\nroleRef:\r\n  kind: ClusterRole\r\n  name: cluster-admin\r\n  apiGroup: \"\"<\/pre>\n<\/li>\n
      2. Apply this\n
        $ kubectl create -f tiller.yaml\r\n\r\n<\/pre>\n<\/li>\n<\/ol>\n<\/li>\n
      3. Initialise Helm\n
        helm init --service-account tiller --upgrade<\/pre>\n<\/li>\n
      4. Wait until the tiller-deploy service is running\n
        $ while ! kubectl get pod -n kube-system | grep tiller-deploy | grep Running &> \/dev\/null; do\r\n  echo \"Waiting for the tiller-deploy pod to be ready...\"\r\n  sleep 1\r\ndone<\/pre>\n<\/li>\n
      5. Install the Nginx Ingress Controller\n
        helm install --name nginx-ingress stable\/nginx-ingress --set rbac.create=true<\/pre>\n<\/li>\n
      6. Have fun!<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n
        Inspired from Bitnami<\/a>.<\/p>\n
        Read the ongoing issue here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"
        A lot of posts describe how to do this, but are fairly outdated, and do not mention the last supported K8s version. Here’s a tried and tested way to do so via Helm. This has been tested on GKE, with the Kubernetes master version\u00a01.9.7-gke.6: Create the service account for Tiller – the Helm server $ […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[52,622],"tags":[632,631,628,633,624,627,629,623,626,255,630,625],"class_list":["post-1855","post","type-post","status-publish","format-standard","hentry","category-code","category-kubernetes","tag-cluster-role","tag-clusterrolebinding","tag-controller","tag-gke","tag-helm","tag-ingress","tag-k8s","tag-kubernetes","tag-nginx","tag-rbac","tag-serviceaccount","tag-tiller"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t