Skip to content

Commit f58dbd6

Browse files
committed
add cluster-admin role for tiller
1 parent fab996d commit f58dbd6

File tree

1 file changed

+21
-0
lines changed

1 file changed

+21
-0
lines changed

site/helm-charts.md

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,27 @@ The WebLogic Kubernetes Operator uses Helm to create and deploy any necessary re
1616

1717
Helm has two parts: a client (Helm) and a server (Tiller). Tiller runs inside of your Kubernetes cluster, and manages releases (installations) of your charts. See https://github.com/kubernetes/helm/blob/master/docs/install.md for detailed instructions on installing Helm and Tiller.
1818

19+
In order to use Helm to install and manage the operator, you need to ensure that the Service Account that Tiller uses
20+
has the `cluster-admin` role. The default would be `default` in namespace `kube-system`. You can give that Service
21+
Account the necessary permissions with this command:
22+
23+
```
24+
cat << EOF | kubectl apply -f -
25+
apiVersion: rbac.authorization.k8s.io/v1beta1
26+
kind: ClusterRoleBinding
27+
metadata:
28+
name: tiller-cluster-admin
29+
roleRef:
30+
name: cluster-admin
31+
subjects:
32+
- kind: ServiceAccount
33+
name: default
34+
namespace: kube-system
35+
userNames:
36+
- system:serviceaccount:kube-system:default
37+
EOF
38+
```
39+
1940
## Operator's Helm chart configuration
2041

2142
The operator Helm chart is pre-configured with default values for the configuration of the operator.

0 commit comments

Comments
 (0)