Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Create] store helm certificates in Kubernetes secrets #15

Open
petermikitsh opened this issue Mar 12, 2019 · 1 comment
Open

[Create] store helm certificates in Kubernetes secrets #15

petermikitsh opened this issue Mar 12, 2019 · 1 comment

Comments

@petermikitsh
Copy link
Member

Currently, snow create will write to the user's ~/.helm directory, creating a bunch of files:

  • ca.cert.pem
  • ca.key.pem
  • helm.cert.pem
  • helm.csr.pem
  • helm.key.pem
  • tiller.cert.pem
  • tiller.csr.pem
  • tiller.key.pem

This is problematic if we want to use snow with different clusters-- running snow create repetitively would overwrite the old files. Additionally, if you run snow create in a CI environment, it's possible you might lose the files forever.

To keep things portable, these files should be stored as Kubernetes secrets, and retrieved as necessary.

@petermikitsh
Copy link
Member Author

Upgrading to Helm 3 will solve this problem. The tiller client is eliminated, so no need to generate certificates.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant