Kubernetes 1.15安装部署helm插件

简单介绍

Helm其实就是一个基于Kubernetes的程序包（资源包）管理器，它将一个应用的相关资源组织成为Charts，并通过Charts管理程序包。再简单点说，可以当做RHEL/CentOS系统中的yum机制，有yum install，也有helm install等等。具体可以参考网上其他介绍。

GitHub：https://github.com/helm/helm
官网：https://helm.sh/docs/using_helm/#quickstart-guide

具体步骤

安装客户端Helm命令

参考：https://github.com/helm/helm/releases

[root@k8s-master ~]# wget https://storage.googleapis.com/kubernetes-helm/helm-v2.14.1-linux-amd64.tar.gz
[root@k8s-master ~]# mv linux-amd64/helm  /usr/local/bin/
[root@k8s-master ~]# helm version

安装Tiller服务

Tiller是helm的服务器端，一般运行于kubernetes集群之上，当然少不了RBAC授权，事先创建相关的ServiceAccount才能进行安装。

下面给出了一个样例yaml清单，定义了一个名为tiller的ServiceAccount，并通过ClusterRoleBinding将其绑定至集群管理员角色cluster-admin，从而使得它拥有集群级别所有的最高权限：

[root@k8s-master ~]# vim tiller-rbac-config.yaml

apiVersion: v1
kind: ServiceAccount
metadata:
  name: tiller
  namespace: kube-system
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: tiller
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: cluster-admin
subjects:
  - kind: ServiceAccount
    name: tiller
    namespace: kube-system

发布到kubernetes集群中去：

[root@k8s-master ~]# kubectl apply -f tiller-rbac-config.yaml 
serviceaccount/tiller created
clusterrolebinding.rbac.authorization.k8s.io/tiller created

接下来，初始化Tiller服务：

[root@k8s-master ~]# helm init --upgrade --service-account tiller --tiller-image registry.cn-hangzhou.aliyuncs.com/google_containers/tiller:v2.14.1 --stable-repo-url https://kubernetes.oss-cn-hangzhou.aliyuncs.com/charts
Creating /root/.helm 
Creating /root/.helm/repository 
Creating /root/.helm/repository/cache 
Creating /root/.helm/repository/local 
Creating /root/.helm/plugins 
Creating /root/.helm/starters 
Creating /root/.helm/cache/archive 
Creating /root/.helm/repository/repositories.yaml 
Adding stable repo with URL: https://kubernetes.oss-cn-hangzhou.aliyuncs.com/charts 
Adding local repo with URL: http://127.0.0.1:8879/charts 
$HELM_HOME has been configured at /root/.helm.

Tiller (the Helm server-side component) has been installed into your Kubernetes Cluster.

Please note: by default, Tiller is deployed with an insecure 'allow unauthenticated users' policy.
To prevent this, run `helm init` with the --tiller-tls-verify flag.
For more information on securing your installation see: https://docs.helm.sh/using_helm/#securing-your-helm-installation

如上显示，初始化成功！

注意：helm init命令进行初始化时，Kubernetes集群会到gcr.io/kubernetes-helm/上获取所需的镜像，被墙，故指定替代镜像可以解决。同时还要将repo源更换成阿里的镜像，更快更便捷。

helm命令使用

（1）更新使用的默认仓库元数据信息

[root@k8s-master ~]# helm repo update
Hang tight while we grab the latest from your chart repositories...
...Skip local chart repository
...Successfully got an update from the "stable" chart repository
Update Complete.

（2）搜索列出

[root@k8s-master ~]# helm search redis
NAME               CHART VERSION    APP VERSION    DESCRIPTION                                                 
stable/redis       1.1.15           4.0.8          Open source, advanced key-value store. It is often referr...
stable/redis-ha    2.0.1                           Highly available Redis cluster with multiple sentinels an...
stable/sensu       0.2.0                           Sensu monitoring framework backed by the Redis transport

（3）打印指定Charts详细信息

[root@k8s-master ~]# helm inspect stable/redis

（4）安装

[root@k8s-master ~]# helm install stable/redis -n redis    // -n 给个名字，也可以在安装前加个 --dry-run 用作测试

（5）查看已经安装

[root@k8s-master ~]# helm list

（6）删除已经安装的

[root@k8s-master ~]# helm delete redis

（7）其他

[root@k8s-master ~]# helm upgrade
[root@k8s-master ~]# helm rollback
[root@k8s-master ~]# helm history

至此，Helm的安装和简单使用到此完成。