WIP feat(tiller): add --net-host flag to 'helm init'

When 'helm init --net-host=true' is run, Tiller will be installed with access to the host network (net=host in Docker)

Closes #2222

cmd/helm/init.go

@@ -115,6 +115,8 @@ func newInitCmd(out io.Writer) *cobra.Command {
 	f.StringVar(&stableRepositoryURL, "stable-repo-url", stableRepositoryURL, "URL for stable repository")
 	f.StringVar(&localRepositoryURL, "local-repo-url", localRepositoryURL, "URL for local repository")
 
+	f.BoolVar(&i.opts.EnableHostNetwork, "net-host", false, "install tiller with net=host")
+
 	return cmd
 }
 

cmd/helm/installer/install.go

@@ -164,6 +164,9 @@ func generateDeployment(opts *Options) *extensions.Deployment {
 							},
 						},
 					},
+					SecurityContext: &api.PodSecurityContext{
+						HostNetwork: opts.EnableHostNetwork,
+					},
 				},
 			},
 		},

cmd/helm/installer/options.go

@@ -65,6 +65,9 @@ type Options struct {
 	//
 	// Required and valid if and only if VerifyTLS is set.
 	TLSCaCertFile string
+
+	// EnableHostNetwork installs Tiller with net=host
+	EnableHostNetwork bool
 }
 
 func (opts *Options) selectImage() string {