From b0b380ebab9c7afc46fb516c95d28b35124f7372 Mon Sep 17 00:00:00 2001 From: Keith Burdis Date: Sat, 10 Feb 2018 14:11:10 +0000 Subject: [PATCH 1/3] Allow TLS command-line options to be set via environment variables and be used with all commands. --- cmd/helm/get.go | 6 +-- cmd/helm/helm.go | 76 +++++++++-------------------- cmd/helm/init.go | 26 +++++----- pkg/helm/environment/environment.go | 32 +++++++++++- 4 files changed, 71 insertions(+), 69 deletions(-) diff --git a/cmd/helm/get.go b/cmd/helm/get.go index 477f730d5..94245a08d 100644 --- a/cmd/helm/get.go +++ b/cmd/helm/get.go @@ -72,9 +72,9 @@ func newGetCmd(client helm.Interface, out io.Writer) *cobra.Command { cmd.Flags().Int32Var(&get.version, "revision", 0, "get the named release with revision") - cmd.AddCommand(addFlagsTLS(newGetValuesCmd(nil, out))) - cmd.AddCommand(addFlagsTLS(newGetManifestCmd(nil, out))) - cmd.AddCommand(addFlagsTLS(newGetHooksCmd(nil, out))) + cmd.AddCommand(newGetValuesCmd(nil, out)) + cmd.AddCommand(newGetManifestCmd(nil, out)) + cmd.AddCommand(newGetHooksCmd(nil, out)) return cmd } diff --git a/cmd/helm/helm.go b/cmd/helm/helm.go index 3810cfb8e..8b318c6f3 100644 --- a/cmd/helm/helm.go +++ b/cmd/helm/helm.go @@ -39,16 +39,6 @@ import ( ) var ( - tlsCaCertFile string // path to TLS CA certificate file - tlsCertFile string // path to TLS certificate file - tlsKeyFile string // path to TLS key file - tlsVerify bool // enable TLS and verify remote certificates - tlsEnable bool // enable TLS - - tlsCaCertDefault = "$HELM_HOME/ca.pem" - tlsCertDefault = "$HELM_HOME/cert.pem" - tlsKeyDefault = "$HELM_HOME/key.pem" - tillerTunnel *kube.Tunnel settings helm_env.EnvSettings ) @@ -75,6 +65,11 @@ Environment: $HELM_NO_PLUGINS disable plugins. Set HELM_NO_PLUGINS=1 to disable plugins. $TILLER_NAMESPACE set an alternative Tiller namespace (default "kube-system") $KUBECONFIG set an alternative Kubernetes configuration file (default "~/.kube/config") + $HELM_TLS_CA_CERT path to TLS CA certificate file to verify Tiller server certificate (default "$HELM_HOME/ca.pem") + $HELM_TLS_CERT path to TLS client certificate file for authenticating to Tiller (default "$HELM_HOME/cert.pem") + $HELM_TLS_KEY path to TLS cient key file for authenticating to Tiller (default "$HELM_HOME/key.pem") + $HELM_TLS_VERIFY enable TLS for request and verify remote (default "false") + $HELM_TLS_ENABLE enable TLS for request (default "false") ` func newRootCmd(args []string) *cobra.Command { @@ -83,11 +78,6 @@ func newRootCmd(args []string) *cobra.Command { Short: "The Helm package manager for Kubernetes.", Long: globalUsage, SilenceUsage: true, - PersistentPreRun: func(*cobra.Command, []string) { - tlsCaCertFile = os.ExpandEnv(tlsCaCertFile) - tlsCertFile = os.ExpandEnv(tlsCertFile) - tlsKeyFile = os.ExpandEnv(tlsKeyFile) - }, PersistentPostRun: func(*cobra.Command, []string) { teardown() }, @@ -112,18 +102,18 @@ func newRootCmd(args []string) *cobra.Command { newVerifyCmd(out), // release commands - addFlagsTLS(newDeleteCmd(nil, out)), - addFlagsTLS(newGetCmd(nil, out)), - addFlagsTLS(newHistoryCmd(nil, out)), - addFlagsTLS(newInstallCmd(nil, out)), - addFlagsTLS(newListCmd(nil, out)), - addFlagsTLS(newRollbackCmd(nil, out)), - addFlagsTLS(newStatusCmd(nil, out)), - addFlagsTLS(newUpgradeCmd(nil, out)), - - addFlagsTLS(newReleaseTestCmd(nil, out)), - addFlagsTLS(newResetCmd(nil, out)), - addFlagsTLS(newVersionCmd(nil, out)), + newDeleteCmd(nil, out), + newGetCmd(nil, out), + newHistoryCmd(nil, out), + newInstallCmd(nil, out), + newListCmd(nil, out), + newRollbackCmd(nil, out), + newStatusCmd(nil, out), + newUpgradeCmd(nil, out), + + newReleaseTestCmd(nil, out), + newResetCmd(nil, out), + newVersionCmd(nil, out), newCompletionCmd(out), newHomeCmd(out), @@ -266,20 +256,11 @@ func ensureHelmClient(h helm.Interface) helm.Interface { func newClient() helm.Interface { options := []helm.Option{helm.Host(settings.TillerHost)} - if tlsVerify || tlsEnable { - if tlsCaCertFile == "" { - tlsCaCertFile = settings.Home.TLSCaCert() - } - if tlsCertFile == "" { - tlsCertFile = settings.Home.TLSCert() - } - if tlsKeyFile == "" { - tlsKeyFile = settings.Home.TLSKey() - } - debug("Key=%q, Cert=%q, CA=%q\n", tlsKeyFile, tlsCertFile, tlsCaCertFile) - tlsopts := tlsutil.Options{KeyFile: tlsKeyFile, CertFile: tlsCertFile, InsecureSkipVerify: true} - if tlsVerify { - tlsopts.CaCertFile = tlsCaCertFile + if settings.TLSVerify || settings.TLSEnable { + debug("Key=%q, Cert=%q, CA=%q\n", settings.TLSKeyFile, settings.TLSCertFile, settings.TLSCaCertFile) + tlsopts := tlsutil.Options{KeyFile: settings.TLSKeyFile, CertFile: settings.TLSCertFile, InsecureSkipVerify: true} + if settings.TLSVerify { + tlsopts.CaCertFile = settings.TLSCaCertFile tlsopts.InsecureSkipVerify = false } tlscfg, err := tlsutil.ClientConfig(tlsopts) @@ -291,16 +272,3 @@ func newClient() helm.Interface { } return helm.NewClient(options...) } - -// addFlagsTLS adds the flags for supporting client side TLS to the -// helm command (only those that invoke communicate to Tiller.) -func addFlagsTLS(cmd *cobra.Command) *cobra.Command { - - // add flags - cmd.Flags().StringVar(&tlsCaCertFile, "tls-ca-cert", tlsCaCertDefault, "path to TLS CA certificate file") - cmd.Flags().StringVar(&tlsCertFile, "tls-cert", tlsCertDefault, "path to TLS certificate file") - cmd.Flags().StringVar(&tlsKeyFile, "tls-key", tlsKeyDefault, "path to TLS key file") - cmd.Flags().BoolVar(&tlsVerify, "tls-verify", false, "enable TLS for request and verify remote") - cmd.Flags().BoolVar(&tlsEnable, "tls", false, "enable TLS for request") - return cmd -} diff --git a/cmd/helm/init.go b/cmd/helm/init.go index c8753874f..fbff110e4 100644 --- a/cmd/helm/init.go +++ b/cmd/helm/init.go @@ -87,6 +87,11 @@ type initCmd struct { serviceAccount string maxHistory int wait bool + tlsEnable bool + tlsVerify bool + tlsKeyFile string + tlsCertFile string + tlsCaCertFile string } func newInitCmd(out io.Writer) *cobra.Command { @@ -103,6 +108,11 @@ func newInitCmd(out io.Writer) *cobra.Command { i.namespace = settings.TillerNamespace i.home = settings.Home i.client = ensureHelmClient(i.client) + i.tlsEnable = settings.TLSEnable + i.tlsVerify = settings.TLSVerify + i.tlsKeyFile = settings.TLSKeyFile + i.tlsCertFile = settings.TLSCertFile + i.tlsCaCertFile = settings.TLSCaCertFile return i.run() }, @@ -118,12 +128,6 @@ func newInitCmd(out io.Writer) *cobra.Command { f.BoolVar(&i.skipRefresh, "skip-refresh", false, "do not refresh (download) the local repository cache") f.BoolVar(&i.wait, "wait", false, "block until Tiller is running and ready to receive requests") - f.BoolVar(&tlsEnable, "tiller-tls", false, "install Tiller with TLS enabled") - f.BoolVar(&tlsVerify, "tiller-tls-verify", false, "install Tiller with TLS enabled and to verify remote certificates") - f.StringVar(&tlsKeyFile, "tiller-tls-key", "", "path to TLS key file to install with Tiller") - f.StringVar(&tlsCertFile, "tiller-tls-cert", "", "path to TLS certificate file to install with Tiller") - f.StringVar(&tlsCaCertFile, "tls-ca-cert", "", "path to CA root certificate") - f.StringVar(&stableRepositoryURL, "stable-repo-url", stableRepositoryURL, "URL for stable repository") f.StringVar(&localRepositoryURL, "local-repo-url", localRepositoryURL, "URL for local repository") @@ -141,22 +145,22 @@ func newInitCmd(out io.Writer) *cobra.Command { // tlsOptions sanitizes the tls flags as well as checks for the existence of required // tls files indicated by those flags, if any. func (i *initCmd) tlsOptions() error { - i.opts.EnableTLS = tlsEnable || tlsVerify - i.opts.VerifyTLS = tlsVerify + i.opts.EnableTLS = i.tlsEnable || i.tlsVerify + i.opts.VerifyTLS = i.tlsVerify if i.opts.EnableTLS { missing := func(file string) bool { _, err := os.Stat(file) return os.IsNotExist(err) } - if i.opts.TLSKeyFile = tlsKeyFile; i.opts.TLSKeyFile == "" || missing(i.opts.TLSKeyFile) { + if i.opts.TLSKeyFile = i.tlsKeyFile; i.opts.TLSKeyFile == "" || missing(i.opts.TLSKeyFile) { return errors.New("missing required TLS key file") } - if i.opts.TLSCertFile = tlsCertFile; i.opts.TLSCertFile == "" || missing(i.opts.TLSCertFile) { + if i.opts.TLSCertFile = i.tlsCertFile; i.opts.TLSCertFile == "" || missing(i.opts.TLSCertFile) { return errors.New("missing required TLS certificate file") } if i.opts.VerifyTLS { - if i.opts.TLSCaCertFile = tlsCaCertFile; i.opts.TLSCaCertFile == "" || missing(i.opts.TLSCaCertFile) { + if i.opts.TLSCaCertFile = i.tlsCaCertFile; i.opts.TLSCaCertFile == "" || missing(i.opts.TLSCaCertFile) { return errors.New("missing required TLS CA file") } } diff --git a/pkg/helm/environment/environment.go b/pkg/helm/environment/environment.go index b8bcf0def..5e460dd8d 100644 --- a/pkg/helm/environment/environment.go +++ b/pkg/helm/environment/environment.go @@ -49,6 +49,16 @@ type EnvSettings struct { KubeContext string // KubeConfig is the name of the kubeconfig file. KubeConfig string + // TLSCaCertFile is the path to TLS CA certificate file for Helm to verify the Tiller server certificate + TLSCaCertFile string + // TLSCertFile is the path to Helm TLS client certificate file for authenticating to Tiller + TLSCertFile string + // TLSKeyFile is the path to Helm TLS client key file for authenticating to Tiller + TLSKeyFile string + // TLSVerify enables TLS between Helm and Tiller and verification of the Tiller server certificate + TLSVerify bool + // TLSEnable enables TLS between Helm and Tiller + TLSEnable bool } // AddFlags binds flags to the given flagset. @@ -59,6 +69,11 @@ func (s *EnvSettings) AddFlags(fs *pflag.FlagSet) { fs.StringVar(&s.KubeConfig, "kubeconfig", "", "path to kubeconfig file. Overrides $KUBECONFIG") fs.BoolVar(&s.Debug, "debug", false, "enable verbose output") fs.StringVar(&s.TillerNamespace, "tiller-namespace", "kube-system", "namespace of Tiller") + fs.StringVar(&s.TLSCaCertFile, "tls-ca-cert", "", "path to TLS CA certificate file for Helm to verify Tiller server certificate") + fs.StringVar(&s.TLSCertFile, "tls-cert", "", "path to Helm TLS client certificate file for authenticating to Tiller") + fs.StringVar(&s.TLSKeyFile, "tls-key", "", "path to Helm TLS client key file for authenticating to Tiller") + fs.BoolVar(&s.TLSVerify, "tls-verify", false, "enable TLS connection between Helm and Tiller and verify Tiller server certificate") + fs.BoolVar(&s.TLSEnable, "tls", false, "enable TLS connection between Helm and Tiller") } // Init sets values from the environment. @@ -66,6 +81,16 @@ func (s *EnvSettings) Init(fs *pflag.FlagSet) { for name, envar := range envMap { setFlagFromEnv(name, envar, fs) } + // TLS defaults that depend on Home value + if s.TLSCaCertFile == "" { + s.TLSCaCertFile = s.Home.TLSCaCert() + } + if s.TLSCertFile == "" { + s.TLSCertFile = s.Home.TLSCert() + } + if s.TLSKeyFile == "" { + s.TLSKeyFile = s.Home.TLSKey() + } } // PluginDirs is the path to the plugin directories. @@ -83,6 +108,11 @@ var envMap = map[string]string{ "host": "HELM_HOST", "kubeconfig": "KUBECONFIG", "tiller-namespace": "TILLER_NAMESPACE", + "tls-ca-cert": "HELM_TLS_CA_CERT", + "tls-cert": "HELM_TLS_CERT", + "tls-key": "HELM_TLS_KEY", + "tls-verify": "HELM_TLS_VERIFY", + "tls": "HELM_TLS_ENABLE", } func setFlagFromEnv(name, envar string, fs *pflag.FlagSet) { @@ -90,7 +120,7 @@ func setFlagFromEnv(name, envar string, fs *pflag.FlagSet) { return } if v, ok := os.LookupEnv(envar); ok { - fs.Set(name, v) + fs.Set(name, os.ExpandEnv(v)) } } From 528d01178355f3eb4a369cbda41b3a60e9617065 Mon Sep 17 00:00:00 2001 From: Keith Burdis Date: Sat, 10 Feb 2018 21:53:40 +0000 Subject: [PATCH 2/3] Add or update tests for TLS changes, avoid environment variables leaking from one test to the next, remove duplicate --tls-ca-cert option and use clearer descriptions. gofmt -s avoid duplicate --tls-ca-cert option clearer descriptions --- cmd/helm/helm.go | 8 +- cmd/helm/init.go | 15 +-- cmd/helm/init_test.go | 15 +-- pkg/helm/environment/environment.go | 4 +- pkg/helm/environment/environment_test.go | 135 ++++++++++++++++++----- 5 files changed, 129 insertions(+), 48 deletions(-) diff --git a/cmd/helm/helm.go b/cmd/helm/helm.go index 186a37cd1..4542e0b2f 100644 --- a/cmd/helm/helm.go +++ b/cmd/helm/helm.go @@ -65,11 +65,11 @@ Environment: $HELM_NO_PLUGINS disable plugins. Set HELM_NO_PLUGINS=1 to disable plugins. $TILLER_NAMESPACE set an alternative Tiller namespace (default "kube-system") $KUBECONFIG set an alternative Kubernetes configuration file (default "~/.kube/config") - $HELM_TLS_CA_CERT path to TLS CA certificate file to verify Tiller server certificate (default "$HELM_HOME/ca.pem") + $HELM_TLS_CA_CERT path to TLS CA certificate used to verify the Helm client and Tiller server certificates (default "$HELM_HOME/ca.pem") $HELM_TLS_CERT path to TLS client certificate file for authenticating to Tiller (default "$HELM_HOME/cert.pem") - $HELM_TLS_KEY path to TLS cient key file for authenticating to Tiller (default "$HELM_HOME/key.pem") - $HELM_TLS_VERIFY enable TLS for request and verify remote (default "false") - $HELM_TLS_ENABLE enable TLS for request (default "false") + $HELM_TLS_KEY path to TLS client key file for authenticating to Tiller (default "$HELM_HOME/key.pem") + $HELM_TLS_VERIFY enable TLS connection between Helm and Tiller and verify Tiller server certificate (default "false") + $HELM_TLS_ENABLE enable TLS connection between Helm and Tiller (default "false") ` func newRootCmd(args []string) *cobra.Command { diff --git a/cmd/helm/init.go b/cmd/helm/init.go index fbff110e4..a793e032c 100644 --- a/cmd/helm/init.go +++ b/cmd/helm/init.go @@ -107,12 +107,8 @@ func newInitCmd(out io.Writer) *cobra.Command { } i.namespace = settings.TillerNamespace i.home = settings.Home - i.client = ensureHelmClient(i.client) - i.tlsEnable = settings.TLSEnable - i.tlsVerify = settings.TLSVerify - i.tlsKeyFile = settings.TLSKeyFile - i.tlsCertFile = settings.TLSCertFile i.tlsCaCertFile = settings.TLSCaCertFile + i.client = ensureHelmClient(i.client) return i.run() }, @@ -128,6 +124,11 @@ func newInitCmd(out io.Writer) *cobra.Command { f.BoolVar(&i.skipRefresh, "skip-refresh", false, "do not refresh (download) the local repository cache") f.BoolVar(&i.wait, "wait", false, "block until Tiller is running and ready to receive requests") + f.BoolVar(&i.tlsEnable, "tiller-tls", false, "install Tiller with TLS enabled") + f.BoolVar(&i.tlsVerify, "tiller-tls-verify", false, "install Tiller with TLS and Helm client certificate verification enabled") + f.StringVar(&i.tlsKeyFile, "tiller-tls-key", "", "path to Tiller TLS server key file") + f.StringVar(&i.tlsCertFile, "tiller-tls-cert", "", "path to Tiller TLS server certificate file") + f.StringVar(&stableRepositoryURL, "stable-repo-url", stableRepositoryURL, "URL for stable repository") f.StringVar(&localRepositoryURL, "local-repo-url", localRepositoryURL, "URL for local repository") @@ -154,10 +155,10 @@ func (i *initCmd) tlsOptions() error { return os.IsNotExist(err) } if i.opts.TLSKeyFile = i.tlsKeyFile; i.opts.TLSKeyFile == "" || missing(i.opts.TLSKeyFile) { - return errors.New("missing required TLS key file") + return errors.New("missing required TLS server key file") } if i.opts.TLSCertFile = i.tlsCertFile; i.opts.TLSCertFile == "" || missing(i.opts.TLSCertFile) { - return errors.New("missing required TLS certificate file") + return errors.New("missing required TLS server certificate file") } if i.opts.VerifyTLS { if i.opts.TLSCaCertFile = i.tlsCaCertFile; i.opts.TLSCaCertFile == "" || missing(i.opts.TLSCaCertFile) { diff --git a/cmd/helm/init_test.go b/cmd/helm/init_test.go index 4513315b7..b8a1d452d 100644 --- a/cmd/helm/init_test.go +++ b/cmd/helm/init_test.go @@ -280,13 +280,14 @@ func TestInitCmd_tlsOptions(t *testing.T) { } for _, tt := range tests { - // emulate tls file specific flags - tlsCaCertFile, tlsCertFile, tlsKeyFile = tt.caFile, tt.certFile, tt.keyFile - - // emulate tls enable/verify flags - tlsEnable, tlsVerify = tt.enable, tt.verify - - cmd := &initCmd{} + // emulate tls flags + cmd := &initCmd{ + tlsCaCertFile: tt.caFile, + tlsCertFile: tt.certFile, + tlsKeyFile: tt.keyFile, + tlsVerify: tt.verify, + tlsEnable: tt.enable, + } if err := cmd.tlsOptions(); err != nil { t.Fatalf("unexpected error: %v", err) } diff --git a/pkg/helm/environment/environment.go b/pkg/helm/environment/environment.go index 5166a15de..904a689a2 100644 --- a/pkg/helm/environment/environment.go +++ b/pkg/helm/environment/environment.go @@ -47,7 +47,7 @@ type EnvSettings struct { Debug bool // KubeContext is the name of the kubeconfig context. KubeContext string - // TLSCaCertFile is the path to TLS CA certificate file for Helm to verify the Tiller server certificate + // TLSCaCertFile is the path to TLS CA certificate file used to verify the Helm client and Tiller server certificates TLSCaCertFile string // TLSCertFile is the path to Helm TLS client certificate file for authenticating to Tiller TLSCertFile string @@ -66,7 +66,7 @@ func (s *EnvSettings) AddFlags(fs *pflag.FlagSet) { fs.StringVar(&s.KubeContext, "kube-context", "", "name of the kubeconfig context to use") fs.BoolVar(&s.Debug, "debug", false, "enable verbose output") fs.StringVar(&s.TillerNamespace, "tiller-namespace", "kube-system", "namespace of Tiller") - fs.StringVar(&s.TLSCaCertFile, "tls-ca-cert", "", "path to TLS CA certificate file for Helm to verify Tiller server certificate") + fs.StringVar(&s.TLSCaCertFile, "tls-ca-cert", "", "path to TLS CA certificate file used to verify the Helm client and Tiller server certificates") fs.StringVar(&s.TLSCertFile, "tls-cert", "", "path to Helm TLS client certificate file for authenticating to Tiller") fs.StringVar(&s.TLSKeyFile, "tls-key", "", "path to Helm TLS client key file for authenticating to Tiller") fs.BoolVar(&s.TLSVerify, "tls-verify", false, "enable TLS connection between Helm and Tiller and verify Tiller server certificate") diff --git a/pkg/helm/environment/environment_test.go b/pkg/helm/environment/environment_test.go index 8f0caa388..19ccd9b40 100644 --- a/pkg/helm/environment/environment_test.go +++ b/pkg/helm/environment/environment_test.go @@ -37,42 +37,103 @@ func TestEnvSettings(t *testing.T) { // expected values home, host, ns, kcontext, plugins string debug bool + tlsca, tlscert, tlskey string + tlsenable, tlsverify bool }{ { - name: "defaults", - args: []string{}, - home: DefaultHelmHome, - plugins: helmpath.Home(DefaultHelmHome).Plugins(), - ns: "kube-system", + name: "defaults", + args: []string{}, + home: DefaultHelmHome, + plugins: helmpath.Home(DefaultHelmHome).Plugins(), + ns: "kube-system", + tlsca: helmpath.Home(DefaultHelmHome).TLSCaCert(), + tlscert: helmpath.Home(DefaultHelmHome).TLSCert(), + tlskey: helmpath.Home(DefaultHelmHome).TLSKey(), + tlsenable: false, + tlsverify: false, }, { - name: "with flags set", - args: []string{"--home", "/foo", "--host=here", "--debug", "--tiller-namespace=myns"}, - home: "/foo", - plugins: helmpath.Home("/foo").Plugins(), - host: "here", - ns: "myns", - debug: true, + name: "with flags set", + args: []string{"--home", "/foo", "--host=here", "--debug", "--tiller-namespace=myns"}, + home: "/foo", + plugins: helmpath.Home("/foo").Plugins(), + host: "here", + ns: "myns", + debug: true, + tlsca: helmpath.Home("/foo").TLSCaCert(), + tlscert: helmpath.Home("/foo").TLSCert(), + tlskey: helmpath.Home("/foo").TLSKey(), + tlsenable: false, + tlsverify: false, }, { - name: "with envvars set", - args: []string{}, - envars: map[string]string{"HELM_HOME": "/bar", "HELM_HOST": "there", "HELM_DEBUG": "1", "TILLER_NAMESPACE": "yourns"}, - home: "/bar", - plugins: helmpath.Home("/bar").Plugins(), - host: "there", - ns: "yourns", - debug: true, + name: "with envvars set", + args: []string{}, + envars: map[string]string{"HELM_HOME": "/bar", "HELM_HOST": "there", "HELM_DEBUG": "1", "TILLER_NAMESPACE": "yourns"}, + home: "/bar", + plugins: helmpath.Home("/bar").Plugins(), + host: "there", + ns: "yourns", + debug: true, + tlsca: helmpath.Home("/bar").TLSCaCert(), + tlscert: helmpath.Home("/bar").TLSCert(), + tlskey: helmpath.Home("/bar").TLSKey(), + tlsenable: false, + tlsverify: false, }, { - name: "with flags and envvars set", - args: []string{"--home", "/foo", "--host=here", "--debug", "--tiller-namespace=myns"}, - envars: map[string]string{"HELM_HOME": "/bar", "HELM_HOST": "there", "HELM_DEBUG": "1", "TILLER_NAMESPACE": "yourns", "HELM_PLUGIN": "glade"}, - home: "/foo", - plugins: "glade", - host: "here", - ns: "myns", - debug: true, + name: "with flags and envvars set", + args: []string{"--home", "/foo", "--host=here", "--debug", "--tiller-namespace=myns"}, + envars: map[string]string{"HELM_HOME": "/bar", "HELM_HOST": "there", "HELM_DEBUG": "1", "TILLER_NAMESPACE": "yourns", "HELM_PLUGIN": "glade"}, + home: "/foo", + plugins: "glade", + host: "here", + ns: "myns", + debug: true, + tlsca: helmpath.Home("/foo").TLSCaCert(), + tlscert: helmpath.Home("/foo").TLSCert(), + tlskey: helmpath.Home("/foo").TLSKey(), + tlsenable: false, + tlsverify: false, + }, + { + name: "with TLS flags set", + args: []string{"--home", "/bar", "--tls-ca-cert", "/a/ca.crt", "--tls-cert=/a/client.crt", "--tls-key", "/a/client.key", "--tls-verify", "--tls"}, + home: "/bar", + plugins: helmpath.Home("/bar").Plugins(), + ns: "kube-system", + debug: false, + tlsca: "/a/ca.crt", + tlscert: "/a/client.crt", + tlskey: "/a/client.key", + tlsenable: true, + tlsverify: true, + }, + { + name: "with TLS envvars set", + args: []string{}, + envars: map[string]string{"HELM_HOME": "/bar", "HELM_TLS_CA_CERT": "/e/ca.crt", "HELM_TLS_CERT": "/e/client.crt", "HELM_TLS_KEY": "/e/client.key", "HELM_TLS_VERIFY": "true", "HELM_TLS_ENABLE": "true"}, + home: "/bar", + plugins: helmpath.Home("/bar").Plugins(), + ns: "kube-system", + tlsca: "/e/ca.crt", + tlscert: "/e/client.crt", + tlskey: "/e/client.key", + tlsenable: true, + tlsverify: true, + }, + { + name: "with TLS flags and envvars set", + args: []string{"--tls-ca-cert", "/a/ca.crt", "--tls-cert=/a/client.crt", "--tls-key", "/a/client.key", "--tls-verify"}, + envars: map[string]string{"HELM_HOME": "/bar", "HELM_TLS_CA_CERT": "/e/ca.crt", "HELM_TLS_CERT": "/e/client.crt", "HELM_TLS_KEY": "/e/client.key", "HELM_TLS_VERIFY": "true", "HELM_TLS_ENABLE": "true"}, + home: "/bar", + plugins: helmpath.Home("/bar").Plugins(), + ns: "kube-system", + tlsca: "/a/ca.crt", + tlscert: "/a/client.crt", + tlskey: "/a/client.key", + tlsenable: true, + tlsverify: true, }, } @@ -111,7 +172,25 @@ func TestEnvSettings(t *testing.T) { if settings.KubeContext != tt.kcontext { t.Errorf("expected kube-context %q, got %q", tt.kcontext, settings.KubeContext) } + if settings.TLSCaCertFile != tt.tlsca { + t.Errorf("expected tls-ca-cert %q, got %q", tt.tlsca, settings.TLSCaCertFile) + } + if settings.TLSCertFile != tt.tlscert { + t.Errorf("expected tls-cert %q, got %q", tt.tlscert, settings.TLSCertFile) + } + if settings.TLSKeyFile != tt.tlskey { + t.Errorf("expected tls-key %q, got %q", tt.tlskey, settings.TLSKeyFile) + } + if settings.TLSEnable != tt.tlsenable { + t.Errorf("expected tls %t, got %t", tt.tlsenable, settings.TLSEnable) + } + if settings.TLSVerify != tt.tlsverify { + t.Errorf("expected tls-verify %t, got %t", tt.tlsverify, settings.TLSVerify) + } + for k := range tt.envars { + os.Unsetenv(k) + } cleanup() }) } From 60b68d560f7415da015de4ef1902973a92405047 Mon Sep 17 00:00:00 2001 From: Bob Aman Date: Fri, 27 Jul 2018 15:51:29 -0700 Subject: [PATCH 3/3] Update docs --- docs/helm/helm.md | 12 ++++++++- docs/helm/helm_completion.md | 7 +++++- docs/helm/helm_create.md | 7 +++++- docs/helm/helm_delete.md | 20 +++++++-------- docs/helm/helm_dependency.md | 7 +++++- docs/helm/helm_dependency_build.md | 7 +++++- docs/helm/helm_dependency_list.md | 7 +++++- docs/helm/helm_dependency_update.md | 7 +++++- docs/helm/helm_fetch.md | 7 ++++++ docs/helm/helm_get.md | 14 +++++------ docs/helm/helm_get_hooks.md | 14 +++++------ docs/helm/helm_get_manifest.md | 14 +++++------ docs/helm/helm_get_values.md | 16 ++++++------ docs/helm/helm_history.md | 18 +++++++------- docs/helm/helm_home.md | 7 +++++- docs/helm/helm_init.md | 14 +++++++---- docs/helm/helm_inspect.md | 7 +++++- docs/helm/helm_inspect_chart.md | 7 +++++- docs/helm/helm_inspect_readme.md | 7 +++++- docs/helm/helm_inspect_values.md | 7 +++++- docs/helm/helm_install.md | 12 ++++----- docs/helm/helm_lint.md | 7 +++++- docs/helm/helm_list.md | 38 ++++++++++++++--------------- docs/helm/helm_package.md | 7 +++++- docs/helm/helm_plugin.md | 7 +++++- docs/helm/helm_plugin_install.md | 7 +++++- docs/helm/helm_plugin_list.md | 7 +++++- docs/helm/helm_plugin_remove.md | 7 +++++- docs/helm/helm_plugin_update.md | 7 +++++- docs/helm/helm_repo.md | 7 +++++- docs/helm/helm_repo_add.md | 7 +++++- docs/helm/helm_repo_index.md | 7 +++++- docs/helm/helm_repo_list.md | 7 +++++- docs/helm/helm_repo_remove.md | 7 +++++- docs/helm/helm_repo_update.md | 7 +++++- docs/helm/helm_reset.md | 16 ++++++------ docs/helm/helm_rollback.md | 24 +++++++++--------- docs/helm/helm_search.md | 7 +++++- docs/helm/helm_serve.md | 7 +++++- docs/helm/helm_status.md | 16 ++++++------ docs/helm/helm_template.md | 7 +++++- docs/helm/helm_test.md | 16 ++++++------ docs/helm/helm_upgrade.md | 12 ++++----- docs/helm/helm_verify.md | 7 +++++- docs/helm/helm_version.md | 20 +++++++-------- 45 files changed, 320 insertions(+), 159 deletions(-) diff --git a/docs/helm/helm.md b/docs/helm/helm.md index 8592cad7c..7e891b92a 100644 --- a/docs/helm/helm.md +++ b/docs/helm/helm.md @@ -27,6 +27,11 @@ Environment: $HELM_NO_PLUGINS disable plugins. Set HELM_NO_PLUGINS=1 to disable plugins. $TILLER_NAMESPACE set an alternative Tiller namespace (default "kube-system") $KUBECONFIG set an alternative Kubernetes configuration file (default "~/.kube/config") + $HELM_TLS_CA_CERT path to TLS CA certificate used to verify the Helm client and Tiller server certificates (default "$HELM_HOME/ca.pem") + $HELM_TLS_CERT path to TLS client certificate file for authenticating to Tiller (default "$HELM_HOME/cert.pem") + $HELM_TLS_KEY path to TLS client key file for authenticating to Tiller (default "$HELM_HOME/key.pem") + $HELM_TLS_VERIFY enable TLS connection between Helm and Tiller and verify Tiller server certificate (default "false") + $HELM_TLS_ENABLE enable TLS connection between Helm and Tiller (default "false") ### Options @@ -38,6 +43,11 @@ Environment: --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO @@ -68,4 +78,4 @@ Environment: * [helm verify](helm_verify.md) - verify that a chart at the given path has been signed and is valid * [helm version](helm_version.md) - print the client/server version information -###### Auto generated by spf13/cobra on 14-Mar-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_completion.md b/docs/helm/helm_completion.md index 994205d88..30e42901c 100644 --- a/docs/helm/helm_completion.md +++ b/docs/helm/helm_completion.md @@ -30,9 +30,14 @@ helm completion SHELL --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO * [helm](helm.md) - The Helm package manager for Kubernetes. -###### Auto generated by spf13/cobra on 8-Mar-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_create.md b/docs/helm/helm_create.md index 6e0f3de78..6a6045f87 100644 --- a/docs/helm/helm_create.md +++ b/docs/helm/helm_create.md @@ -49,9 +49,14 @@ helm create NAME --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO * [helm](helm.md) - The Helm package manager for Kubernetes. -###### Auto generated by spf13/cobra on 8-Mar-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_delete.md b/docs/helm/helm_delete.md index 5d41cd7ea..9c0e87d57 100644 --- a/docs/helm/helm_delete.md +++ b/docs/helm/helm_delete.md @@ -20,15 +20,10 @@ helm delete [flags] RELEASE_NAME [...] ### Options ``` - --dry-run simulate a delete - --no-hooks prevent hooks from running during deletion - --purge remove the release from the store and make its name free for later use - --timeout int time in seconds to wait for any individual Kubernetes operation (like Jobs for hooks) (default 300) - --tls enable TLS for request - --tls-ca-cert string path to TLS CA certificate file (default "$HELM_HOME/ca.pem") - --tls-cert string path to TLS certificate file (default "$HELM_HOME/cert.pem") - --tls-key string path to TLS key file (default "$HELM_HOME/key.pem") - --tls-verify enable TLS for request and verify remote + --dry-run simulate a delete + --no-hooks prevent hooks from running during deletion + --purge remove the release from the store and make its name free for later use + --timeout int time in seconds to wait for any individual Kubernetes operation (like Jobs for hooks) (default 300) ``` ### Options inherited from parent commands @@ -40,9 +35,14 @@ helm delete [flags] RELEASE_NAME [...] --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO * [helm](helm.md) - The Helm package manager for Kubernetes. -###### Auto generated by spf13/cobra on 8-Mar-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_dependency.md b/docs/helm/helm_dependency.md index 34d49e20a..079304e7c 100644 --- a/docs/helm/helm_dependency.md +++ b/docs/helm/helm_dependency.md @@ -63,6 +63,11 @@ for this case. --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO @@ -71,4 +76,4 @@ for this case. * [helm dependency list](helm_dependency_list.md) - list the dependencies for the given chart * [helm dependency update](helm_dependency_update.md) - update charts/ based on the contents of requirements.yaml -###### Auto generated by spf13/cobra on 8-Mar-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_dependency_build.md b/docs/helm/helm_dependency_build.md index 0413a9a85..7e9c865ca 100644 --- a/docs/helm/helm_dependency_build.md +++ b/docs/helm/helm_dependency_build.md @@ -36,9 +36,14 @@ helm dependency build [flags] CHART --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO * [helm dependency](helm_dependency.md) - manage a chart's dependencies -###### Auto generated by spf13/cobra on 8-Mar-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_dependency_list.md b/docs/helm/helm_dependency_list.md index b4343081c..70df8fb8c 100644 --- a/docs/helm/helm_dependency_list.md +++ b/docs/helm/helm_dependency_list.md @@ -28,9 +28,14 @@ helm dependency list [flags] CHART --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO * [helm dependency](helm_dependency.md) - manage a chart's dependencies -###### Auto generated by spf13/cobra on 8-Mar-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_dependency_update.md b/docs/helm/helm_dependency_update.md index 3c90ff779..fcf0506bf 100644 --- a/docs/helm/helm_dependency_update.md +++ b/docs/helm/helm_dependency_update.md @@ -41,9 +41,14 @@ helm dependency update [flags] CHART --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO * [helm dependency](helm_dependency.md) - manage a chart's dependencies -###### Auto generated by spf13/cobra on 8-Mar-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_fetch.md b/docs/helm/helm_fetch.md index 1ddef65fa..fb3c1040b 100644 --- a/docs/helm/helm_fetch.md +++ b/docs/helm/helm_fetch.md @@ -52,7 +52,14 @@ helm fetch [flags] [chart URL | repo/chartname] [...] --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO * [helm](helm.md) - The Helm package manager for Kubernetes. + +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_get.md b/docs/helm/helm_get.md index 9cd70e520..c170e10e0 100644 --- a/docs/helm/helm_get.md +++ b/docs/helm/helm_get.md @@ -25,12 +25,7 @@ helm get [flags] RELEASE_NAME ### Options ``` - --revision int32 get the named release with revision - --tls enable TLS for request - --tls-ca-cert string path to TLS CA certificate file (default "$HELM_HOME/ca.pem") - --tls-cert string path to TLS certificate file (default "$HELM_HOME/cert.pem") - --tls-key string path to TLS key file (default "$HELM_HOME/key.pem") - --tls-verify enable TLS for request and verify remote + --revision int32 get the named release with revision ``` ### Options inherited from parent commands @@ -42,6 +37,11 @@ helm get [flags] RELEASE_NAME --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO @@ -50,4 +50,4 @@ helm get [flags] RELEASE_NAME * [helm get manifest](helm_get_manifest.md) - download the manifest for a named release * [helm get values](helm_get_values.md) - download the values file for a named release -###### Auto generated by spf13/cobra on 8-Mar-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_get_hooks.md b/docs/helm/helm_get_hooks.md index 85fa5d04b..444af28a2 100644 --- a/docs/helm/helm_get_hooks.md +++ b/docs/helm/helm_get_hooks.md @@ -18,12 +18,7 @@ helm get hooks [flags] RELEASE_NAME ### Options ``` - --revision int32 get the named release with revision - --tls enable TLS for request - --tls-ca-cert string path to TLS CA certificate file (default "$HELM_HOME/ca.pem") - --tls-cert string path to TLS certificate file (default "$HELM_HOME/cert.pem") - --tls-key string path to TLS key file (default "$HELM_HOME/key.pem") - --tls-verify enable TLS for request and verify remote + --revision int32 get the named release with revision ``` ### Options inherited from parent commands @@ -35,9 +30,14 @@ helm get hooks [flags] RELEASE_NAME --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO * [helm get](helm_get.md) - download a named release -###### Auto generated by spf13/cobra on 8-Mar-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_get_manifest.md b/docs/helm/helm_get_manifest.md index a00c1be56..bf9e6b372 100644 --- a/docs/helm/helm_get_manifest.md +++ b/docs/helm/helm_get_manifest.md @@ -20,12 +20,7 @@ helm get manifest [flags] RELEASE_NAME ### Options ``` - --revision int32 get the named release with revision - --tls enable TLS for request - --tls-ca-cert string path to TLS CA certificate file (default "$HELM_HOME/ca.pem") - --tls-cert string path to TLS certificate file (default "$HELM_HOME/cert.pem") - --tls-key string path to TLS key file (default "$HELM_HOME/key.pem") - --tls-verify enable TLS for request and verify remote + --revision int32 get the named release with revision ``` ### Options inherited from parent commands @@ -37,9 +32,14 @@ helm get manifest [flags] RELEASE_NAME --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO * [helm get](helm_get.md) - download a named release -###### Auto generated by spf13/cobra on 8-Mar-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_get_values.md b/docs/helm/helm_get_values.md index d8944b475..e63207fd9 100644 --- a/docs/helm/helm_get_values.md +++ b/docs/helm/helm_get_values.md @@ -16,13 +16,8 @@ helm get values [flags] RELEASE_NAME ### Options ``` - -a, --all dump all (computed) values - --revision int32 get the named release with revision - --tls enable TLS for request - --tls-ca-cert string path to TLS CA certificate file (default "$HELM_HOME/ca.pem") - --tls-cert string path to TLS certificate file (default "$HELM_HOME/cert.pem") - --tls-key string path to TLS key file (default "$HELM_HOME/key.pem") - --tls-verify enable TLS for request and verify remote + -a, --all dump all (computed) values + --revision int32 get the named release with revision ``` ### Options inherited from parent commands @@ -34,9 +29,14 @@ helm get values [flags] RELEASE_NAME --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO * [helm get](helm_get.md) - download a named release -###### Auto generated by spf13/cobra on 8-Mar-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_history.md b/docs/helm/helm_history.md index ac51a8994..06bc2352e 100755 --- a/docs/helm/helm_history.md +++ b/docs/helm/helm_history.md @@ -28,14 +28,9 @@ helm history [flags] RELEASE_NAME ### Options ``` - --col-width uint specifies the max column width of output (default 60) - --max int32 maximum number of revision to include in history (default 256) - -o, --output string prints the output in the specified format (json|table|yaml) (default "table") - --tls enable TLS for request - --tls-ca-cert string path to TLS CA certificate file (default "$HELM_HOME/ca.pem") - --tls-cert string path to TLS certificate file (default "$HELM_HOME/cert.pem") - --tls-key string path to TLS key file (default "$HELM_HOME/key.pem") - --tls-verify enable TLS for request and verify remote + --col-width uint specifies the max column width of output (default 60) + --max int32 maximum number of revision to include in history (default 256) + -o, --output string prints the output in the specified format (json|table|yaml) (default "table") ``` ### Options inherited from parent commands @@ -47,9 +42,14 @@ helm history [flags] RELEASE_NAME --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO * [helm](helm.md) - The Helm package manager for Kubernetes. -###### Auto generated by spf13/cobra on 14-Mar-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_home.md b/docs/helm/helm_home.md index bdccd756f..4a34c98f8 100644 --- a/docs/helm/helm_home.md +++ b/docs/helm/helm_home.md @@ -23,9 +23,14 @@ helm home --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO * [helm](helm.md) - The Helm package manager for Kubernetes. -###### Auto generated by spf13/cobra on 8-Mar-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_init.md b/docs/helm/helm_init.md index 5374488af..e5f87f843 100644 --- a/docs/helm/helm_init.md +++ b/docs/helm/helm_init.md @@ -49,10 +49,9 @@ helm init --stable-repo-url string URL for stable repository (default "https://kubernetes-charts.storage.googleapis.com") -i, --tiller-image string override Tiller image --tiller-tls install Tiller with TLS enabled - --tiller-tls-cert string path to TLS certificate file to install with Tiller - --tiller-tls-key string path to TLS key file to install with Tiller - --tiller-tls-verify install Tiller with TLS enabled and to verify remote certificates - --tls-ca-cert string path to CA root certificate + --tiller-tls-cert string path to Tiller TLS server certificate file + --tiller-tls-key string path to Tiller TLS server key file + --tiller-tls-verify install Tiller with TLS and Helm client certificate verification enabled --upgrade upgrade if Tiller is already installed --wait block until Tiller is running and ready to receive requests ``` @@ -66,9 +65,14 @@ helm init --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO * [helm](helm.md) - The Helm package manager for Kubernetes. -###### Auto generated by spf13/cobra on 8-Mar-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_inspect.md b/docs/helm/helm_inspect.md index e46b3dbf4..2c2a8773d 100644 --- a/docs/helm/helm_inspect.md +++ b/docs/helm/helm_inspect.md @@ -39,6 +39,11 @@ helm inspect [CHART] --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO @@ -47,4 +52,4 @@ helm inspect [CHART] * [helm inspect readme](helm_inspect_readme.md) - shows inspect readme * [helm inspect values](helm_inspect_values.md) - shows inspect values -###### Auto generated by spf13/cobra on 14-Mar-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_inspect_chart.md b/docs/helm/helm_inspect_chart.md index cd1328b59..41773a25d 100644 --- a/docs/helm/helm_inspect_chart.md +++ b/docs/helm/helm_inspect_chart.md @@ -37,9 +37,14 @@ helm inspect chart [CHART] --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO * [helm inspect](helm_inspect.md) - inspect a chart -###### Auto generated by spf13/cobra on 8-Mar-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_inspect_readme.md b/docs/helm/helm_inspect_readme.md index 9dd9ebd43..de7cb4c95 100644 --- a/docs/helm/helm_inspect_readme.md +++ b/docs/helm/helm_inspect_readme.md @@ -35,9 +35,14 @@ helm inspect readme [CHART] --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO * [helm inspect](helm_inspect.md) - inspect a chart -###### Auto generated by spf13/cobra on 14-Mar-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_inspect_values.md b/docs/helm/helm_inspect_values.md index 6a907cc7d..a2c23c02b 100644 --- a/docs/helm/helm_inspect_values.md +++ b/docs/helm/helm_inspect_values.md @@ -37,9 +37,14 @@ helm inspect values [CHART] --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO * [helm inspect](helm_inspect.md) - inspect a chart -###### Auto generated by spf13/cobra on 8-Mar-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_install.md b/docs/helm/helm_install.md index 9f1ad86b0..c346157f9 100644 --- a/docs/helm/helm_install.md +++ b/docs/helm/helm_install.md @@ -92,11 +92,6 @@ helm install [CHART] --set stringArray set values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2) --set-string stringArray set STRING values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2) --timeout int time in seconds to wait for any individual Kubernetes operation (like Jobs for hooks) (default 300) - --tls enable TLS for request - --tls-ca-cert string path to TLS CA certificate file (default "$HELM_HOME/ca.pem") - --tls-cert string path to TLS certificate file (default "$HELM_HOME/cert.pem") - --tls-key string path to TLS key file (default "$HELM_HOME/key.pem") - --tls-verify enable TLS for request and verify remote --username string chart repository username where to locate the requested chart -f, --values valueFiles specify values in a YAML file or a URL(can specify multiple) (default []) --verify verify the package before installing it @@ -113,9 +108,14 @@ helm install [CHART] --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO * [helm](helm.md) - The Helm package manager for Kubernetes. -###### Auto generated by spf13/cobra on 27-Apr-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_lint.md b/docs/helm/helm_lint.md index c10322efd..ebaec801e 100644 --- a/docs/helm/helm_lint.md +++ b/docs/helm/helm_lint.md @@ -37,9 +37,14 @@ helm lint [flags] PATH --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO * [helm](helm.md) - The Helm package manager for Kubernetes. -###### Auto generated by spf13/cobra on 20-May-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_list.md b/docs/helm/helm_list.md index 1d5bf7ea2..e9b253d64 100755 --- a/docs/helm/helm_list.md +++ b/docs/helm/helm_list.md @@ -39,24 +39,19 @@ helm list [flags] [FILTER] ### Options ``` - -a, --all show all releases, not just the ones marked DEPLOYED - --col-width uint specifies the max column width of output (default 60) - -d, --date sort by release date - --deleted show deleted releases - --deleting show releases that are currently being deleted - --deployed show deployed releases. If no other is specified, this will be automatically enabled - --failed show failed releases - -m, --max int maximum number of releases to fetch (default 256) - --namespace string show releases within a specific namespace - -o, --offset string next release name in the list, used to offset from start value - --pending show pending releases - -r, --reverse reverse the sort order - -q, --short output short (quiet) listing format - --tls enable TLS for request - --tls-ca-cert string path to TLS CA certificate file (default "$HELM_HOME/ca.pem") - --tls-cert string path to TLS certificate file (default "$HELM_HOME/cert.pem") - --tls-key string path to TLS key file (default "$HELM_HOME/key.pem") - --tls-verify enable TLS for request and verify remote + -a, --all show all releases, not just the ones marked DEPLOYED + --col-width uint specifies the max column width of output (default 60) + -d, --date sort by release date + --deleted show deleted releases + --deleting show releases that are currently being deleted + --deployed show deployed releases. If no other is specified, this will be automatically enabled + --failed show failed releases + -m, --max int maximum number of releases to fetch (default 256) + --namespace string show releases within a specific namespace + -o, --offset string next release name in the list, used to offset from start value + --pending show pending releases + -r, --reverse reverse the sort order + -q, --short output short (quiet) listing format ``` ### Options inherited from parent commands @@ -68,9 +63,14 @@ helm list [flags] [FILTER] --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO * [helm](helm.md) - The Helm package manager for Kubernetes. -###### Auto generated by spf13/cobra on 8-Mar-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_package.md b/docs/helm/helm_package.md index 21090fa45..da6ffa4f4 100644 --- a/docs/helm/helm_package.md +++ b/docs/helm/helm_package.md @@ -42,9 +42,14 @@ helm package [flags] [CHART_PATH] [...] --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO * [helm](helm.md) - The Helm package manager for Kubernetes. -###### Auto generated by spf13/cobra on 16-Apr-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_plugin.md b/docs/helm/helm_plugin.md index cc42aa4dc..863aaa0d1 100644 --- a/docs/helm/helm_plugin.md +++ b/docs/helm/helm_plugin.md @@ -18,6 +18,11 @@ Manage client-side Helm plugins. --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO @@ -27,4 +32,4 @@ Manage client-side Helm plugins. * [helm plugin remove](helm_plugin_remove.md) - remove one or more Helm plugins * [helm plugin update](helm_plugin_update.md) - update one or more Helm plugins -###### Auto generated by spf13/cobra on 8-Mar-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_plugin_install.md b/docs/helm/helm_plugin_install.md index 196ca97dd..65a4672e2 100644 --- a/docs/helm/helm_plugin_install.md +++ b/docs/helm/helm_plugin_install.md @@ -31,9 +31,14 @@ helm plugin install [options] ... --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO * [helm plugin](helm_plugin.md) - add, list, or remove Helm plugins -###### Auto generated by spf13/cobra on 8-Mar-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_plugin_list.md b/docs/helm/helm_plugin_list.md index ddfd04ee6..f9bf84144 100644 --- a/docs/helm/helm_plugin_list.md +++ b/docs/helm/helm_plugin_list.md @@ -20,9 +20,14 @@ helm plugin list --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO * [helm plugin](helm_plugin.md) - add, list, or remove Helm plugins -###### Auto generated by spf13/cobra on 8-Mar-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_plugin_remove.md b/docs/helm/helm_plugin_remove.md index 8543a367a..b10691afa 100644 --- a/docs/helm/helm_plugin_remove.md +++ b/docs/helm/helm_plugin_remove.md @@ -20,9 +20,14 @@ helm plugin remove ... --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO * [helm plugin](helm_plugin.md) - add, list, or remove Helm plugins -###### Auto generated by spf13/cobra on 8-Mar-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_plugin_update.md b/docs/helm/helm_plugin_update.md index 9e5e205f0..153bbe60f 100644 --- a/docs/helm/helm_plugin_update.md +++ b/docs/helm/helm_plugin_update.md @@ -20,9 +20,14 @@ helm plugin update ... --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO * [helm plugin](helm_plugin.md) - add, list, or remove Helm plugins -###### Auto generated by spf13/cobra on 8-Mar-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_repo.md b/docs/helm/helm_repo.md index 4109ceca4..bdd824cb5 100644 --- a/docs/helm/helm_repo.md +++ b/docs/helm/helm_repo.md @@ -22,6 +22,11 @@ Example usage: --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO @@ -32,4 +37,4 @@ Example usage: * [helm repo remove](helm_repo_remove.md) - remove a chart repository * [helm repo update](helm_repo_update.md) - update information of available charts locally from chart repositories -###### Auto generated by spf13/cobra on 8-Mar-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_repo_add.md b/docs/helm/helm_repo_add.md index 456ffa27e..d01ec0873 100644 --- a/docs/helm/helm_repo_add.md +++ b/docs/helm/helm_repo_add.md @@ -31,9 +31,14 @@ helm repo add [flags] [NAME] [URL] --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO * [helm repo](helm_repo.md) - add, list, remove, update, and index chart repositories -###### Auto generated by spf13/cobra on 8-Mar-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_repo_index.md b/docs/helm/helm_repo_index.md index 14b412b29..4bd5a04ec 100644 --- a/docs/helm/helm_repo_index.md +++ b/docs/helm/helm_repo_index.md @@ -36,9 +36,14 @@ helm repo index [flags] [DIR] --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO * [helm repo](helm_repo.md) - add, list, remove, update, and index chart repositories -###### Auto generated by spf13/cobra on 8-Mar-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_repo_list.md b/docs/helm/helm_repo_list.md index 858ef957f..55785ff4d 100644 --- a/docs/helm/helm_repo_list.md +++ b/docs/helm/helm_repo_list.md @@ -20,9 +20,14 @@ helm repo list [flags] --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO * [helm repo](helm_repo.md) - add, list, remove, update, and index chart repositories -###### Auto generated by spf13/cobra on 8-Mar-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_repo_remove.md b/docs/helm/helm_repo_remove.md index 801bc3c3f..f26916484 100644 --- a/docs/helm/helm_repo_remove.md +++ b/docs/helm/helm_repo_remove.md @@ -20,9 +20,14 @@ helm repo remove [flags] [NAME] --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO * [helm repo](helm_repo.md) - add, list, remove, update, and index chart repositories -###### Auto generated by spf13/cobra on 8-Mar-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_repo_update.md b/docs/helm/helm_repo_update.md index 897ed24b7..e53722ef9 100644 --- a/docs/helm/helm_repo_update.md +++ b/docs/helm/helm_repo_update.md @@ -26,9 +26,14 @@ helm repo update --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO * [helm repo](helm_repo.md) - add, list, remove, update, and index chart repositories -###### Auto generated by spf13/cobra on 8-Mar-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_reset.md b/docs/helm/helm_reset.md index ed68b1b84..c87886cf7 100644 --- a/docs/helm/helm_reset.md +++ b/docs/helm/helm_reset.md @@ -18,13 +18,8 @@ helm reset ### Options ``` - -f, --force forces Tiller uninstall even if there are releases installed, or if Tiller is not in ready state. Releases are not deleted.) - --remove-helm-home if set deletes $HELM_HOME - --tls enable TLS for request - --tls-ca-cert string path to TLS CA certificate file (default "$HELM_HOME/ca.pem") - --tls-cert string path to TLS certificate file (default "$HELM_HOME/cert.pem") - --tls-key string path to TLS key file (default "$HELM_HOME/key.pem") - --tls-verify enable TLS for request and verify remote + -f, --force forces Tiller uninstall even if there are releases installed, or if Tiller is not in ready state. Releases are not deleted.) + --remove-helm-home if set deletes $HELM_HOME ``` ### Options inherited from parent commands @@ -36,9 +31,14 @@ helm reset --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO * [helm](helm.md) - The Helm package manager for Kubernetes. -###### Auto generated by spf13/cobra on 8-Mar-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_rollback.md b/docs/helm/helm_rollback.md index 4b6dcbbb2..a547936c6 100644 --- a/docs/helm/helm_rollback.md +++ b/docs/helm/helm_rollback.md @@ -20,17 +20,12 @@ helm rollback [flags] [RELEASE] [REVISION] ### Options ``` - --dry-run simulate a rollback - --force force resource update through delete/recreate if needed - --no-hooks prevent hooks from running during rollback - --recreate-pods performs pods restart for the resource if applicable - --timeout int time in seconds to wait for any individual Kubernetes operation (like Jobs for hooks) (default 300) - --tls enable TLS for request - --tls-ca-cert string path to TLS CA certificate file (default "$HELM_HOME/ca.pem") - --tls-cert string path to TLS certificate file (default "$HELM_HOME/cert.pem") - --tls-key string path to TLS key file (default "$HELM_HOME/key.pem") - --tls-verify enable TLS for request and verify remote - --wait if set, will wait until all Pods, PVCs, Services, and minimum number of Pods of a Deployment are in a ready state before marking the release as successful. It will wait for as long as --timeout + --dry-run simulate a rollback + --force force resource update through delete/recreate if needed + --no-hooks prevent hooks from running during rollback + --recreate-pods performs pods restart for the resource if applicable + --timeout int time in seconds to wait for any individual Kubernetes operation (like Jobs for hooks) (default 300) + --wait if set, will wait until all Pods, PVCs, Services, and minimum number of Pods of a Deployment are in a ready state before marking the release as successful. It will wait for as long as --timeout ``` ### Options inherited from parent commands @@ -42,9 +37,14 @@ helm rollback [flags] [RELEASE] [REVISION] --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO * [helm](helm.md) - The Helm package manager for Kubernetes. -###### Auto generated by spf13/cobra on 8-Mar-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_search.md b/docs/helm/helm_search.md index 1ed04e880..056398ff4 100644 --- a/docs/helm/helm_search.md +++ b/docs/helm/helm_search.md @@ -34,9 +34,14 @@ helm search [keyword] --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO * [helm](helm.md) - The Helm package manager for Kubernetes. -###### Auto generated by spf13/cobra on 23-Apr-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_serve.md b/docs/helm/helm_serve.md index 90ebb6da9..c67dd365b 100644 --- a/docs/helm/helm_serve.md +++ b/docs/helm/helm_serve.md @@ -41,9 +41,14 @@ helm serve --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO * [helm](helm.md) - The Helm package manager for Kubernetes. -###### Auto generated by spf13/cobra on 8-Mar-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_status.md b/docs/helm/helm_status.md index 02ec0ad66..2eadf5496 100644 --- a/docs/helm/helm_status.md +++ b/docs/helm/helm_status.md @@ -23,13 +23,8 @@ helm status [flags] RELEASE_NAME ### Options ``` - -o, --output string output the status in the specified format (json or yaml) - --revision int32 if set, display the status of the named release with revision - --tls enable TLS for request - --tls-ca-cert string path to TLS CA certificate file (default "$HELM_HOME/ca.pem") - --tls-cert string path to TLS certificate file (default "$HELM_HOME/cert.pem") - --tls-key string path to TLS key file (default "$HELM_HOME/key.pem") - --tls-verify enable TLS for request and verify remote + -o, --output string output the status in the specified format (json or yaml) + --revision int32 if set, display the status of the named release with revision ``` ### Options inherited from parent commands @@ -41,9 +36,14 @@ helm status [flags] RELEASE_NAME --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO * [helm](helm.md) - The Helm package manager for Kubernetes. -###### Auto generated by spf13/cobra on 8-Mar-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_template.md b/docs/helm/helm_template.md index cdc8a84a6..b58e41dde 100644 --- a/docs/helm/helm_template.md +++ b/docs/helm/helm_template.md @@ -47,9 +47,14 @@ helm template [flags] CHART --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO * [helm](helm.md) - The Helm package manager for Kubernetes. -###### Auto generated by spf13/cobra on 22-May-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_test.md b/docs/helm/helm_test.md index 062244e73..69f10ca55 100644 --- a/docs/helm/helm_test.md +++ b/docs/helm/helm_test.md @@ -19,13 +19,8 @@ helm test [RELEASE] ### Options ``` - --cleanup delete test pods upon completion - --timeout int time in seconds to wait for any individual Kubernetes operation (like Jobs for hooks) (default 300) - --tls enable TLS for request - --tls-ca-cert string path to TLS CA certificate file (default "$HELM_HOME/ca.pem") - --tls-cert string path to TLS certificate file (default "$HELM_HOME/cert.pem") - --tls-key string path to TLS key file (default "$HELM_HOME/key.pem") - --tls-verify enable TLS for request and verify remote + --cleanup delete test pods upon completion + --timeout int time in seconds to wait for any individual Kubernetes operation (like Jobs for hooks) (default 300) ``` ### Options inherited from parent commands @@ -37,9 +32,14 @@ helm test [RELEASE] --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO * [helm](helm.md) - The Helm package manager for Kubernetes. -###### Auto generated by spf13/cobra on 8-Mar-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_upgrade.md b/docs/helm/helm_upgrade.md index c2882265e..24ae85d91 100644 --- a/docs/helm/helm_upgrade.md +++ b/docs/helm/helm_upgrade.md @@ -55,11 +55,6 @@ helm upgrade [RELEASE] [CHART] --set stringArray set values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2) --set-string stringArray set STRING values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2) --timeout int time in seconds to wait for any individual Kubernetes operation (like Jobs for hooks) (default 300) - --tls enable TLS for request - --tls-ca-cert string path to TLS CA certificate file (default "$HELM_HOME/ca.pem") - --tls-cert string path to TLS certificate file (default "$HELM_HOME/cert.pem") - --tls-key string path to TLS key file (default "$HELM_HOME/key.pem") - --tls-verify enable TLS for request and verify remote --username string chart repository username where to locate the requested chart -f, --values valueFiles specify values in a YAML file or a URL(can specify multiple) (default []) --verify verify the provenance of the chart before upgrading @@ -76,9 +71,14 @@ helm upgrade [RELEASE] [CHART] --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO * [helm](helm.md) - The Helm package manager for Kubernetes. -###### Auto generated by spf13/cobra on 4-Apr-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_verify.md b/docs/helm/helm_verify.md index bc5343937..445a33d82 100644 --- a/docs/helm/helm_verify.md +++ b/docs/helm/helm_verify.md @@ -35,9 +35,14 @@ helm verify [flags] PATH --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO * [helm](helm.md) - The Helm package manager for Kubernetes. -###### Auto generated by spf13/cobra on 8-Mar-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018 diff --git a/docs/helm/helm_version.md b/docs/helm/helm_version.md index 1f48cceba..7a08a9c58 100644 --- a/docs/helm/helm_version.md +++ b/docs/helm/helm_version.md @@ -30,15 +30,10 @@ helm version ### Options ``` - -c, --client client version only - -s, --server server version only - --short print the version number - --template string template for version string format - --tls enable TLS for request - --tls-ca-cert string path to TLS CA certificate file (default "$HELM_HOME/ca.pem") - --tls-cert string path to TLS certificate file (default "$HELM_HOME/cert.pem") - --tls-key string path to TLS key file (default "$HELM_HOME/key.pem") - --tls-verify enable TLS for request and verify remote + -c, --client client version only + -s, --server server version only + --short print the version number + --template string template for version string format ``` ### Options inherited from parent commands @@ -50,9 +45,14 @@ helm version --kube-context string name of the kubeconfig context to use --tiller-connection-timeout int the duration (in seconds) Helm will wait to establish a connection to tiller (default 300) --tiller-namespace string namespace of Tiller (default "kube-system") + --tls enable TLS connection between Helm and Tiller + --tls-ca-cert string path to TLS CA certificate file used to verify the Helm client and Tiller server certificates + --tls-cert string path to Helm TLS client certificate file for authenticating to Tiller + --tls-key string path to Helm TLS client key file for authenticating to Tiller + --tls-verify enable TLS connection between Helm and Tiller and verify Tiller server certificate ``` ### SEE ALSO * [helm](helm.md) - The Helm package manager for Kubernetes. -###### Auto generated by spf13/cobra on 8-Mar-2018 +###### Auto generated by spf13/cobra on 27-Jul-2018