Add helmctl to control tiller (cloudposse#465)

* Add helmctl to control tiller

* add namespace and wait

* Update rootfs/usr/local/bin/helmctl

Co-Authored-By: osterman <[email protected]>

Author: osterman

Diff for: rootfs/usr/local/bin/helmctl

@@ -0,0 +1,58 @@
+#!/usr/bin/variant
+# vim:set ft=yaml
+
+mixins:
+  # Exit on all errors
+  exit_on_errors: &exit_on_errors
+    set -e
+
+  # Default runner
+  runner: &runner
+    command: "bash"
+    args: ["-ex", "-c"]
+
+tasks:
+  tiller:
+    # Write out kubecfg
+    description: "Commands that operate on the helm tiller"
+    tasks:
+      install:
+        description: "Install the helm tiller"
+        parameters:
+        - name: namespace
+          description: "Namespace to install tiller"
+          default: "kube-system"
+          type: string
+          required: false
+        - name: rbac-enabled
+          description: "Enable RBAC"
+          default: true
+          type: boolean
+          required: false
+        script:
+        - *exit_on_errors
+        - |
+          if [[ {{ get "rbac_enabled" }} == "true" ]]; then
+            echo "Enabled Tiller with RBAC"
+            kubectl get -n {{ get "namespace" }} serviceaccount tiller > /dev/null 2>&1 || \
+              kubectl -n {{ get "namespace" }} create serviceaccount tiller;
+            kubectl get -n {{ get "namespace" }} clusterrolebinding tiller > /dev/null 2>&1 || \
+              kubectl create clusterrolebinding tiller --clusterrole cluster-admin --serviceaccount={{ get "namespace" }}:tiller;
+            helm init --tiller-namespace={{ get "namespace" }} --history-max 200 --service-account tiller --upgrade --wait;
+          else
+            echo "Enabled Tiller without RBAC"
+            helm init --tiller-namespace={{ get "namespace" }} --history-max 200 --upgrade --wait;
+          fi 
+      uninstall:
+        description: "Uninstall the helm tiller"
+        - name: namespace
+          description: "tiller's namespace"
+          default: "kube-system"
+          type: string
+          required: false
+        script:
+        - *exit_on_errors
+        - |
+          kubectl -n {{ get "namespace" }} delete deployment tiller-deploy
+          kubectl delete clusterrolebinding tiller --ignore-not-found
+          kubectl -n {{ get "namespace" }} delete serviceaccount tiller --ignore-not-found