kubernetes-sigs / kubespray

Deploy a Production Ready Kubernetes Cluster
Apache License 2.0
15.86k stars 6.41k forks source link

kubelet-csr-approver not support offline installation #11191

Open JaneLiuL opened 3 months ago

JaneLiuL commented 3 months ago

What would you like to be added

in our environment, not support to helm add outside helm repo. we can only bring this helm chart as vendor package in our folder, which not support helm upload vendor helm chart to our company. is it possible to not use helm release , and install to link use command for "helm install kubelet-csr-approver xxx "

Why is this needed

production environment not support for download from helm repository.

abjklk commented 1 month ago

@JaneLiuL

You can host the chart yourself. I have extended the capabilities of the offline files_repo to additionally act as a helm repo (my files_repo is a simple server hosted via nginx). Here's how I added kubelet-csr-approver support in offline mode:

Step 1: Enable installation of helm:

helm_download_url: "{{ files_repo }}/helm-{{ helm_version }}-linux-{{ image_arch }}.tar.gz"

Step 2: Get the release and index.yaml from kubelet-csr-approver repo and host it.

Step 3: Define necessary variables:

# helm server runs under /helm
helm_repo: "{{ files_repo }}/helm"
kubelet_csr_approver_repository_url: "{{ helm_repo }}"

Step 4: Ensure the helm server is hosted with TLS and make sure your cluster node-1 trusts the certificate chain.

Install the cluster as usual. You should have the chart installed without a problem.