helm

Helm 2.14.3 is not ready for K8s 1.16, see the fix below. Such helm and tiller binaries provide a proper yaml for helm init

https://github.com/helm/helm/issues/6374#issuecomment-533841179

RBAC tutorial:
https://docs.bitnami.com/kubernetes/how-to/configure-rbac-in-your-kubernetes-cluster/
https://developer.ibm.com/tutorials/using-kubernetes-rbac-and-service-accounts/
https://medium.com/@jakekitchener/kubernetes-serviceaccounts-for-use-in-automated-systems-515297974982
https://kubernetes.io/docs/reference/access-authn-authz/rbac/

Using helm with a cluser-admin tiller role, and 'up' and 'down' script:

kubectl -n kube-system create serviceaccount tiller
kubectl create clusterrolebinding tiller --clusterrole cluster-admin --serviceaccount=kube-system:tiller
helm init --service-account=tiller --history-max 200

kubectl -n kube-system delete deployment tiller-deploy
kubectl delete clusterrolebinding tiller
kubectl -n kube-system delete serviceaccount tiller
rm -rf ~/.helm



https://stackoverflow.com/questions/43499971/helm-error-no-available-release-name-found

https://helm.sh/docs/using_helm/#role-based-access-control

pod security policy: https://docs.bitnami.com/kubernetes/how-to/secure-kubernetes-cluster-psp/