Move to tiller 2.14.0

This version fixes manifest validation [0], so a couple invalid
manifests are fixed in this patchset as well.

[0]: 32d7f1a3fc

Change-Id: I0cbdf21cf016271bef2d8a541687ce3ab28081ce

charts/apiserver/templates/job-key-rotate.yaml

@@ -73,7 +73,6 @@ metadata:
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role
-  namespace: {{ $envAll.Release.Namespace }}
   name: {{ $serviceAccountName }}-{{ $envAll.Release.Namespace }}
 subjects:
   - kind: ServiceAccount

charts/haproxy/templates/daemonset.yaml

@@ -77,8 +77,6 @@ spec:
               mountPath: /tmp/etc
             - name: host
               mountPath: /host
-      securityContext:
-        readOnlyRootFilesystem: true
       volumes:
         - name: haproxy-bin
           configMap:

charts/haproxy/templates/etc/_haproxy.yaml.tpl

@@ -93,5 +93,3 @@ spec:
     - name: etc
       hostPath:
         path: {{ .Values.conf.haproxy.host_config_dir }}
-  securityContext:
-    readOnlyRootFilesystem: true

doc/source/configuration/genesis.rst

@@ -39,7 +39,7 @@ Here is a complete sample document:
       images:
         armada: quay.io/airshipit/armada:latest
         helm:
-          tiller: gcr.io/kubernetes-helm/tiller:v2.13.1
+          tiller: gcr.io/kubernetes-helm/tiller:v2.14.0
         kubernetes:
           apiserver: gcr.io/google_containers/hyperkube-amd64:v1.11.6
           controller-manager: gcr.io/google_containers/hyperkube-amd64:v1.11.6

doc/source/configuration/host-system.rst

@@ -22,7 +22,7 @@ Sample Document
       images:
         haproxy: haproxy:1.8.3
         helm:
-          helm: lachlanevenson/k8s-helm:v2.13.1
+          helm: lachlanevenson/k8s-helm:v2.14.0
         kubernetes:
           kubectl: gcr.io/google_containers/hyperkube-amd64:v1.11.6
       packages:

examples/basic/Genesis.yaml

@@ -45,7 +45,7 @@ data:
   images:
     armada: quay.io/airshipit/armada:master
     helm:
-      tiller: gcr.io/kubernetes-helm/tiller:v2.13.1
+      tiller: gcr.io/kubernetes-helm/tiller:v2.14.0
     kubernetes:
       apiserver: gcr.io/google_containers/hyperkube-amd64:v1.11.6
       controller-manager: gcr.io/google_containers/hyperkube-amd64:v1.11.6

examples/basic/HostSystem.yaml

@@ -67,7 +67,7 @@ data:
   images:
     haproxy: haproxy:1.8.3
     helm:
-      helm: lachlanevenson/k8s-helm:v2.13.1
+      helm: lachlanevenson/k8s-helm:v2.14.0
     kubernetes:
       kubectl: gcr.io/google_containers/hyperkube-amd64:v1.11.6
   packages:

examples/basic/armada-resources.yaml

@@ -1152,7 +1152,7 @@ data:
   values:
     images:
       tags:
-        tiller: gcr.io/kubernetes-helm/tiller:v2.13.1
+        tiller: gcr.io/kubernetes-helm/tiller:v2.14.0
     labels:
       node_selector_key: ucp-control-plane
       node_selector_value: enabled

examples/complete/Genesis.yaml

@@ -31,7 +31,7 @@ data:
   images:
     armada: quay.io/airshipit/armada:master
     helm:
-      tiller: gcr.io/kubernetes-helm/tiller:v2.13.1
+      tiller: gcr.io/kubernetes-helm/tiller:v2.14.0
     kubernetes:
       apiserver: gcr.io/google_containers/hyperkube-amd64:v1.11.6
       controller-manager: gcr.io/google_containers/hyperkube-amd64:v1.11.6

examples/complete/HostSystem.yaml

@@ -33,7 +33,7 @@ data:
   images:
     haproxy: haproxy:1.8.3
     helm:
-      helm: lachlanevenson/k8s-helm:v2.13.1
+      helm: lachlanevenson/k8s-helm:v2.14.0
     kubernetes:
       kubectl: gcr.io/google_containers/hyperkube-amd64:v1.11.6
   packages:

examples/complete/armada-resources.yaml

@@ -1687,7 +1687,7 @@ data:
   values:
     images:
       tags:
-        tiller: gcr.io/kubernetes-helm/tiller:v2.13.1
+        tiller: gcr.io/kubernetes-helm/tiller:v2.14.0
     labels:
       node_selector_key: ucp-control-plane
       node_selector_value: enabled

tests/unit/api/test_validatedesign.py

@@ -103,7 +103,7 @@ VALID_DOCS = [
             'images': {
                 'armada': 'quay.io/airshipit/armada:master',
                 'helm': {
-                    'tiller': 'gcr.io/kubernetes-helm/tiller:v2.13.1'
+                    'tiller': 'gcr.io/kubernetes-helm/tiller:v2.14.0'
                 },
                 'kubernetes': {
                     'apiserver':
@@ -162,7 +162,7 @@ VALID_DOCS = [
             'images': {
                 'haproxy': 'haproxy:1.8.3',
                 'helm': {
-                    'helm': 'lachlanevenson/k8s-helm:v2.13.1'
+                    'helm': 'lachlanevenson/k8s-helm:v2.14.0'
                 },
                 'kubernetes': {
                     'kubectl':

tests/unit/builder_data/simple/Genesis.yaml

@@ -32,7 +32,7 @@ data:
   images:
     armada: quay.io/airshipit/armada:master
     helm:
-      tiller: gcr.io/kubernetes-helm/tiller:v2.13.1
+      tiller: gcr.io/kubernetes-helm/tiller:v2.14.0
     kubernetes:
       apiserver: gcr.io/google_containers/hyperkube-amd64:v1.11.6
       controller-manager: gcr.io/google_containers/hyperkube-amd64:v1.11.6

tests/unit/builder_data/simple/HostSystem.yaml

@@ -37,7 +37,7 @@ data:
   images:
     haproxy: haproxy:1.8.3
     helm:
-      helm: lachlanevenson/k8s-helm:v2.13.1
+      helm: lachlanevenson/k8s-helm:v2.14.0
     kubernetes:
       kubectl: gcr.io/google_containers/hyperkube-amd64:v1.11.6
   packages:

tests/unit/builder_data/simple/armada-resources.yaml

@@ -1002,7 +1002,7 @@ data:
   values:
     images:
       tags:
-        tiller: gcr.io/kubernetes-helm/tiller:v2.13.1
+        tiller: gcr.io/kubernetes-helm/tiller:v2.14.0
     labels:
       node_selector_key: ucp-control-plane
       node_selector_value: enabled

tools/gate/default-config-env

@@ -7,7 +7,7 @@ IMAGE_COREDNS=coredns/coredns:1.1.3
 IMAGE_DEP_CHECK=quay.io/stackanetes/kubernetes-entrypoint:v0.3.1
 IMAGE_ETCD=quay.io/coreos/etcd:v3.2.18
 IMAGE_HAPROXY=haproxy:1.8.3
-IMAGE_HELM=lachlanevenson/k8s-helm:v2.13.1
+IMAGE_HELM=lachlanevenson/k8s-helm:v2.14.0
 IMAGE_HYPERKUBE=gcr.io/google_containers/hyperkube-amd64:v1.11.6
-IMAGE_TILLER=gcr.io/kubernetes-helm/tiller:v2.13.1
+IMAGE_TILLER=gcr.io/kubernetes-helm/tiller:v2.14.0
 KUBELET_URL=https://dl.k8s.io/v1.11.6/kubernetes-node-linux-amd64.tar.gz

tools/helm_install.sh

@@ -17,7 +17,7 @@
 set -x
 
 HELM=$1
-HELM_ARTIFACT_URL=${HELM_ARTIFACT_URL:-"https://storage.googleapis.com/kubernetes-helm/helm-v2.13.1-linux-amd64.tar.gz"}
+HELM_ARTIFACT_URL=${HELM_ARTIFACT_URL:-"https://storage.googleapis.com/kubernetes-helm/helm-v2.14.0-linux-amd64.tar.gz"}
 
 
 function install_helm_binary {

tools/registry/IMAGES

@@ -4,8 +4,8 @@ gcr.io/google_containers/hyperkube-amd64,v1.11.6,hyperkube
 gcr.io/google_containers/k8s-dns-dnsmasq-nanny-amd64,1.14.4,k8s-dns-dnsmasq-nanny-amd64
 gcr.io/google_containers/k8s-dns-kube-dns-amd64,1.14.4,k8s-dns-kube-dns-amd64
 gcr.io/google_containers/k8s-dns-sidecar-amd64,1.14.4,k8s-dns-sidecar-amd64
-gcr.io/kubernetes-helm/tiller,v2.13.1,tiller
+gcr.io/kubernetes-helm/tiller,v2.14.0,tiller
-lachlanevenson/k8s-helm,v2.13.1,helm
+lachlanevenson/k8s-helm,v2.14.0,helm
 quay.io/airshipit/armada,master,armada
 quay.io/calico/cni,v1.11.0,calico-cni
 quay.io/calico/ctl,v1.6.1,calico-ctl