[helm] Introduce glue for the less copy&pasta approach

[lucendio]

• added Makefile and docs
• requires a helmfile.yaml in ${ENV_DIR}

TODO:

• Add Helmfile to nix as a dependency

The first counter part can be found in https://github.com/zinfra/cailleach/pull/515

[lucendio]

I'd like to consolidate all three Makefiles (Terraform, Ansible, Helm) into one and move it into the top-level. Any thoughts on this? /cc @akshaymankar @jschaul

[jschaul]

I'd like to consolidate all three Makefiles (Terraform, Ansible, Helm) into one and move it into the top-level. Any thoughts on this? /cc @akshaymankar @jschaul

No strong opinions here. Sounds fine to me to consolidate them.

[akshaymankar]

I'd like to consolidate all three Makefiles (Terraform, Ansible, Helm) into one and move it into the top-level. Any thoughts on this? /cc @akshaymankar @jschaul

Sounds like a good idea 💯

[lucendio]

Great. I'll do this as a follow-up. Anyway, ready to be reviewed now.

[jschaul]

Didn't try this out, as I'm not yet familiar with helm files (maybe someone else is and could review this?). Minor comments on the README.

[jmatsushita]

I'd like to consolidate all three Makefiles (Terraform, Ansible, Helm) into one and move it into the top-level. Any thoughts on this?

Definitely in favor of this!

Our current kubespray playbook outputs the kubeconfig in inventory/$CLUSTER/artifacts/admin.conf but this PR seems to expect $(ENV_DIR)/kubeconfig and $(ENV_DIR)/kubeconfig.dec. Can we make sure things align here?

[lucendio]

Our current kubespray playbook outputs the kubeconfig in inventory/$CLUSTER/artifacts/admin.conf but this PR seems to expect $(ENV_DIR)/kubeconfig and $(ENV_DIR)/kubeconfig.dec. Can we make sure things align here?

While this is true for Kubespray, it can be changed by setting artifacts_dir and we already have at least one, that has it in its local top-level - facilitated by a script. With this PR, I just adapted the current reality.

I have another local branch, that transforms this script into a play added to ansible/kubernetes.yaml. But this only works when Sops + GnuPG works from within wire-server-deploy. I talked with @arianvp about the necessary steps. Long story short: I feel you and It'll happen along the road :)