Does the rancher Catalog use tiller?


#1

We are currently using Rancher for our dev clusters and are considering running vanilla clusters for production. We would like to develop charts that can be deployed in both places. In production, we would like to be able to lock down tiller to a single namespace using rbac.

I could not find much information about the catalog in Rancher 2.x. I know it uses helm charts and repos, but I do not see any tiller pods. Does the catalog use tiller? Are there any details available about if/how it is locked down?


#2

Tiller has no built-in multi-tenancy, so we run it on-demand as the user making the request instead of as a persistent workload with a service account that can edit everything.