wget https://www.rancher.cn/download/helm/helm-v2.14.3-linux-amd64.tar.gz
    tar xf helm-v2.14.3-linux-amd64.tar.gz
    mv linux-amd64/helm /usr/local/bin/helm && chmod +x /usr/local/bin/helm
    
    kubectl -n kube-system create serviceaccount tiller 
    kubectl create clusterrolebinding tiller --clusterrole cluster-admin --serviceaccount=kube-system:tiller
    
    helm init --service-account tiller --skip-refresh --tiller-image registry.cn-shanghai.aliyuncs.com/rancher/tiller:v2.14.3

    ./create_self-signed-cert.sh --ssl-domain=www.test.com --ssl-trusted-domain=bjrc.xikang.com  --ssl-trusted-ip=10.4.31.171,10.4.31.172,10.4.31.173 --ssl-size=2048 --ssl-date=3650  
    
    kubectl create namespace cattle-system
    kubectl     -n cattle-system create     secret tls tls-rancher-ingress     --cert=./tls.crt     --key=./tls.key
    kubectl -n cattle-system create secret \
        generic tls-ca \
        --from-file=cacerts.pem
    
    helm repo add rancher-stable \
    https://releases.rancher.com/server-charts/stable
    
    helm  install \
        rancher-stable/rancher \
        --name rancher \
        --namespace cattle-system \
        --set hostname=bjrc.xikang.com \
        --set ingress.tls.source=secret \
        --set privateCA=true
    
    
        kubectl  -n cattle-system \
        patch deployments rancher --patch '{
            "spec": {
                "template": {
                    "spec": {
                        "hostAliases": [
                            {
                                "hostnames":
                                [
                                    "bjrc.xikang.com"
                                ],
                                    "ip": "10.4.31.150"
                            }
                        ]
                    }
                }
            }
        }'
    
    kubectl -n cattle-system patch  deployments cattle-cluster-agent --patch '{
        "spec": {
            "template": {
                "spec": {
                    "hostAliases": [
                        {
                            "hostnames":
                            [
                                "bjrc.xikang.com"
                            ],
                                "ip": "10.4.31.150"
                        }
                    ]
                }
            }
        }
    }'
    
    
    kubectl -n cattle-system \
    patch  daemonsets cattle-node-agent --patch '{
        "spec": {
            "template": {
                "spec": {
                    "hostAliases": [
                        {
                            "hostnames":
                            [
                                "bjrc.xikang.com"
                            ],
                                "ip": "10.4.31.150"
                        }
                    ]
                }
            }
        }
    }'
    

helm repo update
helm search rancher
helm upgrade rancher rancher-stable/rancher --version v2.3.2 --set hostname=bjrc.xikang.com --set ingress.tls.source=secret --set privateCA=true --set service.type=ClusterIP