# Terraform helm cert-manager

**URL:** <https://forums.suse.com/t/terraform-helm-cert-manager/15610>\
**Category:** SUSE Rancher Prime\
**Created:** [October 22, 2019, 8:28pm UTC](https://forums.suse.com/t/terraform-helm-cert-manager/15610 "2019-10-22T20:28:35Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![bkalai](https://avatars.discourse-cdn.com/v4/letter/b/76d3ee/32.png) [@bkalai](https://forums.suse.com/u/bkalai)\
**Post date:** [October 22, 2019, 8:28pm UTC](https://forums.suse.com/t/terraform-helm-cert-manager/15610/1 "2019-10-22T20:28:35Z")

</div>

I’m using terraform to deploy a cluster rancher HA  
I get two problems:  
here is the helm provider  
provider “helm” {  
install\_tiller = “true”  
service\_account = “tiller”  
kubernetes {  
config\_path = “kube\_config\_cluster.yml”  
}  
}  
here is how I try to install  
resource “null\_resource” “cert-manager-crds” {  
depends\_on = [null\_resource.install-nodes]  
provisioner “local-exec” {  
command = \<\<EOF  
kubectl --kubeconfig kube\_config\_cluster.yml apply -f [https://raw.githubusercontent.com/jetstack/cert-manager/release-0.10/deploy/manifests/00-crds.yaml](https://raw.githubusercontent.com/jetstack/cert-manager/release-0.10/deploy/manifests/00-crds.yaml)  
kubectl --kubeconfig kube\_config\_cluster.yml create namespace cert-manager  
kubectl --kubeconfig kube\_config\_cluster.yml label namespace cert-manager [certmanager.k8s.io/disable-validation=true](http://certmanager.k8s.io/disable-validation=true)  
EOF  
environment = {  
KUBECONFIG = “kube\_config\_cluster.yml”  
}  
}  
}

resource “helm\_release” “cert\_manager” {  
depends\_on = [null\_resource.install-nodes]  
version = “v0.10.0”  
name = “cert-manager”  
chart = “jetstack/cert-manager”  
namespace = “cert-manager”  
}  
I get  
Error: rpc error: code = Unknown desc = configmaps is forbidden: User “system:serviceaccount:kube-system:default” cannot list resource “configmaps” in API group “” in the namespace “kube-system”