Add 2 new flags to control the Helm installation:

install/helm/agones/templates/admissionregistration.yaml

@@ -16,6 +16,7 @@
 {{- $altName1 := printf "agones-controller-service.%s"  .Release.Namespace }}
 {{- $altName2 := printf "agones-controller-service.%s.svc" .Release.Namespace }}
 {{- $cert := genSignedCert $cn nil (list $altName1 $altName2) 3650 $ca }}
+{{- if .Values.agones.registerWebhooks }}
 ---
 apiVersion: admissionregistration.k8s.io/v1beta1
 kind: ValidatingWebhookConfiguration
@@ -92,6 +93,7 @@ webhooks:
           - "v1alpha1"
         operations:
           - CREATE
+{{- end }}
 ---
 apiVersion: v1
 kind: Secret

install/helm/agones/templates/crds/gameserverallocation.yaml

@@ -12,6 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
+{{- if .Values.agones.crds.install }}
 apiVersion: apiextensions.k8s.io/v1beta1
 kind: CustomResourceDefinition
 metadata:
@@ -76,4 +77,5 @@ spec:
             metadata:
               type: object
 
+{{- end }}
 

install/helm/agones/templates/serviceaccounts/controller.yaml

@@ -12,6 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
+{{- if .Values.agones.registerServiceAccounts }}
 apiVersion: v1
 kind: ServiceAccount
 metadata:
@@ -23,6 +24,7 @@ metadata:
     release: {{ .Release.Name }}
     heritage: {{ .Release.Service }}
 ---
+{{- end}}
 {{- if .Values.agones.rbacEnabled }}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole

install/helm/agones/templates/serviceaccounts/sdk.yaml

@@ -11,6 +11,7 @@
 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 # See the License for the specific language governing permissions and
 # limitations under the License.
+{{- if .Values.agones.registerServiceAccounts }}
 {{- range .Values.gameservers.namespaces }}
 apiVersion: v1
 kind: ServiceAccount
@@ -64,4 +65,5 @@ roleRef:
   name: {{ $.Values.agones.serviceaccount.sdk }}
 ---
   {{- end }}
-{{- end }}
+{{- end }}
+{{- end }}

install/helm/agones/values.yaml

@@ -21,6 +21,8 @@ agones:
     stackdriverEnabled: false
     stackdriverProjectID: ""
   rbacEnabled: true
+  registerServiceAccounts: true
+  registerWebhooks: true
   crds:
     install: true
     cleanupOnDelete: true
@@ -108,4 +110,5 @@ gameservers:
   namespaces:
   - default
   minPort: 7000
-  maxPort: 8000 
+  maxPort: 8000
+

install/yaml/install.yaml

@@ -13,7 +13,6 @@
 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 # See the License for the specific language governing permissions and
 # limitations under the License.
-
 apiVersion: v1
 kind: ServiceAccount
 metadata:
@@ -144,6 +143,7 @@ roleRef:
   kind: ClusterRole
   name: agones-sdk
 ---
+
 ---
 # Source: agones/templates/crds/fleet.yaml
 # Copyright 2018 Google Inc. All Rights Reserved.
@@ -647,7 +647,6 @@ spec:
 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 # See the License for the specific language governing permissions and
 # limitations under the License.
-
 apiVersion: apiextensions.k8s.io/v1beta1
 kind: CustomResourceDefinition
 metadata:
@@ -749,7 +748,6 @@ spec:
               type: object
 
 
-
 ---
 # Source: agones/templates/crds/gameserverset.yaml
 # Copyright 2018 Google Inc. All Rights Reserved.

site/content/en/docs/Installation/helm.md

@@ -149,12 +149,14 @@ The following tables lists the configurable parameters of the Agones chart and t
 
 {{% feature publishVersion="0.8.0" %}}
 **New Configuration Features:**
- 
+
 | Parameter                                           | Description                                                                                     | Default                |
 | --------------------------------------------------- | ----------------------------------------------------------------------------------------------- | ---------------------- |
 | `agones.metrics.prometheusEnabled`                  | Enables controller metrics on port `8080` and path `/metrics`                                   | `true`                 |
 | `agones.metrics.stackdriverEnabled`                 | Enables Stackdriver exporter of controller metrics              | `false`                 |
 | `agones.metrics.stackdriverProjectID`               | This overrides the default gcp project id for use with stackdriver            | ``                 |
+| `agones.registerWebhooks`                           | Registers the webhooks used for the admission controller                                        | `true`                 |
+| `agones.registerServiceAccounts`                    | Attempts to create service accounts for the controllers                                         | `true`                 |
 | `agones.controller.nodeSelector`                    | Controller [node labels](nodeSelector) for pod assignment                                       | `{}`                   |
 | `agones.controller.tolerations`                     | Controller [toleration][toleration] labels for pod assignment                                   | `[]`                   |
 | `agones.controller.affinity`                        | Controller [affinity](affinity) settings for pod assignment                                     | `{}`                   |
@@ -194,7 +196,7 @@ $ helm install --name my-release --namespace agones-system -f values.yaml agones
 
 ## TLS Certificates
 
-By default agones chart generates tls certificates used by the adminission controller, while this is handy, it requires the agones controller to restart on each `helm upgrade` command. 
+By default agones chart generates tls certificates used by the adminission controller, while this is handy, it requires the agones controller to restart on each `helm upgrade` command.
 For most used cases the controller would have required a restart anyway (eg: controller image updated). However if you really need to avoid restarts we suggest that you turn off tls automatic generation (`agones.controller.generateTLS` to `false`) and provide your own certificates (`certs/server.crt`,`certs/server.key`).
 
 > **Tip**: You can use our script located at `cert/cert.sh` to generates them.