> It should be clear that each instance of Tiller should have its own TLS configuration (including a separate CA).    This has already been documented in the linked doc: https://github.com/kubernetes/helm/blob/master/docs/tiller_ssl.md