Deploy the stakit helm chart on Rancher

Question

Pulumi · Accepted Answer

To deploy a Helm chart on a Kubernetes cluster managed by Rancher, you'll use Pulumi's Rancher 2 provider, which allows you to manage resources in a Rancher v2.x environment. In the following TypeScript program, we'll first set up access to a Rancher cluster and then deploy the "stakit" Helm chart to it.

Here's an overview of the steps the program will follow:

1. **Establish Rancher Access**: This involves connecting to a Rancher server using API credentials. For this, we typically need the Rancher API URL and a Bearer Token. These values must be provided as secret configuration values in your Pulumi project.

2. **Define the Rancher Cluster**: The Rancher 2 provider allows you to define a reference to an existing cluster where the Helm chart will be deployed.

3. **Deploy the Helm Chart**: Finally, you'll define a Helm chart resource that points to the "stakit" chart. A "CatalogV2" resource is required to add a catalog where the Helm chart is hosted if it's not available in the existing catalogs.

Now, let me provide you with a detailed Pulumi program. To deploy the stakit Helm chart on Rancher, you need to have access to a Rancher-managed Kubernetes cluster and access credentials (API URL, Bearer Token).

Here's how you would deploy a Helm chart using Pulumi with the Rancher 2 provider:

```typescript
import * as rancher2 from "@pulumi/rancher2";
import * as pulumi from "@pulumi/pulumi";

// Rancher access configuration:
// Note: Ensure you have set the `rancherApiUrl` and `rancherBearerToken` configuration
// values using Pulumi's secret management. You can set these via the Pulumi CLI:
// pulumi config set rancherApiUrl https://your-rancher-url/v3 --secret
// pulumi config set rancherBearerToken your-bearer-token --secret
const config = new pulumi.Config();
const rancherApiUrl = config.requireSecret("rancherApiUrl");
const rancherBearerToken = config.requireSecret("rancherBearerToken");

// Instantiate the Rancher provider with the API credentials
const rancherProvider = new rancher2.Provider("rancherProvider", {
    apiToken: rancherBearerToken,
    apiUrl: rancherApiUrl,
});

// Specify the Rancher cluster where the Helm chart will be deployed
// You must provide the cluster ID that you wish to deploy to.
const clusterId = "c-xxxxx"; // Replace 'c-xxxxx' with your actual cluster ID

// Deploy the 'stakit' Helm chart
const stakitHelmChart = new rancher2.CatalogV2("stakitHelmChart", {
    clusterId: clusterId,
    chartName: "stakit",
    // chartVersion: "x.y.z", // Optionally specify a version
    // Add more configuration based on the 'stakit' chart requirements and values
}, { provider: rancherProvider });

// Export the name of the cluster
export const clusterName = pulumi.output(stakitHelmChart.clusterId);

```

Before running this code, ensure you have replaced `https://your-rancher-url/v3` and `your-bearer-token` with the actual API URL of your Rancher server and Bearer Token, respectively. Also, replace `c-xxxxx` with the actual ID of your cluster where you want to deploy the "stakit" Helm chart.

To deploy this application to your Rancher environment, you can use the `pulumi up` command in your terminal, given that you have Pulumi installed and configured, as well as access to the Rancher environment.

Remember that Pulumi programs are run in your own local environment, so the Rancher API URL and Bearer Token should be kept secret. Pulumi's secret management will encrypt these values before storing them.