Deploy the secrets-store-csi-driver-provider-gcp helm chart on Oracle Kubernetes Engine (OKE)

Question

Pulumi · Accepted Answer

To deploy the `secrets-store-csi-driver-provider-gcp` Helm chart on Oracle Kubernetes Engine (OKE) using Pulumi, you need to follow a few steps. First, ensure you have access to an OKE cluster and your Pulumi environment is configured to use the `kubernetes` provider. Then, you'll be using Pulumi's `@pulumi/kubernetes` package to interact with Kubernetes and deploy the Helm chart.

Below is a program written in TypeScript that shows how to deploy the specified Helm chart onto an existing Kubernetes cluster. It uses Pulumi's `HelmChart` resource which represents a Helm chart deployment in a Kubernetes cluster, simplified through Pulumi's SDK.

Here's how you can accomplish this:

1. **Create a new Pulumi project**: Before running this code, you'll need to create a new Pulumi project using the `pulumi new` command and choose the appropriate template for Kubernetes in TypeScript.

2. **Configure Kubernetes provider**: Ensure that your Pulumi stack is configured with the kubeconfig file of your OKE cluster, so it has the necessary access to deploy resources.

3. **Add dependencies**: Install the `@pulumi/kubernetes` package using npm or yarn:
   ```sh
   npm install @pulumi/kubernetes
   ```
   or
   ```sh
   yarn add @pulumi/kubernetes
   ```

4. **Deploy the Helm Chart**: Use the `kubernetes.helm.v3.Chart` resource to deploy the `secrets-store-csi-driver-provider-gcp` chart from its Helm repository.

This Pulumi program provides a basic example, showing the deployment of the Helm chart:

```typescript
import * as k8s from "@pulumi/kubernetes";

// Configuration for the Helm Chart
const chartName = "secrets-store-csi-driver-provider-gcp";
const chartVersion = "0.0.20"; // Replace with the actual chart version you want to deploy
const releaseName = "csi-secrets-store-provider";
const namespace = "kube-system"; // The namespace where you want to install your chart

// Initialize a new Helm Chart
const csiDriverProviderGcp = new k8s.helm.v3.Chart(releaseName, {
    chart: chartName,
    version: chartVersion,
    namespace: namespace,
    // If the chart requires additional values, specify them like this:
    values: {
        // Example configuration
        // replicas: 2,
        // certificates: {
        //    useSelfSigned: true,
        // },
        // You can set additional configuration depending on your needs
    },
    // If the Helm chart is from a custom repository, specify `repo` option:
    // repo: "https://<helm-chart-repository>",
}, {
    providers: { kubernetes: k8sProvider }, // Ensure you're using the k8sProvider configured with your OKE cluster's kubeconfig
});

// Export the Helm chart's name, namespace, and version
export const helmChartName = csiDriverProviderGcp.chart;
export const helmChartNamespace = csiDriverProviderGcp.namespace;
export const helmChartVersion = csiDriverProviderGcp.version;
```

Make sure you replace the `chartVersion` with the version number of the Helm chart that you want to deploy. Additionally, if the Helm chart is hosted on a custom Helm repository, you'll need to include the `repo` field and provide its URL.

When you deploy this Pulumi program with `pulumi up`, it will install the `secrets-store-csi-driver-provider-gcp` Helm chart on the existing OKE cluster that you've configured with your Pulumi environment.

Remember to review and adjust the `values:` section according to the Helm chart's documentation for any custom configurations you may need to set. The same goes for the `namespace` field if you wish to deploy to a different namespace.