Deploy the mavenrepo helm chart on Azure Managed Openshift Service

Question

Pulumi · Accepted Answer

To deploy a Maven repository Helm chart on an Azure Managed OpenShift Service, you need to perform the following high-level steps:

Create an Azure Red Hat OpenShift Cluster.
Configure Kubernetes provider to connect to the created OpenShift Cluster.
Deploy the Maven repository Helm chart to the cluster.

Below is a detailed Pulumi TypeScript program that demonstrates the entire process:

import * as pulumi from "@pulumi/pulumi";
import * as azureNative from "@pulumi/azure-native";
import * as k8s from "@pulumi/kubernetes";

// Step 1: Create an Azure Red Hat OpenShift Cluster
const resourceGroupName = new azureNative.resources.ResourceGroup("resourceGroup", {
    location: "westus", // pick an appropriate Azure location
});

const openShiftCluster = new azureNative.redhatopenshift.OpenShiftCluster("openshiftcluster", {
    resourceGroupName: resourceGroupName.name,
    resourceName: "myOpenShiftCluster",
    location: resourceGroupName.location,
    tags: {
        environment: "test",
    },
    clusterProfile: {
        domain: "example",
        version: "<openshift-version>", // specify the desired OpenShift version ex: "4.3"
        resourceGroupId: resourceGroupName.id,
    },
    servicePrincipalProfile: {
        clientId: "<service-principal-client-id>",     // fill in service principal details
        clientSecret: "<service-principal-client-secret>",
    },
    networkProfile: {
        podCidr: "10.128.0.0/14",
        serviceCidr: "172.30.0.0/16",
    },
    masterProfile: {
        vmSize: "Standard_D8s_v3", // or another VM size that fits your needs
    },
    workerProfiles: [{
        name: "worker", // you can add additional worker profiles as needed
        vmSize: "Standard_D4s_v3",
        diskSizeGB: 128,
        count: 3, // specify the number of worker VMs
    }],
});

// Step 2: Configure Kubernetes provider to connect to the created OpenShift Cluster
const creds = openShiftCluster.kubeadminPassword.apply(password => {
    return new pulumi.Unwrap({
        kubeconfig: pulumi.interpolate`apiVersion: v1
clusters:
- cluster:
    certificate-authority-data: ${openShiftCluster.clusterProfile.kubeadminPassword}
    server: https://${openShiftCluster.apiserverProfile.url}
  name: cluster
contexts:
- context:
    cluster: cluster
    user: kubeadmin
  name: context
current-context: context
kind: Config
users:
- name: kubeadmin
  user:
    token: ${password}`,
    });
});

const k8sProvider = new k8s.Provider("k8sprovider", {
    kubeconfig: creds.kubeconfig,
});

// Step 3: Deploy the Maven repository Helm chart to the cluster using the above Kubernetes provider
const mavenRepoChart = new k8s.helm.v3.Chart("mavenrepo", {
    chart: "mavenrepo", // ensure this is the correct chart name for the maven repository
    fetchOpts: {
        repo: "https://<helm-chart-repo>", // specify the repository URL which hosts your mavenrepo helm chart
    },
    values: {
        // specify value overrides here if needed, for example:
        persistence: {
            storageClass: "<storage-class-name>",
            size: "10Gi",
        },
        // ... other configurations such as serviceType, resources, etc.
    },
}, { provider: k8sProvider });

// Export the cluster's kubeconfig and the service URL of the mavenrepo
export const kubeconfig = creds.kubeconfig;
export const mavenRepoServiceUrl = mavenRepoChart.getResourceProperty("v1/Service", "mavenrepo-mavenrepo", "status").apply(status => status.loadBalancer.ingress[0].ip);

Explanation

In this program, we do the following:

Declare a new Azure resource group within which our OpenShift cluster will reside.
Create an Azure Red Hat OpenShift Cluster with the required profiles and configurations.
Configure a Pulumi Kubernetes provider. This provider communicates with the created OpenShift cluster, allowing Pulumi to perform actions against the cluster.
Deploy a Maven repository Helm chart in the OpenShift cluster using a Helm chart resource from the Pulumi Kubernetes package.

In the chart deployment section, you need to replace:

<helm-chart-repo> with the actual Helm repository that hosts the Maven repository chart.
<storage-class-name> with the name of the storage class you would like to use (this presumes that dynamic provisioning is supported on your cluster).

Furthermore, after the chart deployment, we export:

The kubeconfig so you can connect to the Kubernetes cluster with kubectl or any Kubernetes client.
mavenRepoServiceUrl which tries to get the external IP or hostname of the Maven repository service deployed in the cluster. You should modify the chart name mavenrepo-mavenrepo as per the actual name of the service created by your Helm chart.

Before running this Pulumi program, you need to have Pulumi installed, and Azure CLI authenticated. Replace any placeholder text with actual values. This program should be used as a foundation, with modifications based on your specific requirements for resource names, tags, sizes, and Helm chart configurations.