Deploy the codefresh-service-account helm chart on Rancher

Question

Pulumi · Accepted Answer

Deploying Helm charts on a Rancher-managed Kubernetes cluster involves several steps. Helm is a package manager for Kubernetes that allows you to define, install, and upgrade even the most complex Kubernetes applications.

To deploy a Helm chart on Rancher using Pulumi, you would typically follow these general steps:

1. Configure access to the Rancher server.
2. Define the cluster where you want to deploy the Helm chart.
3. Create a Kubernetes service account and related resources if they don't already exist.
4. Deploy the Helm chart using the Pulumi Rancher2 provider.

Below you will find a Pulumi TypeScript program that demonstrates how to deploy a Helm chart to a Rancher-managed Kubernetes cluster. Ensure that you have configured Rancher access credentials on your machine where the Pulumi CLI is installed.

The resources that we are focusing on are:

- `rancher2.Cluster`: Represents a Kubernetes cluster managed by Rancher.
- `rancher2.AppV2`: Represents a Helm chart application in Rancher 2.x.

Before proceeding, make sure your Pulumi installation is configured correctly by following the [Pulumi Getting Started guide](https://www.pulumi.com/docs/get-started/) and the [Rancher2 provider setup](https://www.pulumi.com/registry/packages/rancher2/).

Now, let's take a look at the Pulumi program that deploys the `codefresh-service-account` Helm chart on Rancher:

```typescript
import * as rancher2 from "@pulumi/rancher2";
import * as k8s from "@pulumi/kubernetes";
import * as pulumi from "@pulumi/pulumi";

// Create a reference to the target Rancher2-managed cluster
const cluster = new rancher2.Cluster("my-cluster", {
    /* Fill in the required properties with the details of your Rancher managed cluster */
});

// Create a new Pulumi Kubernetes provider that targets the Rancher-managed cluster
const k8sProvider = new k8s.Provider("k8s-provider", {
    kubeconfig: cluster.kubeConfig, // This uses the kubeconfig from the referenced cluster
});

// Deploy the Helm chart using the Kubernetes provider
const helmChart = new k8s.helm.v3.Chart("codefresh-service-account-chart", {
    chart: "codefresh-service-account",
    // Specify the repository that hosts the codefresh-service-account chart
    fetchOpts: {
        repo: "https://charts.codefresh.io/public/codefresh",
    },
    // Versions and values can be set here to configure the Helm chart
    version: "1.0.0", // Replace with the desired version of the Helm chart
    values: {
        // Here you can specify the values that the codefresh-service-account chart requires
    },
}, { provider: k8sProvider });

// Export the resulting chart status and any other data you need
export const helmChartStatus = helmChart.status;

```

This program creates a connection to a Rancher-managed Kubernetes cluster, sets up a Pulumi Kubernetes provider associated with that cluster, and finally deploys the `codefresh-service-account` Helm chart using the Pulumi Kubernetes provider.

Important notes:

- Replace the placeholder values in `rancher2.Cluster` and `helmChart` resource definitions with the actual data relevant to your Rancher setup and Helm chart.
- The `kubeconfig` for the `k8s.Provider` is sourced from the cluster reference, which means Pulumi will use the `kubeConfig` attribute of the cluster to connect to Kubernetes.
- The `version` should match the desired version of the Helm chart you're planning to install.
- Under `values`, you provide the necessary settings that customize your Helm chart installation. You can check the chart's documentation for the actual values required.

Remember, for your setup, ensure that you have the necessary permissions and that your Pulumi access tokens and Rancher API access are configured appropriately.