Deploy the keycloak-resources helm chart on Azure Managed Openshift Service

Question

Pulumi · Accepted Answer

To deploy the `keycloak-resources` helm chart onto an Azure Managed OpenShift cluster using Pulumi, we will follow a multi-step process:

1. **Set up Azure Managed OpenShift Service**: We will use the `azure-native.containerservice.OpenShiftManagedCluster` resource to create an OpenShift cluster.
2. **Deploy the Helm Chart**: Once the OpenShift cluster is provisioned, we will deploy the `keycloak-resources` helm chart using the `kubernetes.helm.v3.Chart` resource.

Before you begin, you should have the following prerequisites completed:
- Pulumi CLI installed.
- Configured Azure credentials for use with Pulumi.
- An existing Azure resource group or you can create one as part of your stack.

Here is the TypeScript program that demonstrates these steps in Pulumi:

```typescript
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";
import * as k8s from "@pulumi/kubernetes";

const projectName = pulumi.getProject();

// Define the OpenShift Managed Cluster to provision
const managedCluster = new azure_native.containerservice.OpenShiftManagedCluster("myOpenShiftCluster", {
    // Replace the values with your actual details or dynamic references
    resourceGroupName: "myResourceGroup",              // Your Azure resource group name
    resourceName: "myOpenShiftCluster",                // Name for the OpenShift Cluster
    location: "eastus",                                // Azure location for your cluster
    openShiftVersion: "v3.11",                         // OpenShift version

// Define the network profile for your cluster
    networkProfile: {
        vnetCidr: "10.0.0.0/8",
    },

// Define the master and worker pool profiles
    masterPoolProfile: {
        count: 3,
        vmSize: "Standard_D4s_v3"
    },
    agentPoolProfiles: [{
        name: "agentpool",
        count: 3,
        vmSize: "Standard_D4s_v3",
        osType: "Linux",
    }],
});

// Once the OpenShift cluster has been created, we can retrieve its configurations.
// These include the kubeconfig needed to interact with the Kubernetes cluster.

const creds = pulumi.all([managedCluster.name, managedCluster.resourceGroupName]).apply(([name, rg]) => {
    return azure_native.containerservice.listOpenShiftManagedClusterAdminCredentials({
        resourceGroupName: rg,
        resourceName: name,
    });
});

const kubeConfig = creds.kubeconfigs[0].value.apply(v => Buffer.from(v, "base64").toString());

// Set up the Kubernetes provider using the Kubernetes cluster's kubeconfig.
const k8sProvider = new k8s.Provider("k8sProvider", {
    kubeconfig: kubeConfig,
});

// Deploy the keycloak-resources Helm chart
const keycloakResourcesChart = new k8s.helm.v3.Chart("keycloak-resources", {
    chart: "keycloak",
    fetchOpts: {
        repo: "https://charts.bitnami.com/bitnami",
    },
    // Pass Helm chart values or configurations here
    // values: { /* ... */ },
}, { provider: k8sProvider });

// Export the OpenShift cluster's API Server URL
export const clusterApiServerUrl = managedCluster.properties.apiServerUrl;
```

Let's break down the code:

- We start by importing the required modules from the Pulumi SDK.
- We then create an OpenShift Managed Cluster using `azure-native.containerservice.OpenShiftManagedCluster`.
- We fetch the admin credentials for the cluster, including the kubeconfig, using `listOpenShiftManagedClusterAdminCredentials`.
- A Kubernetes provider is set up with the fetch kubeconfig. It is crucial for interacting with the cluster.
- Finally, we deploy the Keycloak helm chart to our cluster using `k8s.helm.v3.Chart`.
- We export the API server URL for the OpenShift cluster, which you can use to interact with the cluster, for instance, by using the `oc` command-line tool.

Once you run this Pulumi program with `pulumi up`, Pulumi will provision both the OpenShift Managed cluster and deploy the Keycloak resources with the helm chart.

Remember that depending on your exact needs, you might have to customize the Helm chart values, which you can include in the `values` section of the `k8s.helm.v3.Chart` resource. Also, ensure that you have the required permissions to deploy resources in the Azure subscription and that the resource names are unique and conform to Azure naming conventions.