Deploy the snyk-exporter helm chart on Rancher

Question

Pulumi · Accepted Answer

To deploy a Helm chart on a Rancher-managed Kubernetes cluster using Pulumi, you'll follow these steps:

Set up the Rancher Provider: You need to configure Pulumi to use the Rancher provider to manage resources within your Rancher installation.
Create a Cluster: If you don't already have a Kubernetes cluster managed by Rancher, you would set one up.
Deploy the Helm Chart: Define a Helm chart resource to be deployed onto your Rancher-managed cluster.

Prerequisites: Before you begin, make sure you have the following:

An active Rancher instance with a Kubernetes cluster managed by it.
Pulumi CLI installed and configured for use with your cloud provider.
The necessary credentials to interact with your Rancher instance (Rancher API URL, Access Key, Secret Key).
kubectl configured to interact with your Rancher cluster.

Here is a TypeScript program that illustrates how you would set up and deploy a Helm chart for snyk-exporter on Rancher using Pulumi:

import * as pulumi from '@pulumi/pulumi';
import * as rancher2 from '@pulumi/rancher2';
import * as k8s from '@pulumi/kubernetes';

// Replace these values with the correct ones for your Rancher setup
const rancherApiUrl = 'https://<your-rancher-server.com>/v3';
const rancherAccessToken = '<your-access-token>';
const rancherSecretToken = '<your-secret-token>';
const rancherClusterId = '<your-cluster-id>';

// Configure the Rancher2 provider
const rancherProvider = new rancher2.Provider('rancherProvider', {
    apiUrl: rancherApiUrl,
    accessKey: rancherAccessToken,
    secretKey: rancherSecretToken,
});

// Use an existing Rancher v2 Cluster
const cluster = rancher2.getCluster({
    clusterId: rancherClusterId,
}, { provider: rancherProvider });

// When the cluster is ready, deploy the Helm chart
cluster.then(clusterInfo => {
  const k8sProvider = new k8s.Provider('k8sProvider', {
    kubeconfig: clusterInfo.kubeConfig,
  });

  // Deploy the snyk-exporter Helm chart
  const snykExporterChart = new k8s.helm.v3.Chart('snyk-exporter', {
    chart: 'snyk-exporter',
    // Provide the repo where the snyk-exporter chart can be found
    // Assuming the chart is available from a Helm repo added to Rancher
    repo: 'snyk',
    // Specify the version of the chart, replace with the desired version
    version: '1.0.0',
    // Provide necessary values for snyk-exporter configuration if needed
    values: {
      // ...
    },
  }, { provider: k8sProvider });

  // Export the name of the deployed chart as a stack output
  pulumi.export('snyk-exporter-chart-name', snykExporterChart.metadata.name);
});

Explanation:

The Rancher provider is configured with access to your Rancher API. It needs the API URL and credentials (access key and secret key) to interact with Rancher.
We're referencing an existing Rancher-managed cluster by its ID. You can find this information within your Rancher UI or API.
Once we have the details of the Kubernetes cluster managed by Rancher, we proceed with setting up the Kubernetes provider using the kubeconfig from Rancher.
With the Kubernetes provider configured, we create a Helm chart resource using Pulumi's Kubernetes provider, specifying the name of the chart, the repository, and the version. Additionally, we can pass configuration values in the values field as needed.
An output is exported with the name of the Helm release, which can be useful for querying the deployment status later on with kubectl or Pulumi.

Remember to replace the placeholder values (<your-rancher-server.com>, <your-access-token>, <your-secret-token>, <your-cluster-id>, etc.) with actual values corresponding to your Rancher and cloud setup. You can find the exact chart name, repo, and configuration values on the Helm chart's repository or its documentation.

You'll run this Pulumi program with the Pulumi CLI. First, create a new directory for your project, run pulumi new typescript to prepare it, and then save the above code in an index.ts file. Then, install the necessary dependencies with npm install or yarn add for @pulumi/pulumi, @pulumi/rancher2, and @pulumi/kubernetes. Run pulumi up to execute the code and deploy the Helm chart to your Rancher-managed Kubernetes cluster.