Deploy the sysdig helm chart on Linode Kubernetes Engine

Question

Pulumi · Accepted Answer

To deploy the Sysdig Helm chart on Linode Kubernetes Engine using Pulumi, you'll need to follow a series of steps:

Set up a Linode Kubernetes Engine (LKE) cluster.
Configure Pulumi to use the Kubernetes provider.
Use the Helm Chart resource to deploy Sysdig.

Below is a Pulumi program written in TypeScript that demonstrates how these steps can be carried out. I will explain each part of the program in detail.

Setting up a Linode Kubernetes Engine Cluster

Before we deploy the Helm chart, we need an LKE cluster. For simplicity, we'll assume that you've already created a cluster through the Linode Cloud Manager or Terraform. You can easily set up a cluster via the Linode dashboard or using the linode.LkeCluster resource with Pulumi. For now, we will focus on deploying the Helm chart to an existing cluster.

Configuring Pulumi to Use the Kubernetes Provider

Pulumi interacts with the Linode Kubernetes Engine using the Kubernetes provider. This provider allows Pulumi to deploy Helm charts, among other Kubernetes resources. You'll need to ensure that you have kubeconfig available that will let Pulumi authenticate with your LKE cluster.

Deploying Sysdig with Helm

To deploy the Sysdig Helm chart, we are going to use the kubernetes.helm.v3.Chart resource from Pulumi's Kubernetes package. Before deploying, you should check the Sysdig documentation for the Helm chart to understand the configuration options available for the Sysdig Helm chart and what you might want to customize.

Example Program

Here is the TypeScript program:

import * as pulumi from '@pulumi/pulumi';
import * as k8s from '@pulumi/kubernetes';

// Initialize a Kubernetes Provider using the Kubeconfig
const k8sProvider = new k8s.Provider('lkeProvider', {
    kubeconfig: pulumi.output("<Your LKE Cluster Kubeconfig Here>").apply(JSON.stringify),
});

// Deploying the Sysdig Helm chart to the Linode Kubernetes Engine
const sysdigHelmChart = new k8s.helm.v3.Chart('sysdig', {
    // Replace 'sysdig' with the name of your Helm chart for Sysdig
    // Usually Sysdig Helm chart is found in the 'sysdig' repo under the name 'sysdig'
    chart: 'sysdig',
    // Use the version of the chart you wish to deploy
    version: '<Chart Version>',
    // Specify the namespace you wish to install Sysdig to (create if it doesn't exist)
    namespace: '<Namespace>',
    // Provide the source repo for the Helm chart if it's not from the default Helm repository
    fetchOpts: {
        repo: 'https://charts.sysdig.com/',
    },
    // Pass any values here to configure Sysdig as specified in the chart's documentation
    values: {
        // Values here are the Helm chart values you wish to set
    },
}, { provider: k8sProvider });

// Export the Sysdig service's name that can be used to access it in the cluster
export const sysdigServiceName = sysdigHelmChart.getResource('v1/Service', 'sysdig', 'sysdig').metadata.name;

In the code above, you'll need to replace <Your LKE Cluster Kubeconfig Here> with your actual kubeconfig for the LKE cluster. This kubeconfig allows Pulumi to authenticate and communicate with your cluster.

The version should be filled in with the version number of the Sysdig Helm chart you wish to use.

Additionally, set the namespace to the namespace where you want the Sysdig agent to be deployed.

Lastly, under values, you can specify custom configurations for your Sysdig Helm chart, such as Sysdig access key or resource settings. Refer to the Sysdig Helm chart documentation for a full list of the available options.

After setting up the program with the above values, you can run it using Pulumi command line tools to deploy Sysdig to your LKE cluster. Make sure you have Pulumi installed and your CLI configured with Linode credentials.