Deploy the phlare-mixin helm chart on Azure Managed Openshift Service

Question

Pulumi · Accepted Answer

To deploy a Helm chart to Azure Red Hat OpenShift (ARO), we will perform the following steps in our Pulumi TypeScript program:

Create an Azure Red Hat OpenShift cluster using the azure-native.redhatopenshift.OpenShiftCluster resource.
Deploy the phlare-mixin Helm chart on the ARO cluster using the kubernetes.helm.v3.Chart resource from the Kubernetes provider.

First, we need an ARO cluster. We define an OpenShift cluster specifying required details like location, resource group, and various profiles - master profile, network profile, and APIs necessary for cluster setup.

After the cluster is provisioned, we set up a KubeConfig to interact with the cluster. We use this KubeConfig to set up the Kubernetes provider, which Pulumi uses to deploy the Helm chart. We don’t include sensitive information in our code; it's assumed that you are authenticated to Azure and have the necessary permissions to create resources.

Using the kubernetes.helm.v3.Chart resource, we specify the Helm chart we want to deploy. If the phlare-mixin Helm chart is stored in a public repository, we specify its name and version; if it's stored in a private repository, additional configuration for access might be required.

Here’s the TypeScript program that accomplishes these tasks:

import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";
import * as k8s from "@pulumi/kubernetes";

// Create an Azure Resource Group
const resourceGroup = new azure_native.resources.ResourceGroup("myResourceGroup", {
    resourceGroupName: "phlare-mixin-rg",
    location: "eastus", // Change to the location appropriate for you
});

// Create an Azure Red Hat OpenShift cluster
const cluster = new azure_native.redhatopenshift.OpenShiftCluster("myOpenshiftCluster", {
    resourceGroupName: resourceGroup.name,
    resourceName: "phlare-mixin-cluster",
    location: resourceGroup.location,
    // Define other mandatory cluster configuration properties
    // Refer to the Pulumi documentation for `OpenShiftCluster` for more details:
    // https://www.pulumi.com/registry/packages/azure-native/api-docs/redhatopenshift/openshiftcluster/
});

// Replace `<KUBECONFIG_CONTENTS>` with appropriate command or KubeConfig content to connect to the ARO cluster
const kubeConfig = `<KUBECONFIG_CONTENTS>`; 

// Set up the Kubernetes provider using the KubeConfig from Azure Red Hat OpenShift cluster
const k8sProvider = new k8s.Provider("openshiftK8s", {
    kubeconfig: kubeConfig,
});

// Deploy the phlare-mixin Helm Chart into the Azure Red Hat OpenShift cluster
const helmChart = new k8s.helm.v3.Chart("phlareMixinChart", {
    chart: "phlare-mixin",
    // If necessary, specify the Helm repository by setting the `repo` property
    // If private, include `fetchOpts` to specify credentials
    version: "1.0.0", // Replace with the desired version of your chart
    namespace: "default", // Specify the namespace where you want to deploy
    // Include values to configure the Helm chart as appropriate
}, { provider: k8sProvider });

// Export the public URL to access the deployed application
// This step might vary based on the chart and what it exposes
export const applicationUrl = pulumi.interpolate`http://${helmChart.getResourceProperty("v1/Service", "phlare-mixin-service", "status")}.loadBalancer.ingress[0].hostname`;

Before running this program, you must have Pulumi and the necessary cloud CLI tooling set up and configured correctly.

This program creates an ARO cluster, sets up the Kubernetes provider, and deploys the phlare-mixin Helm chart. Once you execute the program using the Pulumi CLI, it provisions the resources in Azure and applies the Helm chart to your cluster.

Please replace the placeholder <KUBECONFIG_CONTENTS> with the actual KubeConfig content for your newly created ARO cluster. The way to retrieve the KubeConfig differs depending on your setup and is often supplied by the Azure portal or CLI once the cluster is running. It's important not to hard-code sensitive details directly into the code; for production scenarios, consider using the Pulumi Config system or a secure store like Azure Key Vault.

Modify the namespace, chart, and version properties to fit the specifics of the Helm chart you are looking to deploy. If the Helm chart is in a private repository, you’ll need additional configuration (fetchOpts) to authenticate against that repository.

The applicationUrl export assumes that the Helm chart creates a Service of type LoadBalancer. This might vary depending on the chart's actual resources; adapt the export statement accordingly to match your Helm chart's outputs.

Remember, it is essential to have sufficient permissions to create and manage resources in Azure and OpenShift, and Helm charts should be reviewed to ensure they are secure and appropriate for your environment before deployment.