Deploy the thanos-config helm chart on Azure Kubernetes Service (AKS)

Question

Pulumi · Accepted Answer

Deploying a Helm chart on Azure Kubernetes Service (AKS) involves several steps using Pulumi. Firstly, we need to create an AKS cluster, and then we can proceed to deploy the thanos-config Helm chart onto that cluster. Pulumi's kubernetes package provides resources that can be used to achieve this including Chart for Helm charts deployment.

Here's a step-by-step guide on how to deploy the thanos-config Helm chart on AKS using Pulumi with TypeScript:

Step 1: Set Up the Pulumi Project

Before running the Pulumi program, you should have the Pulumi CLI installed and be logged into the Pulumi service. Ensure you have an Azure account and have the Azure CLI installed and logged in for Pulumi to use.

Step 2: Create a New Pulumi Project

Run pulumi new azure-typescript in your terminal. This will create a new Pulumi project for deploying resources to Azure with TypeScript.

Step 3: Define Your AKS Cluster

We'll start by creating an AKS cluster using Pulumi. We'll need to import relevant packages and define the resources.

Step 4: Deploy the Helm Chart

Once the AKS cluster is provisioned and running, we will deploy the thanos-config Helm chart using the Pulumi Chart resource from the @pulumi/kubernetes package.

Please replace <your_resource_group> with the appropriate name for the Azure Resource Group and <your_aks_cluster_name> with the desired name for your AKS cluster.

import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure-native"; // Importing native Azure provider
import * as k8s from "@pulumi/kubernetes"; // Importing Pulumi Kubernetes provider

// Step 1: Create a resource group
const resourceGroup = new azure.resources.ResourceGroup("<your_resource_group>");

// Step 2: Create an AKS cluster
const aksCluster = new azure.containerservice.ManagedCluster("aksCluster", {
    resourceGroupName: resourceGroup.name,
    agentPoolProfiles: [{
        name: "aksagentpool",
        count: 1,
        vmSize: "Standard_DS2_v2",
    }],
    dnsPrefix: "<your_resource_group>", // Ensure this is unique across Azure
    linuxProfile: {
        adminUsername: "adminuser",
        ssh: {
            publicKeys: [{ keyData: "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQ..." }],
        },
    },
    servicePrincipalProfile: {
        clientId: "<clientId>",     // Azure Service Principal client ID
        secret: "<clientSecret>",   // Azure Service Principal secret
    },
});

// Step 3: Deploy the Helm chart onto the AKS cluster
const aksKubeconfig = pulumi
    .all([resourceGroup.name, aksCluster.name])
    .apply(([rgName, aksName]) => azure.containerservice.listManagedClusterUserCredentials({
        resourceGroupName: rgName,
        resourceName: aksName,
    }))
    .apply(credentials => {
        // The result contains a list of kubeconfigs, we just take the first one
        const encoded = credentials.kubeconfigs[0].value;
        return Buffer.from(encoded, 'base64').toString();
    });

const k8sProvider = new k8s.Provider("k8sProvider", {
    kubeconfig: aksKubeconfig,
});

// Here we define the Helm chart to deploy, you will need the proper Helm chart name and its version
const thanosChart = new k8s.helm.v3.Chart("thanos-config", {
    chart: "thanos",
    version: "x.x.x", // specify the version of the chart
    fetchOpts: {
        repo: "https://kubernetes-charts.storage.googleapis.com/", // specify the helm repository
    },
}, { provider: k8sProvider });

export const clusterName = aksCluster.name;
export const kubeconfig = aksKubeconfig;

Code comments are added in the program to help you understand each section and the properties used to define the AKS cluster and Kubernetes resources.

After the resources are defined, you can run the Pulumi project using the pulumi up command. This will provision the AKS cluster and deploy your Helm chart onto it. You might need to adjust the Helm chart parameters according to the thanos-config configuration requirements.

Remember to replace placeholder values such as <your_resource_group>, <clientId>, <clientSecret>, and the SSH key with your actual values. Also, ensure that you have access to the thanos chart and provide the correct version and repository URL.

The kubeconfig output exported from the program is the Kubeconfig file needed to interact with your AKS cluster. With that, you can use kubectl or any Kubernetes management tool to interact with your cluster.