Deploy the argocd-ecr-updater helm chart on Rancher

Question

Pulumi · Accepted Answer

Deploying a Helm chart on a Rancher-managed Kubernetes cluster involves several steps. You would first ensure that the Rancher cluster is set up and that you have the appropriate access to deploy resources to it. Pulumi's `rancher2` provider allows us to manage resources in a Rancher environment.

Below is a Pulumi program written in TypeScript that demonstrates how to deploy the `argocd-ecr-updater` Helm chart on a Rancher-managed Kubernetes cluster. This program assumes that you have already set up the Rancher Kubernetes cluster and have configured Pulumi to use the appropriate credentials to connect to it.

The program will perform the following actions:
1. Import necessary packages and set up the Rancher 2 provider.
2. Create a namespace in the cluster, if not already present, to isolate the resources.
3. Deploy the `argocd-ecr-updater` Helm chart to the specified namespace in the cluster.

Make sure to replace `CLUSTER_ID` with the actual ID of your Rancher cluster and `NAMESPACE_NAME` with the namespace you wish to deploy into. You will also need to replace `CHART_VERSION` with the specific version of the `argocd-ecr-updater` Helm chart you want to deploy.

Here is the Pulumi program:

```typescript
import * as pulumi from '@pulumi/pulumi';
import * as rancher2 from '@pulumi/rancher2';
import * as k8s from '@pulumi/kubernetes';

// Create a new Rancher2 provider instance pointing to your Rancher server.
const provider = new rancher2.Provider('rancher', {
    apiUrl: 'https://your-rancher-instance/v3',
    // Assumes that the Rancher token is configured in the Pulumi config.
    // You can use pulumi.config.get('rancherToken') to retrieve it, or equivalent methods.
});

// Fetch an existing Rancher2 cluster where the Helm chart will be deployed.
// Replace "CLUSTER_ID" with the actual cluster ID.
const cluster = rancher2.getCluster({ id: 'CLUSTER_ID' });

// Create a Kubernetes provider instance using the above Rancher cluster.
const k8sProvider = new k8s.Provider('k8s-provider', {
    kubeconfig: cluster.kubeConfig,
}, { dependsOn: [provider] });

// Define the namespace where the Helm chart will be deployed.
// Replace "NAMESPACE_NAME" with the desired namespace name.
const nsName = 'NAMESPACE_NAME';
const ns = new k8s.core.v1.Namespace(nsName, {
    metadata: { name: nsName },
}, { provider: k8sProvider });

// Deploy the argocd-ecr-updater Helm chart into the created namespace.
const argoECRUpdater = new k8s.helm.v3.Chart('argocd-ecr-updater', {
    chart: 'argocd-ecr-updater',
    version: 'CHART_VERSION', // replace CHART_VERSION with the specific chart version
    namespace: ns.metadata.name,
    fetchOpts: {
        repo: 'https://your-helm-chart-repository', // replace with the Helm repository URL
    },
    // You can specify additional Helm values here, according to the chart's needs.
    values: {
        // ... configuration values for the chart
    },
}, { provider: k8sProvider, dependsOn: [ns] });

// Export the namespace's name and the service URL after deployment.
export const namespaceName = ns.metadata.name;
export const serviceUrl = pulumi.interpolate`http://${argoECRUpdater.getResourceProperty('v1/Service', 'argocd-ecr-updater', 'status').loadBalancer.ingress[0].hostname}`;
```

This program sets up the necessary providers for Rancher and Kubernetes, configures the namespace, and deploys the Helm chart. The exported `serviceUrl` will give you the hostname to access the `argocd-ecr-updater` once deployed, presuming it creates a LoadBalancer service.

Ensure you've [installed Pulumi](https://www.pulumi.com/docs/get-started/) and are authenticated with your cloud provider, and have the Rancher2 provider set up in your Pulumi configuration.

You'll need to run the following commands to deploy this Pulumi program:
- `pulumi stack init` to create a new stack for your project.
- `pulumi up` to provision the resources as specified in the program.

After running `pulumi up`, you will see a summary of the proposed changes. Confirm these, and Pulumi will proceed with deploying the Helm chart to your Rancher cluster.

Remember to monitor the deployment process via the Rancher UI or `kubectl` to ensure everything is deployed correctly. If additional configuration is needed, you can specify that within the `values` field in the Helm chart declaration.