Deploy the prom2teams helm chart on Azure Kubernetes Service (AKS)

Question

Pulumi · Accepted Answer

Deploying the `prom2teams` Helm chart on Azure Kubernetes Service (AKS) using Pulumi involves several steps. We need to provision an AKS cluster and then deploy the chart to it. Below, I will guide you through the process, detailing the significance of each step along the way.

1. **Provisioning an AKS Cluster**: We need a Kubernetes cluster where our applications will be running. Azure Kubernetes Service (AKS) offers a managed Kubernetes environment, which is quick to deploy and easy to manage. Pulumi's `azure-native` package will be used for this purpose, which gives us access to Azure's native resources.

2. **Deploying Helm Chart**: Helm charts help you define, install, and upgrade complex Kubernetes applications. `prom2teams` is an application that sends Prometheus alerts to Microsoft Teams. We'll use the Pulumi's `kubernetes` package to work with Helm charts on a Kubernetes cluster.

Let's start with a Pulumi TypeScript program that does the following:

- Sets up an AKS cluster
- Deploys the `prom2teams` Helm chart onto the AKS cluster

Here's the complete Pulumi program written in TypeScript:

```typescript
import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure-native";
import * as k8s from "@pulumi/kubernetes";

// Step 1: Create a new AKS cluster
const resourceGroup = new azure.resources.ResourceGroup("myResourceGroup");

const aksCluster = new azure.containerservice.ManagedCluster("myAKSCluster", {
  resourceGroupName: resourceGroup.name,
  agentPoolProfiles: [{
    mode: "System",
    name: "agentpool",
    vmSize: azure.containerservice.AgentVMSizeTypes.Standard_DS2_v2,
    count: 3,
  }],
  dnsPrefix: `${pulumi.getStack()}-kube`,
  enableRBAC: true,
  kubernetesVersion: "1.18.14",
  linuxProfile: {
    adminUsername: "adminuser",
    ssh: {
      publicKeys: [{
        keyData: "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD3...", // replace with your actual SSH public key
      }],
    },
  },
  servicePrincipalProfile: {
    clientId: "your-service-principal-client-id", // specify your service principal clientId
    secret: "your-service-principal-secret", // specify your service principal secret
  },
});

// Export the AKS cluster kubeconfig
export const kubeconfig = pulumi.
  all([aksCluster.name, resourceGroup.name]).
  apply(([clusterName, rgName]) => {
    return azure.containerservice.listManagedClusterUserCredentials({
      resourceGroupName: rgName,
      resourceName: clusterName,
    });
  }).apply(creds => {
    const encoded = creds.kubeconfigs[0].value;
    const kubeconfig = Buffer.from(encoded, 'base64').toString();
    return kubeconfig;
  });

// Step 2: Deploy 'prom2teams' Helm chart to the AKS cluster
const prom2teamsChart = new k8s.helm.v3.Chart("prom2teams-chart", {
  chart: "prom2teams",
  version: "3.2.2", // specify the version of the chart you want to deploy
  fetchOpts: {
    repo: "https://prometheus-msteams.github.io/prometheus-msteams/", // the Helm repository where 'prom2teams' is located
  },
}, { provider: new k8s.Provider("k8s-provider", { kubeconfig: kubeconfig }) });

// Export the public IP to access 'prom2teams'
export const prom2teamsEndpoint = prom2teamsChart.getResourceProperty("v1/Service", "prom2teams-prom2teams", "status").apply(status => status.loadBalancer.ingress[0].ip);
```

In the first step, the program creates a new resource group and AKS cluster. Be sure to replace SSH public key data, service principal clientId, and secret with your own values.

In the second step, it installs the `prom2teams` Helm chart from its Helm repository provided via `fetchOpts`. We pass the generated `kubeconfig` to the Helm chart resource to ensure it knows how to communicate with the AKS cluster.

Finally, it exports the `kubeconfig` and the public endpoint IP for `prom2teams`. This output can be obtained from Pulumi after the deployment succeeds, and it allows you to interact with your Kubernetes cluster and prom2teams service.

For more details on the used resources:
- [AKS Cluster - azure-native.containerservice.ManagedCluster](https://www.pulumi.com/registry/packages/azure-native/api-docs/containerservice/managedcluster/)
- [Helm Chart - kubernetes.helm.v3.Chart](https://www.pulumi.com/registry/packages/kubernetes/api-docs/helm/v3/chart/)

Make sure you replace the placeholder values with actual data before running this program. The program assumes that you have set up the Pulumi Azure and Kubernetes providers. If you haven't done so, please use the Pulumi documentation to set up your [Azure provider](https://www.pulumi.com/docs/intro/cloud-providers/azure/setup/) and [Kubernetes provider](https://www.pulumi.com/docs/intro/cloud-providers/kubernetes/setup/). Once everything is set up, you can deploy this program with the Pulumi CLI using `pulumi up`.