Deploy the wazuh helm chart on Azure Managed Openshift Service

Question

Pulumi · Accepted Answer

To deploy the Wazuh Helm chart on Azure Managed OpenShift Service using Pulumi, you would follow these general steps:

Set up an Azure Managed OpenShift Cluster: You will create an Azure OpenShift Managed Cluster resource within a specified resource group and configure networking and authentication profiles for the cluster.
Install the Helm Chart for Wazuh: Once you have your Kubernetes cluster (in this case, OpenShift) running, you'll use Pulumi's Chart resource from the @pulumi/kubernetes package to install the Wazuh Helm chart. You'll need to specify details such as the chart name, version, and any configurations that are specific to Wazuh.

Below is a Pulumi TypeScript program that orchestrates the deployment of an Azure Managed OpenShift Cluster and then deploys the Wazuh Helm chart onto that cluster. Before running this program, ensure that you have the necessary Pulumi and Azure CLI configurations set up. You must also have Helm chart details for Wazuh, such as the chart version and any custom values needed for the installation.

import * as pulumi from '@pulumi/pulumi';
import * as azure_native from '@pulumi/azure-native';
import * as k8s from '@pulumi/kubernetes';

// Create an Azure resource group
const resourceGroup = new azure_native.resources.ResourceGroup("myResourceGroup");

// Define the OpenShift cluster resource with necessary configurations
const openshiftCluster = new azure_native.containerservice.OpenShiftManagedCluster("myOpenShiftCluster", {
    resourceGroupName: resourceGroup.name,
    location: resourceGroup.location, // This should be an Azure location like 'East US'.
    openShiftVersion: "latest", // Specify the desired OpenShift version
    networkProfile: {
        // Ensure that the networking profile is accurately defined
        vnetCidr: "10.0.0.0/8",
    },
    masterPoolProfile: {
        // Define the profile for master nodes
        count: 3,
        vmSize: "Standard_D4s_v3",
    },
    agentPoolProfiles: [{
        // Define the agent pool profile (compute nodes)
        name: "compute",
        count: 3,
        vmSize: "Standard_D4s_v3",
        osType: "Linux",
        role: "compute",
    }],
    // Ensure that you properly configure authentication for OpenShift
    authProfile: {
        identityProviders: [{
            name: "AzureADIdentityProvider",
            provider: {
                // You would replace placeholder strings with real secrets
                // and client IDs for Azure Active Directory integration.
                clientId: "<client-id>",
                clientSecret: "<client-secret>",
                tenantId: "<tenant-id>"
            }
        }]
    },
});

// Set up the k8s provider to deploy Helm charts to the OpenShift cluster
const k8sProvider = new k8s.Provider("k8sProvider", {
    kubeconfig: openshiftCluster.config.adminKubeconfig.apply(c => c.kubeconfig),
});

// Deploy the Wazuh Helm chart
const wazuhChart = new k8s.helm.v3.Chart("wazuh", {
    chart: "wazuh", // The Wazuh Helm chart from the Helm repository
    version: "x.y.z", // Replace with the specific version of the chart
    namespace: "wazuh", // This assumes the namespace "wazuh" exists or is to be created
    values: {
        // Define custom values for Wazuh Helm chart or leave it empty to use defaults
    }
}, { provider: k8sProvider });

// When all resources are in place, you can export the Kubeconfig if needed
export const kubeconfig = openshiftCluster.config.adminKubeconfig.apply(c => c.kubeconfig);

This Pulumi program will complete the steps described above, and after applying it, you should have a Wazuh deployment running on Azure Managed OpenShift Service. The kubeconfig output at the end of the program allows you to access your OpenShift cluster using kubectl or other Kubernetes tooling.

Please replace placeholders like <client-id>, <client-secret>, <tenant-id>, and chart version x.y.z with actual values corresponding to your Azure AD setup and Helm chart version.