Deploy the sonatype-nexus helm chart on AWS EKS

Question

Pulumi · Accepted Answer

To deploy the Sonatype Nexus helm chart on AWS EKS using Pulumi, you'll create several resources:

1. An EKS cluster where your Sonatype Nexus will run.
2. Any necessary AWS IAM roles for EKS.
3. A Kubernetes `Chart` resource, which uses Helm to deploy Nexus.

Here's how you would set up the program in TypeScript:

First, you set up the EKS cluster. You will use the `@pulumi/eks` package, which provides a high-level interface to create an EKS cluster easily with best practices.

Next, you deploy the nexus helm chart. To do this, you will use the `@pulumi/kubernetes` package to interact with Kubernetes resources, including Helm charts.

Now, let's create the Pulumi program:

```typescript
import * as pulumi from '@pulumi/pulumi';
import * as eks from '@pulumi/eks';
import * as k8s from '@pulumi/kubernetes';

// Create an EKS cluster with the default configuration.
const cluster = new eks.Cluster('nexus-cluster', {});

// Export the cluster's kubeconfig.
export const kubeconfig = cluster.kubeconfig;

// Create a repository to store container images (this step is optional and dependent on your need to store private container images for Nexus).
const repository = new aws.ecr.Repository('nexus-repository', {});

// Deploy the Sonatype Nexus helm chart to the created EKS cluster
const nexusHelmChart = new k8s.helm.v3.Chart('sonatype-nexus', {
    chart: 'sonatype-nexus',
    version: 'latest',  // specify the chart version you want to deploy
    fetchOpts: {
        repo: 'https://path-to-sonatype-nexus-helm-chart-repository', // replace with the actual helm chart repo URL
    },
}, { provider: cluster.provider });

// If the Nexus Helm chart requires specific values, pass them like this (uncomment and modify as needed):
/*
const customValues = {
    persistence: {
        storageClass: 'gp2', // use the proper storage class for your cloud provider
        size: '20Gi',
    },
    // Add more custom values as needed for your Nexus configuration
};

const nexusHelmChart = new k8s.helm.v3.Chart('sonatype-nexus', {
    chart: 'sonatype-nexus',
    version: 'latest',  
    fetchOpts: {
        repo: 'https://path-to-sonatype-nexus-helm-chart-repository',
    },
    values: customValues,
}, { provider: cluster.provider });
*/

// (Optional) Export the Helm chart resources.
export const nexusHelmResources = nexusHelmChart.resources;
```

To access the Nexus UI after deployment, you will need to forward ports or create a LoadBalancer service to expose the Nexus service publicly from your Kubernetes cluster. This can be done using Pulumi Kubernetes resources or kubectl after deployment.

Remember that in the provided program:
- Replace `'https://path-to-sonatype-nexus-helm-chart-repository'` with the actual Helm chart repository URL for Nexus.
- Modify the `customValues` with the appropriate configuration for your Nexus setup if needed.
- (Optional) Storing container images for Nexus is not required, but if you need to store private images an AWS ECR repository resource is included for that purpose.

After you write the program, use Pulumi CLI to login, select a stack, and run `pulumi up` to deploy your stack. The CLI will provision all the necessary infrastructure on AWS for you.