Deploy the prometheus-exporter helm chart on Azure Kubernetes Service (AKS)

Question

Pulumi · Accepted Answer

To deploy the Prometheus Exporter Helm chart on an Azure Kubernetes Service (AKS) cluster with Pulumi, you need to do the following:

Set up an AKS cluster.
Install the Helm chart on the AKS cluster.

Here's how you can achieve this with Pulumi and TypeScript:

Setting up AKS: Use the azure-native provider to create an AKS cluster. You'll need to define the necessary resources, which include the resource group, the AKS cluster itself, and any additional configurations such as node pools.
Installing Helm Chart: Use the pulumi/kubernetes provider to install the Prometheus Exporter Helm chart on the AKS cluster. With this provider, you can manage Helm releases just like you would with the Helm CLI.

Below is a Pulumi program that demonstrates these steps:

import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure";
import * as azuread from "@pulumi/azuread";
import * as k8s from "@pulumi/kubernetes";
import * as azureNative from "@pulumi/azure-native";

// Create a resource group for the AKS cluster
const resourceGroup = new azureNative.resources.ResourceGroup("aksResourceGroup");

// Create an AD service principal for the AKS cluster
const adApp = new azuread.Application("aks");
const adSp = new azuread.ServicePrincipal("aksSp", { applicationId: adApp.applicationId });

// Create the AD service principal password
const adSpPassword = new azuread.ServicePrincipalPassword("aksSpPassword", {
  servicePrincipalId: adSp.id,
  endDate: "2099-01-01T00:00:00Z",
});

// Now provision the AKS cluster itself
const cluster = new azure.containerservice.KubernetesCluster("aksCluster", {
  resourceGroupName: resourceGroup.name,
  defaultNodePool: {
    name: "aksagentpool",
    nodeCount: 3,
    vmSize: "Standard_D2_v2",
  },
  dnsPrefix: `${pulumi.getStack()}-kube`,
  linuxProfile: {
    adminUsername: "adminuser",
    sshKey: {
      keyData: "<YOUR_SSH_PUBLIC_KEY>",
    },
  },
  servicePrincipal: {
    clientId: adApp.applicationId,
    clientSecret: adSpPassword.value,
  },
});

// Export the kubeconfig for the AKS cluster
export const kubeconfig = cluster.kubeConfigRaw;

// Create a Provider to install the helm chart on AKS cluster
const k8sProvider = new k8s.Provider("k8s-provider", {
  kubeconfig: cluster.kubeConfigRaw,
});

// Install the Prometheus Exporter helm chart into the AKS cluster
const prometheusChart = new k8s.helm.v3.Chart("prometheus-exporter", {
  chart: "prometheus-exporter",
  version: "2.3.0", // specify the exact chart version to maintain consistency
  fetchOpts:{
    repo: "https://prometheus-community.github.io/helm-charts",
  },
  values: {
    // specify your helm chart values here
  },
}, { provider: k8sProvider });

To use this program, you should replace <YOUR_SSH_PUBLIC_KEY> with your actual SSH public key for AKS to use when setting up the Linux profile for node access.

What's happening in this program:

We import the necessary Pulumi libraries for handling resources on Azure and Kubernetes.
Create a new Azure resource group to contain our AKS resources.
Create a new Azure AD application and service principal which are required for AKS to manage resources under the Azure subscription.
Create a password for the service principal.
Provision the AKS cluster with the KubernetesCluster resource. We specify details such as the number of nodes, VM Size, admin user info, and service principal details.
Export the kubeconfig of the AKS cluster which is needed to interact with the cluster.
With the kubeconfig, we create a Pulumi Kubernetes provider that knows how to communicate with our AKS cluster.
Finally, we define a helm.v3.Chart resource to install the Prometheus Exporter helm chart on our AKS cluster. The values parameter is used to configure the Helm chart, and you can specify the configuration that Prometheus Exporter needs as per its documentation.

When running this Pulumi program, it will automatically provision an AKS cluster and deploy the Prometheus Exporter Helm chart on it. Ensure you have Pulumi set up and configured with your Azure credentials before running this program. You can run the Pulumi program using the pulumi up command in your CLI, and it will handle the creation and configuration of the resources specified in the code.