Deploy the logto helm chart on Azure Kubernetes Service (AKS)

Question

Pulumi · Accepted Answer

To deploy the Logto Helm chart on Azure Kubernetes Service (AKS), you'll first need to set up an AKS cluster. With Pulumi, you can define the infrastructure for an AKS cluster using code, typically in a familiar programming language like TypeScript.

Below is a program written in TypeScript that demonstrates how to create an AKS cluster and then deploy the Logto Helm chart onto it. To follow along, you should have a working knowledge of TypeScript, the Pulumi CLI installed and set up, and have access to an Azure subscription.

We'll break down the program in steps:

1. **Set up the AKS Cluster**: We will create an AKS cluster using the `ProvisionedCluster` resource from the `azure-native` provider. This resource allows you to define the AKS cluster's properties and the Kubernetes version you would like to use.

2. **Install the Helm Chart**: After the AKS cluster is ready, we will use the `Chart` resource from the `kubernetes` provider to install the Logto Helm chart. The `Chart` resource is responsible for managing Helm chart installations in a Kubernetes cluster.

Now, let's look at the corresponding TypeScript program.

```typescript
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";
import * as k8s from "@pulumi/kubernetes";

// Define the AKS cluster properties
const aksClusterName = "logto-aks-cluster";
const resourceGroupName = new azure_native.resources.ResourceGroup("logtoResourceGroup");

// Create the AKS cluster
const aksCluster = new azure_native.hybridcontainerservice.ProvisionedCluster(aksClusterName, {
    resourceGroupName: resourceGroupName.name,
    location: resourceGroupName.location,
    properties: {
        kubernetesVersion: "1.20.9", // Specify your desired Kubernetes version
        dnsPrefix: pulumi.interpolate(`${aksClusterName}-dns`),
        agentPoolProfiles: [{
            name: "agentpool",
            count: 3, // Number of agent nodes
            vmSize: "Standard_DS2_v2", // Size of agent VMs
        }],
    },
    identity: {
        type: "SystemAssigned", // Use a system-assigned managed identity for the AKS cluster
    },
});

// Retrieve the kubeconfig from the AKS cluster
const creds = pulumi.all([resourceGroupName.name, aksCluster.name])
    .apply(([rgName, clusterName]) => 
        azure_native.hybridcontainerservice.listProvisionedClusterUserCredentials({
            resourceGroupName: rgName,
            resourceName: clusterName,
        }));

const kubeconfig = creds.apply(creds => Buffer.from(creds.kubeconfigs[0].value, 'base64').toString());

// Provider to interact with the AKS cluster
const k8sProvider = new k8s.Provider("aksK8s", {
    kubeconfig: kubeconfig,
});

// Deploy the Logto Helm chart
const logtoChart = new k8s.helm.v3.Chart("logto", {
    chart: "logto",
    version: "0.1.0", // Use the desired version of the Logto Helm chart
    fetchOpts: {
        repo: "https://charts.logto.io", // The Helm repository URL
    },
}, { provider: k8sProvider });

// Export the AKS cluster's properties
export const kubeconfigOutput = pulumi.secret(kubeconfig); // Kubeconfig as a secret
export const clusterName = aksCluster.name;
```

This program sets up the AKS cluster and deploys the Logto Helm chart to it. The `kubeconfig` is obtained from the AKS cluster and is used to create a `k8s.Provider`, which is necessary for the Pulumi Kubernetes provider to communicate with the cluster. We ensure the `kubeconfig` is marked as a secret so that its contents are not displayed in plaintext in any logs or outputs. The Helm chart is then installed using the specified repository and version.

To run this program:

1. Save the program to a file with a `.ts` extension (e.g., `deployLogtoAks.ts`).
2. Install the necessary Pulumi packages if you haven't already:
   ```
   npm install @pulumi/pulumi @pulumi/azure-native @pulumi/kubernetes
   ```
3. Log in to the Pulumi service:
   ```
   pulumi login
   ```
4. Select the Azure subscription you want to use.
5. Run `pulumi up` to create the resources. It will prompt you to review the changes before it makes any modifications to your cloud resources.

Remember to update the `kubernetesVersion` and `version` of the Logto Helm chart to the ones you wish to use, and replace other placeholders accordingly. This program assumes that you have already configured Pulumi to communicate with your Azure subscription and have set up Azure credentials locally.