Deploy the keycloak-setup helm chart on Digital Ocean Kubernetes Service

Question

Pulumi · Accepted Answer

To deploy the `keycloak-setup` Helm chart on DigitalOcean Kubernetes Service (DOKS), you will need to follow a sequence of steps using Pulumi. The process involves creating a Kubernetes cluster in DigitalOcean and then using the Pulumi Kubernetes provider to deploy the Helm chart.

Here is a step-by-step guide with the corresponding Pulumi TypeScript code:

1. **Create a DigitalOcean Kubernetes Cluster**: Use the `digitalocean.KubernetesCluster` resource to provision a new Kubernetes cluster where Keycloak will be deployed.

2. **Deploy the Helm Chart**: After your cluster is provisioned and ready, deploy `keycloak-setup` Helm chart using the `kubernetes.helm.v3.Chart` resource within the Pulumi Kubernetes provider.

3. **Export the Necessary Outputs**: At the end of your Pulumi program, you will export any outputs you need, such as the Kubernetes cluster endpoint or any service addresses.

Let's start writing the Pulumi program. First, you would need the `@pulumi/digitalocean` and `@pulumi/kubernetes` packages. Here is the full program in TypeScript:

```typescript
import * as digitalocean from "@pulumi/digitalocean";
import * as kubernetes from "@pulumi/kubernetes";

// Create a DigitalOcean Kubernetes cluster
const cluster = new digitalocean.KubernetesCluster("keycloak-cluster", {
    // Specify the region for your cluster
    region: digitalocean.Regions.NYC1,

// Define the version of Kubernetes to use and the desired node count
    version: "latest", // You can specify the exact version like "1.21.5-do.0"
    nodePool: {
        name: "worker-pool",
        size: digitalocean.DropletSlugs.DropletS2VCPU2GB,
        nodeCount: 2,
    },
});

// Use the cluster's kubeconfig to interact with the Kubernetes cluster
const provider = new kubernetes.Provider("k8s-provider", {
    kubeconfig: cluster.kubeConfigs[0].rawConfig,
});

// Deploy the Keycloak Helm chart
const keycloakChart = new kubernetes.helm.v3.Chart("keycloak-setup", {
    chart: "keycloak",
    version: "9.8.1",
    namespace: "keycloak",
    fetchOpts: {
        repo: "https://codecentric.github.io/helm-charts", // This is the repo where your desired Helm chart is located
    },
}, { provider });

// Export the endpoint of the Kubernetes cluster and the service IP of the Keycloak deployment
export const kubeClusterEndpoint = cluster.endpoint;
export const keycloakService = keycloakChart.getResource("v1/Service", "keycloak");
```

### Explanation:

- `digitalocean.KubernetesCluster`: This resource creates a new Kubernetes cluster on DigitalOcean. We specify the region, node droplet size, and the number of worker nodes.
  
- The `kubeconfig` output from the cluster is used to set up a `Provider` which tells the Kubernetes provider how to access the newly created Kubernetes cluster.

- `kubernetes.helm.v3.Chart`: Deploys the specified Helm chart to our Kubernetes cluster. We're deploying the `keycloak` chart from the `codecentric` repository. Note that you need to replace `"keycloak-setup"` with the exact name of the Helm chart you want to deploy, assuming "keycloak-setup" is the name of the chart you mentioned initially.

- We export the cluster endpoint and the Keycloak service information, which you can use to interact with Keycloak once it's deployed.

### Next Steps:

1. Ensure you have Pulumi and the necessary cloud provider CLI installed and configured (in this case, `doctl` for DigitalOcean).

2. Save the code to a file with a `.ts` extension, for example, `index.ts`.

3. Run `pulumi up` and follow the prompts to deploy your Keycloak Helm chart to your DigitalOcean Kubernetes cluster.

After deploying, Pulumi will give you the outputs that you have exported, including the Kubernetes cluster endpoint. You can then use that endpoint to configure `kubectl` or access the Keycloak web interface.