Install Resoto with Kubernetes
Kubernetes is an open-source system for automating deployment, scaling, and management of containerized applications.
The Resoto Helm chart is no longer actively maintained. We recommend running Resoto using Docker.
Don't want to manage your own Resoto installation? Check out Fix, an all-in-one security dashboard built on top of Resoto.
Prerequisites​
-
Helm (version 3 or above)
-
At least 2 CPU cores and 8 GB of RAM
noteResoto performs CPU-intensive graph operations. In a production setup, we recommend at least four cores and 16 gigabytes of RAM. See Configuring Resoto Worker for more information.
Directions​
- Default Installation
- Customized Installation
-
Add the Some Engineering Helm chart repository:
$ helm repo add someengineering https://helm.some.engineering
-
Update cached chart information:
$ helm repo update
-
Install the
resoto
chart:$ helm install resoto someengineering/resoto --set image.tag=3.9.0
-
Retrieve the PSK from secret.
This key is required for accessing the Resoto installation via the UI and CLI. These PSK is stored as Kubernetes Secret in
resoto-psk
. Copy and run the following command to retrieve the PSK:kubectl get secret arango-user -o jsonpath="{.data.password}" | base64 --decode
It is possible to customize your Resoto installation using a Helm values file.
-
Create a file
resoto-values.yaml
with the desired configuration:Example configuration that mounts AWS credentials from a Kubernetes Secretresotoworker:
volumeMounts:
- mountPath: /home/resoto/.aws
name: aws-credentials
volumes:
- name: aws-credentials
secret:
secretName: resoto-home -
Add the Some Engineering Helm chart repository:
$ helm repo add someengineering https://helm.some.engineering
-
Update cached chart information:
$ helm repo update
-
Install the
resoto
chart with theresoto-values.yaml
file:$ helm install resoto someengineering/resoto --set image.tag=3.9.0 -f resoto-values.yaml
-
Retrieve the PSK from secret.
This key is required for accessing the Resoto installation via the UI and CLI. These PSK is stored as Kubernetes Secret in
resoto-psk
. Copy and run the following command to retrieve the PSK:kubectl get secret arango-user -o jsonpath="{.data.password}" | base64 --decode
And just like that, you have Resoto running in a Kubernetes cluster!