LightBeam Deployment Instructions


LightBeam Installation:

Before proceeding with the steps in this guide, ensure you have gone through the LightBeam Installation process. Familiarize yourself with the installation prerequisites and steps to ensure a smooth setup.

Overview

Kubernetes, also known as K8s, is an open-source system for automating the deployment, scaling, and management of containerized applications.

Helm helps you manage Kubernetes applications — Helm Charts help you define, install, and upgrade even the most complex Kubernetes application.


Setup Kubernetes Cluster

We used the following script to setup docker, Kubernetes, and cluster on one of the servers:

https://github.com/lightbeamai/lb-installer/blob/master/setup-centos-rhel-vm.sh

Setup LightBeam Cluster

To install LightBeam Cluster using Helm Chart (copied on one of the servers), we have used the following command. Specify the cloud provider with --self-managed, --eks or --aks . The given command is for AWS. The --spectra flag specifies spectra deployment.

export DOCKER_USERNAME="lbcustomers" DOCKER_REGISTRY_PASSWORD="<DOCKER_REGISTRY_TOKEN>" KBLD_REGISTRY_HOSTNAME="docker.io" KBLD_REGISTRY_USERNAME="lbcustomers" KBLD_REGISTRY_PASSWORD="<DOCKER_REGISTRY_TOKEN>"

./installer/lb-install.sh --install --spectra --eks --values charts/lightbeam/values.yaml --final_values charts/lightbeam/values.yaml

The above command may take 10-15 minutes to download all docker images from the docker hub.

Once the above command is completed, the UI will be accessible on the configured endpoint with default credentials.

Create LightBeam systemd service:

  • Create file /etc/systemd/system/lightbeam.service with the following:

[Unit]
Description=LightBeam Application
After=network-online.target
Wants=network-online.target systemd-networkd-wait-online.service


StartLimitIntervalSec=500
StartLimitBurst=5


[Service]
Restart=on-failure
RestartSec=5s


ExecStart=/usr/local/bin/kubectl port-forward service/kong-proxy -n lightbeam --address 0.0.0.0 80:80 --kubeconfig /root/.kube/config


[Install]
WantedBy=multi-user.target
  • Then, run the following commands:

sudo systemctl enable lightbeam
sudo systemctl start lightbeam
sudo systemctl status lightbeam

Stop LightBeam Cluster

To stop the LightBeam cluster we can Power OFF the VM where the LightBeam cluster is deployed. Once the VM is powered ON again, all the LightBeam cluster services will be up and running and UI will be accessible on the above endpoint.

Instructions to stop the LightBeam service:

kubectl --namespace lightbeam scale deploy --all --replicas 0
kubectl --namespace lightbeam scale sts --all --replicas 0
kubectl patch cronjobs $(kubectl get cj -n lightbeam | grep -v NAME | awk '{print $1}') -p '{"spec" : {"suspend" : true }}'

Start LightBeam Cluster

Once the VM is powered ON again all LightBeam cluster services will be up and running and UI will be accessible on the above endpoint.

Instructions to start the LightBeam service:

kubectl --namespace lightbeam scale deploy --all --replicas 1
kubectl --namespace lightbeam scale sts --all --replicas 1
kubectl patch cronjobs $(kubectl get cj -n lightbeam | grep -v NAME | awk '{print $1}') -p '{"spec" : {"suspend" : false }}'

Delete LightBeam Cluster

Instructions to delete the LightBeam services:

helm delete lightbeam -n lightbeam
kubectl delete pvc --all -n lightbeam
kubectl delete ns lightbeam

About LightBeam

LightBeam automates Privacy, Security, and AI Governance, so businesses can accelerate their growth in new markets. Leveraging generative AI, LightBeam has rapidly gained customers’ trust by pioneering a unique privacy-centric and automation-first approach to security. Unlike siloed solutions, LightBeam ties together sensitive data cataloging, control, and compliance across structured and unstructured data applications providing 360-visibility, redaction, self-service DSRs, and automated ROPA reporting ensuring ultimate protection against ransomware and accidental exposures while meeting data privacy obligations efficiently. LightBeam is on a mission to create a secure privacy-first world helping customers automate compliance against a patchwork of existing and emerging regulations.

For any questions or suggestions, please get in touch with us at: [email protected].

Last updated