Microsoft Azure

Installer Guide for Microsoft Azure

---

LightBeam Installation:

Before proceeding with the steps in this guide, ensure you have gone through the LightBeam Installation process. Familiarize yourself with the installation prerequisites and steps to ensure a smooth setup.

Overview

1.0 Setup Overview

• There are two scenarios when deploying the LightBeam application:

  • The AKS (Azure Kubernetes Service) cluster is already present on the customer account.

  • The AKS cluster is to be deployed by LightBeam.

• This pre-setup is required only for the second scenario.

Note: We may ask Azure to launch a Jump Box VM with internet access in some cases.

1.1 Create and Set Up a Jump Box VM

Create a micro instance (Ubuntu OS) to use as a Jump Box VM to configure and access the AKS clusters.

Note: Verify that the deployed Jump Box VM has internet access (confirm that firewall rules allow outbound traffic).

Set up the Jump Box VM

1. Install unzip package:

   • sudo apt-get update

   • sudo apt-get install unzip

2. Install Kubectl CLI:

   • curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"

   • chmod +x kubectl

   • mv kubectl /usr/local/bin/

   • kubectl version

3. Install Helm CLI:

   • Download the release from here: https://get.helm.sh/helm-v3.3.4-linux-amd64.tar.gz

   • Run the following commands:

     1. tar -xvf helm-v3.3.4-linux-amd64.tar.gz

     2. mv linux-amd64/helm /usr/local/bin/

---

2.0 Deploying LightBeam Platform in Microsoft Azure Cloud

Creating AKS cluster

i) Login to the Azure portal and search for “Kubernetes services”.

Figure 1. Microsoft Azure Portal - Kubernetes Services

ii) Click on Kubernetes services. You will see the following page:

Figure 2. Create Kubernetes Cluster

iii) Click on Create Kubernetes cluster.

iv) Provide Kubernetes cluster name. Give the same name to a resource group.

Figure 3. Kubernetes cluster name

• Select a VM size. We recommend a node with resource 8vCPU and 32 GB memory per node.

Figure 4. Select a VM size

• Once the instance type is selected, choose the Manual option for the Scale method.

Set node count to 3 (minimum)

Figure 5. Scale method

iv) Click on the Review + Create button.

Figure 6. Click on ‘Review + create’

v) Once the validation is passed, click on the Create button which will start the AKS cluster deployment.

Figure 7. Click on ‘Create’

vi) Once the deployment is ready, the AKS cluster will be ready for access.

Figure 8. Deployment progress

• Click on Go To Resource once the deployment is completed.

Figure 9. Go To Resource

vii) Click on Connect. This will open up the following window on the right side:

Figure 10. Connect to lb-cluster

---

3.0 Access AKS Cluster

Additional Setup to access the AKS cluster from the local machine or VM running in Azure.

---

4.0 Setup Azure CLI

To set up Azure CLI on your system:

https://docs.microsoft.com/en-us/cli/azure/install-azure-cli

---

5.0 Authenticate az CLI

To authenticate Azure CLI on your system:

https://docs.microsoft.com/en-us/cli/azure/authenticate-azure-cli

---

6.0 Run a few commands to validate

• az account set --subscription <SUBSCRIPTION_ID>

• az aks get-credentials --resource-group <GROUP_NAME> --name <CLUSTER_NAME>

• kubectl get nodes

Pre-requisites: You need to install Kubectl and Helm CLI utilities.

---

Commands to create AKS cluster using Azure CLI

// Considering you want to use an existing resource group called LightBeam_AKS

az extension add --name aks-preview; az extension update --name aks-preview
az feature register --namespace "Microsoft.ContainerService" --name "EnableAPIServerVnetIntegrationPreview"
az feature show --namespace "Microsoft.ContainerService" --name "EnableAPIServerVnetIntegrationPreview"
az provider register --namespace Microsoft.ContainerService

// Considering the cluster name is LightBeam-AKS-cluster

az aks create -n LightBeam-AKS-cluster -g LightBeam_AKS -l westus2 --enable-apiserver-vnet-integration --disable-private-cluster

az aks nodepool add --resource-group LightBeam_AKS --cluster-name LightBeam-AKS-cluster --name systempool --os-type AzureLinux --node-vm-size standard_d8s_v3 --node-count 1 --mode system

az aks nodepool add --resource-group LightBeam_AKS --cluster-name LightBeam-AKS-cluster --name userpool --os-type AzureLinux --node-vm-size standard_d8s_v3 --node-count 3 --mode user --max-pods 50

// Delete the default systempool created 
az aks nodepool delete --resource-group LightBeam_AKS --cluster-name LightBeam-AKS-cluster --name nodepool1

7.0 LightBeam Installation

Follow the installation instructions in the LightBeam Installer guide.

Use the --aks flag in the installer command to specify the platform used is Azure AKS.

---

About LightBeam

LightBeam automates Privacy, Security, and AI Governance, so businesses can accelerate their growth in new markets. Leveraging generative AI, LightBeam has rapidly gained customers’ trust by pioneering a unique privacy-centric and automation-first approach to security. Unlike siloed solutions, LightBeam ties together sensitive data cataloging, control, and compliance across structured and unstructured data applications providing 360-visibility, redaction, self-service DSRs, and automated ROPA reporting ensuring ultimate protection against ransomware and accidental exposures while meeting data privacy obligations efficiently. LightBeam is on a mission to create a secure privacy-first world helping customers automate compliance against a patchwork of existing and emerging regulations.

For any questions or suggestions, please get in touch with us at: [email protected].