Microsoft Azure
Installer Guide for Microsoft Azure
Overview
1.0 Setup Overview
There are two scenarios when deploying the LightBeam application:
The AKS (Azure Kubernetes Service) cluster is already present on the customer account.
The AKS cluster is to be deployed by LightBeam.
This pre-setup is required only for the second scenario.
1.1 Create and Set Up a Jump Box VM
Create a micro instance (Ubuntu OS) to use as a Jump Box VM to configure and access the AKS clusters.
Set up the Jump Box VM
Install
unzip
package:sudo apt-get update
sudo apt-get install unzip
Install
Kubectl CLI:
curl -LO "https://dl.k8s.io/release/
$(
curl -L -s https://dl.k8s.io/release/stable.txt
)
/bin/linux/amd64/kubectl"
chmod +x kubectl
mv kubectl /usr/local/bin/
kubectl version
Install
Helm CLI:
Download the release from here:
https://get.helm.sh/helm-v3.3.4-linux-amd64.tar.gz
Run the following commands:
tar -xvf
helm-v3.3.4-linux-amd64.tar.gz
mv linux-amd64/helm /usr/local/bin/
2.0 Deploying LightBeam Platform in Microsoft Azure Cloud
Creating AKS cluster
i) Login to the Azure portal
and search for “Kubernetes services”.

ii) Click on Kubernetes services. You will see the following page:

iii) Click on Create Kubernetes cluster.
iv) Provide Kubernetes cluster name. Give the same name to a resource group.

Select a VM size. We recommend a node with resource 8vCPU and 32 GB memory per node.

Once the instance type is selected, choose the Manual option for the Scale method.
Set node count to 3 (minimum)

iv) Click on the Review + Create button.

v) Once the validation is passed, click on the Create button which will start the AKS cluster deployment.

vi) Once the deployment is ready, the AKS cluster will be ready for access.

Click on Go To Resource once the deployment is completed.

vii) Click on Connect. This will open up the following window on the right side:

3.0 Access AKS Cluster
Additional Setup to access the AKS cluster from the local machine or VM running in Azure.
4.0 Setup Azure CLI
To set up Azure CLI on your system:
https://docs.microsoft.com/en-us/cli/azure/install-azure-cli
5.0 Authenticate az CLI
To authenticate Azure CLI on your system:
https://docs.microsoft.com/en-us/cli/azure/authenticate-azure-cli
6.0 Run a few commands to validate
az account set --subscription <SUBSCRIPTION_ID>
az aks get-credentials --resource-group <GROUP_NAME> --name <CLUSTER_NAME>
kubectl get nodes
Commands to create AKS cluster using Azure CLI
// Considering you want to use an existing resource group called LightBeam_AKS
az extension add --name aks-preview; az extension update --name aks-preview
az feature register --namespace "Microsoft.ContainerService" --name "EnableAPIServerVnetIntegrationPreview"
az feature show --namespace "Microsoft.ContainerService" --name "EnableAPIServerVnetIntegrationPreview"
az provider register --namespace Microsoft.ContainerService
// Considering the cluster name is LightBeam-AKS-cluster
az aks create -n LightBeam-AKS-cluster -g LightBeam_AKS -l westus2 --enable-apiserver-vnet-integration --disable-private-cluster
az aks nodepool add --resource-group LightBeam_AKS --cluster-name LightBeam-AKS-cluster --name systempool --os-type AzureLinux --node-vm-size standard_d8s_v3 --node-count 1 --mode system
az aks nodepool add --resource-group LightBeam_AKS --cluster-name LightBeam-AKS-cluster --name userpool --os-type AzureLinux --node-vm-size standard_d8s_v3 --node-count 3 --mode user --max-pods 50
// Delete the default systempool created
az aks nodepool delete --resource-group LightBeam_AKS --cluster-name LightBeam-AKS-cluster --name nodepool1
7.0 LightBeam Installation
Follow the installation instructions in the LightBeam Installer guide.
Use the --aks
flag in the installer command to specify the platform used is Azure AKS.
About LightBeam
LightBeam automates Privacy, Security, and AI Governance, so businesses can accelerate their growth in new markets. Leveraging generative AI, LightBeam has rapidly gained customers’ trust by pioneering a unique privacy-centric and automation-first approach to security. Unlike siloed solutions, LightBeam ties together sensitive data cataloging, control, and compliance across structured and unstructured data applications providing 360-visibility, redaction, self-service DSRs, and automated ROPA reporting ensuring ultimate protection against ransomware and accidental exposures while meeting data privacy obligations efficiently. LightBeam is on a mission to create a secure privacy-first world helping customers automate compliance against a patchwork of existing and emerging regulations.
For any questions or suggestions, please get in touch with us at: [email protected].
Last updated