Deploying Prisme.ai on Microsoft Azure leverages managed Azure services for scalability, reliability, and ease of management. This guide walks through setting up Prisme.ai using Azure Kubernetes Service (AKS) and other Azure-native resources.


Azure Prerequisites

Ensure these prerequisites are ready before deploying:

  • An active Azure subscription with sufficient privileges.
  • Azure CLI installed and authenticated.
  • Familiarity with Kubernetes and basic Azure services (AKS, CosmosDB/MongoDB, Redis, Blob storage).

Set up Prisme.ai using the following Azure-managed resources:


Azure Deployment Steps

1

Create Resource Group

Create a dedicated Azure Resource Group:

az group create --name PrismeRG --location westeurope
2

Deploy AKS Cluster

Provision your AKS cluster:

az aks create --name prisme-ai --resource-group PrismeRG --node-count 3 --generate-ssh-keys
3

Provision Managed Databases

Set up Cosmos DB, Azure Search, and Redis via Azure Portal or CLI:

az cosmosdb create --name prisme-ai-db --resource-group PrismeRG --kind MongoDB
az redis create --name prisme-ai-cache --resource-group PrismeRG --sku Premium --vm-size P1
4

Configure DNS & Networking

  • Configure Azure DNS for your domains:
    • api.yourdomain.com
    • studio.yourdomain.com
    • *.pages.yourdomain.com
  • Use Azure Application Gateway as ingress if desired.
5

Deploy Prisme.ai via Helm

Deploy Prisme.ai using Helm in AKS:

helm repo add prismeai https://helm.prisme.ai/charts
helm install prisme-core prismeai/prismeai-core --namespace prisme -f values.yaml
6

Set up Ingress and SSL

Set up Azure Application Gateway with AKS Ingress Controller:

kubectl apply -f ingress.yaml

Use Azure Key Vault to manage SSL certificates.


Security Best Practices

Azure AD Integration

  • Secure your AKS cluster using Azure Active Directory integration.
  • Implement RBAC for access management.

Private Networking

  • Deploy AKS within a private Virtual Network (VNet).
  • Utilize Azure Firewall or Network Security Groups (NSGs) for controlled access.

Secrets Management

  • Store sensitive configurations in Azure Key Vault.
  • Regularly rotate keys and passwords.

Monitoring & Alerts

  • Utilize Azure Monitor and Azure Log Analytics.
  • Set alerts for resource anomalies.

Next Steps