there are currently two possibilities for installing opensearch:
use the normal aka “full” distribution with all standard plugins in it
use the “min” distribution which does not come with any plugins and install the plugins you want
and the second part of the second option is where things start to become difficult:
depending on the security setup your opensearch installation cannot access the open internet, instead you need to have a local mirror of things. so you can’t just run bin/opensearch-plugin install security. instead, you need to put the ZIP file of the plugin elsewhere and then reference that in the installation.
but: there’s no download link for the ZIP file to be found anywhere:
it’s not in the README of the project
it’s not listed on the downloads page (no the precise: plugins aren’t mentioned here at all)
it’s not listed on the artifacts directory page (linked to from the downloads page; again: no plugins are listed here at all)
github releases of plugins do have an artifacts.zip attached, however that contains a SNAPSHOT release of the plugin, i.e. it’s not the same build as the release of the plugin used elsewhere, see e.g. Release Release 1.2.3.0 · opensearch-project/security · GitHub
suggestions:
put the download link on most - if not all - of the places mentioned above
ensure that the final release ZIP is also attached to the github release for completeness sake
EDIT: as a good first start i’d already be happy if somebody could give me the download URL for the latest security plugin or the general URL pattern for all plugins so that i can piece it together myself. thanks!
Inside artifacts.zip is opensearch-security-1.2.3.0-SNAPSHOT.zip
I’m under the impression that opensearch-security-1.2.3.0-SNAPSHOT.zip is uncompressed into default path /usr/share/opensearch/plugins/opensearch-security, and that is the installation process.
(I’m just reviewing this myself as a community member, but it appears to be that simple. It seems to line up that way, comparing it to my running installation.)
thanks. as mentioned in my post: this is a SNAPSHOT release and thus does not correspond to the “real” release (it also is a SNAPSHOT release inside of the plugin-descriptor.properties file). this means that this is some snapshot of the plugin but you have no clue what it exactly contains, it is obviously not the artifact which went through all the tests.
i’d like to have the download URL for the plugin versions which are also used in the “full” distribution or when you run opensearch-plugin install [..] (i guess i could start digging in the code for plugin handling to see where it’s getting the plugins from? but that shouldn’t be the idea either, should it now)
@bbarani Let’s get an issue open for this in opensearch-build. All the plugins should be manageable through the same opensearch-plugin tool, and there are definitely some good requirements here for making zip URLs discoverable.
As pointed by @ mhoydis You can download the plugin zips directly using the URL in the manifest file present inside the OpenSearch distribution artifact. We are working on adding support to install these plugins via ./opensearch-plugin command as well. We will keep you updated on the progress and you can track the status here
In the meantime you can still use the ./opensearch-plugin command to install the plugins by passing the URL of the plugin zips present in the distribution manifest file
you’re in a windows powershell and not a (linux) bash, so using ./ won’t work. i think you can just directly write opensearch-plugin. but somebody familiar with PS might have to chime in here (and in that case the discussion should probably move to its own dedicated thread as it’s unrelated to the download links, it’s just about how to call the binary from powershell).
