Using helm, as per the docs instructions.
My hot-values.yml is:
clusterName: “opensearch-cluster”
nodeGroup: “hot”
masterService: “opensearch-cluster-hot”
replicas: 3
roles:
cluster_manager
ingest
data
opensearchJavaOpts: "-Xmx2048M -Xms2048M "
resources:
requests:
cpu: “1000m”
memory: “3Gi”
limits:
cpu: “1000m”
memory: “3Gi”
persistence:
enabled: true
size: “300Gi”
storageClass: “local-path”
config:
opensearch.yml: |
cluster.name: opensearch-cluster
network.host: 0.0.0.0
node.attr.temp: hot
s3.client.default.path_style_access: true
s3.client.default.protocol: https
discovery.seed_hosts:
“opensearch-cluster-hot-0.opensearch.svc.cluster.local:9300”
“opensearch-cluster-hot-1.opensearch.svc.cluster.local:9300”
“opensearch-cluster-hot-2.opensearch.svc.cluster.local:9300”
cluster.initial_cluster_manager_nodes:
“opensearch-cluster-hot-0”
“opensearch-cluster-hot-1”
“opensearch-cluster-hot-2”
plugins.security.ssl.transport.enabled: true
plugins.security.ssl.transport.pemcert_filepath: /usr/share/opensearch/config/certs/tls.crt
plugins.security.ssl.transport.pemkey_filepath: /usr/share/opensearch/config/certs/tls.key
plugins.security.ssl.transport.pemtrustedcas_filepath: /usr/share/opensearch/config/certs/ca.crt
plugins.security.ssl.transport.enforce_hostname_verification: false
plugins.security.ssl.http.enabled: true
plugins.security.ssl.http.pemcert_filepath: /usr/share/opensearch/config/certs/tls.crt
plugins.security.ssl.http.pemkey_filepath: /usr/share/opensearch/config/certs/tls.key
plugins.security.ssl.http.pemtrustedcas_filepath: /usr/share/opensearch/config/certs/ca.crt
plugins.security.allow_default_init_securityindex: true
plugins.security.nodes_dn:
“CN=cluster-hot-0,OU=Node,O=OpenSearch-System,L=City,ST=State,C=IN”
tls:
enabled: true
generateNodeCerts: false
usePemCerts: true
pemCerts:
secret:
name: opensearch-certs
caFilename: “ca.crt”
certFilename: “tls.crt”
keyFilename: “tls.key”
plugins:
enabled: true
installList:
repository-s3
extraEnvs:
name: OPENSEARCH_INITIAL_ADMIN_PASSWORD
valueFrom:
secretKeyRef:
name: opensearch-secrets
key: OPENSEARCH_INITIAL_ADMIN_PASSWORD
keystore:
secretName: opensearch-s3-secrets
protocol: https
httpPort: 9200
transportPort: 9300
securityConfig:
enabled: true
config:
securityConfigSecret: “”
dataComplete: true
extraVolumes:
name: opensearch-tls
secret:
secretName: opensearch-certs
extraVolumeMounts:
name: opensearch-tls
mountPath: /usr/share/opensearch/config/certs
readOnly: true
Similar is the warm-values.yml with the changes in nodeGroup, replicas, and roles
Please ignore the indentations here.