opensearch-operator/docs/modules/opensearch/examples/getting_started/opensearch.yaml at 751fd62d393d54e53a72bfbca61228512e0faa6d · stackabletech/opensearch-operator · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
---
apiVersion: opensearch.stackable.tech/v1alpha1
kind: OpenSearchCluster
metadata:
  name: simple-opensearch
spec:
  image:
    productVersion: 3.4.0
  clusterConfig:
    security:
      settings:
        config:
          managedBy: API
          content:
            value:
              _meta:
                type: config
                config_version: 2
              config:
                dynamic:
                  authc:
                    basic_internal_auth_domain:
                      description: Authenticate via HTTP Basic against internal users database
                      http_enabled: true
                      transport_enabled: true
                      order: 1
                      http_authenticator:
                        type: basic
                        challenge: true
                      authentication_backend:
                        type: intern
                  authz: {}
        internalUsers:
          managedBy: API
          content:
            valueFrom:
              secretKeyRef:
                name: initial-opensearch-security-config
                key: internal_users.yml
        rolesMapping:
          managedBy: API
          content:
            valueFrom:
              secretKeyRef:
                name: initial-opensearch-security-config
                key: roles_mapping.yml
  nodes:
    roleConfig:
      discoveryServiceListenerClass: external-unstable
    roleGroups:
      default:
        replicas: 3
    configOverrides:
      opensearch.yml:
        plugins.security.restapi.roles_enabled: all_access