Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[OpenSearch] Extend/new OpenSearch Kubernetes operator for maintenance tasks #426

Open
6 tasks
Kuckkuck opened this issue Sep 27, 2024 · 0 comments
Open
6 tasks
Labels
logs Opensearch, Logshipper, Data Prepper, and more observability opensearch

Comments

@Kuckkuck
Copy link
Contributor

At the moment we need additional steps in the pipeline and/or in the helm-chart to configure an OpenSearch database, maybe we can put this additional steps somehow into an operator. The following steps need to be implemented:

  • create users in vault or any other password tool
  • naming schema for index names and usernames to make the configuration for the log shippers simple.
  • creation of roles, roles_mapping and internal_users. The password of the internal user needs to be hashed by an internal OpenSearch tool provided by any OpenSearch image, scripted called hash.sh
  • Upload of all security configuration, after the database was created to make the database usable. This upload procedure also needs an internal OpenSearch script, called admin.sh. This script uses the admin.cert + admin.key to upload all configured security configs to the cluster. It is also used for updates to roles, internal_users, mappings etc...
  • Upload of index/datastream templates for index settings like sharding, backup shards, mappings etc.
  • Upload of ISM templates, index lifecycle management templates for handling rentention, archiving etc
@Kuckkuck Kuckkuck added logs Opensearch, Logshipper, Data Prepper, and more observability opensearch labels Sep 27, 2024
@richardtief richardtief moved this from No status to Backlog in Observability Roadmap Oct 16, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
logs Opensearch, Logshipper, Data Prepper, and more observability opensearch
Projects
Status: Backlog
Development

No branches or pull requests

1 participant