The Charmed OpenSearch Operator deploys and operates the OpenSearch software on VMs and machine clusters.
This operator provides an OpenSearch cluster, with:
- TLS (for the HTTP and Transport layers)
- Automated node discovery
The Operator in this repository is a Python script which wraps OpenSearch installed by the OpenSearch Snap, providing lifecycle management and handling events (install, start, etc).
Bootstrap a lxd controller to juju and create a model:
juju add-model opensearchConfigure the system settings required by OpenSearch,
we'll do that by creating and setting a cloudinit-userdata.yaml file on the model.
cat <<EOF > cloudinit-userdata.yaml
cloudinit-userdata: |
postruncmd:
- [ 'sysctl', '-w', 'vm.max_map_count=262144' ]
- [ 'sysctl', '-w', 'vm.swappiness=0' ]
- [ 'sysctl', '-w', 'net.ipv4.tcp_retries2=5' ]
- [ 'sysctl', '-w', 'fs.file-max=1048576' ]
EOF
juju model-config ./cloudinit-userdata.yaml
or in a single machine:
sudo sysctl -w vm.max_map_count=262144 vm.swappiness=0 net.ipv4.tcp_retries2=5
To deploy a single unit of OpenSearch using its default configuration.
juju deploy opensearch --channel edgeSupported relations:
To connect to the Charmed OpenSearch Operator and exchange data, relate to the opensearch-client endpoint:
juju deploy data-integrator --channel=edge # TODO this has not yet been released
juju relate opensearch data-integratorThe Charmed OpenSearch Operator also supports TLS encryption on the HTTP and Transport layers. TLS is enabled by default:
# Deploy the TLS Certificates Operator.
juju deploy tls-certificates-operator --channel=edge
# Add the necessary configurations for TLS.
juju config tls-certificates-operator generate-self-signed-certificates="true" ca-common-name="Test CA"
# Enable TLS via relation.
juju relate opensearch tls-certificates-operator
# Disable TLS by removing relation.
juju remove-relation opensearch tls-certificates-operatorNote: The TLS settings shown here are for self-signed-certificates, which are not recommended for production clusters. The TLS Certificates Operator offers a variety of configurations. Read more on the TLS Certificates Operator here.
Security issues in the Charmed OpenSearch Operator can be reported through LaunchPad. Please do not file GitHub issues about security issues.
Please see the Juju SDK docs for guidelines on enhancements to this charm following best practice guidelines, and CONTRIBUTING.md for developer guidance.
The Charmed OpenSearch Operator is free software, distributed under the Apache Software License, version 2.0. See LICENSE for more information.