@@ -5,39 +5,34 @@ metadata:
55 name : simple-opensearch
66spec :
77 image :
8- custom : opensearchproject/opensearch:3.1.0
98 productVersion : 3.1.0
109 nodes :
1110 roleGroups :
1211 default :
1312 replicas : 3
14- envOverrides :
15- DISABLE_INSTALL_DEMO_CONFIG : " true"
1613 configOverrides :
1714 opensearch.yml :
1815 plugins.security.allow_default_init_securityindex : " true"
1916 plugins.security.restapi.roles_enabled : all_access
2017 plugins.security.ssl.transport.enabled : " true"
21- plugins.security.ssl.transport.pemcert_filepath : /usr/share /opensearch/config/tls/tls.crt
22- plugins.security.ssl.transport.pemkey_filepath : /usr/share /opensearch/config/tls/tls.key
23- plugins.security.ssl.transport.pemtrustedcas_filepath : /usr/share /opensearch/config/tls/ca.crt
18+ plugins.security.ssl.transport.pemcert_filepath : /stackable /opensearch/config/tls/tls.crt
19+ plugins.security.ssl.transport.pemkey_filepath : /stackable /opensearch/config/tls/tls.key
20+ plugins.security.ssl.transport.pemtrustedcas_filepath : /stackable /opensearch/config/tls/ca.crt
2421 plugins.security.ssl.http.enabled : " true"
25- plugins.security.ssl.http.pemcert_filepath : /usr/share /opensearch/config/tls/tls.crt
26- plugins.security.ssl.http.pemkey_filepath : /usr/share /opensearch/config/tls/tls.key
27- plugins.security.ssl.http.pemtrustedcas_filepath : /usr/share /opensearch/config/tls/ca.crt
22+ plugins.security.ssl.http.pemcert_filepath : /stackable /opensearch/config/tls/tls.crt
23+ plugins.security.ssl.http.pemkey_filepath : /stackable /opensearch/config/tls/tls.key
24+ plugins.security.ssl.http.pemtrustedcas_filepath : /stackable /opensearch/config/tls/ca.crt
2825 podOverrides :
2926 spec :
3027 containers :
3128 - name : opensearch
3229 volumeMounts :
3330 - name : security-config
34- mountPath : /usr/share /opensearch/config/opensearch-security
31+ mountPath : /stackable /opensearch/config/opensearch-security
3532 readOnly : true
3633 - name : tls
37- mountPath : /usr/share /opensearch/config/tls
34+ mountPath : /stackable /opensearch/config/tls
3835 readOnly : true
39- securityContext :
40- fsGroup : 1000
4136 volumes :
4237 - name : security-config
4338 secret :
4843 metadata :
4944 annotations :
5045 secrets.stackable.tech/class : tls
51- secrets.stackable.tech/scope : node,pod,service=simple-opensearch,service=simple-opensearch-nodes-default
46+ secrets.stackable.tech/scope : node,pod,service=simple-opensearch,service=simple-opensearch-nodes-default,service=simple-opensearch-nodes-default-headless
5247 spec :
5348 storageClassName : secrets.stackable.tech
5449 accessModes :
0 commit comments