Skip to content

Commit 35544c7

Browse files
docs: Update examples (#27)
1 parent 8e22f7e commit 35544c7

File tree

2 files changed

+12
-24
lines changed

2 files changed

+12
-24
lines changed

docs/modules/opensearch/examples/getting_started/opensearch-security-config.yaml

Lines changed: 3 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -14,23 +14,20 @@ stringData:
1414
_meta:
1515
type: allowlist
1616
config_version: 2
17-
1817
config:
1918
enabled: false
2019
audit.yml: |
2120
---
2221
_meta:
2322
type: audit
2423
config_version: 2
25-
2624
config:
2725
enabled: false
2826
config.yml: |
2927
---
3028
_meta:
3129
type: config
3230
config_version: 2
33-
3431
config:
3532
dynamic:
3633
authc:
@@ -50,14 +47,12 @@ stringData:
5047
_meta:
5148
type: internalusers
5249
config_version: 2
53-
5450
admin:
5551
hash: $2y$10$xRtHZFJ9QhG9GcYhRpAGpufCZYsk//nxsuel5URh0GWEBgmiI4Q/e
5652
reserved: true
5753
backend_roles:
58-
- admin
54+
- admin
5955
description: OpenSearch admin user
60-
6156
kibanaserver:
6257
hash: $2y$10$vPgQ/6ilKDM5utawBqxoR.7euhVQ0qeGl8mPTeKhmFT475WUDrfQS
6358
reserved: true
@@ -77,16 +72,14 @@ stringData:
7772
_meta:
7873
type: rolesmapping
7974
config_version: 2
80-
8175
all_access:
8276
reserved: false
8377
backend_roles:
84-
- admin
85-
78+
- admin
8679
kibana_server:
8780
reserved: true
8881
users:
89-
- kibanaserver
82+
- kibanaserver
9083
tenants.yml: |
9184
---
9285
_meta:

docs/modules/opensearch/examples/getting_started/opensearch.yaml

Lines changed: 9 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -5,39 +5,34 @@ metadata:
55
name: simple-opensearch
66
spec:
77
image:
8-
custom: opensearchproject/opensearch:3.1.0
98
productVersion: 3.1.0
109
nodes:
1110
roleGroups:
1211
default:
1312
replicas: 3
14-
envOverrides:
15-
DISABLE_INSTALL_DEMO_CONFIG: "true"
1613
configOverrides:
1714
opensearch.yml:
1815
plugins.security.allow_default_init_securityindex: "true"
1916
plugins.security.restapi.roles_enabled: all_access
2017
plugins.security.ssl.transport.enabled: "true"
21-
plugins.security.ssl.transport.pemcert_filepath: /usr/share/opensearch/config/tls/tls.crt
22-
plugins.security.ssl.transport.pemkey_filepath: /usr/share/opensearch/config/tls/tls.key
23-
plugins.security.ssl.transport.pemtrustedcas_filepath: /usr/share/opensearch/config/tls/ca.crt
18+
plugins.security.ssl.transport.pemcert_filepath: /stackable/opensearch/config/tls/tls.crt
19+
plugins.security.ssl.transport.pemkey_filepath: /stackable/opensearch/config/tls/tls.key
20+
plugins.security.ssl.transport.pemtrustedcas_filepath: /stackable/opensearch/config/tls/ca.crt
2421
plugins.security.ssl.http.enabled: "true"
25-
plugins.security.ssl.http.pemcert_filepath: /usr/share/opensearch/config/tls/tls.crt
26-
plugins.security.ssl.http.pemkey_filepath: /usr/share/opensearch/config/tls/tls.key
27-
plugins.security.ssl.http.pemtrustedcas_filepath: /usr/share/opensearch/config/tls/ca.crt
22+
plugins.security.ssl.http.pemcert_filepath: /stackable/opensearch/config/tls/tls.crt
23+
plugins.security.ssl.http.pemkey_filepath: /stackable/opensearch/config/tls/tls.key
24+
plugins.security.ssl.http.pemtrustedcas_filepath: /stackable/opensearch/config/tls/ca.crt
2825
podOverrides:
2926
spec:
3027
containers:
3128
- name: opensearch
3229
volumeMounts:
3330
- name: security-config
34-
mountPath: /usr/share/opensearch/config/opensearch-security
31+
mountPath: /stackable/opensearch/config/opensearch-security
3532
readOnly: true
3633
- name: tls
37-
mountPath: /usr/share/opensearch/config/tls
34+
mountPath: /stackable/opensearch/config/tls
3835
readOnly: true
39-
securityContext:
40-
fsGroup: 1000
4136
volumes:
4237
- name: security-config
4338
secret:
@@ -48,7 +43,7 @@ spec:
4843
metadata:
4944
annotations:
5045
secrets.stackable.tech/class: tls
51-
secrets.stackable.tech/scope: node,pod,service=simple-opensearch,service=simple-opensearch-nodes-default
46+
secrets.stackable.tech/scope: node,pod,service=simple-opensearch,service=simple-opensearch-nodes-default,service=simple-opensearch-nodes-default-headless
5247
spec:
5348
storageClassName: secrets.stackable.tech
5449
accessModes:

0 commit comments

Comments
 (0)