Install

Helmfile/Helm

Add the following in your helmfile.yaml.gotmpl or use helm directly with the same parameters, use the up-to-date sample from the release.

OpenSearch

  - name: opensearch-inits3
    namespace: kosmos-s3
    labels:
      app: opensearch
      component: storage
      resources: init-datastore
      inits3: true
    needs:
      #- kosmos-s3/s3-cluster
    chart: athea/inits3
    version: 1.1.9
    values:
      - appBucketName: eds-backups
      - appBucketUserPrefix: eds-backups

  - name: opensearch-init
    namespace: kosmos-search
    labels:
      app: opensearch
      component: storage
      resources: opensearch
    needs:
      #- kosmos-system-restricted/cert-manager-init
    #chart: athea/opensearch-init
    chart: ../../opensearch/opensearch-init/
    version: 1.2.2
    values:
      - keycloak:
          domain: "{{ .StateValues.domain }}"
      - s3:
          accessKey: "ref+k8s://v1/Secret/kosmos-s3/opensearch-inits3-secret/app_bucket_user"
          secretKey: "ref+k8s://v1/Secret/kosmos-s3/opensearch-inits3-secret/app_bucket_password"

  - name: opensearch-cluster-manager
    namespace: kosmos-search
    labels:
      app: opensearch
      component: storage
      resources: opensearch
    needs:
      #- kosmos-system/topolvm
      - kosmos-search/opensearch-init
    chart: ../../opensearch/opensearch/
    version: 2.26.0-3
    values:
      - ../../opensearch/values/values-manager.yaml
      - ../../opensearch/values/values-manager-minimal.yaml
    deleteWait: true

  - name: opensearch-cluster-data
    namespace: kosmos-search
    labels:
      app: opensearch
      component: storage
      resources: opensearch
    needs:
      #- kosmos-system/topolvm
      - kosmos-search/opensearch-init
      - kosmos-search/opensearch-cluster-manager
      #- kosmos-monitoring/monitoring-stack
    chart: ../../opensearch/opensearch/
    version: 2.26.0-3
    values:
      - ../../opensearch/values/values-data.yaml
      - ../../opensearch/values/values-data-minimal.yaml
    deleteWait: true

  - name: opensearch-dashboards
    namespace: kosmos-search
    labels:
      app: opensearch
      component: storage
      resources: opensearch
    needs:
      - kosmos-search/opensearch-cluster-manager
      - kosmos-search/opensearch-cluster-data
      #- kosmos-iam/keycloak-cluster
      #- kosmos-iam/keycloakimporter-init-realm
      #- kosmos-system-restricted/cert-manager-init
    chart: ../../opensearch/opensearch-dashboards
    version: 2.24.0-athea-2
    values:
      - ../../opensearch/values/values-dashboards.yaml
      - opensearchHosts: http://osguard.kosmos-abac.svc.cluster.local:9644
      - hostname: opensearch
        domain: "{{ .StateValues.domain }}"
        ingress:
          annotations:
            cert-manager.io/cluster-issuer: kosmos-ca-issuer
    deleteWait: true

  - name: keycloakimporter-opensearch
    namespace: kosmos-search
    labels:
      app: opensearch
      component: storage
      resources: keycloakimporter
      keycloakimporter: true
    needs:
      #- kosmos-iam/keycloakimporter-init-realm
      #- kosmos-system-restricted/keycloakimporter-portal
      - kosmos-search/opensearch-dashboards
    chart: ../../keycloakimporter/keycloakimporter/
    version: 1.2.3
    values:
      - image.registry: kosmos-registry.kosmos.athea
      - ../../opensearch/values/oidc-kosmos.yaml.gotmpl