OpenSearch operator MVP

[siegfriedweber]

Requirements

see https://app.nuclino.com/Stackable/Engineering/OpenSearch-0da6fbe9-fc6b-465e-9e75-253b714d2a31

User Stories

First version

• [IN PROGRESS] (@siegfriedweber) Create a basic operator #2
  Mainly code documentation and unit tests are missing.
  ⇒ The delivery is not blocked if this story is not closed.
• Create and use the product image #15
• Replace helm chart set-up with SDP opensearch-operator #13
• Allow the configuration of the service exposition per role group (Listener support) #16
• [IN PROGRESS] (@labrenbe) Add Prometheus support #19
  ⇒ should be added before delivery
• [IN PROGRESS] (@siegfriedweber) test: Add an integration test for LDAP with TLS #21
  (requested by a customer)
  ✅ Integration test passed locally
  ⇒ The delivery is not blocked if this story is not closed.

Targeted date: 2025-08-25

Final MVP

• [IN PROGRESS] (@dervoeti) Do not publish expired CA certificates secret-operator#625
• Ask the customer if the performance analyzer is still required after the Prometheus Exporter Plugin for OpenSearch is available. If yes, add the performance analyzer.
• Let the user choose the role groups for the discovery service
• Initialize the security plugin
• Update changed security config via tools/securityadmin.sh
• Create a basic configuration for the security plugin
• Add TLS support
• Fix admin authentication
  It's currently done via Client TLS Authentication by comparing the CN in the certificate. But the secret-operator hard-codes it to CN=generated certificate for pod. OpenSearch complains that admin and node certificates must not have the same CN. see Use more clever certificate subject secret-operator#617
• Add authentication support
  • HTTP Basic authentication
  • LDAP
  • JSON Web Token (not sure if required)
  • OpenID Connect (not sure if required)
• Allow config overrides also for the plugin configuration files
• Add logging support
• Add OpenSearch to the image https://github.com/stackabletech/operator-templating/blob/main/template/.readme/static/borrowed/stackable_overview.png
• Add OpenSearch to the Configurator
• Add OpenSearch to the Stackable website (https://stackable.tech/)
• Add OpenSearch to the feature tracker (https://features.stackable.tech/)
• Add container resources to https://docs.google.com/spreadsheets/d/1iWX1g4HaY3sFN9846BYd8kXZDU6FQkwSPmILsWMClE0/edit?pli=1&gid=74119742#gid=74119742