aiven.OpenSearch
Explore with Pulumi AI
The OpenSearch resource allows the creation and management of Aiven OpenSearch services.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as aiven from "@pulumi/aiven";
const os1 = new aiven.OpenSearch("os1", {
project: pr1.project,
cloudName: "google-europe-west1",
plan: "startup-4",
serviceName: "my-os1",
maintenanceWindowDow: "monday",
maintenanceWindowTime: "10:00:00",
opensearchUserConfig: {
opensearchVersion: "1",
opensearchDashboards: {
enabled: true,
opensearchRequestTimeout: 30000,
},
publicAccess: {
opensearch: true,
opensearchDashboards: true,
},
},
});
import pulumi
import pulumi_aiven as aiven
os1 = aiven.OpenSearch("os1",
project=pr1["project"],
cloud_name="google-europe-west1",
plan="startup-4",
service_name="my-os1",
maintenance_window_dow="monday",
maintenance_window_time="10:00:00",
opensearch_user_config=aiven.OpenSearchOpensearchUserConfigArgs(
opensearch_version="1",
opensearch_dashboards=aiven.OpenSearchOpensearchUserConfigOpensearchDashboardsArgs(
enabled=True,
opensearch_request_timeout=30000,
),
public_access=aiven.OpenSearchOpensearchUserConfigPublicAccessArgs(
opensearch=True,
opensearch_dashboards=True,
),
))
package main
import (
"github.com/pulumi/pulumi-aiven/sdk/v6/go/aiven"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := aiven.NewOpenSearch(ctx, "os1", &aiven.OpenSearchArgs{
Project: pulumi.Any(pr1.Project),
CloudName: pulumi.String("google-europe-west1"),
Plan: pulumi.String("startup-4"),
ServiceName: pulumi.String("my-os1"),
MaintenanceWindowDow: pulumi.String("monday"),
MaintenanceWindowTime: pulumi.String("10:00:00"),
OpensearchUserConfig: &aiven.OpenSearchOpensearchUserConfigArgs{
OpensearchVersion: pulumi.String("1"),
OpensearchDashboards: &aiven.OpenSearchOpensearchUserConfigOpensearchDashboardsArgs{
Enabled: pulumi.Bool(true),
OpensearchRequestTimeout: pulumi.Int(30000),
},
PublicAccess: &aiven.OpenSearchOpensearchUserConfigPublicAccessArgs{
Opensearch: pulumi.Bool(true),
OpensearchDashboards: pulumi.Bool(true),
},
},
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aiven = Pulumi.Aiven;
return await Deployment.RunAsync(() =>
{
var os1 = new Aiven.OpenSearch("os1", new()
{
Project = pr1.Project,
CloudName = "google-europe-west1",
Plan = "startup-4",
ServiceName = "my-os1",
MaintenanceWindowDow = "monday",
MaintenanceWindowTime = "10:00:00",
OpensearchUserConfig = new Aiven.Inputs.OpenSearchOpensearchUserConfigArgs
{
OpensearchVersion = "1",
OpensearchDashboards = new Aiven.Inputs.OpenSearchOpensearchUserConfigOpensearchDashboardsArgs
{
Enabled = true,
OpensearchRequestTimeout = 30000,
},
PublicAccess = new Aiven.Inputs.OpenSearchOpensearchUserConfigPublicAccessArgs
{
Opensearch = true,
OpensearchDashboards = true,
},
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aiven.OpenSearch;
import com.pulumi.aiven.OpenSearchArgs;
import com.pulumi.aiven.inputs.OpenSearchOpensearchUserConfigArgs;
import com.pulumi.aiven.inputs.OpenSearchOpensearchUserConfigOpensearchDashboardsArgs;
import com.pulumi.aiven.inputs.OpenSearchOpensearchUserConfigPublicAccessArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var os1 = new OpenSearch("os1", OpenSearchArgs.builder()
.project(pr1.project())
.cloudName("google-europe-west1")
.plan("startup-4")
.serviceName("my-os1")
.maintenanceWindowDow("monday")
.maintenanceWindowTime("10:00:00")
.opensearchUserConfig(OpenSearchOpensearchUserConfigArgs.builder()
.opensearchVersion(1)
.opensearchDashboards(OpenSearchOpensearchUserConfigOpensearchDashboardsArgs.builder()
.enabled(true)
.opensearchRequestTimeout(30000)
.build())
.publicAccess(OpenSearchOpensearchUserConfigPublicAccessArgs.builder()
.opensearch(true)
.opensearchDashboards(true)
.build())
.build())
.build());
}
}
resources:
os1:
type: aiven:OpenSearch
properties:
project: ${pr1.project}
cloudName: google-europe-west1
plan: startup-4
serviceName: my-os1
maintenanceWindowDow: monday
maintenanceWindowTime: 10:00:00
opensearchUserConfig:
opensearchVersion: 1
opensearchDashboards:
enabled: true
opensearchRequestTimeout: 30000
publicAccess:
opensearch: true
opensearchDashboards: true
Create OpenSearch Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new OpenSearch(name: string, args: OpenSearchArgs, opts?: CustomResourceOptions);
@overload
def OpenSearch(resource_name: str,
args: OpenSearchArgs,
opts: Optional[ResourceOptions] = None)
@overload
def OpenSearch(resource_name: str,
opts: Optional[ResourceOptions] = None,
plan: Optional[str] = None,
service_name: Optional[str] = None,
project: Optional[str] = None,
maintenance_window_time: Optional[str] = None,
additional_disk_space: Optional[str] = None,
opensearch_user_config: Optional[OpenSearchOpensearchUserConfigArgs] = None,
opensearches: Optional[Sequence[OpenSearchOpensearchArgs]] = None,
maintenance_window_dow: Optional[str] = None,
disk_space: Optional[str] = None,
project_vpc_id: Optional[str] = None,
service_integrations: Optional[Sequence[OpenSearchServiceIntegrationArgs]] = None,
cloud_name: Optional[str] = None,
static_ips: Optional[Sequence[str]] = None,
tags: Optional[Sequence[OpenSearchTagArgs]] = None,
tech_emails: Optional[Sequence[OpenSearchTechEmailArgs]] = None,
termination_protection: Optional[bool] = None)
func NewOpenSearch(ctx *Context, name string, args OpenSearchArgs, opts ...ResourceOption) (*OpenSearch, error)
public OpenSearch(string name, OpenSearchArgs args, CustomResourceOptions? opts = null)
public OpenSearch(String name, OpenSearchArgs args)
public OpenSearch(String name, OpenSearchArgs args, CustomResourceOptions options)
type: aiven:OpenSearch
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args OpenSearchArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args OpenSearchArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args OpenSearchArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args OpenSearchArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args OpenSearchArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var openSearchResource = new Aiven.OpenSearch("openSearchResource", new()
{
Plan = "string",
ServiceName = "string",
Project = "string",
MaintenanceWindowTime = "string",
AdditionalDiskSpace = "string",
OpensearchUserConfig = new Aiven.Inputs.OpenSearchOpensearchUserConfigArgs
{
AdditionalBackupRegions = "string",
CustomDomain = "string",
DisableReplicationFactorAdjustment = false,
IndexPatterns = new[]
{
new Aiven.Inputs.OpenSearchOpensearchUserConfigIndexPatternArgs
{
MaxIndexCount = 0,
Pattern = "string",
SortingAlgorithm = "string",
},
},
IndexTemplate = new Aiven.Inputs.OpenSearchOpensearchUserConfigIndexTemplateArgs
{
MappingNestedObjectsLimit = 0,
NumberOfReplicas = 0,
NumberOfShards = 0,
},
IpFilterObjects = new[]
{
new Aiven.Inputs.OpenSearchOpensearchUserConfigIpFilterObjectArgs
{
Network = "string",
Description = "string",
},
},
IpFilterStrings = new[]
{
"string",
},
KeepIndexRefreshInterval = false,
MaxIndexCount = 0,
Openid = new Aiven.Inputs.OpenSearchOpensearchUserConfigOpenidArgs
{
ClientId = "string",
ClientSecret = "string",
ConnectUrl = "string",
Enabled = false,
Header = "string",
JwtHeader = "string",
JwtUrlParameter = "string",
RefreshRateLimitCount = 0,
RefreshRateLimitTimeWindowMs = 0,
RolesKey = "string",
Scope = "string",
SubjectKey = "string",
},
Opensearch = new Aiven.Inputs.OpenSearchOpensearchUserConfigOpensearchArgs
{
ActionAutoCreateIndexEnabled = false,
ActionDestructiveRequiresName = false,
AuthFailureListeners = new Aiven.Inputs.OpenSearchOpensearchUserConfigOpensearchAuthFailureListenersArgs
{
InternalAuthenticationBackendLimiting = new Aiven.Inputs.OpenSearchOpensearchUserConfigOpensearchAuthFailureListenersInternalAuthenticationBackendLimitingArgs
{
AllowedTries = 0,
AuthenticationBackend = "string",
BlockExpirySeconds = 0,
MaxBlockedClients = 0,
MaxTrackedClients = 0,
TimeWindowSeconds = 0,
Type = "string",
},
IpRateLimiting = new Aiven.Inputs.OpenSearchOpensearchUserConfigOpensearchAuthFailureListenersIpRateLimitingArgs
{
AllowedTries = 0,
BlockExpirySeconds = 0,
MaxBlockedClients = 0,
MaxTrackedClients = 0,
TimeWindowSeconds = 0,
Type = "string",
},
},
ClusterMaxShardsPerNode = 0,
ClusterRoutingAllocationNodeConcurrentRecoveries = 0,
EmailSenderName = "string",
EmailSenderPassword = "string",
EmailSenderUsername = "string",
EnableSecurityAudit = false,
HttpMaxContentLength = 0,
HttpMaxHeaderSize = 0,
HttpMaxInitialLineLength = 0,
IndicesFielddataCacheSize = 0,
IndicesMemoryIndexBufferSize = 0,
IndicesMemoryMaxIndexBufferSize = 0,
IndicesMemoryMinIndexBufferSize = 0,
IndicesQueriesCacheSize = 0,
IndicesQueryBoolMaxClauseCount = 0,
IndicesRecoveryMaxBytesPerSec = 0,
IndicesRecoveryMaxConcurrentFileChunks = 0,
IsmEnabled = false,
IsmHistoryEnabled = false,
IsmHistoryMaxAge = 0,
IsmHistoryMaxDocs = 0,
IsmHistoryRolloverCheckPeriod = 0,
IsmHistoryRolloverRetentionPeriod = 0,
OverrideMainResponseVersion = false,
PluginsAlertingFilterByBackendRoles = false,
ReindexRemoteWhitelists = new[]
{
"string",
},
ScriptMaxCompilationsRate = "string",
SearchMaxBuckets = 0,
ThreadPoolAnalyzeQueueSize = 0,
ThreadPoolAnalyzeSize = 0,
ThreadPoolForceMergeSize = 0,
ThreadPoolGetQueueSize = 0,
ThreadPoolGetSize = 0,
ThreadPoolSearchQueueSize = 0,
ThreadPoolSearchSize = 0,
ThreadPoolSearchThrottledQueueSize = 0,
ThreadPoolSearchThrottledSize = 0,
ThreadPoolWriteQueueSize = 0,
ThreadPoolWriteSize = 0,
},
OpensearchDashboards = new Aiven.Inputs.OpenSearchOpensearchUserConfigOpensearchDashboardsArgs
{
Enabled = false,
MaxOldSpaceSize = 0,
OpensearchRequestTimeout = 0,
},
OpensearchVersion = "string",
PrivateAccess = new Aiven.Inputs.OpenSearchOpensearchUserConfigPrivateAccessArgs
{
Opensearch = false,
OpensearchDashboards = false,
Prometheus = false,
},
PrivatelinkAccess = new Aiven.Inputs.OpenSearchOpensearchUserConfigPrivatelinkAccessArgs
{
Opensearch = false,
OpensearchDashboards = false,
Prometheus = false,
},
ProjectToForkFrom = "string",
PublicAccess = new Aiven.Inputs.OpenSearchOpensearchUserConfigPublicAccessArgs
{
Opensearch = false,
OpensearchDashboards = false,
Prometheus = false,
},
RecoveryBasebackupName = "string",
Saml = new Aiven.Inputs.OpenSearchOpensearchUserConfigSamlArgs
{
Enabled = false,
IdpEntityId = "string",
IdpMetadataUrl = "string",
SpEntityId = "string",
IdpPemtrustedcasContent = "string",
RolesKey = "string",
SubjectKey = "string",
},
ServiceLog = false,
ServiceToForkFrom = "string",
StaticIps = false,
},
Opensearches = new[]
{
new Aiven.Inputs.OpenSearchOpensearchArgs
{
KibanaUri = "string",
OpensearchDashboardsUri = "string",
Password = "string",
Uris = new[]
{
"string",
},
Username = "string",
},
},
MaintenanceWindowDow = "string",
ProjectVpcId = "string",
ServiceIntegrations = new[]
{
new Aiven.Inputs.OpenSearchServiceIntegrationArgs
{
IntegrationType = "string",
SourceServiceName = "string",
},
},
CloudName = "string",
StaticIps = new[]
{
"string",
},
Tags = new[]
{
new Aiven.Inputs.OpenSearchTagArgs
{
Key = "string",
Value = "string",
},
},
TechEmails = new[]
{
new Aiven.Inputs.OpenSearchTechEmailArgs
{
Email = "string",
},
},
TerminationProtection = false,
});
example, err := aiven.NewOpenSearch(ctx, "openSearchResource", &aiven.OpenSearchArgs{
Plan: pulumi.String("string"),
ServiceName: pulumi.String("string"),
Project: pulumi.String("string"),
MaintenanceWindowTime: pulumi.String("string"),
AdditionalDiskSpace: pulumi.String("string"),
OpensearchUserConfig: &aiven.OpenSearchOpensearchUserConfigArgs{
AdditionalBackupRegions: pulumi.String("string"),
CustomDomain: pulumi.String("string"),
DisableReplicationFactorAdjustment: pulumi.Bool(false),
IndexPatterns: aiven.OpenSearchOpensearchUserConfigIndexPatternArray{
&aiven.OpenSearchOpensearchUserConfigIndexPatternArgs{
MaxIndexCount: pulumi.Int(0),
Pattern: pulumi.String("string"),
SortingAlgorithm: pulumi.String("string"),
},
},
IndexTemplate: &aiven.OpenSearchOpensearchUserConfigIndexTemplateArgs{
MappingNestedObjectsLimit: pulumi.Int(0),
NumberOfReplicas: pulumi.Int(0),
NumberOfShards: pulumi.Int(0),
},
IpFilterObjects: aiven.OpenSearchOpensearchUserConfigIpFilterObjectArray{
&aiven.OpenSearchOpensearchUserConfigIpFilterObjectArgs{
Network: pulumi.String("string"),
Description: pulumi.String("string"),
},
},
IpFilterStrings: pulumi.StringArray{
pulumi.String("string"),
},
KeepIndexRefreshInterval: pulumi.Bool(false),
MaxIndexCount: pulumi.Int(0),
Openid: &aiven.OpenSearchOpensearchUserConfigOpenidArgs{
ClientId: pulumi.String("string"),
ClientSecret: pulumi.String("string"),
ConnectUrl: pulumi.String("string"),
Enabled: pulumi.Bool(false),
Header: pulumi.String("string"),
JwtHeader: pulumi.String("string"),
JwtUrlParameter: pulumi.String("string"),
RefreshRateLimitCount: pulumi.Int(0),
RefreshRateLimitTimeWindowMs: pulumi.Int(0),
RolesKey: pulumi.String("string"),
Scope: pulumi.String("string"),
SubjectKey: pulumi.String("string"),
},
Opensearch: &aiven.OpenSearchOpensearchUserConfigOpensearchArgs{
ActionAutoCreateIndexEnabled: pulumi.Bool(false),
ActionDestructiveRequiresName: pulumi.Bool(false),
AuthFailureListeners: &aiven.OpenSearchOpensearchUserConfigOpensearchAuthFailureListenersArgs{
InternalAuthenticationBackendLimiting: &aiven.OpenSearchOpensearchUserConfigOpensearchAuthFailureListenersInternalAuthenticationBackendLimitingArgs{
AllowedTries: pulumi.Int(0),
AuthenticationBackend: pulumi.String("string"),
BlockExpirySeconds: pulumi.Int(0),
MaxBlockedClients: pulumi.Int(0),
MaxTrackedClients: pulumi.Int(0),
TimeWindowSeconds: pulumi.Int(0),
Type: pulumi.String("string"),
},
IpRateLimiting: &aiven.OpenSearchOpensearchUserConfigOpensearchAuthFailureListenersIpRateLimitingArgs{
AllowedTries: pulumi.Int(0),
BlockExpirySeconds: pulumi.Int(0),
MaxBlockedClients: pulumi.Int(0),
MaxTrackedClients: pulumi.Int(0),
TimeWindowSeconds: pulumi.Int(0),
Type: pulumi.String("string"),
},
},
ClusterMaxShardsPerNode: pulumi.Int(0),
ClusterRoutingAllocationNodeConcurrentRecoveries: pulumi.Int(0),
EmailSenderName: pulumi.String("string"),
EmailSenderPassword: pulumi.String("string"),
EmailSenderUsername: pulumi.String("string"),
EnableSecurityAudit: pulumi.Bool(false),
HttpMaxContentLength: pulumi.Int(0),
HttpMaxHeaderSize: pulumi.Int(0),
HttpMaxInitialLineLength: pulumi.Int(0),
IndicesFielddataCacheSize: pulumi.Int(0),
IndicesMemoryIndexBufferSize: pulumi.Int(0),
IndicesMemoryMaxIndexBufferSize: pulumi.Int(0),
IndicesMemoryMinIndexBufferSize: pulumi.Int(0),
IndicesQueriesCacheSize: pulumi.Int(0),
IndicesQueryBoolMaxClauseCount: pulumi.Int(0),
IndicesRecoveryMaxBytesPerSec: pulumi.Int(0),
IndicesRecoveryMaxConcurrentFileChunks: pulumi.Int(0),
IsmEnabled: pulumi.Bool(false),
IsmHistoryEnabled: pulumi.Bool(false),
IsmHistoryMaxAge: pulumi.Int(0),
IsmHistoryMaxDocs: pulumi.Int(0),
IsmHistoryRolloverCheckPeriod: pulumi.Int(0),
IsmHistoryRolloverRetentionPeriod: pulumi.Int(0),
OverrideMainResponseVersion: pulumi.Bool(false),
PluginsAlertingFilterByBackendRoles: pulumi.Bool(false),
ReindexRemoteWhitelists: pulumi.StringArray{
pulumi.String("string"),
},
ScriptMaxCompilationsRate: pulumi.String("string"),
SearchMaxBuckets: pulumi.Int(0),
ThreadPoolAnalyzeQueueSize: pulumi.Int(0),
ThreadPoolAnalyzeSize: pulumi.Int(0),
ThreadPoolForceMergeSize: pulumi.Int(0),
ThreadPoolGetQueueSize: pulumi.Int(0),
ThreadPoolGetSize: pulumi.Int(0),
ThreadPoolSearchQueueSize: pulumi.Int(0),
ThreadPoolSearchSize: pulumi.Int(0),
ThreadPoolSearchThrottledQueueSize: pulumi.Int(0),
ThreadPoolSearchThrottledSize: pulumi.Int(0),
ThreadPoolWriteQueueSize: pulumi.Int(0),
ThreadPoolWriteSize: pulumi.Int(0),
},
OpensearchDashboards: &aiven.OpenSearchOpensearchUserConfigOpensearchDashboardsArgs{
Enabled: pulumi.Bool(false),
MaxOldSpaceSize: pulumi.Int(0),
OpensearchRequestTimeout: pulumi.Int(0),
},
OpensearchVersion: pulumi.String("string"),
PrivateAccess: &aiven.OpenSearchOpensearchUserConfigPrivateAccessArgs{
Opensearch: pulumi.Bool(false),
OpensearchDashboards: pulumi.Bool(false),
Prometheus: pulumi.Bool(false),
},
PrivatelinkAccess: &aiven.OpenSearchOpensearchUserConfigPrivatelinkAccessArgs{
Opensearch: pulumi.Bool(false),
OpensearchDashboards: pulumi.Bool(false),
Prometheus: pulumi.Bool(false),
},
ProjectToForkFrom: pulumi.String("string"),
PublicAccess: &aiven.OpenSearchOpensearchUserConfigPublicAccessArgs{
Opensearch: pulumi.Bool(false),
OpensearchDashboards: pulumi.Bool(false),
Prometheus: pulumi.Bool(false),
},
RecoveryBasebackupName: pulumi.String("string"),
Saml: &aiven.OpenSearchOpensearchUserConfigSamlArgs{
Enabled: pulumi.Bool(false),
IdpEntityId: pulumi.String("string"),
IdpMetadataUrl: pulumi.String("string"),
SpEntityId: pulumi.String("string"),
IdpPemtrustedcasContent: pulumi.String("string"),
RolesKey: pulumi.String("string"),
SubjectKey: pulumi.String("string"),
},
ServiceLog: pulumi.Bool(false),
ServiceToForkFrom: pulumi.String("string"),
StaticIps: pulumi.Bool(false),
},
Opensearches: aiven.OpenSearchOpensearchArray{
&aiven.OpenSearchOpensearchArgs{
KibanaUri: pulumi.String("string"),
OpensearchDashboardsUri: pulumi.String("string"),
Password: pulumi.String("string"),
Uris: pulumi.StringArray{
pulumi.String("string"),
},
Username: pulumi.String("string"),
},
},
MaintenanceWindowDow: pulumi.String("string"),
ProjectVpcId: pulumi.String("string"),
ServiceIntegrations: aiven.OpenSearchServiceIntegrationArray{
&aiven.OpenSearchServiceIntegrationArgs{
IntegrationType: pulumi.String("string"),
SourceServiceName: pulumi.String("string"),
},
},
CloudName: pulumi.String("string"),
StaticIps: pulumi.StringArray{
pulumi.String("string"),
},
Tags: aiven.OpenSearchTagArray{
&aiven.OpenSearchTagArgs{
Key: pulumi.String("string"),
Value: pulumi.String("string"),
},
},
TechEmails: aiven.OpenSearchTechEmailArray{
&aiven.OpenSearchTechEmailArgs{
Email: pulumi.String("string"),
},
},
TerminationProtection: pulumi.Bool(false),
})
var openSearchResource = new OpenSearch("openSearchResource", OpenSearchArgs.builder()
.plan("string")
.serviceName("string")
.project("string")
.maintenanceWindowTime("string")
.additionalDiskSpace("string")
.opensearchUserConfig(OpenSearchOpensearchUserConfigArgs.builder()
.additionalBackupRegions("string")
.customDomain("string")
.disableReplicationFactorAdjustment(false)
.indexPatterns(OpenSearchOpensearchUserConfigIndexPatternArgs.builder()
.maxIndexCount(0)
.pattern("string")
.sortingAlgorithm("string")
.build())
.indexTemplate(OpenSearchOpensearchUserConfigIndexTemplateArgs.builder()
.mappingNestedObjectsLimit(0)
.numberOfReplicas(0)
.numberOfShards(0)
.build())
.ipFilterObjects(OpenSearchOpensearchUserConfigIpFilterObjectArgs.builder()
.network("string")
.description("string")
.build())
.ipFilterStrings("string")
.keepIndexRefreshInterval(false)
.maxIndexCount(0)
.openid(OpenSearchOpensearchUserConfigOpenidArgs.builder()
.clientId("string")
.clientSecret("string")
.connectUrl("string")
.enabled(false)
.header("string")
.jwtHeader("string")
.jwtUrlParameter("string")
.refreshRateLimitCount(0)
.refreshRateLimitTimeWindowMs(0)
.rolesKey("string")
.scope("string")
.subjectKey("string")
.build())
.opensearch(OpenSearchOpensearchUserConfigOpensearchArgs.builder()
.actionAutoCreateIndexEnabled(false)
.actionDestructiveRequiresName(false)
.authFailureListeners(OpenSearchOpensearchUserConfigOpensearchAuthFailureListenersArgs.builder()
.internalAuthenticationBackendLimiting(OpenSearchOpensearchUserConfigOpensearchAuthFailureListenersInternalAuthenticationBackendLimitingArgs.builder()
.allowedTries(0)
.authenticationBackend("string")
.blockExpirySeconds(0)
.maxBlockedClients(0)
.maxTrackedClients(0)
.timeWindowSeconds(0)
.type("string")
.build())
.ipRateLimiting(OpenSearchOpensearchUserConfigOpensearchAuthFailureListenersIpRateLimitingArgs.builder()
.allowedTries(0)
.blockExpirySeconds(0)
.maxBlockedClients(0)
.maxTrackedClients(0)
.timeWindowSeconds(0)
.type("string")
.build())
.build())
.clusterMaxShardsPerNode(0)
.clusterRoutingAllocationNodeConcurrentRecoveries(0)
.emailSenderName("string")
.emailSenderPassword("string")
.emailSenderUsername("string")
.enableSecurityAudit(false)
.httpMaxContentLength(0)
.httpMaxHeaderSize(0)
.httpMaxInitialLineLength(0)
.indicesFielddataCacheSize(0)
.indicesMemoryIndexBufferSize(0)
.indicesMemoryMaxIndexBufferSize(0)
.indicesMemoryMinIndexBufferSize(0)
.indicesQueriesCacheSize(0)
.indicesQueryBoolMaxClauseCount(0)
.indicesRecoveryMaxBytesPerSec(0)
.indicesRecoveryMaxConcurrentFileChunks(0)
.ismEnabled(false)
.ismHistoryEnabled(false)
.ismHistoryMaxAge(0)
.ismHistoryMaxDocs(0)
.ismHistoryRolloverCheckPeriod(0)
.ismHistoryRolloverRetentionPeriod(0)
.overrideMainResponseVersion(false)
.pluginsAlertingFilterByBackendRoles(false)
.reindexRemoteWhitelists("string")
.scriptMaxCompilationsRate("string")
.searchMaxBuckets(0)
.threadPoolAnalyzeQueueSize(0)
.threadPoolAnalyzeSize(0)
.threadPoolForceMergeSize(0)
.threadPoolGetQueueSize(0)
.threadPoolGetSize(0)
.threadPoolSearchQueueSize(0)
.threadPoolSearchSize(0)
.threadPoolSearchThrottledQueueSize(0)
.threadPoolSearchThrottledSize(0)
.threadPoolWriteQueueSize(0)
.threadPoolWriteSize(0)
.build())
.opensearchDashboards(OpenSearchOpensearchUserConfigOpensearchDashboardsArgs.builder()
.enabled(false)
.maxOldSpaceSize(0)
.opensearchRequestTimeout(0)
.build())
.opensearchVersion("string")
.privateAccess(OpenSearchOpensearchUserConfigPrivateAccessArgs.builder()
.opensearch(false)
.opensearchDashboards(false)
.prometheus(false)
.build())
.privatelinkAccess(OpenSearchOpensearchUserConfigPrivatelinkAccessArgs.builder()
.opensearch(false)
.opensearchDashboards(false)
.prometheus(false)
.build())
.projectToForkFrom("string")
.publicAccess(OpenSearchOpensearchUserConfigPublicAccessArgs.builder()
.opensearch(false)
.opensearchDashboards(false)
.prometheus(false)
.build())
.recoveryBasebackupName("string")
.saml(OpenSearchOpensearchUserConfigSamlArgs.builder()
.enabled(false)
.idpEntityId("string")
.idpMetadataUrl("string")
.spEntityId("string")
.idpPemtrustedcasContent("string")
.rolesKey("string")
.subjectKey("string")
.build())
.serviceLog(false)
.serviceToForkFrom("string")
.staticIps(false)
.build())
.opensearches(OpenSearchOpensearchArgs.builder()
.kibanaUri("string")
.opensearchDashboardsUri("string")
.password("string")
.uris("string")
.username("string")
.build())
.maintenanceWindowDow("string")
.projectVpcId("string")
.serviceIntegrations(OpenSearchServiceIntegrationArgs.builder()
.integrationType("string")
.sourceServiceName("string")
.build())
.cloudName("string")
.staticIps("string")
.tags(OpenSearchTagArgs.builder()
.key("string")
.value("string")
.build())
.techEmails(OpenSearchTechEmailArgs.builder()
.email("string")
.build())
.terminationProtection(false)
.build());
open_search_resource = aiven.OpenSearch("openSearchResource",
plan="string",
service_name="string",
project="string",
maintenance_window_time="string",
additional_disk_space="string",
opensearch_user_config=aiven.OpenSearchOpensearchUserConfigArgs(
additional_backup_regions="string",
custom_domain="string",
disable_replication_factor_adjustment=False,
index_patterns=[aiven.OpenSearchOpensearchUserConfigIndexPatternArgs(
max_index_count=0,
pattern="string",
sorting_algorithm="string",
)],
index_template=aiven.OpenSearchOpensearchUserConfigIndexTemplateArgs(
mapping_nested_objects_limit=0,
number_of_replicas=0,
number_of_shards=0,
),
ip_filter_objects=[aiven.OpenSearchOpensearchUserConfigIpFilterObjectArgs(
network="string",
description="string",
)],
ip_filter_strings=["string"],
keep_index_refresh_interval=False,
max_index_count=0,
openid=aiven.OpenSearchOpensearchUserConfigOpenidArgs(
client_id="string",
client_secret="string",
connect_url="string",
enabled=False,
header="string",
jwt_header="string",
jwt_url_parameter="string",
refresh_rate_limit_count=0,
refresh_rate_limit_time_window_ms=0,
roles_key="string",
scope="string",
subject_key="string",
),
opensearch=aiven.OpenSearchOpensearchUserConfigOpensearchArgs(
action_auto_create_index_enabled=False,
action_destructive_requires_name=False,
auth_failure_listeners=aiven.OpenSearchOpensearchUserConfigOpensearchAuthFailureListenersArgs(
internal_authentication_backend_limiting=aiven.OpenSearchOpensearchUserConfigOpensearchAuthFailureListenersInternalAuthenticationBackendLimitingArgs(
allowed_tries=0,
authentication_backend="string",
block_expiry_seconds=0,
max_blocked_clients=0,
max_tracked_clients=0,
time_window_seconds=0,
type="string",
),
ip_rate_limiting=aiven.OpenSearchOpensearchUserConfigOpensearchAuthFailureListenersIpRateLimitingArgs(
allowed_tries=0,
block_expiry_seconds=0,
max_blocked_clients=0,
max_tracked_clients=0,
time_window_seconds=0,
type="string",
),
),
cluster_max_shards_per_node=0,
cluster_routing_allocation_node_concurrent_recoveries=0,
email_sender_name="string",
email_sender_password="string",
email_sender_username="string",
enable_security_audit=False,
http_max_content_length=0,
http_max_header_size=0,
http_max_initial_line_length=0,
indices_fielddata_cache_size=0,
indices_memory_index_buffer_size=0,
indices_memory_max_index_buffer_size=0,
indices_memory_min_index_buffer_size=0,
indices_queries_cache_size=0,
indices_query_bool_max_clause_count=0,
indices_recovery_max_bytes_per_sec=0,
indices_recovery_max_concurrent_file_chunks=0,
ism_enabled=False,
ism_history_enabled=False,
ism_history_max_age=0,
ism_history_max_docs=0,
ism_history_rollover_check_period=0,
ism_history_rollover_retention_period=0,
override_main_response_version=False,
plugins_alerting_filter_by_backend_roles=False,
reindex_remote_whitelists=["string"],
script_max_compilations_rate="string",
search_max_buckets=0,
thread_pool_analyze_queue_size=0,
thread_pool_analyze_size=0,
thread_pool_force_merge_size=0,
thread_pool_get_queue_size=0,
thread_pool_get_size=0,
thread_pool_search_queue_size=0,
thread_pool_search_size=0,
thread_pool_search_throttled_queue_size=0,
thread_pool_search_throttled_size=0,
thread_pool_write_queue_size=0,
thread_pool_write_size=0,
),
opensearch_dashboards=aiven.OpenSearchOpensearchUserConfigOpensearchDashboardsArgs(
enabled=False,
max_old_space_size=0,
opensearch_request_timeout=0,
),
opensearch_version="string",
private_access=aiven.OpenSearchOpensearchUserConfigPrivateAccessArgs(
opensearch=False,
opensearch_dashboards=False,
prometheus=False,
),
privatelink_access=aiven.OpenSearchOpensearchUserConfigPrivatelinkAccessArgs(
opensearch=False,
opensearch_dashboards=False,
prometheus=False,
),
project_to_fork_from="string",
public_access=aiven.OpenSearchOpensearchUserConfigPublicAccessArgs(
opensearch=False,
opensearch_dashboards=False,
prometheus=False,
),
recovery_basebackup_name="string",
saml=aiven.OpenSearchOpensearchUserConfigSamlArgs(
enabled=False,
idp_entity_id="string",
idp_metadata_url="string",
sp_entity_id="string",
idp_pemtrustedcas_content="string",
roles_key="string",
subject_key="string",
),
service_log=False,
service_to_fork_from="string",
static_ips=False,
),
opensearches=[aiven.OpenSearchOpensearchArgs(
kibana_uri="string",
opensearch_dashboards_uri="string",
password="string",
uris=["string"],
username="string",
)],
maintenance_window_dow="string",
project_vpc_id="string",
service_integrations=[aiven.OpenSearchServiceIntegrationArgs(
integration_type="string",
source_service_name="string",
)],
cloud_name="string",
static_ips=["string"],
tags=[aiven.OpenSearchTagArgs(
key="string",
value="string",
)],
tech_emails=[aiven.OpenSearchTechEmailArgs(
email="string",
)],
termination_protection=False)
const openSearchResource = new aiven.OpenSearch("openSearchResource", {
plan: "string",
serviceName: "string",
project: "string",
maintenanceWindowTime: "string",
additionalDiskSpace: "string",
opensearchUserConfig: {
additionalBackupRegions: "string",
customDomain: "string",
disableReplicationFactorAdjustment: false,
indexPatterns: [{
maxIndexCount: 0,
pattern: "string",
sortingAlgorithm: "string",
}],
indexTemplate: {
mappingNestedObjectsLimit: 0,
numberOfReplicas: 0,
numberOfShards: 0,
},
ipFilterObjects: [{
network: "string",
description: "string",
}],
ipFilterStrings: ["string"],
keepIndexRefreshInterval: false,
maxIndexCount: 0,
openid: {
clientId: "string",
clientSecret: "string",
connectUrl: "string",
enabled: false,
header: "string",
jwtHeader: "string",
jwtUrlParameter: "string",
refreshRateLimitCount: 0,
refreshRateLimitTimeWindowMs: 0,
rolesKey: "string",
scope: "string",
subjectKey: "string",
},
opensearch: {
actionAutoCreateIndexEnabled: false,
actionDestructiveRequiresName: false,
authFailureListeners: {
internalAuthenticationBackendLimiting: {
allowedTries: 0,
authenticationBackend: "string",
blockExpirySeconds: 0,
maxBlockedClients: 0,
maxTrackedClients: 0,
timeWindowSeconds: 0,
type: "string",
},
ipRateLimiting: {
allowedTries: 0,
blockExpirySeconds: 0,
maxBlockedClients: 0,
maxTrackedClients: 0,
timeWindowSeconds: 0,
type: "string",
},
},
clusterMaxShardsPerNode: 0,
clusterRoutingAllocationNodeConcurrentRecoveries: 0,
emailSenderName: "string",
emailSenderPassword: "string",
emailSenderUsername: "string",
enableSecurityAudit: false,
httpMaxContentLength: 0,
httpMaxHeaderSize: 0,
httpMaxInitialLineLength: 0,
indicesFielddataCacheSize: 0,
indicesMemoryIndexBufferSize: 0,
indicesMemoryMaxIndexBufferSize: 0,
indicesMemoryMinIndexBufferSize: 0,
indicesQueriesCacheSize: 0,
indicesQueryBoolMaxClauseCount: 0,
indicesRecoveryMaxBytesPerSec: 0,
indicesRecoveryMaxConcurrentFileChunks: 0,
ismEnabled: false,
ismHistoryEnabled: false,
ismHistoryMaxAge: 0,
ismHistoryMaxDocs: 0,
ismHistoryRolloverCheckPeriod: 0,
ismHistoryRolloverRetentionPeriod: 0,
overrideMainResponseVersion: false,
pluginsAlertingFilterByBackendRoles: false,
reindexRemoteWhitelists: ["string"],
scriptMaxCompilationsRate: "string",
searchMaxBuckets: 0,
threadPoolAnalyzeQueueSize: 0,
threadPoolAnalyzeSize: 0,
threadPoolForceMergeSize: 0,
threadPoolGetQueueSize: 0,
threadPoolGetSize: 0,
threadPoolSearchQueueSize: 0,
threadPoolSearchSize: 0,
threadPoolSearchThrottledQueueSize: 0,
threadPoolSearchThrottledSize: 0,
threadPoolWriteQueueSize: 0,
threadPoolWriteSize: 0,
},
opensearchDashboards: {
enabled: false,
maxOldSpaceSize: 0,
opensearchRequestTimeout: 0,
},
opensearchVersion: "string",
privateAccess: {
opensearch: false,
opensearchDashboards: false,
prometheus: false,
},
privatelinkAccess: {
opensearch: false,
opensearchDashboards: false,
prometheus: false,
},
projectToForkFrom: "string",
publicAccess: {
opensearch: false,
opensearchDashboards: false,
prometheus: false,
},
recoveryBasebackupName: "string",
saml: {
enabled: false,
idpEntityId: "string",
idpMetadataUrl: "string",
spEntityId: "string",
idpPemtrustedcasContent: "string",
rolesKey: "string",
subjectKey: "string",
},
serviceLog: false,
serviceToForkFrom: "string",
staticIps: false,
},
opensearches: [{
kibanaUri: "string",
opensearchDashboardsUri: "string",
password: "string",
uris: ["string"],
username: "string",
}],
maintenanceWindowDow: "string",
projectVpcId: "string",
serviceIntegrations: [{
integrationType: "string",
sourceServiceName: "string",
}],
cloudName: "string",
staticIps: ["string"],
tags: [{
key: "string",
value: "string",
}],
techEmails: [{
email: "string",
}],
terminationProtection: false,
});
type: aiven:OpenSearch
properties:
additionalDiskSpace: string
cloudName: string
maintenanceWindowDow: string
maintenanceWindowTime: string
opensearchUserConfig:
additionalBackupRegions: string
customDomain: string
disableReplicationFactorAdjustment: false
indexPatterns:
- maxIndexCount: 0
pattern: string
sortingAlgorithm: string
indexTemplate:
mappingNestedObjectsLimit: 0
numberOfReplicas: 0
numberOfShards: 0
ipFilterObjects:
- description: string
network: string
ipFilterStrings:
- string
keepIndexRefreshInterval: false
maxIndexCount: 0
openid:
clientId: string
clientSecret: string
connectUrl: string
enabled: false
header: string
jwtHeader: string
jwtUrlParameter: string
refreshRateLimitCount: 0
refreshRateLimitTimeWindowMs: 0
rolesKey: string
scope: string
subjectKey: string
opensearch:
actionAutoCreateIndexEnabled: false
actionDestructiveRequiresName: false
authFailureListeners:
internalAuthenticationBackendLimiting:
allowedTries: 0
authenticationBackend: string
blockExpirySeconds: 0
maxBlockedClients: 0
maxTrackedClients: 0
timeWindowSeconds: 0
type: string
ipRateLimiting:
allowedTries: 0
blockExpirySeconds: 0
maxBlockedClients: 0
maxTrackedClients: 0
timeWindowSeconds: 0
type: string
clusterMaxShardsPerNode: 0
clusterRoutingAllocationNodeConcurrentRecoveries: 0
emailSenderName: string
emailSenderPassword: string
emailSenderUsername: string
enableSecurityAudit: false
httpMaxContentLength: 0
httpMaxHeaderSize: 0
httpMaxInitialLineLength: 0
indicesFielddataCacheSize: 0
indicesMemoryIndexBufferSize: 0
indicesMemoryMaxIndexBufferSize: 0
indicesMemoryMinIndexBufferSize: 0
indicesQueriesCacheSize: 0
indicesQueryBoolMaxClauseCount: 0
indicesRecoveryMaxBytesPerSec: 0
indicesRecoveryMaxConcurrentFileChunks: 0
ismEnabled: false
ismHistoryEnabled: false
ismHistoryMaxAge: 0
ismHistoryMaxDocs: 0
ismHistoryRolloverCheckPeriod: 0
ismHistoryRolloverRetentionPeriod: 0
overrideMainResponseVersion: false
pluginsAlertingFilterByBackendRoles: false
reindexRemoteWhitelists:
- string
scriptMaxCompilationsRate: string
searchMaxBuckets: 0
threadPoolAnalyzeQueueSize: 0
threadPoolAnalyzeSize: 0
threadPoolForceMergeSize: 0
threadPoolGetQueueSize: 0
threadPoolGetSize: 0
threadPoolSearchQueueSize: 0
threadPoolSearchSize: 0
threadPoolSearchThrottledQueueSize: 0
threadPoolSearchThrottledSize: 0
threadPoolWriteQueueSize: 0
threadPoolWriteSize: 0
opensearchDashboards:
enabled: false
maxOldSpaceSize: 0
opensearchRequestTimeout: 0
opensearchVersion: string
privateAccess:
opensearch: false
opensearchDashboards: false
prometheus: false
privatelinkAccess:
opensearch: false
opensearchDashboards: false
prometheus: false
projectToForkFrom: string
publicAccess:
opensearch: false
opensearchDashboards: false
prometheus: false
recoveryBasebackupName: string
saml:
enabled: false
idpEntityId: string
idpMetadataUrl: string
idpPemtrustedcasContent: string
rolesKey: string
spEntityId: string
subjectKey: string
serviceLog: false
serviceToForkFrom: string
staticIps: false
opensearches:
- kibanaUri: string
opensearchDashboardsUri: string
password: string
uris:
- string
username: string
plan: string
project: string
projectVpcId: string
serviceIntegrations:
- integrationType: string
sourceServiceName: string
serviceName: string
staticIps:
- string
tags:
- key: string
value: string
techEmails:
- email: string
terminationProtection: false
OpenSearch Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
The OpenSearch resource accepts the following input properties:
- Plan string
- Defines what kind of computing resources are allocated for the service. It can be changed after creation, though there are some restrictions when going to a smaller plan such as the new plan must have sufficient amount of disk space to store all current data and switching to a plan with fewer nodes might not be supported. The basic plan names are
hobbyist
,startup-x
,business-x
andpremium-x
wherex
is (roughly) the amount of memory on each node (also other attributes like number of CPUs and amount of disk space varies but naming is based on memory). The available options can be seem from the Aiven pricing page. - Project string
- The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
- Service
Name string - Specifies the actual name of the service. The name cannot be changed later without destroying and re-creating the service so name should be picked based on intended service usage rather than current attributes.
- Additional
Disk stringSpace - Additional disk space. Possible values depend on the service type, the cloud provider and the project. Therefore, reducing will result in the service rebalancing.
- Cloud
Name string - Defines where the cloud provider and region where the service is hosted in. This can be changed freely after service is created. Changing the value will trigger a potentially lengthy migration process for the service. Format is cloud provider name (
aws
,azure
,do
google
,upcloud
, etc.), dash, and the cloud provider specific region name. These are documented on each Cloud provider's own support articles, like here for Google and here for AWS. - Disk
Space string - Service disk space. Possible values depend on the service type, the cloud provider and the project. Therefore, reducing will result in the service rebalancing.
- Maintenance
Window stringDow - Day of week when maintenance operations should be performed. One monday, tuesday, wednesday, etc.
- Maintenance
Window stringTime - Time of day when maintenance operations should be performed. UTC time in HH:mm:ss format.
- Opensearch
User OpenConfig Search Opensearch User Config - Opensearch user configurable settings
- Opensearches
List<Open
Search Opensearch> - OpenSearch server provided values
- Project
Vpc stringId - Specifies the VPC the service should run in. If the value is not set the service is not run inside a VPC. When set, the value should be given as a reference to set up dependencies correctly and the VPC must be in the same cloud and region as the service itself. Project can be freely moved to and from VPC after creation but doing so triggers migration to new servers so the operation can take significant amount of time to complete if the service has a lot of data.
- Service
Integrations List<OpenSearch Service Integration> - Service integrations to specify when creating a service. Not applied after initial service creation
- Static
Ips List<string> - Static IPs that are going to be associated with this service. Please assign a value using the 'toset' function. Once a static ip resource is in the 'assigned' state it cannot be unbound from the node again
- List<Open
Search Tag> - Tags are key-value pairs that allow you to categorize services.
- Tech
Emails List<OpenSearch Tech Email> - The email addresses for service contacts, who will receive important alerts and updates about this service. You can also set email contacts at the project level.
- Termination
Protection bool - Prevents the service from being deleted. It is recommended to set this to
true
for all production services to prevent unintentional service deletion. This does not shield against deleting databases or topics but for services with backups much of the content can at least be restored from backup in case accidental deletion is done.
- Plan string
- Defines what kind of computing resources are allocated for the service. It can be changed after creation, though there are some restrictions when going to a smaller plan such as the new plan must have sufficient amount of disk space to store all current data and switching to a plan with fewer nodes might not be supported. The basic plan names are
hobbyist
,startup-x
,business-x
andpremium-x
wherex
is (roughly) the amount of memory on each node (also other attributes like number of CPUs and amount of disk space varies but naming is based on memory). The available options can be seem from the Aiven pricing page. - Project string
- The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
- Service
Name string - Specifies the actual name of the service. The name cannot be changed later without destroying and re-creating the service so name should be picked based on intended service usage rather than current attributes.
- Additional
Disk stringSpace - Additional disk space. Possible values depend on the service type, the cloud provider and the project. Therefore, reducing will result in the service rebalancing.
- Cloud
Name string - Defines where the cloud provider and region where the service is hosted in. This can be changed freely after service is created. Changing the value will trigger a potentially lengthy migration process for the service. Format is cloud provider name (
aws
,azure
,do
google
,upcloud
, etc.), dash, and the cloud provider specific region name. These are documented on each Cloud provider's own support articles, like here for Google and here for AWS. - Disk
Space string - Service disk space. Possible values depend on the service type, the cloud provider and the project. Therefore, reducing will result in the service rebalancing.
- Maintenance
Window stringDow - Day of week when maintenance operations should be performed. One monday, tuesday, wednesday, etc.
- Maintenance
Window stringTime - Time of day when maintenance operations should be performed. UTC time in HH:mm:ss format.
- Opensearch
User OpenConfig Search Opensearch User Config Args - Opensearch user configurable settings
- Opensearches
[]Open
Search Opensearch Args - OpenSearch server provided values
- Project
Vpc stringId - Specifies the VPC the service should run in. If the value is not set the service is not run inside a VPC. When set, the value should be given as a reference to set up dependencies correctly and the VPC must be in the same cloud and region as the service itself. Project can be freely moved to and from VPC after creation but doing so triggers migration to new servers so the operation can take significant amount of time to complete if the service has a lot of data.
- Service
Integrations []OpenSearch Service Integration Args - Service integrations to specify when creating a service. Not applied after initial service creation
- Static
Ips []string - Static IPs that are going to be associated with this service. Please assign a value using the 'toset' function. Once a static ip resource is in the 'assigned' state it cannot be unbound from the node again
- []Open
Search Tag Args - Tags are key-value pairs that allow you to categorize services.
- Tech
Emails []OpenSearch Tech Email Args - The email addresses for service contacts, who will receive important alerts and updates about this service. You can also set email contacts at the project level.
- Termination
Protection bool - Prevents the service from being deleted. It is recommended to set this to
true
for all production services to prevent unintentional service deletion. This does not shield against deleting databases or topics but for services with backups much of the content can at least be restored from backup in case accidental deletion is done.
- plan String
- Defines what kind of computing resources are allocated for the service. It can be changed after creation, though there are some restrictions when going to a smaller plan such as the new plan must have sufficient amount of disk space to store all current data and switching to a plan with fewer nodes might not be supported. The basic plan names are
hobbyist
,startup-x
,business-x
andpremium-x
wherex
is (roughly) the amount of memory on each node (also other attributes like number of CPUs and amount of disk space varies but naming is based on memory). The available options can be seem from the Aiven pricing page. - project String
- The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
- service
Name String - Specifies the actual name of the service. The name cannot be changed later without destroying and re-creating the service so name should be picked based on intended service usage rather than current attributes.
- additional
Disk StringSpace - Additional disk space. Possible values depend on the service type, the cloud provider and the project. Therefore, reducing will result in the service rebalancing.
- cloud
Name String - Defines where the cloud provider and region where the service is hosted in. This can be changed freely after service is created. Changing the value will trigger a potentially lengthy migration process for the service. Format is cloud provider name (
aws
,azure
,do
google
,upcloud
, etc.), dash, and the cloud provider specific region name. These are documented on each Cloud provider's own support articles, like here for Google and here for AWS. - disk
Space String - Service disk space. Possible values depend on the service type, the cloud provider and the project. Therefore, reducing will result in the service rebalancing.
- maintenance
Window StringDow - Day of week when maintenance operations should be performed. One monday, tuesday, wednesday, etc.
- maintenance
Window StringTime - Time of day when maintenance operations should be performed. UTC time in HH:mm:ss format.
- opensearch
User OpenConfig Search Opensearch User Config - Opensearch user configurable settings
- opensearches
List<Open
Search Opensearch> - OpenSearch server provided values
- project
Vpc StringId - Specifies the VPC the service should run in. If the value is not set the service is not run inside a VPC. When set, the value should be given as a reference to set up dependencies correctly and the VPC must be in the same cloud and region as the service itself. Project can be freely moved to and from VPC after creation but doing so triggers migration to new servers so the operation can take significant amount of time to complete if the service has a lot of data.
- service
Integrations List<OpenSearch Service Integration> - Service integrations to specify when creating a service. Not applied after initial service creation
- static
Ips List<String> - Static IPs that are going to be associated with this service. Please assign a value using the 'toset' function. Once a static ip resource is in the 'assigned' state it cannot be unbound from the node again
- List<Open
Search Tag> - Tags are key-value pairs that allow you to categorize services.
- tech
Emails List<OpenSearch Tech Email> - The email addresses for service contacts, who will receive important alerts and updates about this service. You can also set email contacts at the project level.
- termination
Protection Boolean - Prevents the service from being deleted. It is recommended to set this to
true
for all production services to prevent unintentional service deletion. This does not shield against deleting databases or topics but for services with backups much of the content can at least be restored from backup in case accidental deletion is done.
- plan string
- Defines what kind of computing resources are allocated for the service. It can be changed after creation, though there are some restrictions when going to a smaller plan such as the new plan must have sufficient amount of disk space to store all current data and switching to a plan with fewer nodes might not be supported. The basic plan names are
hobbyist
,startup-x
,business-x
andpremium-x
wherex
is (roughly) the amount of memory on each node (also other attributes like number of CPUs and amount of disk space varies but naming is based on memory). The available options can be seem from the Aiven pricing page. - project string
- The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
- service
Name string - Specifies the actual name of the service. The name cannot be changed later without destroying and re-creating the service so name should be picked based on intended service usage rather than current attributes.
- additional
Disk stringSpace - Additional disk space. Possible values depend on the service type, the cloud provider and the project. Therefore, reducing will result in the service rebalancing.
- cloud
Name string - Defines where the cloud provider and region where the service is hosted in. This can be changed freely after service is created. Changing the value will trigger a potentially lengthy migration process for the service. Format is cloud provider name (
aws
,azure
,do
google
,upcloud
, etc.), dash, and the cloud provider specific region name. These are documented on each Cloud provider's own support articles, like here for Google and here for AWS. - disk
Space string - Service disk space. Possible values depend on the service type, the cloud provider and the project. Therefore, reducing will result in the service rebalancing.
- maintenance
Window stringDow - Day of week when maintenance operations should be performed. One monday, tuesday, wednesday, etc.
- maintenance
Window stringTime - Time of day when maintenance operations should be performed. UTC time in HH:mm:ss format.
- opensearch
User OpenConfig Search Opensearch User Config - Opensearch user configurable settings
- opensearches
Open
Search Opensearch[] - OpenSearch server provided values
- project
Vpc stringId - Specifies the VPC the service should run in. If the value is not set the service is not run inside a VPC. When set, the value should be given as a reference to set up dependencies correctly and the VPC must be in the same cloud and region as the service itself. Project can be freely moved to and from VPC after creation but doing so triggers migration to new servers so the operation can take significant amount of time to complete if the service has a lot of data.
- service
Integrations OpenSearch Service Integration[] - Service integrations to specify when creating a service. Not applied after initial service creation
- static
Ips string[] - Static IPs that are going to be associated with this service. Please assign a value using the 'toset' function. Once a static ip resource is in the 'assigned' state it cannot be unbound from the node again
- Open
Search Tag[] - Tags are key-value pairs that allow you to categorize services.
- tech
Emails OpenSearch Tech Email[] - The email addresses for service contacts, who will receive important alerts and updates about this service. You can also set email contacts at the project level.
- termination
Protection boolean - Prevents the service from being deleted. It is recommended to set this to
true
for all production services to prevent unintentional service deletion. This does not shield against deleting databases or topics but for services with backups much of the content can at least be restored from backup in case accidental deletion is done.
- plan str
- Defines what kind of computing resources are allocated for the service. It can be changed after creation, though there are some restrictions when going to a smaller plan such as the new plan must have sufficient amount of disk space to store all current data and switching to a plan with fewer nodes might not be supported. The basic plan names are
hobbyist
,startup-x
,business-x
andpremium-x
wherex
is (roughly) the amount of memory on each node (also other attributes like number of CPUs and amount of disk space varies but naming is based on memory). The available options can be seem from the Aiven pricing page. - project str
- The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
- service_
name str - Specifies the actual name of the service. The name cannot be changed later without destroying and re-creating the service so name should be picked based on intended service usage rather than current attributes.
- additional_
disk_ strspace - Additional disk space. Possible values depend on the service type, the cloud provider and the project. Therefore, reducing will result in the service rebalancing.
- cloud_
name str - Defines where the cloud provider and region where the service is hosted in. This can be changed freely after service is created. Changing the value will trigger a potentially lengthy migration process for the service. Format is cloud provider name (
aws
,azure
,do
google
,upcloud
, etc.), dash, and the cloud provider specific region name. These are documented on each Cloud provider's own support articles, like here for Google and here for AWS. - disk_
space str - Service disk space. Possible values depend on the service type, the cloud provider and the project. Therefore, reducing will result in the service rebalancing.
- maintenance_
window_ strdow - Day of week when maintenance operations should be performed. One monday, tuesday, wednesday, etc.
- maintenance_
window_ strtime - Time of day when maintenance operations should be performed. UTC time in HH:mm:ss format.
- opensearch_
user_ Openconfig Search Opensearch User Config Args - Opensearch user configurable settings
- opensearches
Sequence[Open
Search Opensearch Args] - OpenSearch server provided values
- project_
vpc_ strid - Specifies the VPC the service should run in. If the value is not set the service is not run inside a VPC. When set, the value should be given as a reference to set up dependencies correctly and the VPC must be in the same cloud and region as the service itself. Project can be freely moved to and from VPC after creation but doing so triggers migration to new servers so the operation can take significant amount of time to complete if the service has a lot of data.
- service_
integrations Sequence[OpenSearch Service Integration Args] - Service integrations to specify when creating a service. Not applied after initial service creation
- static_
ips Sequence[str] - Static IPs that are going to be associated with this service. Please assign a value using the 'toset' function. Once a static ip resource is in the 'assigned' state it cannot be unbound from the node again
- Sequence[Open
Search Tag Args] - Tags are key-value pairs that allow you to categorize services.
- tech_
emails Sequence[OpenSearch Tech Email Args] - The email addresses for service contacts, who will receive important alerts and updates about this service. You can also set email contacts at the project level.
- termination_
protection bool - Prevents the service from being deleted. It is recommended to set this to
true
for all production services to prevent unintentional service deletion. This does not shield against deleting databases or topics but for services with backups much of the content can at least be restored from backup in case accidental deletion is done.
- plan String
- Defines what kind of computing resources are allocated for the service. It can be changed after creation, though there are some restrictions when going to a smaller plan such as the new plan must have sufficient amount of disk space to store all current data and switching to a plan with fewer nodes might not be supported. The basic plan names are
hobbyist
,startup-x
,business-x
andpremium-x
wherex
is (roughly) the amount of memory on each node (also other attributes like number of CPUs and amount of disk space varies but naming is based on memory). The available options can be seem from the Aiven pricing page. - project String
- The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
- service
Name String - Specifies the actual name of the service. The name cannot be changed later without destroying and re-creating the service so name should be picked based on intended service usage rather than current attributes.
- additional
Disk StringSpace - Additional disk space. Possible values depend on the service type, the cloud provider and the project. Therefore, reducing will result in the service rebalancing.
- cloud
Name String - Defines where the cloud provider and region where the service is hosted in. This can be changed freely after service is created. Changing the value will trigger a potentially lengthy migration process for the service. Format is cloud provider name (
aws
,azure
,do
google
,upcloud
, etc.), dash, and the cloud provider specific region name. These are documented on each Cloud provider's own support articles, like here for Google and here for AWS. - disk
Space String - Service disk space. Possible values depend on the service type, the cloud provider and the project. Therefore, reducing will result in the service rebalancing.
- maintenance
Window StringDow - Day of week when maintenance operations should be performed. One monday, tuesday, wednesday, etc.
- maintenance
Window StringTime - Time of day when maintenance operations should be performed. UTC time in HH:mm:ss format.
- opensearch
User Property MapConfig - Opensearch user configurable settings
- opensearches List<Property Map>
- OpenSearch server provided values
- project
Vpc StringId - Specifies the VPC the service should run in. If the value is not set the service is not run inside a VPC. When set, the value should be given as a reference to set up dependencies correctly and the VPC must be in the same cloud and region as the service itself. Project can be freely moved to and from VPC after creation but doing so triggers migration to new servers so the operation can take significant amount of time to complete if the service has a lot of data.
- service
Integrations List<Property Map> - Service integrations to specify when creating a service. Not applied after initial service creation
- static
Ips List<String> - Static IPs that are going to be associated with this service. Please assign a value using the 'toset' function. Once a static ip resource is in the 'assigned' state it cannot be unbound from the node again
- List<Property Map>
- Tags are key-value pairs that allow you to categorize services.
- tech
Emails List<Property Map> - The email addresses for service contacts, who will receive important alerts and updates about this service. You can also set email contacts at the project level.
- termination
Protection Boolean - Prevents the service from being deleted. It is recommended to set this to
true
for all production services to prevent unintentional service deletion. This does not shield against deleting databases or topics but for services with backups much of the content can at least be restored from backup in case accidental deletion is done.
Outputs
All input properties are implicitly available as output properties. Additionally, the OpenSearch resource produces the following output properties:
- Components
List<Open
Search Component> - Service component information objects
- Disk
Space stringCap - The maximum disk space of the service, possible values depend on the service type, the cloud provider and the project.
- Disk
Space stringDefault - The default disk space of the service, possible values depend on the service type, the cloud provider and the project. Its also the minimum value for
disk_space
- Disk
Space stringStep - The default disk space step of the service, possible values depend on the service type, the cloud provider and the project.
disk_space
needs to increment fromdisk_space_default
by increments of this size. - Disk
Space stringUsed - Disk space that service is currently using
- Id string
- The provider-assigned unique ID for this managed resource.
- Service
Host string - The hostname of the service.
- Service
Password string - Password used for connecting to the service, if applicable
- Service
Port int - The port of the service
- Service
Type string - Aiven internal service type code
- Service
Uri string - URI for connecting to the service. Service specific info is under "kafka", "pg", etc.
- Service
Username string - Username used for connecting to the service, if applicable
- State string
- Service state. One of
POWEROFF
,REBALANCING
,REBUILDING
orRUNNING
- Components
[]Open
Search Component - Service component information objects
- Disk
Space stringCap - The maximum disk space of the service, possible values depend on the service type, the cloud provider and the project.
- Disk
Space stringDefault - The default disk space of the service, possible values depend on the service type, the cloud provider and the project. Its also the minimum value for
disk_space
- Disk
Space stringStep - The default disk space step of the service, possible values depend on the service type, the cloud provider and the project.
disk_space
needs to increment fromdisk_space_default
by increments of this size. - Disk
Space stringUsed - Disk space that service is currently using
- Id string
- The provider-assigned unique ID for this managed resource.
- Service
Host string - The hostname of the service.
- Service
Password string - Password used for connecting to the service, if applicable
- Service
Port int - The port of the service
- Service
Type string - Aiven internal service type code
- Service
Uri string - URI for connecting to the service. Service specific info is under "kafka", "pg", etc.
- Service
Username string - Username used for connecting to the service, if applicable
- State string
- Service state. One of
POWEROFF
,REBALANCING
,REBUILDING
orRUNNING
- components
List<Open
Search Component> - Service component information objects
- disk
Space StringCap - The maximum disk space of the service, possible values depend on the service type, the cloud provider and the project.
- disk
Space StringDefault - The default disk space of the service, possible values depend on the service type, the cloud provider and the project. Its also the minimum value for
disk_space
- disk
Space StringStep - The default disk space step of the service, possible values depend on the service type, the cloud provider and the project.
disk_space
needs to increment fromdisk_space_default
by increments of this size. - disk
Space StringUsed - Disk space that service is currently using
- id String
- The provider-assigned unique ID for this managed resource.
- service
Host String - The hostname of the service.
- service
Password String - Password used for connecting to the service, if applicable
- service
Port Integer - The port of the service
- service
Type String - Aiven internal service type code
- service
Uri String - URI for connecting to the service. Service specific info is under "kafka", "pg", etc.
- service
Username String - Username used for connecting to the service, if applicable
- state String
- Service state. One of
POWEROFF
,REBALANCING
,REBUILDING
orRUNNING
- components
Open
Search Component[] - Service component information objects
- disk
Space stringCap - The maximum disk space of the service, possible values depend on the service type, the cloud provider and the project.
- disk
Space stringDefault - The default disk space of the service, possible values depend on the service type, the cloud provider and the project. Its also the minimum value for
disk_space
- disk
Space stringStep - The default disk space step of the service, possible values depend on the service type, the cloud provider and the project.
disk_space
needs to increment fromdisk_space_default
by increments of this size. - disk
Space stringUsed - Disk space that service is currently using
- id string
- The provider-assigned unique ID for this managed resource.
- service
Host string - The hostname of the service.
- service
Password string - Password used for connecting to the service, if applicable
- service
Port number - The port of the service
- service
Type string - Aiven internal service type code
- service
Uri string - URI for connecting to the service. Service specific info is under "kafka", "pg", etc.
- service
Username string - Username used for connecting to the service, if applicable
- state string
- Service state. One of
POWEROFF
,REBALANCING
,REBUILDING
orRUNNING
- components
Sequence[Open
Search Component] - Service component information objects
- disk_
space_ strcap - The maximum disk space of the service, possible values depend on the service type, the cloud provider and the project.
- disk_
space_ strdefault - The default disk space of the service, possible values depend on the service type, the cloud provider and the project. Its also the minimum value for
disk_space
- disk_
space_ strstep - The default disk space step of the service, possible values depend on the service type, the cloud provider and the project.
disk_space
needs to increment fromdisk_space_default
by increments of this size. - disk_
space_ strused - Disk space that service is currently using
- id str
- The provider-assigned unique ID for this managed resource.
- service_
host str - The hostname of the service.
- service_
password str - Password used for connecting to the service, if applicable
- service_
port int - The port of the service
- service_
type str - Aiven internal service type code
- service_
uri str - URI for connecting to the service. Service specific info is under "kafka", "pg", etc.
- service_
username str - Username used for connecting to the service, if applicable
- state str
- Service state. One of
POWEROFF
,REBALANCING
,REBUILDING
orRUNNING
- components List<Property Map>
- Service component information objects
- disk
Space StringCap - The maximum disk space of the service, possible values depend on the service type, the cloud provider and the project.
- disk
Space StringDefault - The default disk space of the service, possible values depend on the service type, the cloud provider and the project. Its also the minimum value for
disk_space
- disk
Space StringStep - The default disk space step of the service, possible values depend on the service type, the cloud provider and the project.
disk_space
needs to increment fromdisk_space_default
by increments of this size. - disk
Space StringUsed - Disk space that service is currently using
- id String
- The provider-assigned unique ID for this managed resource.
- service
Host String - The hostname of the service.
- service
Password String - Password used for connecting to the service, if applicable
- service
Port Number - The port of the service
- service
Type String - Aiven internal service type code
- service
Uri String - URI for connecting to the service. Service specific info is under "kafka", "pg", etc.
- service
Username String - Username used for connecting to the service, if applicable
- state String
- Service state. One of
POWEROFF
,REBALANCING
,REBUILDING
orRUNNING
Look up Existing OpenSearch Resource
Get an existing OpenSearch resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: OpenSearchState, opts?: CustomResourceOptions): OpenSearch
@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
additional_disk_space: Optional[str] = None,
cloud_name: Optional[str] = None,
components: Optional[Sequence[OpenSearchComponentArgs]] = None,
disk_space: Optional[str] = None,
disk_space_cap: Optional[str] = None,
disk_space_default: Optional[str] = None,
disk_space_step: Optional[str] = None,
disk_space_used: Optional[str] = None,
maintenance_window_dow: Optional[str] = None,
maintenance_window_time: Optional[str] = None,
opensearch_user_config: Optional[OpenSearchOpensearchUserConfigArgs] = None,
opensearches: Optional[Sequence[OpenSearchOpensearchArgs]] = None,
plan: Optional[str] = None,
project: Optional[str] = None,
project_vpc_id: Optional[str] = None,
service_host: Optional[str] = None,
service_integrations: Optional[Sequence[OpenSearchServiceIntegrationArgs]] = None,
service_name: Optional[str] = None,
service_password: Optional[str] = None,
service_port: Optional[int] = None,
service_type: Optional[str] = None,
service_uri: Optional[str] = None,
service_username: Optional[str] = None,
state: Optional[str] = None,
static_ips: Optional[Sequence[str]] = None,
tags: Optional[Sequence[OpenSearchTagArgs]] = None,
tech_emails: Optional[Sequence[OpenSearchTechEmailArgs]] = None,
termination_protection: Optional[bool] = None) -> OpenSearch
func GetOpenSearch(ctx *Context, name string, id IDInput, state *OpenSearchState, opts ...ResourceOption) (*OpenSearch, error)
public static OpenSearch Get(string name, Input<string> id, OpenSearchState? state, CustomResourceOptions? opts = null)
public static OpenSearch get(String name, Output<String> id, OpenSearchState state, CustomResourceOptions options)
Resource lookup is not supported in YAML
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Additional
Disk stringSpace - Additional disk space. Possible values depend on the service type, the cloud provider and the project. Therefore, reducing will result in the service rebalancing.
- Cloud
Name string - Defines where the cloud provider and region where the service is hosted in. This can be changed freely after service is created. Changing the value will trigger a potentially lengthy migration process for the service. Format is cloud provider name (
aws
,azure
,do
google
,upcloud
, etc.), dash, and the cloud provider specific region name. These are documented on each Cloud provider's own support articles, like here for Google and here for AWS. - Components
List<Open
Search Component> - Service component information objects
- Disk
Space string - Service disk space. Possible values depend on the service type, the cloud provider and the project. Therefore, reducing will result in the service rebalancing.
- Disk
Space stringCap - The maximum disk space of the service, possible values depend on the service type, the cloud provider and the project.
- Disk
Space stringDefault - The default disk space of the service, possible values depend on the service type, the cloud provider and the project. Its also the minimum value for
disk_space
- Disk
Space stringStep - The default disk space step of the service, possible values depend on the service type, the cloud provider and the project.
disk_space
needs to increment fromdisk_space_default
by increments of this size. - Disk
Space stringUsed - Disk space that service is currently using
- Maintenance
Window stringDow - Day of week when maintenance operations should be performed. One monday, tuesday, wednesday, etc.
- Maintenance
Window stringTime - Time of day when maintenance operations should be performed. UTC time in HH:mm:ss format.
- Opensearch
User OpenConfig Search Opensearch User Config - Opensearch user configurable settings
- Opensearches
List<Open
Search Opensearch> - OpenSearch server provided values
- Plan string
- Defines what kind of computing resources are allocated for the service. It can be changed after creation, though there are some restrictions when going to a smaller plan such as the new plan must have sufficient amount of disk space to store all current data and switching to a plan with fewer nodes might not be supported. The basic plan names are
hobbyist
,startup-x
,business-x
andpremium-x
wherex
is (roughly) the amount of memory on each node (also other attributes like number of CPUs and amount of disk space varies but naming is based on memory). The available options can be seem from the Aiven pricing page. - Project string
- The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
- Project
Vpc stringId - Specifies the VPC the service should run in. If the value is not set the service is not run inside a VPC. When set, the value should be given as a reference to set up dependencies correctly and the VPC must be in the same cloud and region as the service itself. Project can be freely moved to and from VPC after creation but doing so triggers migration to new servers so the operation can take significant amount of time to complete if the service has a lot of data.
- Service
Host string - The hostname of the service.
- Service
Integrations List<OpenSearch Service Integration> - Service integrations to specify when creating a service. Not applied after initial service creation
- Service
Name string - Specifies the actual name of the service. The name cannot be changed later without destroying and re-creating the service so name should be picked based on intended service usage rather than current attributes.
- Service
Password string - Password used for connecting to the service, if applicable
- Service
Port int - The port of the service
- Service
Type string - Aiven internal service type code
- Service
Uri string - URI for connecting to the service. Service specific info is under "kafka", "pg", etc.
- Service
Username string - Username used for connecting to the service, if applicable
- State string
- Service state. One of
POWEROFF
,REBALANCING
,REBUILDING
orRUNNING
- Static
Ips List<string> - Static IPs that are going to be associated with this service. Please assign a value using the 'toset' function. Once a static ip resource is in the 'assigned' state it cannot be unbound from the node again
- List<Open
Search Tag> - Tags are key-value pairs that allow you to categorize services.
- Tech
Emails List<OpenSearch Tech Email> - The email addresses for service contacts, who will receive important alerts and updates about this service. You can also set email contacts at the project level.
- Termination
Protection bool - Prevents the service from being deleted. It is recommended to set this to
true
for all production services to prevent unintentional service deletion. This does not shield against deleting databases or topics but for services with backups much of the content can at least be restored from backup in case accidental deletion is done.
- Additional
Disk stringSpace - Additional disk space. Possible values depend on the service type, the cloud provider and the project. Therefore, reducing will result in the service rebalancing.
- Cloud
Name string - Defines where the cloud provider and region where the service is hosted in. This can be changed freely after service is created. Changing the value will trigger a potentially lengthy migration process for the service. Format is cloud provider name (
aws
,azure
,do
google
,upcloud
, etc.), dash, and the cloud provider specific region name. These are documented on each Cloud provider's own support articles, like here for Google and here for AWS. - Components
[]Open
Search Component Args - Service component information objects
- Disk
Space string - Service disk space. Possible values depend on the service type, the cloud provider and the project. Therefore, reducing will result in the service rebalancing.
- Disk
Space stringCap - The maximum disk space of the service, possible values depend on the service type, the cloud provider and the project.
- Disk
Space stringDefault - The default disk space of the service, possible values depend on the service type, the cloud provider and the project. Its also the minimum value for
disk_space
- Disk
Space stringStep - The default disk space step of the service, possible values depend on the service type, the cloud provider and the project.
disk_space
needs to increment fromdisk_space_default
by increments of this size. - Disk
Space stringUsed - Disk space that service is currently using
- Maintenance
Window stringDow - Day of week when maintenance operations should be performed. One monday, tuesday, wednesday, etc.
- Maintenance
Window stringTime - Time of day when maintenance operations should be performed. UTC time in HH:mm:ss format.
- Opensearch
User OpenConfig Search Opensearch User Config Args - Opensearch user configurable settings
- Opensearches
[]Open
Search Opensearch Args - OpenSearch server provided values
- Plan string
- Defines what kind of computing resources are allocated for the service. It can be changed after creation, though there are some restrictions when going to a smaller plan such as the new plan must have sufficient amount of disk space to store all current data and switching to a plan with fewer nodes might not be supported. The basic plan names are
hobbyist
,startup-x
,business-x
andpremium-x
wherex
is (roughly) the amount of memory on each node (also other attributes like number of CPUs and amount of disk space varies but naming is based on memory). The available options can be seem from the Aiven pricing page. - Project string
- The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
- Project
Vpc stringId - Specifies the VPC the service should run in. If the value is not set the service is not run inside a VPC. When set, the value should be given as a reference to set up dependencies correctly and the VPC must be in the same cloud and region as the service itself. Project can be freely moved to and from VPC after creation but doing so triggers migration to new servers so the operation can take significant amount of time to complete if the service has a lot of data.
- Service
Host string - The hostname of the service.
- Service
Integrations []OpenSearch Service Integration Args - Service integrations to specify when creating a service. Not applied after initial service creation
- Service
Name string - Specifies the actual name of the service. The name cannot be changed later without destroying and re-creating the service so name should be picked based on intended service usage rather than current attributes.
- Service
Password string - Password used for connecting to the service, if applicable
- Service
Port int - The port of the service
- Service
Type string - Aiven internal service type code
- Service
Uri string - URI for connecting to the service. Service specific info is under "kafka", "pg", etc.
- Service
Username string - Username used for connecting to the service, if applicable
- State string
- Service state. One of
POWEROFF
,REBALANCING
,REBUILDING
orRUNNING
- Static
Ips []string - Static IPs that are going to be associated with this service. Please assign a value using the 'toset' function. Once a static ip resource is in the 'assigned' state it cannot be unbound from the node again
- []Open
Search Tag Args - Tags are key-value pairs that allow you to categorize services.
- Tech
Emails []OpenSearch Tech Email Args - The email addresses for service contacts, who will receive important alerts and updates about this service. You can also set email contacts at the project level.
- Termination
Protection bool - Prevents the service from being deleted. It is recommended to set this to
true
for all production services to prevent unintentional service deletion. This does not shield against deleting databases or topics but for services with backups much of the content can at least be restored from backup in case accidental deletion is done.
- additional
Disk StringSpace - Additional disk space. Possible values depend on the service type, the cloud provider and the project. Therefore, reducing will result in the service rebalancing.
- cloud
Name String - Defines where the cloud provider and region where the service is hosted in. This can be changed freely after service is created. Changing the value will trigger a potentially lengthy migration process for the service. Format is cloud provider name (
aws
,azure
,do
google
,upcloud
, etc.), dash, and the cloud provider specific region name. These are documented on each Cloud provider's own support articles, like here for Google and here for AWS. - components
List<Open
Search Component> - Service component information objects
- disk
Space String - Service disk space. Possible values depend on the service type, the cloud provider and the project. Therefore, reducing will result in the service rebalancing.
- disk
Space StringCap - The maximum disk space of the service, possible values depend on the service type, the cloud provider and the project.
- disk
Space StringDefault - The default disk space of the service, possible values depend on the service type, the cloud provider and the project. Its also the minimum value for
disk_space
- disk
Space StringStep - The default disk space step of the service, possible values depend on the service type, the cloud provider and the project.
disk_space
needs to increment fromdisk_space_default
by increments of this size. - disk
Space StringUsed - Disk space that service is currently using
- maintenance
Window StringDow - Day of week when maintenance operations should be performed. One monday, tuesday, wednesday, etc.
- maintenance
Window StringTime - Time of day when maintenance operations should be performed. UTC time in HH:mm:ss format.
- opensearch
User OpenConfig Search Opensearch User Config - Opensearch user configurable settings
- opensearches
List<Open
Search Opensearch> - OpenSearch server provided values
- plan String
- Defines what kind of computing resources are allocated for the service. It can be changed after creation, though there are some restrictions when going to a smaller plan such as the new plan must have sufficient amount of disk space to store all current data and switching to a plan with fewer nodes might not be supported. The basic plan names are
hobbyist
,startup-x
,business-x
andpremium-x
wherex
is (roughly) the amount of memory on each node (also other attributes like number of CPUs and amount of disk space varies but naming is based on memory). The available options can be seem from the Aiven pricing page. - project String
- The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
- project
Vpc StringId - Specifies the VPC the service should run in. If the value is not set the service is not run inside a VPC. When set, the value should be given as a reference to set up dependencies correctly and the VPC must be in the same cloud and region as the service itself. Project can be freely moved to and from VPC after creation but doing so triggers migration to new servers so the operation can take significant amount of time to complete if the service has a lot of data.
- service
Host String - The hostname of the service.
- service
Integrations List<OpenSearch Service Integration> - Service integrations to specify when creating a service. Not applied after initial service creation
- service
Name String - Specifies the actual name of the service. The name cannot be changed later without destroying and re-creating the service so name should be picked based on intended service usage rather than current attributes.
- service
Password String - Password used for connecting to the service, if applicable
- service
Port Integer - The port of the service
- service
Type String - Aiven internal service type code
- service
Uri String - URI for connecting to the service. Service specific info is under "kafka", "pg", etc.
- service
Username String - Username used for connecting to the service, if applicable
- state String
- Service state. One of
POWEROFF
,REBALANCING
,REBUILDING
orRUNNING
- static
Ips List<String> - Static IPs that are going to be associated with this service. Please assign a value using the 'toset' function. Once a static ip resource is in the 'assigned' state it cannot be unbound from the node again
- List<Open
Search Tag> - Tags are key-value pairs that allow you to categorize services.
- tech
Emails List<OpenSearch Tech Email> - The email addresses for service contacts, who will receive important alerts and updates about this service. You can also set email contacts at the project level.
- termination
Protection Boolean - Prevents the service from being deleted. It is recommended to set this to
true
for all production services to prevent unintentional service deletion. This does not shield against deleting databases or topics but for services with backups much of the content can at least be restored from backup in case accidental deletion is done.
- additional
Disk stringSpace - Additional disk space. Possible values depend on the service type, the cloud provider and the project. Therefore, reducing will result in the service rebalancing.
- cloud
Name string - Defines where the cloud provider and region where the service is hosted in. This can be changed freely after service is created. Changing the value will trigger a potentially lengthy migration process for the service. Format is cloud provider name (
aws
,azure
,do
google
,upcloud
, etc.), dash, and the cloud provider specific region name. These are documented on each Cloud provider's own support articles, like here for Google and here for AWS. - components
Open
Search Component[] - Service component information objects
- disk
Space string - Service disk space. Possible values depend on the service type, the cloud provider and the project. Therefore, reducing will result in the service rebalancing.
- disk
Space stringCap - The maximum disk space of the service, possible values depend on the service type, the cloud provider and the project.
- disk
Space stringDefault - The default disk space of the service, possible values depend on the service type, the cloud provider and the project. Its also the minimum value for
disk_space
- disk
Space stringStep - The default disk space step of the service, possible values depend on the service type, the cloud provider and the project.
disk_space
needs to increment fromdisk_space_default
by increments of this size. - disk
Space stringUsed - Disk space that service is currently using
- maintenance
Window stringDow - Day of week when maintenance operations should be performed. One monday, tuesday, wednesday, etc.
- maintenance
Window stringTime - Time of day when maintenance operations should be performed. UTC time in HH:mm:ss format.
- opensearch
User OpenConfig Search Opensearch User Config - Opensearch user configurable settings
- opensearches
Open
Search Opensearch[] - OpenSearch server provided values
- plan string
- Defines what kind of computing resources are allocated for the service. It can be changed after creation, though there are some restrictions when going to a smaller plan such as the new plan must have sufficient amount of disk space to store all current data and switching to a plan with fewer nodes might not be supported. The basic plan names are
hobbyist
,startup-x
,business-x
andpremium-x
wherex
is (roughly) the amount of memory on each node (also other attributes like number of CPUs and amount of disk space varies but naming is based on memory). The available options can be seem from the Aiven pricing page. - project string
- The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
- project
Vpc stringId - Specifies the VPC the service should run in. If the value is not set the service is not run inside a VPC. When set, the value should be given as a reference to set up dependencies correctly and the VPC must be in the same cloud and region as the service itself. Project can be freely moved to and from VPC after creation but doing so triggers migration to new servers so the operation can take significant amount of time to complete if the service has a lot of data.
- service
Host string - The hostname of the service.
- service
Integrations OpenSearch Service Integration[] - Service integrations to specify when creating a service. Not applied after initial service creation
- service
Name string - Specifies the actual name of the service. The name cannot be changed later without destroying and re-creating the service so name should be picked based on intended service usage rather than current attributes.
- service
Password string - Password used for connecting to the service, if applicable
- service
Port number - The port of the service
- service
Type string - Aiven internal service type code
- service
Uri string - URI for connecting to the service. Service specific info is under "kafka", "pg", etc.
- service
Username string - Username used for connecting to the service, if applicable
- state string
- Service state. One of
POWEROFF
,REBALANCING
,REBUILDING
orRUNNING
- static
Ips string[] - Static IPs that are going to be associated with this service. Please assign a value using the 'toset' function. Once a static ip resource is in the 'assigned' state it cannot be unbound from the node again
- Open
Search Tag[] - Tags are key-value pairs that allow you to categorize services.
- tech
Emails OpenSearch Tech Email[] - The email addresses for service contacts, who will receive important alerts and updates about this service. You can also set email contacts at the project level.
- termination
Protection boolean - Prevents the service from being deleted. It is recommended to set this to
true
for all production services to prevent unintentional service deletion. This does not shield against deleting databases or topics but for services with backups much of the content can at least be restored from backup in case accidental deletion is done.
- additional_
disk_ strspace - Additional disk space. Possible values depend on the service type, the cloud provider and the project. Therefore, reducing will result in the service rebalancing.
- cloud_
name str - Defines where the cloud provider and region where the service is hosted in. This can be changed freely after service is created. Changing the value will trigger a potentially lengthy migration process for the service. Format is cloud provider name (
aws
,azure
,do
google
,upcloud
, etc.), dash, and the cloud provider specific region name. These are documented on each Cloud provider's own support articles, like here for Google and here for AWS. - components
Sequence[Open
Search Component Args] - Service component information objects
- disk_
space str - Service disk space. Possible values depend on the service type, the cloud provider and the project. Therefore, reducing will result in the service rebalancing.
- disk_
space_ strcap - The maximum disk space of the service, possible values depend on the service type, the cloud provider and the project.
- disk_
space_ strdefault - The default disk space of the service, possible values depend on the service type, the cloud provider and the project. Its also the minimum value for
disk_space
- disk_
space_ strstep - The default disk space step of the service, possible values depend on the service type, the cloud provider and the project.
disk_space
needs to increment fromdisk_space_default
by increments of this size. - disk_
space_ strused - Disk space that service is currently using
- maintenance_
window_ strdow - Day of week when maintenance operations should be performed. One monday, tuesday, wednesday, etc.
- maintenance_
window_ strtime - Time of day when maintenance operations should be performed. UTC time in HH:mm:ss format.
- opensearch_
user_ Openconfig Search Opensearch User Config Args - Opensearch user configurable settings
- opensearches
Sequence[Open
Search Opensearch Args] - OpenSearch server provided values
- plan str
- Defines what kind of computing resources are allocated for the service. It can be changed after creation, though there are some restrictions when going to a smaller plan such as the new plan must have sufficient amount of disk space to store all current data and switching to a plan with fewer nodes might not be supported. The basic plan names are
hobbyist
,startup-x
,business-x
andpremium-x
wherex
is (roughly) the amount of memory on each node (also other attributes like number of CPUs and amount of disk space varies but naming is based on memory). The available options can be seem from the Aiven pricing page. - project str
- The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
- project_
vpc_ strid - Specifies the VPC the service should run in. If the value is not set the service is not run inside a VPC. When set, the value should be given as a reference to set up dependencies correctly and the VPC must be in the same cloud and region as the service itself. Project can be freely moved to and from VPC after creation but doing so triggers migration to new servers so the operation can take significant amount of time to complete if the service has a lot of data.
- service_
host str - The hostname of the service.
- service_
integrations Sequence[OpenSearch Service Integration Args] - Service integrations to specify when creating a service. Not applied after initial service creation
- service_
name str - Specifies the actual name of the service. The name cannot be changed later without destroying and re-creating the service so name should be picked based on intended service usage rather than current attributes.
- service_
password str - Password used for connecting to the service, if applicable
- service_
port int - The port of the service
- service_
type str - Aiven internal service type code
- service_
uri str - URI for connecting to the service. Service specific info is under "kafka", "pg", etc.
- service_
username str - Username used for connecting to the service, if applicable
- state str
- Service state. One of
POWEROFF
,REBALANCING
,REBUILDING
orRUNNING
- static_
ips Sequence[str] - Static IPs that are going to be associated with this service. Please assign a value using the 'toset' function. Once a static ip resource is in the 'assigned' state it cannot be unbound from the node again
- Sequence[Open
Search Tag Args] - Tags are key-value pairs that allow you to categorize services.
- tech_
emails Sequence[OpenSearch Tech Email Args] - The email addresses for service contacts, who will receive important alerts and updates about this service. You can also set email contacts at the project level.
- termination_
protection bool - Prevents the service from being deleted. It is recommended to set this to
true
for all production services to prevent unintentional service deletion. This does not shield against deleting databases or topics but for services with backups much of the content can at least be restored from backup in case accidental deletion is done.
- additional
Disk StringSpace - Additional disk space. Possible values depend on the service type, the cloud provider and the project. Therefore, reducing will result in the service rebalancing.
- cloud
Name String - Defines where the cloud provider and region where the service is hosted in. This can be changed freely after service is created. Changing the value will trigger a potentially lengthy migration process for the service. Format is cloud provider name (
aws
,azure
,do
google
,upcloud
, etc.), dash, and the cloud provider specific region name. These are documented on each Cloud provider's own support articles, like here for Google and here for AWS. - components List<Property Map>
- Service component information objects
- disk
Space String - Service disk space. Possible values depend on the service type, the cloud provider and the project. Therefore, reducing will result in the service rebalancing.
- disk
Space StringCap - The maximum disk space of the service, possible values depend on the service type, the cloud provider and the project.
- disk
Space StringDefault - The default disk space of the service, possible values depend on the service type, the cloud provider and the project. Its also the minimum value for
disk_space
- disk
Space StringStep - The default disk space step of the service, possible values depend on the service type, the cloud provider and the project.
disk_space
needs to increment fromdisk_space_default
by increments of this size. - disk
Space StringUsed - Disk space that service is currently using
- maintenance
Window StringDow - Day of week when maintenance operations should be performed. One monday, tuesday, wednesday, etc.
- maintenance
Window StringTime - Time of day when maintenance operations should be performed. UTC time in HH:mm:ss format.
- opensearch
User Property MapConfig - Opensearch user configurable settings
- opensearches List<Property Map>
- OpenSearch server provided values
- plan String
- Defines what kind of computing resources are allocated for the service. It can be changed after creation, though there are some restrictions when going to a smaller plan such as the new plan must have sufficient amount of disk space to store all current data and switching to a plan with fewer nodes might not be supported. The basic plan names are
hobbyist
,startup-x
,business-x
andpremium-x
wherex
is (roughly) the amount of memory on each node (also other attributes like number of CPUs and amount of disk space varies but naming is based on memory). The available options can be seem from the Aiven pricing page. - project String
- The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
- project
Vpc StringId - Specifies the VPC the service should run in. If the value is not set the service is not run inside a VPC. When set, the value should be given as a reference to set up dependencies correctly and the VPC must be in the same cloud and region as the service itself. Project can be freely moved to and from VPC after creation but doing so triggers migration to new servers so the operation can take significant amount of time to complete if the service has a lot of data.
- service
Host String - The hostname of the service.
- service
Integrations List<Property Map> - Service integrations to specify when creating a service. Not applied after initial service creation
- service
Name String - Specifies the actual name of the service. The name cannot be changed later without destroying and re-creating the service so name should be picked based on intended service usage rather than current attributes.
- service
Password String - Password used for connecting to the service, if applicable
- service
Port Number - The port of the service
- service
Type String - Aiven internal service type code
- service
Uri String - URI for connecting to the service. Service specific info is under "kafka", "pg", etc.
- service
Username String - Username used for connecting to the service, if applicable
- state String
- Service state. One of
POWEROFF
,REBALANCING
,REBUILDING
orRUNNING
- static
Ips List<String> - Static IPs that are going to be associated with this service. Please assign a value using the 'toset' function. Once a static ip resource is in the 'assigned' state it cannot be unbound from the node again
- List<Property Map>
- Tags are key-value pairs that allow you to categorize services.
- tech
Emails List<Property Map> - The email addresses for service contacts, who will receive important alerts and updates about this service. You can also set email contacts at the project level.
- termination
Protection Boolean - Prevents the service from being deleted. It is recommended to set this to
true
for all production services to prevent unintentional service deletion. This does not shield against deleting databases or topics but for services with backups much of the content can at least be restored from backup in case accidental deletion is done.
Supporting Types
OpenSearchComponent, OpenSearchComponentArgs
- Component string
- Service component name
- Connection
Uri string - Connection info for connecting to the service component. This is a combination of host and port.
- Host string
- Host name for connecting to the service component
- Kafka
Authentication stringMethod - Kafka authentication method. This is a value specific to the 'kafka' service component
- Port int
- Port number for connecting to the service component
- Route string
- Network access route
- Ssl bool
- Whether the endpoint is encrypted or accepts plaintext. By default endpoints are always encrypted and this property is only included for service components they may disable encryption
- Usage string
- DNS usage name
- Component string
- Service component name
- Connection
Uri string - Connection info for connecting to the service component. This is a combination of host and port.
- Host string
- Host name for connecting to the service component
- Kafka
Authentication stringMethod - Kafka authentication method. This is a value specific to the 'kafka' service component
- Port int
- Port number for connecting to the service component
- Route string
- Network access route
- Ssl bool
- Whether the endpoint is encrypted or accepts plaintext. By default endpoints are always encrypted and this property is only included for service components they may disable encryption
- Usage string
- DNS usage name
- component String
- Service component name
- connection
Uri String - Connection info for connecting to the service component. This is a combination of host and port.
- host String
- Host name for connecting to the service component
- kafka
Authentication StringMethod - Kafka authentication method. This is a value specific to the 'kafka' service component
- port Integer
- Port number for connecting to the service component
- route String
- Network access route
- ssl Boolean
- Whether the endpoint is encrypted or accepts plaintext. By default endpoints are always encrypted and this property is only included for service components they may disable encryption
- usage String
- DNS usage name
- component string
- Service component name
- connection
Uri string - Connection info for connecting to the service component. This is a combination of host and port.
- host string
- Host name for connecting to the service component
- kafka
Authentication stringMethod - Kafka authentication method. This is a value specific to the 'kafka' service component
- port number
- Port number for connecting to the service component
- route string
- Network access route
- ssl boolean
- Whether the endpoint is encrypted or accepts plaintext. By default endpoints are always encrypted and this property is only included for service components they may disable encryption
- usage string
- DNS usage name
- component str
- Service component name
- connection_
uri str - Connection info for connecting to the service component. This is a combination of host and port.
- host str
- Host name for connecting to the service component
- kafka_
authentication_ strmethod - Kafka authentication method. This is a value specific to the 'kafka' service component
- port int
- Port number for connecting to the service component
- route str
- Network access route
- ssl bool
- Whether the endpoint is encrypted or accepts plaintext. By default endpoints are always encrypted and this property is only included for service components they may disable encryption
- usage str
- DNS usage name
- component String
- Service component name
- connection
Uri String - Connection info for connecting to the service component. This is a combination of host and port.
- host String
- Host name for connecting to the service component
- kafka
Authentication StringMethod - Kafka authentication method. This is a value specific to the 'kafka' service component
- port Number
- Port number for connecting to the service component
- route String
- Network access route
- ssl Boolean
- Whether the endpoint is encrypted or accepts plaintext. By default endpoints are always encrypted and this property is only included for service components they may disable encryption
- usage String
- DNS usage name
OpenSearchOpensearch, OpenSearchOpensearchArgs
- Kibana
Uri string - URI for Kibana dashboard frontend
- Opensearch
Dashboards stringUri - URI for OpenSearch dashboard frontend
- Password string
- OpenSearch password
- Uris List<string>
- OpenSearch server URIs.
- Username string
- OpenSearch username
- Kibana
Uri string - URI for Kibana dashboard frontend
- Opensearch
Dashboards stringUri - URI for OpenSearch dashboard frontend
- Password string
- OpenSearch password
- Uris []string
- OpenSearch server URIs.
- Username string
- OpenSearch username
- kibana
Uri String - URI for Kibana dashboard frontend
- opensearch
Dashboards StringUri - URI for OpenSearch dashboard frontend
- password String
- OpenSearch password
- uris List<String>
- OpenSearch server URIs.
- username String
- OpenSearch username
- kibana
Uri string - URI for Kibana dashboard frontend
- opensearch
Dashboards stringUri - URI for OpenSearch dashboard frontend
- password string
- OpenSearch password
- uris string[]
- OpenSearch server URIs.
- username string
- OpenSearch username
- kibana_
uri str - URI for Kibana dashboard frontend
- opensearch_
dashboards_ struri - URI for OpenSearch dashboard frontend
- password str
- OpenSearch password
- uris Sequence[str]
- OpenSearch server URIs.
- username str
- OpenSearch username
- kibana
Uri String - URI for Kibana dashboard frontend
- opensearch
Dashboards StringUri - URI for OpenSearch dashboard frontend
- password String
- OpenSearch password
- uris List<String>
- OpenSearch server URIs.
- username String
- OpenSearch username
OpenSearchOpensearchUserConfig, OpenSearchOpensearchUserConfigArgs
- Additional
Backup stringRegions - Additional Cloud Regions for Backup Replication.
- Custom
Domain string - Serve the web frontend using a custom CNAME pointing to the Aiven DNS name. Example:
grafana.example.org
. - Disable
Replication boolFactor Adjustment - Disable automatic replication factor adjustment for multi-node services. By default, Aiven ensures all indexes are replicated at least to two nodes. Note: Due to potential data loss in case of losing a service node, this setting can no longer be activated.
- Index
Patterns List<OpenSearch Opensearch User Config Index Pattern> - Index patterns
- Index
Template OpenSearch Opensearch User Config Index Template - Template settings for all new indexes
- Ip
Filter List<OpenObjects Search Opensearch User Config Ip Filter Object> - Allow incoming connections from CIDR address block, e.g.
10.20.0.0/16
- Ip
Filter List<string>Strings - Allow incoming connections from CIDR address block, e.g.
10.20.0.0/16
. - Ip
Filters List<string> - Allow incoming connections from CIDR address block, e.g.
10.20.0.0/16
. - Keep
Index boolRefresh Interval - Aiven automation resets index.refresh_interval to default value for every index to be sure that indices are always visible to search. If it doesn't fit your case, you can disable this by setting up this flag to true.
- Max
Index intCount - Use index_patterns instead. Default:
0
. - Openid
Open
Search Opensearch User Config Openid - OpenSearch OpenID Connect Configuration
- Opensearch
Open
Search Opensearch User Config Opensearch - OpenSearch settings
- Opensearch
Dashboards OpenSearch Opensearch User Config Opensearch Dashboards - OpenSearch Dashboards settings
- Opensearch
Version string - Enum:
1
,2
, and newer. OpenSearch major version. - Private
Access OpenSearch Opensearch User Config Private Access - Allow access to selected service ports from private networks
- Privatelink
Access OpenSearch Opensearch User Config Privatelink Access - Allow access to selected service components through Privatelink
- Project
To stringFork From - Name of another project to fork a service from. This has effect only when a new service is being created. Example:
anotherprojectname
. - Public
Access OpenSearch Opensearch User Config Public Access - Allow access to selected service ports from the public Internet
- Recovery
Basebackup stringName - Name of the basebackup to restore in forked service. Example:
backup-20191112t091354293891z
. - Saml
Open
Search Opensearch User Config Saml - OpenSearch SAML configuration
- Service
Log bool - Store logs for the service so that they are available in the HTTP API and console.
- Service
To stringFork From - Name of another service to fork from. This has effect only when a new service is being created. Example:
anotherservicename
. - Static
Ips bool - Use static public IP addresses.
- Additional
Backup stringRegions - Additional Cloud Regions for Backup Replication.
- Custom
Domain string - Serve the web frontend using a custom CNAME pointing to the Aiven DNS name. Example:
grafana.example.org
. - Disable
Replication boolFactor Adjustment - Disable automatic replication factor adjustment for multi-node services. By default, Aiven ensures all indexes are replicated at least to two nodes. Note: Due to potential data loss in case of losing a service node, this setting can no longer be activated.
- Index
Patterns []OpenSearch Opensearch User Config Index Pattern - Index patterns
- Index
Template OpenSearch Opensearch User Config Index Template - Template settings for all new indexes
- Ip
Filter []OpenObjects Search Opensearch User Config Ip Filter Object - Allow incoming connections from CIDR address block, e.g.
10.20.0.0/16
- Ip
Filter []stringStrings - Allow incoming connections from CIDR address block, e.g.
10.20.0.0/16
. - Ip
Filters []string - Allow incoming connections from CIDR address block, e.g.
10.20.0.0/16
. - Keep
Index boolRefresh Interval - Aiven automation resets index.refresh_interval to default value for every index to be sure that indices are always visible to search. If it doesn't fit your case, you can disable this by setting up this flag to true.
- Max
Index intCount - Use index_patterns instead. Default:
0
. - Openid
Open
Search Opensearch User Config Openid - OpenSearch OpenID Connect Configuration
- Opensearch
Open
Search Opensearch User Config Opensearch - OpenSearch settings
- Opensearch
Dashboards OpenSearch Opensearch User Config Opensearch Dashboards - OpenSearch Dashboards settings
- Opensearch
Version string - Enum:
1
,2
, and newer. OpenSearch major version. - Private
Access OpenSearch Opensearch User Config Private Access - Allow access to selected service ports from private networks
- Privatelink
Access OpenSearch Opensearch User Config Privatelink Access - Allow access to selected service components through Privatelink
- Project
To stringFork From - Name of another project to fork a service from. This has effect only when a new service is being created. Example:
anotherprojectname
. - Public
Access OpenSearch Opensearch User Config Public Access - Allow access to selected service ports from the public Internet
- Recovery
Basebackup stringName - Name of the basebackup to restore in forked service. Example:
backup-20191112t091354293891z
. - Saml
Open
Search Opensearch User Config Saml - OpenSearch SAML configuration
- Service
Log bool - Store logs for the service so that they are available in the HTTP API and console.
- Service
To stringFork From - Name of another service to fork from. This has effect only when a new service is being created. Example:
anotherservicename
. - Static
Ips bool - Use static public IP addresses.
- additional
Backup StringRegions - Additional Cloud Regions for Backup Replication.
- custom
Domain String - Serve the web frontend using a custom CNAME pointing to the Aiven DNS name. Example:
grafana.example.org
. - disable
Replication BooleanFactor Adjustment - Disable automatic replication factor adjustment for multi-node services. By default, Aiven ensures all indexes are replicated at least to two nodes. Note: Due to potential data loss in case of losing a service node, this setting can no longer be activated.
- index
Patterns List<OpenSearch Opensearch User Config Index Pattern> - Index patterns
- index
Template OpenSearch Opensearch User Config Index Template - Template settings for all new indexes
- ip
Filter List<OpenObjects Search Opensearch User Config Ip Filter Object> - Allow incoming connections from CIDR address block, e.g.
10.20.0.0/16
- ip
Filter List<String>Strings - Allow incoming connections from CIDR address block, e.g.
10.20.0.0/16
. - ip
Filters List<String> - Allow incoming connections from CIDR address block, e.g.
10.20.0.0/16
. - keep
Index BooleanRefresh Interval - Aiven automation resets index.refresh_interval to default value for every index to be sure that indices are always visible to search. If it doesn't fit your case, you can disable this by setting up this flag to true.
- max
Index IntegerCount - Use index_patterns instead. Default:
0
. - openid
Open
Search Opensearch User Config Openid - OpenSearch OpenID Connect Configuration
- opensearch
Open
Search Opensearch User Config Opensearch - OpenSearch settings
- opensearch
Dashboards OpenSearch Opensearch User Config Opensearch Dashboards - OpenSearch Dashboards settings
- opensearch
Version String - Enum:
1
,2
, and newer. OpenSearch major version. - private
Access OpenSearch Opensearch User Config Private Access - Allow access to selected service ports from private networks
- privatelink
Access OpenSearch Opensearch User Config Privatelink Access - Allow access to selected service components through Privatelink
- project
To StringFork From - Name of another project to fork a service from. This has effect only when a new service is being created. Example:
anotherprojectname
. - public
Access OpenSearch Opensearch User Config Public Access - Allow access to selected service ports from the public Internet
- recovery
Basebackup StringName - Name of the basebackup to restore in forked service. Example:
backup-20191112t091354293891z
. - saml
Open
Search Opensearch User Config Saml - OpenSearch SAML configuration
- service
Log Boolean - Store logs for the service so that they are available in the HTTP API and console.
- service
To StringFork From - Name of another service to fork from. This has effect only when a new service is being created. Example:
anotherservicename
. - static
Ips Boolean - Use static public IP addresses.
- additional
Backup stringRegions - Additional Cloud Regions for Backup Replication.
- custom
Domain string - Serve the web frontend using a custom CNAME pointing to the Aiven DNS name. Example:
grafana.example.org
. - disable
Replication booleanFactor Adjustment - Disable automatic replication factor adjustment for multi-node services. By default, Aiven ensures all indexes are replicated at least to two nodes. Note: Due to potential data loss in case of losing a service node, this setting can no longer be activated.
- index
Patterns OpenSearch Opensearch User Config Index Pattern[] - Index patterns
- index
Template OpenSearch Opensearch User Config Index Template - Template settings for all new indexes
- ip
Filter OpenObjects Search Opensearch User Config Ip Filter Object[] - Allow incoming connections from CIDR address block, e.g.
10.20.0.0/16
- ip
Filter string[]Strings - Allow incoming connections from CIDR address block, e.g.
10.20.0.0/16
. - ip
Filters string[] - Allow incoming connections from CIDR address block, e.g.
10.20.0.0/16
. - keep
Index booleanRefresh Interval - Aiven automation resets index.refresh_interval to default value for every index to be sure that indices are always visible to search. If it doesn't fit your case, you can disable this by setting up this flag to true.
- max
Index numberCount - Use index_patterns instead. Default:
0
. - openid
Open
Search Opensearch User Config Openid - OpenSearch OpenID Connect Configuration
- opensearch
Open
Search Opensearch User Config Opensearch - OpenSearch settings
- opensearch
Dashboards OpenSearch Opensearch User Config Opensearch Dashboards - OpenSearch Dashboards settings
- opensearch
Version string - Enum:
1
,2
, and newer. OpenSearch major version. - private
Access OpenSearch Opensearch User Config Private Access - Allow access to selected service ports from private networks
- privatelink
Access OpenSearch Opensearch User Config Privatelink Access - Allow access to selected service components through Privatelink
- project
To stringFork From - Name of another project to fork a service from. This has effect only when a new service is being created. Example:
anotherprojectname
. - public
Access OpenSearch Opensearch User Config Public Access - Allow access to selected service ports from the public Internet
- recovery
Basebackup stringName - Name of the basebackup to restore in forked service. Example:
backup-20191112t091354293891z
. - saml
Open
Search Opensearch User Config Saml - OpenSearch SAML configuration
- service
Log boolean - Store logs for the service so that they are available in the HTTP API and console.
- service
To stringFork From - Name of another service to fork from. This has effect only when a new service is being created. Example:
anotherservicename
. - static
Ips boolean - Use static public IP addresses.
- additional_
backup_ strregions - Additional Cloud Regions for Backup Replication.
- custom_
domain str - Serve the web frontend using a custom CNAME pointing to the Aiven DNS name. Example:
grafana.example.org
. - disable_
replication_ boolfactor_ adjustment - Disable automatic replication factor adjustment for multi-node services. By default, Aiven ensures all indexes are replicated at least to two nodes. Note: Due to potential data loss in case of losing a service node, this setting can no longer be activated.
- index_
patterns Sequence[OpenSearch Opensearch User Config Index Pattern] - Index patterns
- index_
template OpenSearch Opensearch User Config Index Template - Template settings for all new indexes
- ip_
filter_ Sequence[Openobjects Search Opensearch User Config Ip Filter Object] - Allow incoming connections from CIDR address block, e.g.
10.20.0.0/16
- ip_
filter_ Sequence[str]strings - Allow incoming connections from CIDR address block, e.g.
10.20.0.0/16
. - ip_
filters Sequence[str] - Allow incoming connections from CIDR address block, e.g.
10.20.0.0/16
. - keep_
index_ boolrefresh_ interval - Aiven automation resets index.refresh_interval to default value for every index to be sure that indices are always visible to search. If it doesn't fit your case, you can disable this by setting up this flag to true.
- max_
index_ intcount - Use index_patterns instead. Default:
0
. - openid
Open
Search Opensearch User Config Openid - OpenSearch OpenID Connect Configuration
- opensearch
Open
Search Opensearch User Config Opensearch - OpenSearch settings
- opensearch_
dashboards OpenSearch Opensearch User Config Opensearch Dashboards - OpenSearch Dashboards settings
- opensearch_
version str - Enum:
1
,2
, and newer. OpenSearch major version. - private_
access OpenSearch Opensearch User Config Private Access - Allow access to selected service ports from private networks
- privatelink_
access OpenSearch Opensearch User Config Privatelink Access - Allow access to selected service components through Privatelink
- project_
to_ strfork_ from - Name of another project to fork a service from. This has effect only when a new service is being created. Example:
anotherprojectname
. - public_
access OpenSearch Opensearch User Config Public Access - Allow access to selected service ports from the public Internet
- recovery_
basebackup_ strname - Name of the basebackup to restore in forked service. Example:
backup-20191112t091354293891z
. - saml
Open
Search Opensearch User Config Saml - OpenSearch SAML configuration
- service_
log bool - Store logs for the service so that they are available in the HTTP API and console.
- service_
to_ strfork_ from - Name of another service to fork from. This has effect only when a new service is being created. Example:
anotherservicename
. - static_
ips bool - Use static public IP addresses.
- additional
Backup StringRegions - Additional Cloud Regions for Backup Replication.
- custom
Domain String - Serve the web frontend using a custom CNAME pointing to the Aiven DNS name. Example:
grafana.example.org
. - disable
Replication BooleanFactor Adjustment - Disable automatic replication factor adjustment for multi-node services. By default, Aiven ensures all indexes are replicated at least to two nodes. Note: Due to potential data loss in case of losing a service node, this setting can no longer be activated.
- index
Patterns List<Property Map> - Index patterns
- index
Template Property Map - Template settings for all new indexes
- ip
Filter List<Property Map>Objects - Allow incoming connections from CIDR address block, e.g.
10.20.0.0/16
- ip
Filter List<String>Strings - Allow incoming connections from CIDR address block, e.g.
10.20.0.0/16
. - ip
Filters List<String> - Allow incoming connections from CIDR address block, e.g.
10.20.0.0/16
. - keep
Index BooleanRefresh Interval - Aiven automation resets index.refresh_interval to default value for every index to be sure that indices are always visible to search. If it doesn't fit your case, you can disable this by setting up this flag to true.
- max
Index NumberCount - Use index_patterns instead. Default:
0
. - openid Property Map
- OpenSearch OpenID Connect Configuration
- opensearch Property Map
- OpenSearch settings
- opensearch
Dashboards Property Map - OpenSearch Dashboards settings
- opensearch
Version String - Enum:
1
,2
, and newer. OpenSearch major version. - private
Access Property Map - Allow access to selected service ports from private networks
- privatelink
Access Property Map - Allow access to selected service components through Privatelink
- project
To StringFork From - Name of another project to fork a service from. This has effect only when a new service is being created. Example:
anotherprojectname
. - public
Access Property Map - Allow access to selected service ports from the public Internet
- recovery
Basebackup StringName - Name of the basebackup to restore in forked service. Example:
backup-20191112t091354293891z
. - saml Property Map
- OpenSearch SAML configuration
- service
Log Boolean - Store logs for the service so that they are available in the HTTP API and console.
- service
To StringFork From - Name of another service to fork from. This has effect only when a new service is being created. Example:
anotherservicename
. - static
Ips Boolean - Use static public IP addresses.
OpenSearchOpensearchUserConfigIndexPattern, OpenSearchOpensearchUserConfigIndexPatternArgs
- Max
Index intCount - Maximum number of indexes to keep. Example:
3
. - Pattern string
- fnmatch pattern. Example:
logs_*_foo_*
. - Sorting
Algorithm string - Enum:
alphabetical
,creation_date
. Deletion sorting algorithm. Default:creation_date
.
- Max
Index intCount - Maximum number of indexes to keep. Example:
3
. - Pattern string
- fnmatch pattern. Example:
logs_*_foo_*
. - Sorting
Algorithm string - Enum:
alphabetical
,creation_date
. Deletion sorting algorithm. Default:creation_date
.
- max
Index IntegerCount - Maximum number of indexes to keep. Example:
3
. - pattern String
- fnmatch pattern. Example:
logs_*_foo_*
. - sorting
Algorithm String - Enum:
alphabetical
,creation_date
. Deletion sorting algorithm. Default:creation_date
.
- max
Index numberCount - Maximum number of indexes to keep. Example:
3
. - pattern string
- fnmatch pattern. Example:
logs_*_foo_*
. - sorting
Algorithm string - Enum:
alphabetical
,creation_date
. Deletion sorting algorithm. Default:creation_date
.
- max_
index_ intcount - Maximum number of indexes to keep. Example:
3
. - pattern str
- fnmatch pattern. Example:
logs_*_foo_*
. - sorting_
algorithm str - Enum:
alphabetical
,creation_date
. Deletion sorting algorithm. Default:creation_date
.
- max
Index NumberCount - Maximum number of indexes to keep. Example:
3
. - pattern String
- fnmatch pattern. Example:
logs_*_foo_*
. - sorting
Algorithm String - Enum:
alphabetical
,creation_date
. Deletion sorting algorithm. Default:creation_date
.
OpenSearchOpensearchUserConfigIndexTemplate, OpenSearchOpensearchUserConfigIndexTemplateArgs
- Mapping
Nested intObjects Limit - The maximum number of nested JSON objects that a single document can contain across all nested types. This limit helps to prevent out of memory errors when a document contains too many nested objects. Default is 10000. Example:
10000
. - Number
Of intReplicas - The number of replicas each primary shard has. Example:
1
. - Number
Of intShards - The number of primary shards that an index should have. Example:
1
.
- Mapping
Nested intObjects Limit - The maximum number of nested JSON objects that a single document can contain across all nested types. This limit helps to prevent out of memory errors when a document contains too many nested objects. Default is 10000. Example:
10000
. - Number
Of intReplicas - The number of replicas each primary shard has. Example:
1
. - Number
Of intShards - The number of primary shards that an index should have. Example:
1
.
- mapping
Nested IntegerObjects Limit - The maximum number of nested JSON objects that a single document can contain across all nested types. This limit helps to prevent out of memory errors when a document contains too many nested objects. Default is 10000. Example:
10000
. - number
Of IntegerReplicas - The number of replicas each primary shard has. Example:
1
. - number
Of IntegerShards - The number of primary shards that an index should have. Example:
1
.
- mapping
Nested numberObjects Limit - The maximum number of nested JSON objects that a single document can contain across all nested types. This limit helps to prevent out of memory errors when a document contains too many nested objects. Default is 10000. Example:
10000
. - number
Of numberReplicas - The number of replicas each primary shard has. Example:
1
. - number
Of numberShards - The number of primary shards that an index should have. Example:
1
.
- mapping_
nested_ intobjects_ limit - The maximum number of nested JSON objects that a single document can contain across all nested types. This limit helps to prevent out of memory errors when a document contains too many nested objects. Default is 10000. Example:
10000
. - number_
of_ intreplicas - The number of replicas each primary shard has. Example:
1
. - number_
of_ intshards - The number of primary shards that an index should have. Example:
1
.
- mapping
Nested NumberObjects Limit - The maximum number of nested JSON objects that a single document can contain across all nested types. This limit helps to prevent out of memory errors when a document contains too many nested objects. Default is 10000. Example:
10000
. - number
Of NumberReplicas - The number of replicas each primary shard has. Example:
1
. - number
Of NumberShards - The number of primary shards that an index should have. Example:
1
.
OpenSearchOpensearchUserConfigIpFilterObject, OpenSearchOpensearchUserConfigIpFilterObjectArgs
- Network string
- CIDR address block. Example:
10.20.0.0/16
. - Description string
- Description for IP filter list entry. Example:
Production service IP range
.
- Network string
- CIDR address block. Example:
10.20.0.0/16
. - Description string
- Description for IP filter list entry. Example:
Production service IP range
.
- network String
- CIDR address block. Example:
10.20.0.0/16
. - description String
- Description for IP filter list entry. Example:
Production service IP range
.
- network string
- CIDR address block. Example:
10.20.0.0/16
. - description string
- Description for IP filter list entry. Example:
Production service IP range
.
- network str
- CIDR address block. Example:
10.20.0.0/16
. - description str
- Description for IP filter list entry. Example:
Production service IP range
.
- network String
- CIDR address block. Example:
10.20.0.0/16
. - description String
- Description for IP filter list entry. Example:
Production service IP range
.
OpenSearchOpensearchUserConfigOpenid, OpenSearchOpensearchUserConfigOpenidArgs
- Client
Id string - The ID of the OpenID Connect client configured in your IdP. Required. Example: ``.
- Client
Secret string - The client secret of the OpenID Connect client configured in your IdP. Required. Example: ``.
- Connect
Url string - The URL of your IdP where the Security plugin can find the OpenID Connect metadata/configuration settings. Example:
https://test-account.okta.com/app/exk491jujcVc83LEX697/sso/saml/metadata
. - Enabled bool
- Enables or disables OpenID Connect authentication for OpenSearch. When enabled, users can authenticate using OpenID Connect with an Identity Provider. Default:
true
. - Header string
- HTTP header name of the JWT token. Optional. Default is Authorization. Default:
Authorization
. - Jwt
Header string - The HTTP header that stores the token. Typically the Authorization header with the Bearer schema: Authorization: Bearer \n\n. Optional. Default is Authorization. Example:
preferred_username
. - Jwt
Url stringParameter - If the token is not transmitted in the HTTP header, but as an URL parameter, define the name of the parameter here. Optional. Example:
preferred_username
. - Refresh
Rate intLimit Count - The maximum number of unknown key IDs in the time frame. Default is 10. Optional. Default:
10
. - Refresh
Rate intLimit Time Window Ms - The time frame to use when checking the maximum number of unknown key IDs, in milliseconds. Optional.Default is 10000 (10 seconds). Default:
10000
. - Roles
Key string - The key in the JSON payload that stores the user’s roles. The value of this key must be a comma-separated list of roles. Required only if you want to use roles in the JWT. Example:
roles
. - Scope string
- The scope of the identity token issued by the IdP. Optional. Default is openid profile email address phone. Example: ``.
- Subject
Key string - The key in the JSON payload that stores the user’s name. If not defined, the subject registered claim is used. Most IdP providers use the preferred_username claim. Optional. Example:
preferred_username
.
- Client
Id string - The ID of the OpenID Connect client configured in your IdP. Required. Example: ``.
- Client
Secret string - The client secret of the OpenID Connect client configured in your IdP. Required. Example: ``.
- Connect
Url string - The URL of your IdP where the Security plugin can find the OpenID Connect metadata/configuration settings. Example:
https://test-account.okta.com/app/exk491jujcVc83LEX697/sso/saml/metadata
. - Enabled bool
- Enables or disables OpenID Connect authentication for OpenSearch. When enabled, users can authenticate using OpenID Connect with an Identity Provider. Default:
true
. - Header string
- HTTP header name of the JWT token. Optional. Default is Authorization. Default:
Authorization
. - Jwt
Header string - The HTTP header that stores the token. Typically the Authorization header with the Bearer schema: Authorization: Bearer \n\n. Optional. Default is Authorization. Example:
preferred_username
. - Jwt
Url stringParameter - If the token is not transmitted in the HTTP header, but as an URL parameter, define the name of the parameter here. Optional. Example:
preferred_username
. - Refresh
Rate intLimit Count - The maximum number of unknown key IDs in the time frame. Default is 10. Optional. Default:
10
. - Refresh
Rate intLimit Time Window Ms - The time frame to use when checking the maximum number of unknown key IDs, in milliseconds. Optional.Default is 10000 (10 seconds). Default:
10000
. - Roles
Key string - The key in the JSON payload that stores the user’s roles. The value of this key must be a comma-separated list of roles. Required only if you want to use roles in the JWT. Example:
roles
. - Scope string
- The scope of the identity token issued by the IdP. Optional. Default is openid profile email address phone. Example: ``.
- Subject
Key string - The key in the JSON payload that stores the user’s name. If not defined, the subject registered claim is used. Most IdP providers use the preferred_username claim. Optional. Example:
preferred_username
.
- client
Id String - The ID of the OpenID Connect client configured in your IdP. Required. Example: ``.
- client
Secret String - The client secret of the OpenID Connect client configured in your IdP. Required. Example: ``.
- connect
Url String - The URL of your IdP where the Security plugin can find the OpenID Connect metadata/configuration settings. Example:
https://test-account.okta.com/app/exk491jujcVc83LEX697/sso/saml/metadata
. - enabled Boolean
- Enables or disables OpenID Connect authentication for OpenSearch. When enabled, users can authenticate using OpenID Connect with an Identity Provider. Default:
true
. - header String
- HTTP header name of the JWT token. Optional. Default is Authorization. Default:
Authorization
. - jwt
Header String - The HTTP header that stores the token. Typically the Authorization header with the Bearer schema: Authorization: Bearer \n\n. Optional. Default is Authorization. Example:
preferred_username
. - jwt
Url StringParameter - If the token is not transmitted in the HTTP header, but as an URL parameter, define the name of the parameter here. Optional. Example:
preferred_username
. - refresh
Rate IntegerLimit Count - The maximum number of unknown key IDs in the time frame. Default is 10. Optional. Default:
10
. - refresh
Rate IntegerLimit Time Window Ms - The time frame to use when checking the maximum number of unknown key IDs, in milliseconds. Optional.Default is 10000 (10 seconds). Default:
10000
. - roles
Key String - The key in the JSON payload that stores the user’s roles. The value of this key must be a comma-separated list of roles. Required only if you want to use roles in the JWT. Example:
roles
. - scope String
- The scope of the identity token issued by the IdP. Optional. Default is openid profile email address phone. Example: ``.
- subject
Key String - The key in the JSON payload that stores the user’s name. If not defined, the subject registered claim is used. Most IdP providers use the preferred_username claim. Optional. Example:
preferred_username
.
- client
Id string - The ID of the OpenID Connect client configured in your IdP. Required. Example: ``.
- client
Secret string - The client secret of the OpenID Connect client configured in your IdP. Required. Example: ``.
- connect
Url string - The URL of your IdP where the Security plugin can find the OpenID Connect metadata/configuration settings. Example:
https://test-account.okta.com/app/exk491jujcVc83LEX697/sso/saml/metadata
. - enabled boolean
- Enables or disables OpenID Connect authentication for OpenSearch. When enabled, users can authenticate using OpenID Connect with an Identity Provider. Default:
true
. - header string
- HTTP header name of the JWT token. Optional. Default is Authorization. Default:
Authorization
. - jwt
Header string - The HTTP header that stores the token. Typically the Authorization header with the Bearer schema: Authorization: Bearer \n\n. Optional. Default is Authorization. Example:
preferred_username
. - jwt
Url stringParameter - If the token is not transmitted in the HTTP header, but as an URL parameter, define the name of the parameter here. Optional. Example:
preferred_username
. - refresh
Rate numberLimit Count - The maximum number of unknown key IDs in the time frame. Default is 10. Optional. Default:
10
. - refresh
Rate numberLimit Time Window Ms - The time frame to use when checking the maximum number of unknown key IDs, in milliseconds. Optional.Default is 10000 (10 seconds). Default:
10000
. - roles
Key string - The key in the JSON payload that stores the user’s roles. The value of this key must be a comma-separated list of roles. Required only if you want to use roles in the JWT. Example:
roles
. - scope string
- The scope of the identity token issued by the IdP. Optional. Default is openid profile email address phone. Example: ``.
- subject
Key string - The key in the JSON payload that stores the user’s name. If not defined, the subject registered claim is used. Most IdP providers use the preferred_username claim. Optional. Example:
preferred_username
.
- client_
id str - The ID of the OpenID Connect client configured in your IdP. Required. Example: ``.
- client_
secret str - The client secret of the OpenID Connect client configured in your IdP. Required. Example: ``.
- connect_
url str - The URL of your IdP where the Security plugin can find the OpenID Connect metadata/configuration settings. Example:
https://test-account.okta.com/app/exk491jujcVc83LEX697/sso/saml/metadata
. - enabled bool
- Enables or disables OpenID Connect authentication for OpenSearch. When enabled, users can authenticate using OpenID Connect with an Identity Provider. Default:
true
. - header str
- HTTP header name of the JWT token. Optional. Default is Authorization. Default:
Authorization
. - jwt_
header str - The HTTP header that stores the token. Typically the Authorization header with the Bearer schema: Authorization: Bearer \n\n. Optional. Default is Authorization. Example:
preferred_username
. - jwt_
url_ strparameter - If the token is not transmitted in the HTTP header, but as an URL parameter, define the name of the parameter here. Optional. Example:
preferred_username
. - refresh_
rate_ intlimit_ count - The maximum number of unknown key IDs in the time frame. Default is 10. Optional. Default:
10
. - refresh_
rate_ intlimit_ time_ window_ ms - The time frame to use when checking the maximum number of unknown key IDs, in milliseconds. Optional.Default is 10000 (10 seconds). Default:
10000
. - roles_
key str - The key in the JSON payload that stores the user’s roles. The value of this key must be a comma-separated list of roles. Required only if you want to use roles in the JWT. Example:
roles
. - scope str
- The scope of the identity token issued by the IdP. Optional. Default is openid profile email address phone. Example: ``.
- subject_
key str - The key in the JSON payload that stores the user’s name. If not defined, the subject registered claim is used. Most IdP providers use the preferred_username claim. Optional. Example:
preferred_username
.
- client
Id String - The ID of the OpenID Connect client configured in your IdP. Required. Example: ``.
- client
Secret String - The client secret of the OpenID Connect client configured in your IdP. Required. Example: ``.
- connect
Url String - The URL of your IdP where the Security plugin can find the OpenID Connect metadata/configuration settings. Example:
https://test-account.okta.com/app/exk491jujcVc83LEX697/sso/saml/metadata
. - enabled Boolean
- Enables or disables OpenID Connect authentication for OpenSearch. When enabled, users can authenticate using OpenID Connect with an Identity Provider. Default:
true
. - header String
- HTTP header name of the JWT token. Optional. Default is Authorization. Default:
Authorization
. - jwt
Header String - The HTTP header that stores the token. Typically the Authorization header with the Bearer schema: Authorization: Bearer \n\n. Optional. Default is Authorization. Example:
preferred_username
. - jwt
Url StringParameter - If the token is not transmitted in the HTTP header, but as an URL parameter, define the name of the parameter here. Optional. Example:
preferred_username
. - refresh
Rate NumberLimit Count - The maximum number of unknown key IDs in the time frame. Default is 10. Optional. Default:
10
. - refresh
Rate NumberLimit Time Window Ms - The time frame to use when checking the maximum number of unknown key IDs, in milliseconds. Optional.Default is 10000 (10 seconds). Default:
10000
. - roles
Key String - The key in the JSON payload that stores the user’s roles. The value of this key must be a comma-separated list of roles. Required only if you want to use roles in the JWT. Example:
roles
. - scope String
- The scope of the identity token issued by the IdP. Optional. Default is openid profile email address phone. Example: ``.
- subject
Key String - The key in the JSON payload that stores the user’s name. If not defined, the subject registered claim is used. Most IdP providers use the preferred_username claim. Optional. Example:
preferred_username
.
OpenSearchOpensearchUserConfigOpensearch, OpenSearchOpensearchUserConfigOpensearchArgs
- Action
Auto boolCreate Index Enabled - Explicitly allow or block automatic creation of indices. Defaults to true.
- Action
Destructive boolRequires Name - Require explicit index names when deleting.
- Auth
Failure OpenListeners Search Opensearch User Config Opensearch Auth Failure Listeners - Opensearch Security Plugin Settings
- Cluster
Max intShards Per Node - Controls the number of shards allowed in the cluster per data node. Example:
1000
. - Cluster
Routing intAllocation Node Concurrent Recoveries - How many concurrent incoming/outgoing shard recoveries (normally replicas) are allowed to happen on a node. Defaults to 2.
- Email
Sender stringName - Sender name placeholder to be used in Opensearch Dashboards and Opensearch keystore. Example:
alert-sender
. - Email
Sender stringPassword - Sender password for Opensearch alerts to authenticate with SMTP server. Example:
very-secure-mail-password
. - Email
Sender stringUsername - Sender username for Opensearch alerts. Example:
jane@example.com
. - Enable
Security boolAudit - Enable/Disable security audit. Default:
false
. - Http
Max intContent Length - Maximum content length for HTTP requests to the OpenSearch HTTP API, in bytes.
- Http
Max intHeader Size - The max size of allowed headers, in bytes. Example:
8192
. - Http
Max intInitial Line Length - The max length of an HTTP URL, in bytes. Example:
4096
. - Indices
Fielddata intCache Size - Relative amount. Maximum amount of heap memory used for field data cache. This is an expert setting; decreasing the value too much will increase overhead of loading field data; too much memory used for field data cache will decrease amount of heap available for other operations.
- Indices
Memory intIndex Buffer Size - Percentage value. Default is 10%. Total amount of heap used for indexing buffer, before writing segments to disk. This is an expert setting. Too low value will slow down indexing; too high value will increase indexing performance but causes performance issues for query performance.
- Indices
Memory intMax Index Buffer Size - Absolute value. Default is unbound. Doesn't work without indices.memory.indexbuffersize. Maximum amount of heap used for query cache, an absolute indices.memory.indexbuffersize maximum hard limit.
- Indices
Memory intMin Index Buffer Size - Absolute value. Default is 48mb. Doesn't work without indices.memory.indexbuffersize. Minimum amount of heap used for query cache, an absolute indices.memory.indexbuffersize minimal hard limit.
- Indices
Queries intCache Size - Percentage value. Default is 10%. Maximum amount of heap used for query cache. This is an expert setting. Too low value will decrease query performance and increase performance for other operations; too high value will cause issues with other OpenSearch functionality.
- Indices
Query intBool Max Clause Count - Maximum number of clauses Lucene BooleanQuery can have. The default value (1024) is relatively high, and increasing it may cause performance issues. Investigate other approaches first before increasing this value.
- Indices
Recovery intMax Bytes Per Sec - Limits total inbound and outbound recovery traffic for each node. Applies to both peer recoveries as well as snapshot recoveries (i.e., restores from a snapshot). Defaults to 40mb.
- Indices
Recovery intMax Concurrent File Chunks - Number of file chunks sent in parallel for each recovery. Defaults to 2.
- Ism
Enabled bool - Specifies whether ISM is enabled or not. Default:
true
. - Ism
History boolEnabled - Specifies whether audit history is enabled or not. The logs from ISM are automatically indexed to a logs document. Default:
true
. - Ism
History intMax Age - The maximum age before rolling over the audit history index in hours. Default:
24
. - Ism
History intMax Docs - The maximum number of documents before rolling over the audit history index. Default:
2500000
. - Ism
History intRollover Check Period - The time between rollover checks for the audit history index in hours. Default:
8
. - Ism
History intRollover Retention Period - How long audit history indices are kept in days. Default:
30
. - Override
Main boolResponse Version - Compatibility mode sets OpenSearch to report its version as 7.10 so clients continue to work. Default is false.
- Plugins
Alerting boolFilter By Backend Roles - Enable or disable filtering of alerting by backend roles. Requires Security plugin. Defaults to false.
- Reindex
Remote List<string>Whitelists - Whitelisted addresses for reindexing. Changing this value will cause all OpenSearch instances to restart.
- Script
Max stringCompilations Rate - Script compilation circuit breaker limits the number of inline script compilations within a period of time. Default is use-context. Example:
75/5m
. - Search
Max intBuckets - Maximum number of aggregation buckets allowed in a single response. OpenSearch default value is used when this is not defined. Example:
10000
. - Thread
Pool intAnalyze Queue Size - Size for the thread pool queue. See documentation for exact details.
- Thread
Pool intAnalyze Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- Thread
Pool intForce Merge Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- Thread
Pool intGet Queue Size - Size for the thread pool queue. See documentation for exact details.
- Thread
Pool intGet Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- Thread
Pool intSearch Queue Size - Size for the thread pool queue. See documentation for exact details.
- Thread
Pool intSearch Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- Thread
Pool intSearch Throttled Queue Size - Size for the thread pool queue. See documentation for exact details.
- Thread
Pool intSearch Throttled Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- Thread
Pool intWrite Queue Size - Size for the thread pool queue. See documentation for exact details.
- Thread
Pool intWrite Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- Action
Auto boolCreate Index Enabled - Explicitly allow or block automatic creation of indices. Defaults to true.
- Action
Destructive boolRequires Name - Require explicit index names when deleting.
- Auth
Failure OpenListeners Search Opensearch User Config Opensearch Auth Failure Listeners - Opensearch Security Plugin Settings
- Cluster
Max intShards Per Node - Controls the number of shards allowed in the cluster per data node. Example:
1000
. - Cluster
Routing intAllocation Node Concurrent Recoveries - How many concurrent incoming/outgoing shard recoveries (normally replicas) are allowed to happen on a node. Defaults to 2.
- Email
Sender stringName - Sender name placeholder to be used in Opensearch Dashboards and Opensearch keystore. Example:
alert-sender
. - Email
Sender stringPassword - Sender password for Opensearch alerts to authenticate with SMTP server. Example:
very-secure-mail-password
. - Email
Sender stringUsername - Sender username for Opensearch alerts. Example:
jane@example.com
. - Enable
Security boolAudit - Enable/Disable security audit. Default:
false
. - Http
Max intContent Length - Maximum content length for HTTP requests to the OpenSearch HTTP API, in bytes.
- Http
Max intHeader Size - The max size of allowed headers, in bytes. Example:
8192
. - Http
Max intInitial Line Length - The max length of an HTTP URL, in bytes. Example:
4096
. - Indices
Fielddata intCache Size - Relative amount. Maximum amount of heap memory used for field data cache. This is an expert setting; decreasing the value too much will increase overhead of loading field data; too much memory used for field data cache will decrease amount of heap available for other operations.
- Indices
Memory intIndex Buffer Size - Percentage value. Default is 10%. Total amount of heap used for indexing buffer, before writing segments to disk. This is an expert setting. Too low value will slow down indexing; too high value will increase indexing performance but causes performance issues for query performance.
- Indices
Memory intMax Index Buffer Size - Absolute value. Default is unbound. Doesn't work without indices.memory.indexbuffersize. Maximum amount of heap used for query cache, an absolute indices.memory.indexbuffersize maximum hard limit.
- Indices
Memory intMin Index Buffer Size - Absolute value. Default is 48mb. Doesn't work without indices.memory.indexbuffersize. Minimum amount of heap used for query cache, an absolute indices.memory.indexbuffersize minimal hard limit.
- Indices
Queries intCache Size - Percentage value. Default is 10%. Maximum amount of heap used for query cache. This is an expert setting. Too low value will decrease query performance and increase performance for other operations; too high value will cause issues with other OpenSearch functionality.
- Indices
Query intBool Max Clause Count - Maximum number of clauses Lucene BooleanQuery can have. The default value (1024) is relatively high, and increasing it may cause performance issues. Investigate other approaches first before increasing this value.
- Indices
Recovery intMax Bytes Per Sec - Limits total inbound and outbound recovery traffic for each node. Applies to both peer recoveries as well as snapshot recoveries (i.e., restores from a snapshot). Defaults to 40mb.
- Indices
Recovery intMax Concurrent File Chunks - Number of file chunks sent in parallel for each recovery. Defaults to 2.
- Ism
Enabled bool - Specifies whether ISM is enabled or not. Default:
true
. - Ism
History boolEnabled - Specifies whether audit history is enabled or not. The logs from ISM are automatically indexed to a logs document. Default:
true
. - Ism
History intMax Age - The maximum age before rolling over the audit history index in hours. Default:
24
. - Ism
History intMax Docs - The maximum number of documents before rolling over the audit history index. Default:
2500000
. - Ism
History intRollover Check Period - The time between rollover checks for the audit history index in hours. Default:
8
. - Ism
History intRollover Retention Period - How long audit history indices are kept in days. Default:
30
. - Override
Main boolResponse Version - Compatibility mode sets OpenSearch to report its version as 7.10 so clients continue to work. Default is false.
- Plugins
Alerting boolFilter By Backend Roles - Enable or disable filtering of alerting by backend roles. Requires Security plugin. Defaults to false.
- Reindex
Remote []stringWhitelists - Whitelisted addresses for reindexing. Changing this value will cause all OpenSearch instances to restart.
- Script
Max stringCompilations Rate - Script compilation circuit breaker limits the number of inline script compilations within a period of time. Default is use-context. Example:
75/5m
. - Search
Max intBuckets - Maximum number of aggregation buckets allowed in a single response. OpenSearch default value is used when this is not defined. Example:
10000
. - Thread
Pool intAnalyze Queue Size - Size for the thread pool queue. See documentation for exact details.
- Thread
Pool intAnalyze Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- Thread
Pool intForce Merge Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- Thread
Pool intGet Queue Size - Size for the thread pool queue. See documentation for exact details.
- Thread
Pool intGet Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- Thread
Pool intSearch Queue Size - Size for the thread pool queue. See documentation for exact details.
- Thread
Pool intSearch Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- Thread
Pool intSearch Throttled Queue Size - Size for the thread pool queue. See documentation for exact details.
- Thread
Pool intSearch Throttled Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- Thread
Pool intWrite Queue Size - Size for the thread pool queue. See documentation for exact details.
- Thread
Pool intWrite Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- action
Auto BooleanCreate Index Enabled - Explicitly allow or block automatic creation of indices. Defaults to true.
- action
Destructive BooleanRequires Name - Require explicit index names when deleting.
- auth
Failure OpenListeners Search Opensearch User Config Opensearch Auth Failure Listeners - Opensearch Security Plugin Settings
- cluster
Max IntegerShards Per Node - Controls the number of shards allowed in the cluster per data node. Example:
1000
. - cluster
Routing IntegerAllocation Node Concurrent Recoveries - How many concurrent incoming/outgoing shard recoveries (normally replicas) are allowed to happen on a node. Defaults to 2.
- email
Sender StringName - Sender name placeholder to be used in Opensearch Dashboards and Opensearch keystore. Example:
alert-sender
. - email
Sender StringPassword - Sender password for Opensearch alerts to authenticate with SMTP server. Example:
very-secure-mail-password
. - email
Sender StringUsername - Sender username for Opensearch alerts. Example:
jane@example.com
. - enable
Security BooleanAudit - Enable/Disable security audit. Default:
false
. - http
Max IntegerContent Length - Maximum content length for HTTP requests to the OpenSearch HTTP API, in bytes.
- http
Max IntegerHeader Size - The max size of allowed headers, in bytes. Example:
8192
. - http
Max IntegerInitial Line Length - The max length of an HTTP URL, in bytes. Example:
4096
. - indices
Fielddata IntegerCache Size - Relative amount. Maximum amount of heap memory used for field data cache. This is an expert setting; decreasing the value too much will increase overhead of loading field data; too much memory used for field data cache will decrease amount of heap available for other operations.
- indices
Memory IntegerIndex Buffer Size - Percentage value. Default is 10%. Total amount of heap used for indexing buffer, before writing segments to disk. This is an expert setting. Too low value will slow down indexing; too high value will increase indexing performance but causes performance issues for query performance.
- indices
Memory IntegerMax Index Buffer Size - Absolute value. Default is unbound. Doesn't work without indices.memory.indexbuffersize. Maximum amount of heap used for query cache, an absolute indices.memory.indexbuffersize maximum hard limit.
- indices
Memory IntegerMin Index Buffer Size - Absolute value. Default is 48mb. Doesn't work without indices.memory.indexbuffersize. Minimum amount of heap used for query cache, an absolute indices.memory.indexbuffersize minimal hard limit.
- indices
Queries IntegerCache Size - Percentage value. Default is 10%. Maximum amount of heap used for query cache. This is an expert setting. Too low value will decrease query performance and increase performance for other operations; too high value will cause issues with other OpenSearch functionality.
- indices
Query IntegerBool Max Clause Count - Maximum number of clauses Lucene BooleanQuery can have. The default value (1024) is relatively high, and increasing it may cause performance issues. Investigate other approaches first before increasing this value.
- indices
Recovery IntegerMax Bytes Per Sec - Limits total inbound and outbound recovery traffic for each node. Applies to both peer recoveries as well as snapshot recoveries (i.e., restores from a snapshot). Defaults to 40mb.
- indices
Recovery IntegerMax Concurrent File Chunks - Number of file chunks sent in parallel for each recovery. Defaults to 2.
- ism
Enabled Boolean - Specifies whether ISM is enabled or not. Default:
true
. - ism
History BooleanEnabled - Specifies whether audit history is enabled or not. The logs from ISM are automatically indexed to a logs document. Default:
true
. - ism
History IntegerMax Age - The maximum age before rolling over the audit history index in hours. Default:
24
. - ism
History IntegerMax Docs - The maximum number of documents before rolling over the audit history index. Default:
2500000
. - ism
History IntegerRollover Check Period - The time between rollover checks for the audit history index in hours. Default:
8
. - ism
History IntegerRollover Retention Period - How long audit history indices are kept in days. Default:
30
. - override
Main BooleanResponse Version - Compatibility mode sets OpenSearch to report its version as 7.10 so clients continue to work. Default is false.
- plugins
Alerting BooleanFilter By Backend Roles - Enable or disable filtering of alerting by backend roles. Requires Security plugin. Defaults to false.
- reindex
Remote List<String>Whitelists - Whitelisted addresses for reindexing. Changing this value will cause all OpenSearch instances to restart.
- script
Max StringCompilations Rate - Script compilation circuit breaker limits the number of inline script compilations within a period of time. Default is use-context. Example:
75/5m
. - search
Max IntegerBuckets - Maximum number of aggregation buckets allowed in a single response. OpenSearch default value is used when this is not defined. Example:
10000
. - thread
Pool IntegerAnalyze Queue Size - Size for the thread pool queue. See documentation for exact details.
- thread
Pool IntegerAnalyze Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread
Pool IntegerForce Merge Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread
Pool IntegerGet Queue Size - Size for the thread pool queue. See documentation for exact details.
- thread
Pool IntegerGet Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread
Pool IntegerSearch Queue Size - Size for the thread pool queue. See documentation for exact details.
- thread
Pool IntegerSearch Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread
Pool IntegerSearch Throttled Queue Size - Size for the thread pool queue. See documentation for exact details.
- thread
Pool IntegerSearch Throttled Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread
Pool IntegerWrite Queue Size - Size for the thread pool queue. See documentation for exact details.
- thread
Pool IntegerWrite Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- action
Auto booleanCreate Index Enabled - Explicitly allow or block automatic creation of indices. Defaults to true.
- action
Destructive booleanRequires Name - Require explicit index names when deleting.
- auth
Failure OpenListeners Search Opensearch User Config Opensearch Auth Failure Listeners - Opensearch Security Plugin Settings
- cluster
Max numberShards Per Node - Controls the number of shards allowed in the cluster per data node. Example:
1000
. - cluster
Routing numberAllocation Node Concurrent Recoveries - How many concurrent incoming/outgoing shard recoveries (normally replicas) are allowed to happen on a node. Defaults to 2.
- email
Sender stringName - Sender name placeholder to be used in Opensearch Dashboards and Opensearch keystore. Example:
alert-sender
. - email
Sender stringPassword - Sender password for Opensearch alerts to authenticate with SMTP server. Example:
very-secure-mail-password
. - email
Sender stringUsername - Sender username for Opensearch alerts. Example:
jane@example.com
. - enable
Security booleanAudit - Enable/Disable security audit. Default:
false
. - http
Max numberContent Length - Maximum content length for HTTP requests to the OpenSearch HTTP API, in bytes.
- http
Max numberHeader Size - The max size of allowed headers, in bytes. Example:
8192
. - http
Max numberInitial Line Length - The max length of an HTTP URL, in bytes. Example:
4096
. - indices
Fielddata numberCache Size - Relative amount. Maximum amount of heap memory used for field data cache. This is an expert setting; decreasing the value too much will increase overhead of loading field data; too much memory used for field data cache will decrease amount of heap available for other operations.
- indices
Memory numberIndex Buffer Size - Percentage value. Default is 10%. Total amount of heap used for indexing buffer, before writing segments to disk. This is an expert setting. Too low value will slow down indexing; too high value will increase indexing performance but causes performance issues for query performance.
- indices
Memory numberMax Index Buffer Size - Absolute value. Default is unbound. Doesn't work without indices.memory.indexbuffersize. Maximum amount of heap used for query cache, an absolute indices.memory.indexbuffersize maximum hard limit.
- indices
Memory numberMin Index Buffer Size - Absolute value. Default is 48mb. Doesn't work without indices.memory.indexbuffersize. Minimum amount of heap used for query cache, an absolute indices.memory.indexbuffersize minimal hard limit.
- indices
Queries numberCache Size - Percentage value. Default is 10%. Maximum amount of heap used for query cache. This is an expert setting. Too low value will decrease query performance and increase performance for other operations; too high value will cause issues with other OpenSearch functionality.
- indices
Query numberBool Max Clause Count - Maximum number of clauses Lucene BooleanQuery can have. The default value (1024) is relatively high, and increasing it may cause performance issues. Investigate other approaches first before increasing this value.
- indices
Recovery numberMax Bytes Per Sec - Limits total inbound and outbound recovery traffic for each node. Applies to both peer recoveries as well as snapshot recoveries (i.e., restores from a snapshot). Defaults to 40mb.
- indices
Recovery numberMax Concurrent File Chunks - Number of file chunks sent in parallel for each recovery. Defaults to 2.
- ism
Enabled boolean - Specifies whether ISM is enabled or not. Default:
true
. - ism
History booleanEnabled - Specifies whether audit history is enabled or not. The logs from ISM are automatically indexed to a logs document. Default:
true
. - ism
History numberMax Age - The maximum age before rolling over the audit history index in hours. Default:
24
. - ism
History numberMax Docs - The maximum number of documents before rolling over the audit history index. Default:
2500000
. - ism
History numberRollover Check Period - The time between rollover checks for the audit history index in hours. Default:
8
. - ism
History numberRollover Retention Period - How long audit history indices are kept in days. Default:
30
. - override
Main booleanResponse Version - Compatibility mode sets OpenSearch to report its version as 7.10 so clients continue to work. Default is false.
- plugins
Alerting booleanFilter By Backend Roles - Enable or disable filtering of alerting by backend roles. Requires Security plugin. Defaults to false.
- reindex
Remote string[]Whitelists - Whitelisted addresses for reindexing. Changing this value will cause all OpenSearch instances to restart.
- script
Max stringCompilations Rate - Script compilation circuit breaker limits the number of inline script compilations within a period of time. Default is use-context. Example:
75/5m
. - search
Max numberBuckets - Maximum number of aggregation buckets allowed in a single response. OpenSearch default value is used when this is not defined. Example:
10000
. - thread
Pool numberAnalyze Queue Size - Size for the thread pool queue. See documentation for exact details.
- thread
Pool numberAnalyze Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread
Pool numberForce Merge Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread
Pool numberGet Queue Size - Size for the thread pool queue. See documentation for exact details.
- thread
Pool numberGet Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread
Pool numberSearch Queue Size - Size for the thread pool queue. See documentation for exact details.
- thread
Pool numberSearch Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread
Pool numberSearch Throttled Queue Size - Size for the thread pool queue. See documentation for exact details.
- thread
Pool numberSearch Throttled Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread
Pool numberWrite Queue Size - Size for the thread pool queue. See documentation for exact details.
- thread
Pool numberWrite Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- action_
auto_ boolcreate_ index_ enabled - Explicitly allow or block automatic creation of indices. Defaults to true.
- action_
destructive_ boolrequires_ name - Require explicit index names when deleting.
- auth_
failure_ Openlisteners Search Opensearch User Config Opensearch Auth Failure Listeners - Opensearch Security Plugin Settings
- cluster_
max_ intshards_ per_ node - Controls the number of shards allowed in the cluster per data node. Example:
1000
. - cluster_
routing_ intallocation_ node_ concurrent_ recoveries - How many concurrent incoming/outgoing shard recoveries (normally replicas) are allowed to happen on a node. Defaults to 2.
- email_
sender_ strname - Sender name placeholder to be used in Opensearch Dashboards and Opensearch keystore. Example:
alert-sender
. - email_
sender_ strpassword - Sender password for Opensearch alerts to authenticate with SMTP server. Example:
very-secure-mail-password
. - email_
sender_ strusername - Sender username for Opensearch alerts. Example:
jane@example.com
. - enable_
security_ boolaudit - Enable/Disable security audit. Default:
false
. - http_
max_ intcontent_ length - Maximum content length for HTTP requests to the OpenSearch HTTP API, in bytes.
- http_
max_ intheader_ size - The max size of allowed headers, in bytes. Example:
8192
. - http_
max_ intinitial_ line_ length - The max length of an HTTP URL, in bytes. Example:
4096
. - indices_
fielddata_ intcache_ size - Relative amount. Maximum amount of heap memory used for field data cache. This is an expert setting; decreasing the value too much will increase overhead of loading field data; too much memory used for field data cache will decrease amount of heap available for other operations.
- indices_
memory_ intindex_ buffer_ size - Percentage value. Default is 10%. Total amount of heap used for indexing buffer, before writing segments to disk. This is an expert setting. Too low value will slow down indexing; too high value will increase indexing performance but causes performance issues for query performance.
- indices_
memory_ intmax_ index_ buffer_ size - Absolute value. Default is unbound. Doesn't work without indices.memory.indexbuffersize. Maximum amount of heap used for query cache, an absolute indices.memory.indexbuffersize maximum hard limit.
- indices_
memory_ intmin_ index_ buffer_ size - Absolute value. Default is 48mb. Doesn't work without indices.memory.indexbuffersize. Minimum amount of heap used for query cache, an absolute indices.memory.indexbuffersize minimal hard limit.
- indices_
queries_ intcache_ size - Percentage value. Default is 10%. Maximum amount of heap used for query cache. This is an expert setting. Too low value will decrease query performance and increase performance for other operations; too high value will cause issues with other OpenSearch functionality.
- indices_
query_ intbool_ max_ clause_ count - Maximum number of clauses Lucene BooleanQuery can have. The default value (1024) is relatively high, and increasing it may cause performance issues. Investigate other approaches first before increasing this value.
- indices_
recovery_ intmax_ bytes_ per_ sec - Limits total inbound and outbound recovery traffic for each node. Applies to both peer recoveries as well as snapshot recoveries (i.e., restores from a snapshot). Defaults to 40mb.
- indices_
recovery_ intmax_ concurrent_ file_ chunks - Number of file chunks sent in parallel for each recovery. Defaults to 2.
- ism_
enabled bool - Specifies whether ISM is enabled or not. Default:
true
. - ism_
history_ boolenabled - Specifies whether audit history is enabled or not. The logs from ISM are automatically indexed to a logs document. Default:
true
. - ism_
history_ intmax_ age - The maximum age before rolling over the audit history index in hours. Default:
24
. - ism_
history_ intmax_ docs - The maximum number of documents before rolling over the audit history index. Default:
2500000
. - ism_
history_ introllover_ check_ period - The time between rollover checks for the audit history index in hours. Default:
8
. - ism_
history_ introllover_ retention_ period - How long audit history indices are kept in days. Default:
30
. - override_
main_ boolresponse_ version - Compatibility mode sets OpenSearch to report its version as 7.10 so clients continue to work. Default is false.
- plugins_
alerting_ boolfilter_ by_ backend_ roles - Enable or disable filtering of alerting by backend roles. Requires Security plugin. Defaults to false.
- reindex_
remote_ Sequence[str]whitelists - Whitelisted addresses for reindexing. Changing this value will cause all OpenSearch instances to restart.
- script_
max_ strcompilations_ rate - Script compilation circuit breaker limits the number of inline script compilations within a period of time. Default is use-context. Example:
75/5m
. - search_
max_ intbuckets - Maximum number of aggregation buckets allowed in a single response. OpenSearch default value is used when this is not defined. Example:
10000
. - thread_
pool_ intanalyze_ queue_ size - Size for the thread pool queue. See documentation for exact details.
- thread_
pool_ intanalyze_ size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread_
pool_ intforce_ merge_ size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread_
pool_ intget_ queue_ size - Size for the thread pool queue. See documentation for exact details.
- thread_
pool_ intget_ size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread_
pool_ intsearch_ queue_ size - Size for the thread pool queue. See documentation for exact details.
- thread_
pool_ intsearch_ size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread_
pool_ intsearch_ throttled_ queue_ size - Size for the thread pool queue. See documentation for exact details.
- thread_
pool_ intsearch_ throttled_ size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread_
pool_ intwrite_ queue_ size - Size for the thread pool queue. See documentation for exact details.
- thread_
pool_ intwrite_ size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- action
Auto BooleanCreate Index Enabled - Explicitly allow or block automatic creation of indices. Defaults to true.
- action
Destructive BooleanRequires Name - Require explicit index names when deleting.
- auth
Failure Property MapListeners - Opensearch Security Plugin Settings
- cluster
Max NumberShards Per Node - Controls the number of shards allowed in the cluster per data node. Example:
1000
. - cluster
Routing NumberAllocation Node Concurrent Recoveries - How many concurrent incoming/outgoing shard recoveries (normally replicas) are allowed to happen on a node. Defaults to 2.
- email
Sender StringName - Sender name placeholder to be used in Opensearch Dashboards and Opensearch keystore. Example:
alert-sender
. - email
Sender StringPassword - Sender password for Opensearch alerts to authenticate with SMTP server. Example:
very-secure-mail-password
. - email
Sender StringUsername - Sender username for Opensearch alerts. Example:
jane@example.com
. - enable
Security BooleanAudit - Enable/Disable security audit. Default:
false
. - http
Max NumberContent Length - Maximum content length for HTTP requests to the OpenSearch HTTP API, in bytes.
- http
Max NumberHeader Size - The max size of allowed headers, in bytes. Example:
8192
. - http
Max NumberInitial Line Length - The max length of an HTTP URL, in bytes. Example:
4096
. - indices
Fielddata NumberCache Size - Relative amount. Maximum amount of heap memory used for field data cache. This is an expert setting; decreasing the value too much will increase overhead of loading field data; too much memory used for field data cache will decrease amount of heap available for other operations.
- indices
Memory NumberIndex Buffer Size - Percentage value. Default is 10%. Total amount of heap used for indexing buffer, before writing segments to disk. This is an expert setting. Too low value will slow down indexing; too high value will increase indexing performance but causes performance issues for query performance.
- indices
Memory NumberMax Index Buffer Size - Absolute value. Default is unbound. Doesn't work without indices.memory.indexbuffersize. Maximum amount of heap used for query cache, an absolute indices.memory.indexbuffersize maximum hard limit.
- indices
Memory NumberMin Index Buffer Size - Absolute value. Default is 48mb. Doesn't work without indices.memory.indexbuffersize. Minimum amount of heap used for query cache, an absolute indices.memory.indexbuffersize minimal hard limit.
- indices
Queries NumberCache Size - Percentage value. Default is 10%. Maximum amount of heap used for query cache. This is an expert setting. Too low value will decrease query performance and increase performance for other operations; too high value will cause issues with other OpenSearch functionality.
- indices
Query NumberBool Max Clause Count - Maximum number of clauses Lucene BooleanQuery can have. The default value (1024) is relatively high, and increasing it may cause performance issues. Investigate other approaches first before increasing this value.
- indices
Recovery NumberMax Bytes Per Sec - Limits total inbound and outbound recovery traffic for each node. Applies to both peer recoveries as well as snapshot recoveries (i.e., restores from a snapshot). Defaults to 40mb.
- indices
Recovery NumberMax Concurrent File Chunks - Number of file chunks sent in parallel for each recovery. Defaults to 2.
- ism
Enabled Boolean - Specifies whether ISM is enabled or not. Default:
true
. - ism
History BooleanEnabled - Specifies whether audit history is enabled or not. The logs from ISM are automatically indexed to a logs document. Default:
true
. - ism
History NumberMax Age - The maximum age before rolling over the audit history index in hours. Default:
24
. - ism
History NumberMax Docs - The maximum number of documents before rolling over the audit history index. Default:
2500000
. - ism
History NumberRollover Check Period - The time between rollover checks for the audit history index in hours. Default:
8
. - ism
History NumberRollover Retention Period - How long audit history indices are kept in days. Default:
30
. - override
Main BooleanResponse Version - Compatibility mode sets OpenSearch to report its version as 7.10 so clients continue to work. Default is false.
- plugins
Alerting BooleanFilter By Backend Roles - Enable or disable filtering of alerting by backend roles. Requires Security plugin. Defaults to false.
- reindex
Remote List<String>Whitelists - Whitelisted addresses for reindexing. Changing this value will cause all OpenSearch instances to restart.
- script
Max StringCompilations Rate - Script compilation circuit breaker limits the number of inline script compilations within a period of time. Default is use-context. Example:
75/5m
. - search
Max NumberBuckets - Maximum number of aggregation buckets allowed in a single response. OpenSearch default value is used when this is not defined. Example:
10000
. - thread
Pool NumberAnalyze Queue Size - Size for the thread pool queue. See documentation for exact details.
- thread
Pool NumberAnalyze Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread
Pool NumberForce Merge Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread
Pool NumberGet Queue Size - Size for the thread pool queue. See documentation for exact details.
- thread
Pool NumberGet Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread
Pool NumberSearch Queue Size - Size for the thread pool queue. See documentation for exact details.
- thread
Pool NumberSearch Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread
Pool NumberSearch Throttled Queue Size - Size for the thread pool queue. See documentation for exact details.
- thread
Pool NumberSearch Throttled Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread
Pool NumberWrite Queue Size - Size for the thread pool queue. See documentation for exact details.
- thread
Pool NumberWrite Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
OpenSearchOpensearchUserConfigOpensearchAuthFailureListeners, OpenSearchOpensearchUserConfigOpensearchAuthFailureListenersArgs
- internal
Authentication Property MapBackend Limiting - ip
Rate Property MapLimiting - IP address rate limiting settings
OpenSearchOpensearchUserConfigOpensearchAuthFailureListenersInternalAuthenticationBackendLimiting, OpenSearchOpensearchUserConfigOpensearchAuthFailureListenersInternalAuthenticationBackendLimitingArgs
- Allowed
Tries int - The number of login attempts allowed before login is blocked. Example:
10
. - Authentication
Backend string - Enum:
internal
. internalauthenticationbackendlimiting.authenticationbackend. - Block
Expiry intSeconds - The duration of time that login remains blocked after a failed login. Example:
600
. - Max
Blocked intClients - internalauthenticationbackendlimiting.maxblocked_clients. Example:
100000
. - Max
Tracked intClients - The maximum number of tracked IP addresses that have failed login. Example:
100000
. - Time
Window intSeconds - The window of time in which the value for
allowed_tries
is enforced. Example:3600
. - Type string
- Enum:
username
. internalauthenticationbackend_limiting.type.
- Allowed
Tries int - The number of login attempts allowed before login is blocked. Example:
10
. - Authentication
Backend string - Enum:
internal
. internalauthenticationbackendlimiting.authenticationbackend. - Block
Expiry intSeconds - The duration of time that login remains blocked after a failed login. Example:
600
. - Max
Blocked intClients - internalauthenticationbackendlimiting.maxblocked_clients. Example:
100000
. - Max
Tracked intClients - The maximum number of tracked IP addresses that have failed login. Example:
100000
. - Time
Window intSeconds - The window of time in which the value for
allowed_tries
is enforced. Example:3600
. - Type string
- Enum:
username
. internalauthenticationbackend_limiting.type.
- allowed
Tries Integer - The number of login attempts allowed before login is blocked. Example:
10
. - authentication
Backend String - Enum:
internal
. internalauthenticationbackendlimiting.authenticationbackend. - block
Expiry IntegerSeconds - The duration of time that login remains blocked after a failed login. Example:
600
. - max
Blocked IntegerClients - internalauthenticationbackendlimiting.maxblocked_clients. Example:
100000
. - max
Tracked IntegerClients - The maximum number of tracked IP addresses that have failed login. Example:
100000
. - time
Window IntegerSeconds - The window of time in which the value for
allowed_tries
is enforced. Example:3600
. - type String
- Enum:
username
. internalauthenticationbackend_limiting.type.
- allowed
Tries number - The number of login attempts allowed before login is blocked. Example:
10
. - authentication
Backend string - Enum:
internal
. internalauthenticationbackendlimiting.authenticationbackend. - block
Expiry numberSeconds - The duration of time that login remains blocked after a failed login. Example:
600
. - max
Blocked numberClients - internalauthenticationbackendlimiting.maxblocked_clients. Example:
100000
. - max
Tracked numberClients - The maximum number of tracked IP addresses that have failed login. Example:
100000
. - time
Window numberSeconds - The window of time in which the value for
allowed_tries
is enforced. Example:3600
. - type string
- Enum:
username
. internalauthenticationbackend_limiting.type.
- allowed_
tries int - The number of login attempts allowed before login is blocked. Example:
10
. - authentication_
backend str - Enum:
internal
. internalauthenticationbackendlimiting.authenticationbackend. - block_
expiry_ intseconds - The duration of time that login remains blocked after a failed login. Example:
600
. - max_
blocked_ intclients - internalauthenticationbackendlimiting.maxblocked_clients. Example:
100000
. - max_
tracked_ intclients - The maximum number of tracked IP addresses that have failed login. Example:
100000
. - time_
window_ intseconds - The window of time in which the value for
allowed_tries
is enforced. Example:3600
. - type str
- Enum:
username
. internalauthenticationbackend_limiting.type.
- allowed
Tries Number - The number of login attempts allowed before login is blocked. Example:
10
. - authentication
Backend String - Enum:
internal
. internalauthenticationbackendlimiting.authenticationbackend. - block
Expiry NumberSeconds - The duration of time that login remains blocked after a failed login. Example:
600
. - max
Blocked NumberClients - internalauthenticationbackendlimiting.maxblocked_clients. Example:
100000
. - max
Tracked NumberClients - The maximum number of tracked IP addresses that have failed login. Example:
100000
. - time
Window NumberSeconds - The window of time in which the value for
allowed_tries
is enforced. Example:3600
. - type String
- Enum:
username
. internalauthenticationbackend_limiting.type.
OpenSearchOpensearchUserConfigOpensearchAuthFailureListenersIpRateLimiting, OpenSearchOpensearchUserConfigOpensearchAuthFailureListenersIpRateLimitingArgs
- Allowed
Tries int - The number of login attempts allowed before login is blocked. Example:
10
. - Block
Expiry intSeconds - The duration of time that login remains blocked after a failed login. Example:
600
. - Max
Blocked intClients - The maximum number of blocked IP addresses. Example:
100000
. - Max
Tracked intClients - The maximum number of tracked IP addresses that have failed login. Example:
100000
. - Time
Window intSeconds - The window of time in which the value for
allowed_tries
is enforced. Example:3600
. - Type string
- Enum:
ip
. The type of rate limiting.
- Allowed
Tries int - The number of login attempts allowed before login is blocked. Example:
10
. - Block
Expiry intSeconds - The duration of time that login remains blocked after a failed login. Example:
600
. - Max
Blocked intClients - The maximum number of blocked IP addresses. Example:
100000
. - Max
Tracked intClients - The maximum number of tracked IP addresses that have failed login. Example:
100000
. - Time
Window intSeconds - The window of time in which the value for
allowed_tries
is enforced. Example:3600
. - Type string
- Enum:
ip
. The type of rate limiting.
- allowed
Tries Integer - The number of login attempts allowed before login is blocked. Example:
10
. - block
Expiry IntegerSeconds - The duration of time that login remains blocked after a failed login. Example:
600
. - max
Blocked IntegerClients - The maximum number of blocked IP addresses. Example:
100000
. - max
Tracked IntegerClients - The maximum number of tracked IP addresses that have failed login. Example:
100000
. - time
Window IntegerSeconds - The window of time in which the value for
allowed_tries
is enforced. Example:3600
. - type String
- Enum:
ip
. The type of rate limiting.
- allowed
Tries number - The number of login attempts allowed before login is blocked. Example:
10
. - block
Expiry numberSeconds - The duration of time that login remains blocked after a failed login. Example:
600
. - max
Blocked numberClients - The maximum number of blocked IP addresses. Example:
100000
. - max
Tracked numberClients - The maximum number of tracked IP addresses that have failed login. Example:
100000
. - time
Window numberSeconds - The window of time in which the value for
allowed_tries
is enforced. Example:3600
. - type string
- Enum:
ip
. The type of rate limiting.
- allowed_
tries int - The number of login attempts allowed before login is blocked. Example:
10
. - block_
expiry_ intseconds - The duration of time that login remains blocked after a failed login. Example:
600
. - max_
blocked_ intclients - The maximum number of blocked IP addresses. Example:
100000
. - max_
tracked_ intclients - The maximum number of tracked IP addresses that have failed login. Example:
100000
. - time_
window_ intseconds - The window of time in which the value for
allowed_tries
is enforced. Example:3600
. - type str
- Enum:
ip
. The type of rate limiting.
- allowed
Tries Number - The number of login attempts allowed before login is blocked. Example:
10
. - block
Expiry NumberSeconds - The duration of time that login remains blocked after a failed login. Example:
600
. - max
Blocked NumberClients - The maximum number of blocked IP addresses. Example:
100000
. - max
Tracked NumberClients - The maximum number of tracked IP addresses that have failed login. Example:
100000
. - time
Window NumberSeconds - The window of time in which the value for
allowed_tries
is enforced. Example:3600
. - type String
- Enum:
ip
. The type of rate limiting.
OpenSearchOpensearchUserConfigOpensearchDashboards, OpenSearchOpensearchUserConfigOpensearchDashboardsArgs
- Enabled bool
- Enable or disable OpenSearch Dashboards. Default:
true
. - Max
Old intSpace Size - Limits the maximum amount of memory (in MiB) the OpenSearch Dashboards process can use. This sets the maxoldspace_size option of the nodejs running the OpenSearch Dashboards. Note: the memory reserved by OpenSearch Dashboards is not available for OpenSearch. Default:
128
. - Opensearch
Request intTimeout - Timeout in milliseconds for requests made by OpenSearch Dashboards towards OpenSearch. Default:
30000
.
- Enabled bool
- Enable or disable OpenSearch Dashboards. Default:
true
. - Max
Old intSpace Size - Limits the maximum amount of memory (in MiB) the OpenSearch Dashboards process can use. This sets the maxoldspace_size option of the nodejs running the OpenSearch Dashboards. Note: the memory reserved by OpenSearch Dashboards is not available for OpenSearch. Default:
128
. - Opensearch
Request intTimeout - Timeout in milliseconds for requests made by OpenSearch Dashboards towards OpenSearch. Default:
30000
.
- enabled Boolean
- Enable or disable OpenSearch Dashboards. Default:
true
. - max
Old IntegerSpace Size - Limits the maximum amount of memory (in MiB) the OpenSearch Dashboards process can use. This sets the maxoldspace_size option of the nodejs running the OpenSearch Dashboards. Note: the memory reserved by OpenSearch Dashboards is not available for OpenSearch. Default:
128
. - opensearch
Request IntegerTimeout - Timeout in milliseconds for requests made by OpenSearch Dashboards towards OpenSearch. Default:
30000
.
- enabled boolean
- Enable or disable OpenSearch Dashboards. Default:
true
. - max
Old numberSpace Size - Limits the maximum amount of memory (in MiB) the OpenSearch Dashboards process can use. This sets the maxoldspace_size option of the nodejs running the OpenSearch Dashboards. Note: the memory reserved by OpenSearch Dashboards is not available for OpenSearch. Default:
128
. - opensearch
Request numberTimeout - Timeout in milliseconds for requests made by OpenSearch Dashboards towards OpenSearch. Default:
30000
.
- enabled bool
- Enable or disable OpenSearch Dashboards. Default:
true
. - max_
old_ intspace_ size - Limits the maximum amount of memory (in MiB) the OpenSearch Dashboards process can use. This sets the maxoldspace_size option of the nodejs running the OpenSearch Dashboards. Note: the memory reserved by OpenSearch Dashboards is not available for OpenSearch. Default:
128
. - opensearch_
request_ inttimeout - Timeout in milliseconds for requests made by OpenSearch Dashboards towards OpenSearch. Default:
30000
.
- enabled Boolean
- Enable or disable OpenSearch Dashboards. Default:
true
. - max
Old NumberSpace Size - Limits the maximum amount of memory (in MiB) the OpenSearch Dashboards process can use. This sets the maxoldspace_size option of the nodejs running the OpenSearch Dashboards. Note: the memory reserved by OpenSearch Dashboards is not available for OpenSearch. Default:
128
. - opensearch
Request NumberTimeout - Timeout in milliseconds for requests made by OpenSearch Dashboards towards OpenSearch. Default:
30000
.
OpenSearchOpensearchUserConfigPrivateAccess, OpenSearchOpensearchUserConfigPrivateAccessArgs
- Opensearch bool
- Allow clients to connect to opensearch with a DNS name that always resolves to the service's private IP addresses. Only available in certain network locations.
- Opensearch
Dashboards bool - Allow clients to connect to opensearch_dashboards with a DNS name that always resolves to the service's private IP addresses. Only available in certain network locations.
- Prometheus bool
- Allow clients to connect to prometheus with a DNS name that always resolves to the service's private IP addresses. Only available in certain network locations.
- Opensearch bool
- Allow clients to connect to opensearch with a DNS name that always resolves to the service's private IP addresses. Only available in certain network locations.
- Opensearch
Dashboards bool - Allow clients to connect to opensearch_dashboards with a DNS name that always resolves to the service's private IP addresses. Only available in certain network locations.
- Prometheus bool
- Allow clients to connect to prometheus with a DNS name that always resolves to the service's private IP addresses. Only available in certain network locations.
- opensearch Boolean
- Allow clients to connect to opensearch with a DNS name that always resolves to the service's private IP addresses. Only available in certain network locations.
- opensearch
Dashboards Boolean - Allow clients to connect to opensearch_dashboards with a DNS name that always resolves to the service's private IP addresses. Only available in certain network locations.
- prometheus Boolean
- Allow clients to connect to prometheus with a DNS name that always resolves to the service's private IP addresses. Only available in certain network locations.
- opensearch boolean
- Allow clients to connect to opensearch with a DNS name that always resolves to the service's private IP addresses. Only available in certain network locations.
- opensearch
Dashboards boolean - Allow clients to connect to opensearch_dashboards with a DNS name that always resolves to the service's private IP addresses. Only available in certain network locations.
- prometheus boolean
- Allow clients to connect to prometheus with a DNS name that always resolves to the service's private IP addresses. Only available in certain network locations.
- opensearch bool
- Allow clients to connect to opensearch with a DNS name that always resolves to the service's private IP addresses. Only available in certain network locations.
- opensearch_
dashboards bool - Allow clients to connect to opensearch_dashboards with a DNS name that always resolves to the service's private IP addresses. Only available in certain network locations.
- prometheus bool
- Allow clients to connect to prometheus with a DNS name that always resolves to the service's private IP addresses. Only available in certain network locations.
- opensearch Boolean
- Allow clients to connect to opensearch with a DNS name that always resolves to the service's private IP addresses. Only available in certain network locations.
- opensearch
Dashboards Boolean - Allow clients to connect to opensearch_dashboards with a DNS name that always resolves to the service's private IP addresses. Only available in certain network locations.
- prometheus Boolean
- Allow clients to connect to prometheus with a DNS name that always resolves to the service's private IP addresses. Only available in certain network locations.
OpenSearchOpensearchUserConfigPrivatelinkAccess, OpenSearchOpensearchUserConfigPrivatelinkAccessArgs
- Opensearch bool
- Enable opensearch.
- Opensearch
Dashboards bool - Enable opensearch_dashboards.
- Prometheus bool
- Enable prometheus.
- Opensearch bool
- Enable opensearch.
- Opensearch
Dashboards bool - Enable opensearch_dashboards.
- Prometheus bool
- Enable prometheus.
- opensearch Boolean
- Enable opensearch.
- opensearch
Dashboards Boolean - Enable opensearch_dashboards.
- prometheus Boolean
- Enable prometheus.
- opensearch boolean
- Enable opensearch.
- opensearch
Dashboards boolean - Enable opensearch_dashboards.
- prometheus boolean
- Enable prometheus.
- opensearch bool
- Enable opensearch.
- opensearch_
dashboards bool - Enable opensearch_dashboards.
- prometheus bool
- Enable prometheus.
- opensearch Boolean
- Enable opensearch.
- opensearch
Dashboards Boolean - Enable opensearch_dashboards.
- prometheus Boolean
- Enable prometheus.
OpenSearchOpensearchUserConfigPublicAccess, OpenSearchOpensearchUserConfigPublicAccessArgs
- Opensearch bool
- Allow clients to connect to opensearch from the public internet for service nodes that are in a project VPC or another type of private network.
- Opensearch
Dashboards bool - Allow clients to connect to opensearch_dashboards from the public internet for service nodes that are in a project VPC or another type of private network.
- Prometheus bool
- Allow clients to connect to prometheus from the public internet for service nodes that are in a project VPC or another type of private network.
- Opensearch bool
- Allow clients to connect to opensearch from the public internet for service nodes that are in a project VPC or another type of private network.
- Opensearch
Dashboards bool - Allow clients to connect to opensearch_dashboards from the public internet for service nodes that are in a project VPC or another type of private network.
- Prometheus bool
- Allow clients to connect to prometheus from the public internet for service nodes that are in a project VPC or another type of private network.
- opensearch Boolean
- Allow clients to connect to opensearch from the public internet for service nodes that are in a project VPC or another type of private network.
- opensearch
Dashboards Boolean - Allow clients to connect to opensearch_dashboards from the public internet for service nodes that are in a project VPC or another type of private network.
- prometheus Boolean
- Allow clients to connect to prometheus from the public internet for service nodes that are in a project VPC or another type of private network.
- opensearch boolean
- Allow clients to connect to opensearch from the public internet for service nodes that are in a project VPC or another type of private network.
- opensearch
Dashboards boolean - Allow clients to connect to opensearch_dashboards from the public internet for service nodes that are in a project VPC or another type of private network.
- prometheus boolean
- Allow clients to connect to prometheus from the public internet for service nodes that are in a project VPC or another type of private network.
- opensearch bool
- Allow clients to connect to opensearch from the public internet for service nodes that are in a project VPC or another type of private network.
- opensearch_
dashboards bool - Allow clients to connect to opensearch_dashboards from the public internet for service nodes that are in a project VPC or another type of private network.
- prometheus bool
- Allow clients to connect to prometheus from the public internet for service nodes that are in a project VPC or another type of private network.
- opensearch Boolean
- Allow clients to connect to opensearch from the public internet for service nodes that are in a project VPC or another type of private network.
- opensearch
Dashboards Boolean - Allow clients to connect to opensearch_dashboards from the public internet for service nodes that are in a project VPC or another type of private network.
- prometheus Boolean
- Allow clients to connect to prometheus from the public internet for service nodes that are in a project VPC or another type of private network.
OpenSearchOpensearchUserConfigSaml, OpenSearchOpensearchUserConfigSamlArgs
- Enabled bool
- Enables or disables SAML-based authentication for OpenSearch. When enabled, users can authenticate using SAML with an Identity Provider. Default:
true
. - Idp
Entity stringId - The unique identifier for the Identity Provider (IdP) entity that is used for SAML authentication. This value is typically provided by the IdP. Example:
test-idp-entity-id
. - Idp
Metadata stringUrl - The URL of the SAML metadata for the Identity Provider (IdP). This is used to configure SAML-based authentication with the IdP. Example:
https://test-account.okta.com/app/exk491jujcVc83LEX697/sso/saml/metadata
. - Sp
Entity stringId - The unique identifier for the Service Provider (SP) entity that is used for SAML authentication. This value is typically provided by the SP. Example:
test-sp-entity-id
. - Idp
Pemtrustedcas stringContent - This parameter specifies the PEM-encoded root certificate authority (CA) content for the SAML identity provider (IdP) server verification. The root CA content is used to verify the SSL/TLS certificate presented by the server. Example:
-----BEGIN CERTIFICATE----- ... -----END CERTIFICATE-----
. - Roles
Key string - Optional. Specifies the attribute in the SAML response where role information is stored, if available. Role attributes are not required for SAML authentication, but can be included in SAML assertions by most Identity Providers (IdPs) to determine user access levels or permissions. Example:
RoleName
. - Subject
Key string - Optional. Specifies the attribute in the SAML response where the subject identifier is stored. If not configured, the NameID attribute is used by default. Example:
NameID
.
- Enabled bool
- Enables or disables SAML-based authentication for OpenSearch. When enabled, users can authenticate using SAML with an Identity Provider. Default:
true
. - Idp
Entity stringId - The unique identifier for the Identity Provider (IdP) entity that is used for SAML authentication. This value is typically provided by the IdP. Example:
test-idp-entity-id
. - Idp
Metadata stringUrl - The URL of the SAML metadata for the Identity Provider (IdP). This is used to configure SAML-based authentication with the IdP. Example:
https://test-account.okta.com/app/exk491jujcVc83LEX697/sso/saml/metadata
. - Sp
Entity stringId - The unique identifier for the Service Provider (SP) entity that is used for SAML authentication. This value is typically provided by the SP. Example:
test-sp-entity-id
. - Idp
Pemtrustedcas stringContent - This parameter specifies the PEM-encoded root certificate authority (CA) content for the SAML identity provider (IdP) server verification. The root CA content is used to verify the SSL/TLS certificate presented by the server. Example:
-----BEGIN CERTIFICATE----- ... -----END CERTIFICATE-----
. - Roles
Key string - Optional. Specifies the attribute in the SAML response where role information is stored, if available. Role attributes are not required for SAML authentication, but can be included in SAML assertions by most Identity Providers (IdPs) to determine user access levels or permissions. Example:
RoleName
. - Subject
Key string - Optional. Specifies the attribute in the SAML response where the subject identifier is stored. If not configured, the NameID attribute is used by default. Example:
NameID
.
- enabled Boolean
- Enables or disables SAML-based authentication for OpenSearch. When enabled, users can authenticate using SAML with an Identity Provider. Default:
true
. - idp
Entity StringId - The unique identifier for the Identity Provider (IdP) entity that is used for SAML authentication. This value is typically provided by the IdP. Example:
test-idp-entity-id
. - idp
Metadata StringUrl - The URL of the SAML metadata for the Identity Provider (IdP). This is used to configure SAML-based authentication with the IdP. Example:
https://test-account.okta.com/app/exk491jujcVc83LEX697/sso/saml/metadata
. - sp
Entity StringId - The unique identifier for the Service Provider (SP) entity that is used for SAML authentication. This value is typically provided by the SP. Example:
test-sp-entity-id
. - idp
Pemtrustedcas StringContent - This parameter specifies the PEM-encoded root certificate authority (CA) content for the SAML identity provider (IdP) server verification. The root CA content is used to verify the SSL/TLS certificate presented by the server. Example:
-----BEGIN CERTIFICATE----- ... -----END CERTIFICATE-----
. - roles
Key String - Optional. Specifies the attribute in the SAML response where role information is stored, if available. Role attributes are not required for SAML authentication, but can be included in SAML assertions by most Identity Providers (IdPs) to determine user access levels or permissions. Example:
RoleName
. - subject
Key String - Optional. Specifies the attribute in the SAML response where the subject identifier is stored. If not configured, the NameID attribute is used by default. Example:
NameID
.
- enabled boolean
- Enables or disables SAML-based authentication for OpenSearch. When enabled, users can authenticate using SAML with an Identity Provider. Default:
true
. - idp
Entity stringId - The unique identifier for the Identity Provider (IdP) entity that is used for SAML authentication. This value is typically provided by the IdP. Example:
test-idp-entity-id
. - idp
Metadata stringUrl - The URL of the SAML metadata for the Identity Provider (IdP). This is used to configure SAML-based authentication with the IdP. Example:
https://test-account.okta.com/app/exk491jujcVc83LEX697/sso/saml/metadata
. - sp
Entity stringId - The unique identifier for the Service Provider (SP) entity that is used for SAML authentication. This value is typically provided by the SP. Example:
test-sp-entity-id
. - idp
Pemtrustedcas stringContent - This parameter specifies the PEM-encoded root certificate authority (CA) content for the SAML identity provider (IdP) server verification. The root CA content is used to verify the SSL/TLS certificate presented by the server. Example:
-----BEGIN CERTIFICATE----- ... -----END CERTIFICATE-----
. - roles
Key string - Optional. Specifies the attribute in the SAML response where role information is stored, if available. Role attributes are not required for SAML authentication, but can be included in SAML assertions by most Identity Providers (IdPs) to determine user access levels or permissions. Example:
RoleName
. - subject
Key string - Optional. Specifies the attribute in the SAML response where the subject identifier is stored. If not configured, the NameID attribute is used by default. Example:
NameID
.
- enabled bool
- Enables or disables SAML-based authentication for OpenSearch. When enabled, users can authenticate using SAML with an Identity Provider. Default:
true
. - idp_
entity_ strid - The unique identifier for the Identity Provider (IdP) entity that is used for SAML authentication. This value is typically provided by the IdP. Example:
test-idp-entity-id
. - idp_
metadata_ strurl - The URL of the SAML metadata for the Identity Provider (IdP). This is used to configure SAML-based authentication with the IdP. Example:
https://test-account.okta.com/app/exk491jujcVc83LEX697/sso/saml/metadata
. - sp_
entity_ strid - The unique identifier for the Service Provider (SP) entity that is used for SAML authentication. This value is typically provided by the SP. Example:
test-sp-entity-id
. - idp_
pemtrustedcas_ strcontent - This parameter specifies the PEM-encoded root certificate authority (CA) content for the SAML identity provider (IdP) server verification. The root CA content is used to verify the SSL/TLS certificate presented by the server. Example:
-----BEGIN CERTIFICATE----- ... -----END CERTIFICATE-----
. - roles_
key str - Optional. Specifies the attribute in the SAML response where role information is stored, if available. Role attributes are not required for SAML authentication, but can be included in SAML assertions by most Identity Providers (IdPs) to determine user access levels or permissions. Example:
RoleName
. - subject_
key str - Optional. Specifies the attribute in the SAML response where the subject identifier is stored. If not configured, the NameID attribute is used by default. Example:
NameID
.
- enabled Boolean
- Enables or disables SAML-based authentication for OpenSearch. When enabled, users can authenticate using SAML with an Identity Provider. Default:
true
. - idp
Entity StringId - The unique identifier for the Identity Provider (IdP) entity that is used for SAML authentication. This value is typically provided by the IdP. Example:
test-idp-entity-id
. - idp
Metadata StringUrl - The URL of the SAML metadata for the Identity Provider (IdP). This is used to configure SAML-based authentication with the IdP. Example:
https://test-account.okta.com/app/exk491jujcVc83LEX697/sso/saml/metadata
. - sp
Entity StringId - The unique identifier for the Service Provider (SP) entity that is used for SAML authentication. This value is typically provided by the SP. Example:
test-sp-entity-id
. - idp
Pemtrustedcas StringContent - This parameter specifies the PEM-encoded root certificate authority (CA) content for the SAML identity provider (IdP) server verification. The root CA content is used to verify the SSL/TLS certificate presented by the server. Example:
-----BEGIN CERTIFICATE----- ... -----END CERTIFICATE-----
. - roles
Key String - Optional. Specifies the attribute in the SAML response where role information is stored, if available. Role attributes are not required for SAML authentication, but can be included in SAML assertions by most Identity Providers (IdPs) to determine user access levels or permissions. Example:
RoleName
. - subject
Key String - Optional. Specifies the attribute in the SAML response where the subject identifier is stored. If not configured, the NameID attribute is used by default. Example:
NameID
.
OpenSearchServiceIntegration, OpenSearchServiceIntegrationArgs
- Integration
Type string - Type of the service integration. The only supported value at the moment is
read_replica
- Source
Service stringName - Name of the source service
- Integration
Type string - Type of the service integration. The only supported value at the moment is
read_replica
- Source
Service stringName - Name of the source service
- integration
Type String - Type of the service integration. The only supported value at the moment is
read_replica
- source
Service StringName - Name of the source service
- integration
Type string - Type of the service integration. The only supported value at the moment is
read_replica
- source
Service stringName - Name of the source service
- integration_
type str - Type of the service integration. The only supported value at the moment is
read_replica
- source_
service_ strname - Name of the source service
- integration
Type String - Type of the service integration. The only supported value at the moment is
read_replica
- source
Service StringName - Name of the source service
OpenSearchTag, OpenSearchTagArgs
OpenSearchTechEmail, OpenSearchTechEmailArgs
- Email string
- An email address to contact for technical issues
- Email string
- An email address to contact for technical issues
- email String
- An email address to contact for technical issues
- email string
- An email address to contact for technical issues
- email str
- An email address to contact for technical issues
- email String
- An email address to contact for technical issues
Import
$ pulumi import aiven:index/openSearch:OpenSearch os1 project/service_name
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- Aiven pulumi/pulumi-aiven
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
aiven
Terraform Provider.