mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-03 10:37:21 +09:00
Aleksei Sviridkin
4e3a679e7b
notContains passes whenever its path resolves to something that simply lacks the forbidden content, and a different element at the same index qualifies. These guards would go green if the Role's rule order changed or a nodePool were added ahead of the one they name, while the resource they forbid came back on the element they meant. Assert the addressed element before asserting what it must not have. The Kafka Role rules have no identifier, so the anchor is the in-cluster bootstrap Service that rule must keep. The OpenSearch pool does have one, `component`, and that is what is pinned: roles are shared between pools, so a role-based anchor would be satisfied by a second data-bearing pool inserted ahead of this one. Each anchor was checked against the shift it exists to catch, and against the same shift with the anchors removed: without them the blocks stay green while the forbidden content is back on the element they name. Assisted-By: Claude <noreply@anthropic.com> Signed-off-by: Aleksei Sviridkin <f@lex.la>
Managed OpenSearch Service
storageClassis annotated as immutable in the chart schema — seedocs/storage-immutability.mdfor the contract and which consumers enforce it.
Parameters
Common parameters
| Name | Description | Type | Value |
|---|---|---|---|
replicas |
Number of OpenSearch nodes in the cluster. | int |
3 |
resources |
Explicit CPU and memory configuration for each OpenSearch node. When omitted, the preset defined in resourcesPreset is applied. |
object |
{} |
resources.cpu |
CPU available to each node. | quantity |
"" |
resources.memory |
Memory (RAM) available to each node. | quantity |
"" |
resourcesPreset |
Default sizing preset used when resources is omitted. OpenSearch requires minimum 2Gi memory. |
string |
c1.medium |
size |
Persistent Volume Claim size available for application data. | quantity |
10Gi |
storageClass |
StorageClass used to store the data. | string |
"" |
external |
Enable external access from outside the cluster. | bool |
false |
topologySpreadPolicy |
How strictly to enforce pod distribution across nodes and zones. | string |
soft |
version |
OpenSearch major version to deploy. | string |
v2 |
Image configuration
| Name | Description | Type | Value |
|---|---|---|---|
images |
Container images used by the operator. | object |
{} |
images.opensearch |
OpenSearch image. | string |
"" |
Node roles configuration
| Name | Description | Type | Value |
|---|---|---|---|
nodeRoles |
Node roles configuration. | object |
{} |
nodeRoles.master |
Enable cluster_manager role. | bool |
true |
nodeRoles.data |
Enable data role. | bool |
true |
nodeRoles.ingest |
Enable ingest role. | bool |
true |
nodeRoles.ml |
Enable machine learning role. | bool |
false |
Users configuration
| Name | Description | Type | Value |
|---|---|---|---|
users |
Custom OpenSearch users configuration map. | map[string]object |
{} |
users[name].password |
Password for the user (auto-generated if omitted). | string |
"" |
users[name].roles |
List of OpenSearch roles. | []string |
[] |
OpenSearch Dashboards configuration
| Name | Description | Type | Value |
|---|---|---|---|
dashboards |
OpenSearch Dashboards configuration. | object |
{} |
dashboards.enabled |
Enable OpenSearch Dashboards deployment. | bool |
false |
dashboards.replicas |
Number of Dashboards replicas. | int |
1 |
dashboards.resources |
Explicit CPU and memory configuration for Dashboards. | object |
{} |
dashboards.resources.cpu |
CPU available to each node. | quantity |
"" |
dashboards.resources.memory |
Memory (RAM) available to each node. | quantity |
"" |
dashboards.resourcesPreset |
Default sizing preset for Dashboards. | string |
c1.small |