OpenSearch operator MVP

[siegfriedweber]

Requirements

see https://app.nuclino.com/Stackable/Engineering/OpenSearch-0da6fbe9-fc6b-465e-9e75-253b714d2a31

User Stories

First version (2025-08-29)

• Create a basic operator #2
• Create and use the product image #15
• Replace helm chart set-up with SDP opensearch-operator #13
• Allow the configuration of the service exposition per role group (Listener support) #16
• Add Prometheus support #19
• test: Add an integration test for LDAP with TLS #21

Final MVP (SDP 25.11)

• fix(opensearch): Deactivate opensearch formatting plugin docker-images#1230
• [IN PROGRESS] (@labrenbe) OpenSearch Dashboards image #33
• [IN PROGRESS] (@siegfriedweber) Add logging support
• [IN PROGRESS] (@siegfriedweber) Do not publish expired CA certificates secret-operator#625
• [ON HOLD] (@labrenbe) Add TLS support feat: Add TLS support & run-securityadmin Job #25
• Let the user choose the role groups for the discovery service
• Allow config overrides also for the plugin configuration files
• Update changed security config via tools/securityadmin.sh
• Create a basic configuration for the security plugin
• Fix admin authentication
  It's currently done via Client TLS Authentication by comparing the CN in the certificate. But the secret-operator hard-codes it to CN=generated certificate for pod. OpenSearch complains that admin and node certificates must not have the same CN. see Use more clever certificate subject secret-operator#617
• Add authentication support
  • HTTP Basic authentication
  • LDAP
  • JSON Web Token (not sure if required)
  • OpenID Connect (not sure if required)
• [ON HOLD] (@labrenbe) Initialize the security plugin feat: Add TLS support & run-securityadmin Job #25
  (probably unnecessary)
• Add OpenSearch to logging demo
• Add OpenSearch to the image https://github.com/stackabletech/operator-templating/blob/main/template/.readme/static/borrowed/stackable_overview.png
• Add OpenSearch to the Configurator
• Add OpenSearch to the Stackable website (https://stackable.tech/)
• Add OpenSearch (and perhaps also the OpenSearch Dashboards image) to the feature tracker (https://features.stackable.tech/)
• Add container resources to https://docs.google.com/spreadsheets/d/1iWX1g4HaY3sFN9846BYd8kXZDU6FQkwSPmILsWMClE0/edit?pli=1&gid=74119742#gid=74119742