opensearch

Custom container image for OpenSearch.

Ports

• 9200
• 9300

Volumes

• /usr/share/opensearch/data
• /usr/share/opensearch/backup
• /usr/share/opensearch/log

Bundled Plugins

• repository-s3
• ingest-attachment

Environment Variables

OPENSEARCH_ADMIN_ENABLED=true
OPENSEARCH_ADMIN_USERNAME=opensearch
OPENSEARCH_ADMIN_PASSWORD=opensearch

OPENSEARCH_CLUSTER_NAME=opensearch
OPENSEARCH_CLUSTER_MODE=false
# Enable this setting only to bootstrap a new cluster **not** for existing clusters.
OPENSEARCH_CLUSTER_INIT=false
# Comma-separated list
OPENSEARCH_INITIAL_MASTER_NODES=opensearch-node1
OPENSEARCH_NODE_NAME=opensearch-node1
OPENSEARCH_NODE_MANAGER=true
OPENSEARCH_NODE_DATA=true
OPENSEARCH_NODE_INGEST=true
# Comma-separated list
OPENSEARCH_DISCOVERY_SEED_HOSTS=opensearch-node1
OPENSEARCH_NETWORK_HOST=0.0.0.0
OPENSEARCH_NETWORK_PUBLISH_HOST=
OPENSEARCH_BOOTSTRAP_MEMORY_LOCK=true
OPENSEARCH_HTTP_PORT=9200
OPENSEARCH_HTTP_COMPRESSION=true

OPENSEARCH_DEFAULT_NUMBER_OF_REPLICAS=1

OPENSEARCH_PLUGINS_SECURITY_ENABLED=false
# If you enable securoty on a production mode cluster, transport ssl is mandatory
# and need to be configured.
OPENSEARCH_PLUGINS_SECURITY_SSL_TRANSPORT_ENABLED=false
OPENSEARCH_PLUGINS_SECURITY_SSL_TRANSPORT_KEY=node-key.pem
OPENSEARCH_PLUGINS_SECURITY_SSL_TRANSPORT_CERTIFICATE=node.pem
OPENSEARCH_PLUGINS_SECURITY_SSL_TRANSPORT_CERTIFICATE_AUTHORITIES=ca-bundle.trust.crt
OPENSEARCH_PLUGINS_SECURITY_SSL_TRANSPORT_HOSTNAME_VERIFICATION=false

OPENSEARCH_PLUGINS_SECURITY_HTTP_SSL_ENABLED=false
OPENSEARCH_PLUGINS_SECURITY_HTTP_SSL_KEY=node-key.pem
OPENSEARCH_PLUGINS_SECURITY_HTTP_SSL_CERTIFICATE=node.pem
OPENSEARCH_PLUGINS_SECURITY_HTTP_SSL_CERTIFICATE_AUTHORITIES=

OPENSEARCH_PLUGINS_SECURITY_RESTAPI_ROLES_ENABLED=all_access,security_rest_api_access
OPENSEARCH_PLUGINS_SECURITY_NODES_DN=

# Salt to use when generating the hash value. Only ASCII characters are allowed.
# A random one is generated by default. Need to be set to a static value on cluster setups.
OPENSEARCH_PLUGINS_SECURITY_COMPLIANCE_SALT=

OPENSEARCH_ROOT_LOG_LEVEL=info
OPENSEARCH_JVM_HEAP_SIZE=512m

OPENSEARCH_S3_CLIENT_DEFAULT_ACCESS_KEY=
OPENSEARCH_S3_CLIENT_DEFAULT_SECRET_KEY=

# Space-separated list of extra options to set for the Java JVM.
# Example: OPENSEARCH_JVM_EXTRA_OPTS=-Djava.option1=foo -Djava.option2=bar
OPENSEARCH_JVM_EXTRA_OPTS=

Build

docker build -f Dockerfile -t opensearch:latest . \
    --build-arg OPENSEARCH_PLUGINS_INSTALL="repository-s3 ingest-attachment" \
    --build-arg OPENSEARCH_PLUGINS_REMOVE="opensearch-security-analytics opensearch-skills opensearch-ml opensearch-sql opensearch-neural-search"

License

This project is licensed under the Apache 2.0 License - see the LICENSE file for details.