Aiven v6.28.0 published on Friday, Nov 15, 2024 by Pulumi
aiven.getOpenSearch
Explore with Pulumi AI
The OpenSearch data source provides information about the existing Aiven OpenSearch service.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as aiven from "@pulumi/aiven";
const os1 = aiven.getOpenSearch({
project: pr1.project,
serviceName: "my-os1",
});
import pulumi
import pulumi_aiven as aiven
os1 = aiven.get_open_search(project=pr1["project"],
service_name="my-os1")
package main
import (
"github.com/pulumi/pulumi-aiven/sdk/v6/go/aiven"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := aiven.LookupOpenSearch(ctx, &aiven.LookupOpenSearchArgs{
Project: pr1.Project,
ServiceName: "my-os1",
}, nil)
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aiven = Pulumi.Aiven;
return await Deployment.RunAsync(() =>
{
var os1 = Aiven.GetOpenSearch.Invoke(new()
{
Project = pr1.Project,
ServiceName = "my-os1",
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aiven.AivenFunctions;
import com.pulumi.aiven.inputs.GetOpenSearchArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
final var os1 = AivenFunctions.getOpenSearch(GetOpenSearchArgs.builder()
.project(pr1.project())
.serviceName("my-os1")
.build());
}
}
variables:
os1:
fn::invoke:
Function: aiven:getOpenSearch
Arguments:
project: ${pr1.project}
serviceName: my-os1
Using getOpenSearch
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getOpenSearch(args: GetOpenSearchArgs, opts?: InvokeOptions): Promise<GetOpenSearchResult>
function getOpenSearchOutput(args: GetOpenSearchOutputArgs, opts?: InvokeOptions): Output<GetOpenSearchResult>
def get_open_search(project: Optional[str] = None,
service_name: Optional[str] = None,
opts: Optional[InvokeOptions] = None) -> GetOpenSearchResult
def get_open_search_output(project: Optional[pulumi.Input[str]] = None,
service_name: Optional[pulumi.Input[str]] = None,
opts: Optional[InvokeOptions] = None) -> Output[GetOpenSearchResult]
func LookupOpenSearch(ctx *Context, args *LookupOpenSearchArgs, opts ...InvokeOption) (*LookupOpenSearchResult, error)
func LookupOpenSearchOutput(ctx *Context, args *LookupOpenSearchOutputArgs, opts ...InvokeOption) LookupOpenSearchResultOutput
> Note: This function is named LookupOpenSearch
in the Go SDK.
public static class GetOpenSearch
{
public static Task<GetOpenSearchResult> InvokeAsync(GetOpenSearchArgs args, InvokeOptions? opts = null)
public static Output<GetOpenSearchResult> Invoke(GetOpenSearchInvokeArgs args, InvokeOptions? opts = null)
}
public static CompletableFuture<GetOpenSearchResult> getOpenSearch(GetOpenSearchArgs args, InvokeOptions options)
// Output-based functions aren't available in Java yet
fn::invoke:
function: aiven:index/getOpenSearch:getOpenSearch
arguments:
# arguments dictionary
The following arguments are supported:
- Project string
- The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
- Service
Name string - Specifies the actual name of the service. The name cannot be changed later without destroying and re-creating the service so name should be picked based on intended service usage rather than current attributes.
- Project string
- The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
- Service
Name string - Specifies the actual name of the service. The name cannot be changed later without destroying and re-creating the service so name should be picked based on intended service usage rather than current attributes.
- project String
- The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
- service
Name String - Specifies the actual name of the service. The name cannot be changed later without destroying and re-creating the service so name should be picked based on intended service usage rather than current attributes.
- project string
- The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
- service
Name string - Specifies the actual name of the service. The name cannot be changed later without destroying and re-creating the service so name should be picked based on intended service usage rather than current attributes.
- project str
- The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
- service_
name str - Specifies the actual name of the service. The name cannot be changed later without destroying and re-creating the service so name should be picked based on intended service usage rather than current attributes.
- project String
- The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
- service
Name String - Specifies the actual name of the service. The name cannot be changed later without destroying and re-creating the service so name should be picked based on intended service usage rather than current attributes.
getOpenSearch Result
The following output properties are available:
- Additional
Disk stringSpace - Add disk storage in increments of 30 GiB to scale your service. The maximum value depends on the service type and cloud provider. Removing additional storage causes the service nodes to go through a rolling restart and there might be a short downtime for services with no HA capabilities.
- Cloud
Name string - Defines where the cloud provider and region where the service is hosted in. This can be changed freely after service is created. Changing the value will trigger a potentially lengthy migration process for the service. Format is cloud provider name (
aws
,azure
,do
google
,upcloud
, etc.), dash, and the cloud provider specific region name. These are documented on each Cloud provider's own support articles, like here for Google and here for AWS. - Components
List<Get
Open Search Component> - Service component information objects
- Disk
Space string - Service disk space. Possible values depend on the service type, the cloud provider and the project. Therefore, reducing will result in the service rebalancing.
- Disk
Space stringCap - The maximum disk space of the service, possible values depend on the service type, the cloud provider and the project.
- Disk
Space stringDefault - The default disk space of the service, possible values depend on the service type, the cloud provider and the project. Its also the minimum value for
disk_space
- Disk
Space stringStep - The default disk space step of the service, possible values depend on the service type, the cloud provider and the project.
disk_space
needs to increment fromdisk_space_default
by increments of this size. - Disk
Space stringUsed - Disk space that service is currently using
- Id string
- The provider-assigned unique ID for this managed resource.
- Maintenance
Window stringDow - Day of week when maintenance operations should be performed. One monday, tuesday, wednesday, etc.
- Maintenance
Window stringTime - Time of day when maintenance operations should be performed. UTC time in HH:mm:ss format.
- Opensearch
User List<GetConfigs Open Search Opensearch User Config> - Opensearch user configurable settings. Warning: There's no way to reset advanced configuration options to default. Options that you add cannot be removed later
- Opensearches
List<Get
Open Search Opensearch> - OpenSearch server provided values
- Plan string
- Defines what kind of computing resources are allocated for the service. It can be changed after creation, though there are some restrictions when going to a smaller plan such as the new plan must have sufficient amount of disk space to store all current data and switching to a plan with fewer nodes might not be supported. The basic plan names are
hobbyist
,startup-x
,business-x
andpremium-x
wherex
is (roughly) the amount of memory on each node (also other attributes like number of CPUs and amount of disk space varies but naming is based on memory). The available options can be seen from the Aiven pricing page. - Project string
- The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
- Project
Vpc stringId - Specifies the VPC the service should run in. If the value is not set the service is not run inside a VPC. When set, the value should be given as a reference to set up dependencies correctly and the VPC must be in the same cloud and region as the service itself. Project can be freely moved to and from VPC after creation but doing so triggers migration to new servers so the operation can take significant amount of time to complete if the service has a lot of data.
- Service
Host string - The hostname of the service.
- Service
Integrations List<GetOpen Search Service Integration> - Service integrations to specify when creating a service. Not applied after initial service creation
- Service
Name string - Specifies the actual name of the service. The name cannot be changed later without destroying and re-creating the service so name should be picked based on intended service usage rather than current attributes.
- Service
Password string - Password used for connecting to the service, if applicable
- Service
Port int - The port of the service
- Service
Type string - Aiven internal service type code
- Service
Uri string - URI for connecting to the service. Service specific info is under "kafka", "pg", etc.
- Service
Username string - Username used for connecting to the service, if applicable
- State string
- Service state. One of
POWEROFF
,REBALANCING
,REBUILDING
orRUNNING
- Static
Ips List<string> - Static IPs that are going to be associated with this service. Please assign a value using the 'toset' function. Once a static ip resource is in the 'assigned' state it cannot be unbound from the node again
- List<Get
Open Search Tag> - Tags are key-value pairs that allow you to categorize services.
- Tech
Emails List<GetOpen Search Tech Email> - The email addresses for service contacts, who will receive important alerts and updates about this service. You can also set email contacts at the project level.
- Termination
Protection bool - Prevents the service from being deleted. It is recommended to set this to
true
for all production services to prevent unintentional service deletion. This does not shield against deleting databases or topics but for services with backups much of the content can at least be restored from backup in case accidental deletion is done.
- Additional
Disk stringSpace - Add disk storage in increments of 30 GiB to scale your service. The maximum value depends on the service type and cloud provider. Removing additional storage causes the service nodes to go through a rolling restart and there might be a short downtime for services with no HA capabilities.
- Cloud
Name string - Defines where the cloud provider and region where the service is hosted in. This can be changed freely after service is created. Changing the value will trigger a potentially lengthy migration process for the service. Format is cloud provider name (
aws
,azure
,do
google
,upcloud
, etc.), dash, and the cloud provider specific region name. These are documented on each Cloud provider's own support articles, like here for Google and here for AWS. - Components
[]Get
Open Search Component - Service component information objects
- Disk
Space string - Service disk space. Possible values depend on the service type, the cloud provider and the project. Therefore, reducing will result in the service rebalancing.
- Disk
Space stringCap - The maximum disk space of the service, possible values depend on the service type, the cloud provider and the project.
- Disk
Space stringDefault - The default disk space of the service, possible values depend on the service type, the cloud provider and the project. Its also the minimum value for
disk_space
- Disk
Space stringStep - The default disk space step of the service, possible values depend on the service type, the cloud provider and the project.
disk_space
needs to increment fromdisk_space_default
by increments of this size. - Disk
Space stringUsed - Disk space that service is currently using
- Id string
- The provider-assigned unique ID for this managed resource.
- Maintenance
Window stringDow - Day of week when maintenance operations should be performed. One monday, tuesday, wednesday, etc.
- Maintenance
Window stringTime - Time of day when maintenance operations should be performed. UTC time in HH:mm:ss format.
- Opensearch
User []GetConfigs Open Search Opensearch User Config - Opensearch user configurable settings. Warning: There's no way to reset advanced configuration options to default. Options that you add cannot be removed later
- Opensearches
[]Get
Open Search Opensearch - OpenSearch server provided values
- Plan string
- Defines what kind of computing resources are allocated for the service. It can be changed after creation, though there are some restrictions when going to a smaller plan such as the new plan must have sufficient amount of disk space to store all current data and switching to a plan with fewer nodes might not be supported. The basic plan names are
hobbyist
,startup-x
,business-x
andpremium-x
wherex
is (roughly) the amount of memory on each node (also other attributes like number of CPUs and amount of disk space varies but naming is based on memory). The available options can be seen from the Aiven pricing page. - Project string
- The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
- Project
Vpc stringId - Specifies the VPC the service should run in. If the value is not set the service is not run inside a VPC. When set, the value should be given as a reference to set up dependencies correctly and the VPC must be in the same cloud and region as the service itself. Project can be freely moved to and from VPC after creation but doing so triggers migration to new servers so the operation can take significant amount of time to complete if the service has a lot of data.
- Service
Host string - The hostname of the service.
- Service
Integrations []GetOpen Search Service Integration - Service integrations to specify when creating a service. Not applied after initial service creation
- Service
Name string - Specifies the actual name of the service. The name cannot be changed later without destroying and re-creating the service so name should be picked based on intended service usage rather than current attributes.
- Service
Password string - Password used for connecting to the service, if applicable
- Service
Port int - The port of the service
- Service
Type string - Aiven internal service type code
- Service
Uri string - URI for connecting to the service. Service specific info is under "kafka", "pg", etc.
- Service
Username string - Username used for connecting to the service, if applicable
- State string
- Service state. One of
POWEROFF
,REBALANCING
,REBUILDING
orRUNNING
- Static
Ips []string - Static IPs that are going to be associated with this service. Please assign a value using the 'toset' function. Once a static ip resource is in the 'assigned' state it cannot be unbound from the node again
- []Get
Open Search Tag - Tags are key-value pairs that allow you to categorize services.
- Tech
Emails []GetOpen Search Tech Email - The email addresses for service contacts, who will receive important alerts and updates about this service. You can also set email contacts at the project level.
- Termination
Protection bool - Prevents the service from being deleted. It is recommended to set this to
true
for all production services to prevent unintentional service deletion. This does not shield against deleting databases or topics but for services with backups much of the content can at least be restored from backup in case accidental deletion is done.
- additional
Disk StringSpace - Add disk storage in increments of 30 GiB to scale your service. The maximum value depends on the service type and cloud provider. Removing additional storage causes the service nodes to go through a rolling restart and there might be a short downtime for services with no HA capabilities.
- cloud
Name String - Defines where the cloud provider and region where the service is hosted in. This can be changed freely after service is created. Changing the value will trigger a potentially lengthy migration process for the service. Format is cloud provider name (
aws
,azure
,do
google
,upcloud
, etc.), dash, and the cloud provider specific region name. These are documented on each Cloud provider's own support articles, like here for Google and here for AWS. - components
List<Get
Open Search Component> - Service component information objects
- disk
Space String - Service disk space. Possible values depend on the service type, the cloud provider and the project. Therefore, reducing will result in the service rebalancing.
- disk
Space StringCap - The maximum disk space of the service, possible values depend on the service type, the cloud provider and the project.
- disk
Space StringDefault - The default disk space of the service, possible values depend on the service type, the cloud provider and the project. Its also the minimum value for
disk_space
- disk
Space StringStep - The default disk space step of the service, possible values depend on the service type, the cloud provider and the project.
disk_space
needs to increment fromdisk_space_default
by increments of this size. - disk
Space StringUsed - Disk space that service is currently using
- id String
- The provider-assigned unique ID for this managed resource.
- maintenance
Window StringDow - Day of week when maintenance operations should be performed. One monday, tuesday, wednesday, etc.
- maintenance
Window StringTime - Time of day when maintenance operations should be performed. UTC time in HH:mm:ss format.
- opensearch
User List<GetConfigs Open Search Opensearch User Config> - Opensearch user configurable settings. Warning: There's no way to reset advanced configuration options to default. Options that you add cannot be removed later
- opensearches
List<Get
Open Search Opensearch> - OpenSearch server provided values
- plan String
- Defines what kind of computing resources are allocated for the service. It can be changed after creation, though there are some restrictions when going to a smaller plan such as the new plan must have sufficient amount of disk space to store all current data and switching to a plan with fewer nodes might not be supported. The basic plan names are
hobbyist
,startup-x
,business-x
andpremium-x
wherex
is (roughly) the amount of memory on each node (also other attributes like number of CPUs and amount of disk space varies but naming is based on memory). The available options can be seen from the Aiven pricing page. - project String
- The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
- project
Vpc StringId - Specifies the VPC the service should run in. If the value is not set the service is not run inside a VPC. When set, the value should be given as a reference to set up dependencies correctly and the VPC must be in the same cloud and region as the service itself. Project can be freely moved to and from VPC after creation but doing so triggers migration to new servers so the operation can take significant amount of time to complete if the service has a lot of data.
- service
Host String - The hostname of the service.
- service
Integrations List<GetOpen Search Service Integration> - Service integrations to specify when creating a service. Not applied after initial service creation
- service
Name String - Specifies the actual name of the service. The name cannot be changed later without destroying and re-creating the service so name should be picked based on intended service usage rather than current attributes.
- service
Password String - Password used for connecting to the service, if applicable
- service
Port Integer - The port of the service
- service
Type String - Aiven internal service type code
- service
Uri String - URI for connecting to the service. Service specific info is under "kafka", "pg", etc.
- service
Username String - Username used for connecting to the service, if applicable
- state String
- Service state. One of
POWEROFF
,REBALANCING
,REBUILDING
orRUNNING
- static
Ips List<String> - Static IPs that are going to be associated with this service. Please assign a value using the 'toset' function. Once a static ip resource is in the 'assigned' state it cannot be unbound from the node again
- List<Get
Open Search Tag> - Tags are key-value pairs that allow you to categorize services.
- tech
Emails List<GetOpen Search Tech Email> - The email addresses for service contacts, who will receive important alerts and updates about this service. You can also set email contacts at the project level.
- termination
Protection Boolean - Prevents the service from being deleted. It is recommended to set this to
true
for all production services to prevent unintentional service deletion. This does not shield against deleting databases or topics but for services with backups much of the content can at least be restored from backup in case accidental deletion is done.
- additional
Disk stringSpace - Add disk storage in increments of 30 GiB to scale your service. The maximum value depends on the service type and cloud provider. Removing additional storage causes the service nodes to go through a rolling restart and there might be a short downtime for services with no HA capabilities.
- cloud
Name string - Defines where the cloud provider and region where the service is hosted in. This can be changed freely after service is created. Changing the value will trigger a potentially lengthy migration process for the service. Format is cloud provider name (
aws
,azure
,do
google
,upcloud
, etc.), dash, and the cloud provider specific region name. These are documented on each Cloud provider's own support articles, like here for Google and here for AWS. - components
Get
Open Search Component[] - Service component information objects
- disk
Space string - Service disk space. Possible values depend on the service type, the cloud provider and the project. Therefore, reducing will result in the service rebalancing.
- disk
Space stringCap - The maximum disk space of the service, possible values depend on the service type, the cloud provider and the project.
- disk
Space stringDefault - The default disk space of the service, possible values depend on the service type, the cloud provider and the project. Its also the minimum value for
disk_space
- disk
Space stringStep - The default disk space step of the service, possible values depend on the service type, the cloud provider and the project.
disk_space
needs to increment fromdisk_space_default
by increments of this size. - disk
Space stringUsed - Disk space that service is currently using
- id string
- The provider-assigned unique ID for this managed resource.
- maintenance
Window stringDow - Day of week when maintenance operations should be performed. One monday, tuesday, wednesday, etc.
- maintenance
Window stringTime - Time of day when maintenance operations should be performed. UTC time in HH:mm:ss format.
- opensearch
User GetConfigs Open Search Opensearch User Config[] - Opensearch user configurable settings. Warning: There's no way to reset advanced configuration options to default. Options that you add cannot be removed later
- opensearches
Get
Open Search Opensearch[] - OpenSearch server provided values
- plan string
- Defines what kind of computing resources are allocated for the service. It can be changed after creation, though there are some restrictions when going to a smaller plan such as the new plan must have sufficient amount of disk space to store all current data and switching to a plan with fewer nodes might not be supported. The basic plan names are
hobbyist
,startup-x
,business-x
andpremium-x
wherex
is (roughly) the amount of memory on each node (also other attributes like number of CPUs and amount of disk space varies but naming is based on memory). The available options can be seen from the Aiven pricing page. - project string
- The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
- project
Vpc stringId - Specifies the VPC the service should run in. If the value is not set the service is not run inside a VPC. When set, the value should be given as a reference to set up dependencies correctly and the VPC must be in the same cloud and region as the service itself. Project can be freely moved to and from VPC after creation but doing so triggers migration to new servers so the operation can take significant amount of time to complete if the service has a lot of data.
- service
Host string - The hostname of the service.
- service
Integrations GetOpen Search Service Integration[] - Service integrations to specify when creating a service. Not applied after initial service creation
- service
Name string - Specifies the actual name of the service. The name cannot be changed later without destroying and re-creating the service so name should be picked based on intended service usage rather than current attributes.
- service
Password string - Password used for connecting to the service, if applicable
- service
Port number - The port of the service
- service
Type string - Aiven internal service type code
- service
Uri string - URI for connecting to the service. Service specific info is under "kafka", "pg", etc.
- service
Username string - Username used for connecting to the service, if applicable
- state string
- Service state. One of
POWEROFF
,REBALANCING
,REBUILDING
orRUNNING
- static
Ips string[] - Static IPs that are going to be associated with this service. Please assign a value using the 'toset' function. Once a static ip resource is in the 'assigned' state it cannot be unbound from the node again
- Get
Open Search Tag[] - Tags are key-value pairs that allow you to categorize services.
- tech
Emails GetOpen Search Tech Email[] - The email addresses for service contacts, who will receive important alerts and updates about this service. You can also set email contacts at the project level.
- termination
Protection boolean - Prevents the service from being deleted. It is recommended to set this to
true
for all production services to prevent unintentional service deletion. This does not shield against deleting databases or topics but for services with backups much of the content can at least be restored from backup in case accidental deletion is done.
- additional_
disk_ strspace - Add disk storage in increments of 30 GiB to scale your service. The maximum value depends on the service type and cloud provider. Removing additional storage causes the service nodes to go through a rolling restart and there might be a short downtime for services with no HA capabilities.
- cloud_
name str - Defines where the cloud provider and region where the service is hosted in. This can be changed freely after service is created. Changing the value will trigger a potentially lengthy migration process for the service. Format is cloud provider name (
aws
,azure
,do
google
,upcloud
, etc.), dash, and the cloud provider specific region name. These are documented on each Cloud provider's own support articles, like here for Google and here for AWS. - components
Sequence[Get
Open Search Component] - Service component information objects
- disk_
space str - Service disk space. Possible values depend on the service type, the cloud provider and the project. Therefore, reducing will result in the service rebalancing.
- disk_
space_ strcap - The maximum disk space of the service, possible values depend on the service type, the cloud provider and the project.
- disk_
space_ strdefault - The default disk space of the service, possible values depend on the service type, the cloud provider and the project. Its also the minimum value for
disk_space
- disk_
space_ strstep - The default disk space step of the service, possible values depend on the service type, the cloud provider and the project.
disk_space
needs to increment fromdisk_space_default
by increments of this size. - disk_
space_ strused - Disk space that service is currently using
- id str
- The provider-assigned unique ID for this managed resource.
- maintenance_
window_ strdow - Day of week when maintenance operations should be performed. One monday, tuesday, wednesday, etc.
- maintenance_
window_ strtime - Time of day when maintenance operations should be performed. UTC time in HH:mm:ss format.
- opensearch_
user_ Sequence[Getconfigs Open Search Opensearch User Config] - Opensearch user configurable settings. Warning: There's no way to reset advanced configuration options to default. Options that you add cannot be removed later
- opensearches
Sequence[Get
Open Search Opensearch] - OpenSearch server provided values
- plan str
- Defines what kind of computing resources are allocated for the service. It can be changed after creation, though there are some restrictions when going to a smaller plan such as the new plan must have sufficient amount of disk space to store all current data and switching to a plan with fewer nodes might not be supported. The basic plan names are
hobbyist
,startup-x
,business-x
andpremium-x
wherex
is (roughly) the amount of memory on each node (also other attributes like number of CPUs and amount of disk space varies but naming is based on memory). The available options can be seen from the Aiven pricing page. - project str
- The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
- project_
vpc_ strid - Specifies the VPC the service should run in. If the value is not set the service is not run inside a VPC. When set, the value should be given as a reference to set up dependencies correctly and the VPC must be in the same cloud and region as the service itself. Project can be freely moved to and from VPC after creation but doing so triggers migration to new servers so the operation can take significant amount of time to complete if the service has a lot of data.
- service_
host str - The hostname of the service.
- service_
integrations Sequence[GetOpen Search Service Integration] - Service integrations to specify when creating a service. Not applied after initial service creation
- service_
name str - Specifies the actual name of the service. The name cannot be changed later without destroying and re-creating the service so name should be picked based on intended service usage rather than current attributes.
- service_
password str - Password used for connecting to the service, if applicable
- service_
port int - The port of the service
- service_
type str - Aiven internal service type code
- service_
uri str - URI for connecting to the service. Service specific info is under "kafka", "pg", etc.
- service_
username str - Username used for connecting to the service, if applicable
- state str
- Service state. One of
POWEROFF
,REBALANCING
,REBUILDING
orRUNNING
- static_
ips Sequence[str] - Static IPs that are going to be associated with this service. Please assign a value using the 'toset' function. Once a static ip resource is in the 'assigned' state it cannot be unbound from the node again
- Sequence[Get
Open Search Tag] - Tags are key-value pairs that allow you to categorize services.
- tech_
emails Sequence[GetOpen Search Tech Email] - The email addresses for service contacts, who will receive important alerts and updates about this service. You can also set email contacts at the project level.
- termination_
protection bool - Prevents the service from being deleted. It is recommended to set this to
true
for all production services to prevent unintentional service deletion. This does not shield against deleting databases or topics but for services with backups much of the content can at least be restored from backup in case accidental deletion is done.
- additional
Disk StringSpace - Add disk storage in increments of 30 GiB to scale your service. The maximum value depends on the service type and cloud provider. Removing additional storage causes the service nodes to go through a rolling restart and there might be a short downtime for services with no HA capabilities.
- cloud
Name String - Defines where the cloud provider and region where the service is hosted in. This can be changed freely after service is created. Changing the value will trigger a potentially lengthy migration process for the service. Format is cloud provider name (
aws
,azure
,do
google
,upcloud
, etc.), dash, and the cloud provider specific region name. These are documented on each Cloud provider's own support articles, like here for Google and here for AWS. - components List<Property Map>
- Service component information objects
- disk
Space String - Service disk space. Possible values depend on the service type, the cloud provider and the project. Therefore, reducing will result in the service rebalancing.
- disk
Space StringCap - The maximum disk space of the service, possible values depend on the service type, the cloud provider and the project.
- disk
Space StringDefault - The default disk space of the service, possible values depend on the service type, the cloud provider and the project. Its also the minimum value for
disk_space
- disk
Space StringStep - The default disk space step of the service, possible values depend on the service type, the cloud provider and the project.
disk_space
needs to increment fromdisk_space_default
by increments of this size. - disk
Space StringUsed - Disk space that service is currently using
- id String
- The provider-assigned unique ID for this managed resource.
- maintenance
Window StringDow - Day of week when maintenance operations should be performed. One monday, tuesday, wednesday, etc.
- maintenance
Window StringTime - Time of day when maintenance operations should be performed. UTC time in HH:mm:ss format.
- opensearch
User List<Property Map>Configs - Opensearch user configurable settings. Warning: There's no way to reset advanced configuration options to default. Options that you add cannot be removed later
- opensearches List<Property Map>
- OpenSearch server provided values
- plan String
- Defines what kind of computing resources are allocated for the service. It can be changed after creation, though there are some restrictions when going to a smaller plan such as the new plan must have sufficient amount of disk space to store all current data and switching to a plan with fewer nodes might not be supported. The basic plan names are
hobbyist
,startup-x
,business-x
andpremium-x
wherex
is (roughly) the amount of memory on each node (also other attributes like number of CPUs and amount of disk space varies but naming is based on memory). The available options can be seen from the Aiven pricing page. - project String
- The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
- project
Vpc StringId - Specifies the VPC the service should run in. If the value is not set the service is not run inside a VPC. When set, the value should be given as a reference to set up dependencies correctly and the VPC must be in the same cloud and region as the service itself. Project can be freely moved to and from VPC after creation but doing so triggers migration to new servers so the operation can take significant amount of time to complete if the service has a lot of data.
- service
Host String - The hostname of the service.
- service
Integrations List<Property Map> - Service integrations to specify when creating a service. Not applied after initial service creation
- service
Name String - Specifies the actual name of the service. The name cannot be changed later without destroying and re-creating the service so name should be picked based on intended service usage rather than current attributes.
- service
Password String - Password used for connecting to the service, if applicable
- service
Port Number - The port of the service
- service
Type String - Aiven internal service type code
- service
Uri String - URI for connecting to the service. Service specific info is under "kafka", "pg", etc.
- service
Username String - Username used for connecting to the service, if applicable
- state String
- Service state. One of
POWEROFF
,REBALANCING
,REBUILDING
orRUNNING
- static
Ips List<String> - Static IPs that are going to be associated with this service. Please assign a value using the 'toset' function. Once a static ip resource is in the 'assigned' state it cannot be unbound from the node again
- List<Property Map>
- Tags are key-value pairs that allow you to categorize services.
- tech
Emails List<Property Map> - The email addresses for service contacts, who will receive important alerts and updates about this service. You can also set email contacts at the project level.
- termination
Protection Boolean - Prevents the service from being deleted. It is recommended to set this to
true
for all production services to prevent unintentional service deletion. This does not shield against deleting databases or topics but for services with backups much of the content can at least be restored from backup in case accidental deletion is done.
Supporting Types
GetOpenSearchComponent
- Component string
- Service component name
- Connection
Uri string - Connection info for connecting to the service component. This is a combination of host and port.
- Host string
- Host name for connecting to the service component
- Kafka
Authentication stringMethod - Kafka authentication method. This is a value specific to the 'kafka' service component
- Port int
- Port number for connecting to the service component
- Route string
- Network access route
- Ssl bool
- Whether the endpoint is encrypted or accepts plaintext. By default endpoints are always encrypted and this property is only included for service components they may disable encryption
- Usage string
- DNS usage name
- Component string
- Service component name
- Connection
Uri string - Connection info for connecting to the service component. This is a combination of host and port.
- Host string
- Host name for connecting to the service component
- Kafka
Authentication stringMethod - Kafka authentication method. This is a value specific to the 'kafka' service component
- Port int
- Port number for connecting to the service component
- Route string
- Network access route
- Ssl bool
- Whether the endpoint is encrypted or accepts plaintext. By default endpoints are always encrypted and this property is only included for service components they may disable encryption
- Usage string
- DNS usage name
- component String
- Service component name
- connection
Uri String - Connection info for connecting to the service component. This is a combination of host and port.
- host String
- Host name for connecting to the service component
- kafka
Authentication StringMethod - Kafka authentication method. This is a value specific to the 'kafka' service component
- port Integer
- Port number for connecting to the service component
- route String
- Network access route
- ssl Boolean
- Whether the endpoint is encrypted or accepts plaintext. By default endpoints are always encrypted and this property is only included for service components they may disable encryption
- usage String
- DNS usage name
- component string
- Service component name
- connection
Uri string - Connection info for connecting to the service component. This is a combination of host and port.
- host string
- Host name for connecting to the service component
- kafka
Authentication stringMethod - Kafka authentication method. This is a value specific to the 'kafka' service component
- port number
- Port number for connecting to the service component
- route string
- Network access route
- ssl boolean
- Whether the endpoint is encrypted or accepts plaintext. By default endpoints are always encrypted and this property is only included for service components they may disable encryption
- usage string
- DNS usage name
- component str
- Service component name
- connection_
uri str - Connection info for connecting to the service component. This is a combination of host and port.
- host str
- Host name for connecting to the service component
- kafka_
authentication_ strmethod - Kafka authentication method. This is a value specific to the 'kafka' service component
- port int
- Port number for connecting to the service component
- route str
- Network access route
- ssl bool
- Whether the endpoint is encrypted or accepts plaintext. By default endpoints are always encrypted and this property is only included for service components they may disable encryption
- usage str
- DNS usage name
- component String
- Service component name
- connection
Uri String - Connection info for connecting to the service component. This is a combination of host and port.
- host String
- Host name for connecting to the service component
- kafka
Authentication StringMethod - Kafka authentication method. This is a value specific to the 'kafka' service component
- port Number
- Port number for connecting to the service component
- route String
- Network access route
- ssl Boolean
- Whether the endpoint is encrypted or accepts plaintext. By default endpoints are always encrypted and this property is only included for service components they may disable encryption
- usage String
- DNS usage name
GetOpenSearchOpensearch
- Kibana
Uri string - URI for Kibana dashboard frontend
- Opensearch
Dashboards stringUri - URI for OpenSearch dashboard frontend
- Password string
- OpenSearch password
- Uris List<string>
- OpenSearch server URIs.
- Username string
- OpenSearch username
- Kibana
Uri string - URI for Kibana dashboard frontend
- Opensearch
Dashboards stringUri - URI for OpenSearch dashboard frontend
- Password string
- OpenSearch password
- Uris []string
- OpenSearch server URIs.
- Username string
- OpenSearch username
- kibana
Uri String - URI for Kibana dashboard frontend
- opensearch
Dashboards StringUri - URI for OpenSearch dashboard frontend
- password String
- OpenSearch password
- uris List<String>
- OpenSearch server URIs.
- username String
- OpenSearch username
- kibana
Uri string - URI for Kibana dashboard frontend
- opensearch
Dashboards stringUri - URI for OpenSearch dashboard frontend
- password string
- OpenSearch password
- uris string[]
- OpenSearch server URIs.
- username string
- OpenSearch username
- kibana_
uri str - URI for Kibana dashboard frontend
- opensearch_
dashboards_ struri - URI for OpenSearch dashboard frontend
- password str
- OpenSearch password
- uris Sequence[str]
- OpenSearch server URIs.
- username str
- OpenSearch username
- kibana
Uri String - URI for Kibana dashboard frontend
- opensearch
Dashboards StringUri - URI for OpenSearch dashboard frontend
- password String
- OpenSearch password
- uris List<String>
- OpenSearch server URIs.
- username String
- OpenSearch username
GetOpenSearchOpensearchUserConfig
- Additional
Backup stringRegions - Additional Cloud Regions for Backup Replication.
- Azure
Migration GetOpen Search Opensearch User Config Azure Migration - Azure migration settings
- Custom
Domain string - Serve the web frontend using a custom CNAME pointing to the Aiven DNS name. Example:
grafana.example.org
. - Disable
Replication boolFactor Adjustment - Disable automatic replication factor adjustment for multi-node services. By default, Aiven ensures all indexes are replicated at least to two nodes. Note: Due to potential data loss in case of losing a service node, this setting can not be activated unless specifically allowed for the project.
- Gcs
Migration GetOpen Search Opensearch User Config Gcs Migration - Google Cloud Storage migration settings
- Index
Patterns List<GetOpen Search Opensearch User Config Index Pattern> - Index patterns
- Index
Rollup GetOpen Search Opensearch User Config Index Rollup - Index rollup settings
- Index
Template GetOpen Search Opensearch User Config Index Template - Template settings for all new indexes
- Ip
Filter List<GetObjects Open Search Opensearch User Config Ip Filter Object> - Allow incoming connections from CIDR address block, e.g.
10.20.0.0/16
- Ip
Filter List<string>Strings - Allow incoming connections from CIDR address block, e.g.
10.20.0.0/16
. - Ip
Filters List<string> - Allow incoming connections from CIDR address block, e.g.
10.20.0.0/16
. - Keep
Index boolRefresh Interval - Aiven automation resets index.refresh_interval to default value for every index to be sure that indices are always visible to search. If it doesn't fit your case, you can disable this by setting up this flag to true.
- Max
Index intCount - Use index_patterns instead. Default:
0
. - Openid
Get
Open Search Opensearch User Config Openid - OpenSearch OpenID Connect Configuration
- Opensearch
Get
Open Search Opensearch User Config Opensearch - OpenSearch settings
- Opensearch
Dashboards GetOpen Search Opensearch User Config Opensearch Dashboards - OpenSearch Dashboards settings
- Opensearch
Version string - Enum:
1
,2
, and newer. OpenSearch major version. - Private
Access GetOpen Search Opensearch User Config Private Access - Allow access to selected service ports from private networks
- Privatelink
Access GetOpen Search Opensearch User Config Privatelink Access - Allow access to selected service components through Privatelink
- Project
To stringFork From - Name of another project to fork a service from. This has effect only when a new service is being created. Example:
anotherprojectname
. - Public
Access GetOpen Search Opensearch User Config Public Access - Allow access to selected service ports from the public Internet
- Recovery
Basebackup stringName - Name of the basebackup to restore in forked service. Example:
backup-20191112t091354293891z
. - S3Migration
Get
Open Search Opensearch User Config S3Migration - AWS S3 / AWS S3 compatible migration settings
- Saml
Get
Open Search Opensearch User Config Saml - OpenSearch SAML configuration
- Service
Log bool - Store logs for the service so that they are available in the HTTP API and console.
- Service
To stringFork From - Name of another service to fork from. This has effect only when a new service is being created. Example:
anotherservicename
. - Static
Ips bool - Use static public IP addresses.
- Additional
Backup stringRegions - Additional Cloud Regions for Backup Replication.
- Azure
Migration GetOpen Search Opensearch User Config Azure Migration - Azure migration settings
- Custom
Domain string - Serve the web frontend using a custom CNAME pointing to the Aiven DNS name. Example:
grafana.example.org
. - Disable
Replication boolFactor Adjustment - Disable automatic replication factor adjustment for multi-node services. By default, Aiven ensures all indexes are replicated at least to two nodes. Note: Due to potential data loss in case of losing a service node, this setting can not be activated unless specifically allowed for the project.
- Gcs
Migration GetOpen Search Opensearch User Config Gcs Migration - Google Cloud Storage migration settings
- Index
Patterns []GetOpen Search Opensearch User Config Index Pattern - Index patterns
- Index
Rollup GetOpen Search Opensearch User Config Index Rollup - Index rollup settings
- Index
Template GetOpen Search Opensearch User Config Index Template - Template settings for all new indexes
- Ip
Filter []GetObjects Open Search Opensearch User Config Ip Filter Object - Allow incoming connections from CIDR address block, e.g.
10.20.0.0/16
- Ip
Filter []stringStrings - Allow incoming connections from CIDR address block, e.g.
10.20.0.0/16
. - Ip
Filters []string - Allow incoming connections from CIDR address block, e.g.
10.20.0.0/16
. - Keep
Index boolRefresh Interval - Aiven automation resets index.refresh_interval to default value for every index to be sure that indices are always visible to search. If it doesn't fit your case, you can disable this by setting up this flag to true.
- Max
Index intCount - Use index_patterns instead. Default:
0
. - Openid
Get
Open Search Opensearch User Config Openid - OpenSearch OpenID Connect Configuration
- Opensearch
Get
Open Search Opensearch User Config Opensearch - OpenSearch settings
- Opensearch
Dashboards GetOpen Search Opensearch User Config Opensearch Dashboards - OpenSearch Dashboards settings
- Opensearch
Version string - Enum:
1
,2
, and newer. OpenSearch major version. - Private
Access GetOpen Search Opensearch User Config Private Access - Allow access to selected service ports from private networks
- Privatelink
Access GetOpen Search Opensearch User Config Privatelink Access - Allow access to selected service components through Privatelink
- Project
To stringFork From - Name of another project to fork a service from. This has effect only when a new service is being created. Example:
anotherprojectname
. - Public
Access GetOpen Search Opensearch User Config Public Access - Allow access to selected service ports from the public Internet
- Recovery
Basebackup stringName - Name of the basebackup to restore in forked service. Example:
backup-20191112t091354293891z
. - S3Migration
Get
Open Search Opensearch User Config S3Migration - AWS S3 / AWS S3 compatible migration settings
- Saml
Get
Open Search Opensearch User Config Saml - OpenSearch SAML configuration
- Service
Log bool - Store logs for the service so that they are available in the HTTP API and console.
- Service
To stringFork From - Name of another service to fork from. This has effect only when a new service is being created. Example:
anotherservicename
. - Static
Ips bool - Use static public IP addresses.
- additional
Backup StringRegions - Additional Cloud Regions for Backup Replication.
- azure
Migration GetOpen Search Opensearch User Config Azure Migration - Azure migration settings
- custom
Domain String - Serve the web frontend using a custom CNAME pointing to the Aiven DNS name. Example:
grafana.example.org
. - disable
Replication BooleanFactor Adjustment - Disable automatic replication factor adjustment for multi-node services. By default, Aiven ensures all indexes are replicated at least to two nodes. Note: Due to potential data loss in case of losing a service node, this setting can not be activated unless specifically allowed for the project.
- gcs
Migration GetOpen Search Opensearch User Config Gcs Migration - Google Cloud Storage migration settings
- index
Patterns List<GetOpen Search Opensearch User Config Index Pattern> - Index patterns
- index
Rollup GetOpen Search Opensearch User Config Index Rollup - Index rollup settings
- index
Template GetOpen Search Opensearch User Config Index Template - Template settings for all new indexes
- ip
Filter List<GetObjects Open Search Opensearch User Config Ip Filter Object> - Allow incoming connections from CIDR address block, e.g.
10.20.0.0/16
- ip
Filter List<String>Strings - Allow incoming connections from CIDR address block, e.g.
10.20.0.0/16
. - ip
Filters List<String> - Allow incoming connections from CIDR address block, e.g.
10.20.0.0/16
. - keep
Index BooleanRefresh Interval - Aiven automation resets index.refresh_interval to default value for every index to be sure that indices are always visible to search. If it doesn't fit your case, you can disable this by setting up this flag to true.
- max
Index IntegerCount - Use index_patterns instead. Default:
0
. - openid
Get
Open Search Opensearch User Config Openid - OpenSearch OpenID Connect Configuration
- opensearch
Get
Open Search Opensearch User Config Opensearch - OpenSearch settings
- opensearch
Dashboards GetOpen Search Opensearch User Config Opensearch Dashboards - OpenSearch Dashboards settings
- opensearch
Version String - Enum:
1
,2
, and newer. OpenSearch major version. - private
Access GetOpen Search Opensearch User Config Private Access - Allow access to selected service ports from private networks
- privatelink
Access GetOpen Search Opensearch User Config Privatelink Access - Allow access to selected service components through Privatelink
- project
To StringFork From - Name of another project to fork a service from. This has effect only when a new service is being created. Example:
anotherprojectname
. - public
Access GetOpen Search Opensearch User Config Public Access - Allow access to selected service ports from the public Internet
- recovery
Basebackup StringName - Name of the basebackup to restore in forked service. Example:
backup-20191112t091354293891z
. - s3Migration
Get
Open Search Opensearch User Config S3Migration - AWS S3 / AWS S3 compatible migration settings
- saml
Get
Open Search Opensearch User Config Saml - OpenSearch SAML configuration
- service
Log Boolean - Store logs for the service so that they are available in the HTTP API and console.
- service
To StringFork From - Name of another service to fork from. This has effect only when a new service is being created. Example:
anotherservicename
. - static
Ips Boolean - Use static public IP addresses.
- additional
Backup stringRegions - Additional Cloud Regions for Backup Replication.
- azure
Migration GetOpen Search Opensearch User Config Azure Migration - Azure migration settings
- custom
Domain string - Serve the web frontend using a custom CNAME pointing to the Aiven DNS name. Example:
grafana.example.org
. - disable
Replication booleanFactor Adjustment - Disable automatic replication factor adjustment for multi-node services. By default, Aiven ensures all indexes are replicated at least to two nodes. Note: Due to potential data loss in case of losing a service node, this setting can not be activated unless specifically allowed for the project.
- gcs
Migration GetOpen Search Opensearch User Config Gcs Migration - Google Cloud Storage migration settings
- index
Patterns GetOpen Search Opensearch User Config Index Pattern[] - Index patterns
- index
Rollup GetOpen Search Opensearch User Config Index Rollup - Index rollup settings
- index
Template GetOpen Search Opensearch User Config Index Template - Template settings for all new indexes
- ip
Filter GetObjects Open Search Opensearch User Config Ip Filter Object[] - Allow incoming connections from CIDR address block, e.g.
10.20.0.0/16
- ip
Filter string[]Strings - Allow incoming connections from CIDR address block, e.g.
10.20.0.0/16
. - ip
Filters string[] - Allow incoming connections from CIDR address block, e.g.
10.20.0.0/16
. - keep
Index booleanRefresh Interval - Aiven automation resets index.refresh_interval to default value for every index to be sure that indices are always visible to search. If it doesn't fit your case, you can disable this by setting up this flag to true.
- max
Index numberCount - Use index_patterns instead. Default:
0
. - openid
Get
Open Search Opensearch User Config Openid - OpenSearch OpenID Connect Configuration
- opensearch
Get
Open Search Opensearch User Config Opensearch - OpenSearch settings
- opensearch
Dashboards GetOpen Search Opensearch User Config Opensearch Dashboards - OpenSearch Dashboards settings
- opensearch
Version string - Enum:
1
,2
, and newer. OpenSearch major version. - private
Access GetOpen Search Opensearch User Config Private Access - Allow access to selected service ports from private networks
- privatelink
Access GetOpen Search Opensearch User Config Privatelink Access - Allow access to selected service components through Privatelink
- project
To stringFork From - Name of another project to fork a service from. This has effect only when a new service is being created. Example:
anotherprojectname
. - public
Access GetOpen Search Opensearch User Config Public Access - Allow access to selected service ports from the public Internet
- recovery
Basebackup stringName - Name of the basebackup to restore in forked service. Example:
backup-20191112t091354293891z
. - s3Migration
Get
Open Search Opensearch User Config S3Migration - AWS S3 / AWS S3 compatible migration settings
- saml
Get
Open Search Opensearch User Config Saml - OpenSearch SAML configuration
- service
Log boolean - Store logs for the service so that they are available in the HTTP API and console.
- service
To stringFork From - Name of another service to fork from. This has effect only when a new service is being created. Example:
anotherservicename
. - static
Ips boolean - Use static public IP addresses.
- additional_
backup_ strregions - Additional Cloud Regions for Backup Replication.
- azure_
migration GetOpen Search Opensearch User Config Azure Migration - Azure migration settings
- custom_
domain str - Serve the web frontend using a custom CNAME pointing to the Aiven DNS name. Example:
grafana.example.org
. - disable_
replication_ boolfactor_ adjustment - Disable automatic replication factor adjustment for multi-node services. By default, Aiven ensures all indexes are replicated at least to two nodes. Note: Due to potential data loss in case of losing a service node, this setting can not be activated unless specifically allowed for the project.
- gcs_
migration GetOpen Search Opensearch User Config Gcs Migration - Google Cloud Storage migration settings
- index_
patterns Sequence[GetOpen Search Opensearch User Config Index Pattern] - Index patterns
- index_
rollup GetOpen Search Opensearch User Config Index Rollup - Index rollup settings
- index_
template GetOpen Search Opensearch User Config Index Template - Template settings for all new indexes
- ip_
filter_ Sequence[Getobjects Open Search Opensearch User Config Ip Filter Object] - Allow incoming connections from CIDR address block, e.g.
10.20.0.0/16
- ip_
filter_ Sequence[str]strings - Allow incoming connections from CIDR address block, e.g.
10.20.0.0/16
. - ip_
filters Sequence[str] - Allow incoming connections from CIDR address block, e.g.
10.20.0.0/16
. - keep_
index_ boolrefresh_ interval - Aiven automation resets index.refresh_interval to default value for every index to be sure that indices are always visible to search. If it doesn't fit your case, you can disable this by setting up this flag to true.
- max_
index_ intcount - Use index_patterns instead. Default:
0
. - openid
Get
Open Search Opensearch User Config Openid - OpenSearch OpenID Connect Configuration
- opensearch
Get
Open Search Opensearch User Config Opensearch - OpenSearch settings
- opensearch_
dashboards GetOpen Search Opensearch User Config Opensearch Dashboards - OpenSearch Dashboards settings
- opensearch_
version str - Enum:
1
,2
, and newer. OpenSearch major version. - private_
access GetOpen Search Opensearch User Config Private Access - Allow access to selected service ports from private networks
- privatelink_
access GetOpen Search Opensearch User Config Privatelink Access - Allow access to selected service components through Privatelink
- project_
to_ strfork_ from - Name of another project to fork a service from. This has effect only when a new service is being created. Example:
anotherprojectname
. - public_
access GetOpen Search Opensearch User Config Public Access - Allow access to selected service ports from the public Internet
- recovery_
basebackup_ strname - Name of the basebackup to restore in forked service. Example:
backup-20191112t091354293891z
. - s3_
migration GetOpen Search Opensearch User Config S3Migration - AWS S3 / AWS S3 compatible migration settings
- saml
Get
Open Search Opensearch User Config Saml - OpenSearch SAML configuration
- service_
log bool - Store logs for the service so that they are available in the HTTP API and console.
- service_
to_ strfork_ from - Name of another service to fork from. This has effect only when a new service is being created. Example:
anotherservicename
. - static_
ips bool - Use static public IP addresses.
- additional
Backup StringRegions - Additional Cloud Regions for Backup Replication.
- azure
Migration Property Map - Azure migration settings
- custom
Domain String - Serve the web frontend using a custom CNAME pointing to the Aiven DNS name. Example:
grafana.example.org
. - disable
Replication BooleanFactor Adjustment - Disable automatic replication factor adjustment for multi-node services. By default, Aiven ensures all indexes are replicated at least to two nodes. Note: Due to potential data loss in case of losing a service node, this setting can not be activated unless specifically allowed for the project.
- gcs
Migration Property Map - Google Cloud Storage migration settings
- index
Patterns List<Property Map> - Index patterns
- index
Rollup Property Map - Index rollup settings
- index
Template Property Map - Template settings for all new indexes
- ip
Filter List<Property Map>Objects - Allow incoming connections from CIDR address block, e.g.
10.20.0.0/16
- ip
Filter List<String>Strings - Allow incoming connections from CIDR address block, e.g.
10.20.0.0/16
. - ip
Filters List<String> - Allow incoming connections from CIDR address block, e.g.
10.20.0.0/16
. - keep
Index BooleanRefresh Interval - Aiven automation resets index.refresh_interval to default value for every index to be sure that indices are always visible to search. If it doesn't fit your case, you can disable this by setting up this flag to true.
- max
Index NumberCount - Use index_patterns instead. Default:
0
. - openid Property Map
- OpenSearch OpenID Connect Configuration
- opensearch Property Map
- OpenSearch settings
- opensearch
Dashboards Property Map - OpenSearch Dashboards settings
- opensearch
Version String - Enum:
1
,2
, and newer. OpenSearch major version. - private
Access Property Map - Allow access to selected service ports from private networks
- privatelink
Access Property Map - Allow access to selected service components through Privatelink
- project
To StringFork From - Name of another project to fork a service from. This has effect only when a new service is being created. Example:
anotherprojectname
. - public
Access Property Map - Allow access to selected service ports from the public Internet
- recovery
Basebackup StringName - Name of the basebackup to restore in forked service. Example:
backup-20191112t091354293891z
. - s3Migration Property Map
- AWS S3 / AWS S3 compatible migration settings
- saml Property Map
- OpenSearch SAML configuration
- service
Log Boolean - Store logs for the service so that they are available in the HTTP API and console.
- service
To StringFork From - Name of another service to fork from. This has effect only when a new service is being created. Example:
anotherservicename
. - static
Ips Boolean - Use static public IP addresses.
GetOpenSearchOpensearchUserConfigAzureMigration
- Account string
- Azure account name.
- Base
Path string - The path to the repository data within its container. The value of this setting should not start or end with a /.
- Container string
- Azure container name.
- Indices string
- A comma-delimited list of indices to restore from the snapshot. Multi-index syntax is supported. Example:
metrics*,logs*,data-20240823
. - Snapshot
Name string - The snapshot name to restore from.
- Chunk
Size string - Big files can be broken down into chunks during snapshotting if needed. Should be the same as for the 3rd party repository.
- Compress bool
- When set to true metadata files are stored in compressed format.
- Endpoint
Suffix string - Defines the DNS suffix for Azure Storage endpoints.
- Include
Aliases bool - Whether to restore aliases alongside their associated indexes. Default is true.
- Key string
- Azure account secret key. One of key or sas_token should be specified.
- Restore
Global boolState - If true, restore the cluster state. Defaults to false.
- Sas
Token string - A shared access signatures (SAS) token. One of key or sas_token should be specified.
- Account string
- Azure account name.
- Base
Path string - The path to the repository data within its container. The value of this setting should not start or end with a /.
- Container string
- Azure container name.
- Indices string
- A comma-delimited list of indices to restore from the snapshot. Multi-index syntax is supported. Example:
metrics*,logs*,data-20240823
. - Snapshot
Name string - The snapshot name to restore from.
- Chunk
Size string - Big files can be broken down into chunks during snapshotting if needed. Should be the same as for the 3rd party repository.
- Compress bool
- When set to true metadata files are stored in compressed format.
- Endpoint
Suffix string - Defines the DNS suffix for Azure Storage endpoints.
- Include
Aliases bool - Whether to restore aliases alongside their associated indexes. Default is true.
- Key string
- Azure account secret key. One of key or sas_token should be specified.
- Restore
Global boolState - If true, restore the cluster state. Defaults to false.
- Sas
Token string - A shared access signatures (SAS) token. One of key or sas_token should be specified.
- account String
- Azure account name.
- base
Path String - The path to the repository data within its container. The value of this setting should not start or end with a /.
- container String
- Azure container name.
- indices String
- A comma-delimited list of indices to restore from the snapshot. Multi-index syntax is supported. Example:
metrics*,logs*,data-20240823
. - snapshot
Name String - The snapshot name to restore from.
- chunk
Size String - Big files can be broken down into chunks during snapshotting if needed. Should be the same as for the 3rd party repository.
- compress Boolean
- When set to true metadata files are stored in compressed format.
- endpoint
Suffix String - Defines the DNS suffix for Azure Storage endpoints.
- include
Aliases Boolean - Whether to restore aliases alongside their associated indexes. Default is true.
- key String
- Azure account secret key. One of key or sas_token should be specified.
- restore
Global BooleanState - If true, restore the cluster state. Defaults to false.
- sas
Token String - A shared access signatures (SAS) token. One of key or sas_token should be specified.
- account string
- Azure account name.
- base
Path string - The path to the repository data within its container. The value of this setting should not start or end with a /.
- container string
- Azure container name.
- indices string
- A comma-delimited list of indices to restore from the snapshot. Multi-index syntax is supported. Example:
metrics*,logs*,data-20240823
. - snapshot
Name string - The snapshot name to restore from.
- chunk
Size string - Big files can be broken down into chunks during snapshotting if needed. Should be the same as for the 3rd party repository.
- compress boolean
- When set to true metadata files are stored in compressed format.
- endpoint
Suffix string - Defines the DNS suffix for Azure Storage endpoints.
- include
Aliases boolean - Whether to restore aliases alongside their associated indexes. Default is true.
- key string
- Azure account secret key. One of key or sas_token should be specified.
- restore
Global booleanState - If true, restore the cluster state. Defaults to false.
- sas
Token string - A shared access signatures (SAS) token. One of key or sas_token should be specified.
- account str
- Azure account name.
- base_
path str - The path to the repository data within its container. The value of this setting should not start or end with a /.
- container str
- Azure container name.
- indices str
- A comma-delimited list of indices to restore from the snapshot. Multi-index syntax is supported. Example:
metrics*,logs*,data-20240823
. - snapshot_
name str - The snapshot name to restore from.
- chunk_
size str - Big files can be broken down into chunks during snapshotting if needed. Should be the same as for the 3rd party repository.
- compress bool
- When set to true metadata files are stored in compressed format.
- endpoint_
suffix str - Defines the DNS suffix for Azure Storage endpoints.
- include_
aliases bool - Whether to restore aliases alongside their associated indexes. Default is true.
- key str
- Azure account secret key. One of key or sas_token should be specified.
- restore_
global_ boolstate - If true, restore the cluster state. Defaults to false.
- sas_
token str - A shared access signatures (SAS) token. One of key or sas_token should be specified.
- account String
- Azure account name.
- base
Path String - The path to the repository data within its container. The value of this setting should not start or end with a /.
- container String
- Azure container name.
- indices String
- A comma-delimited list of indices to restore from the snapshot. Multi-index syntax is supported. Example:
metrics*,logs*,data-20240823
. - snapshot
Name String - The snapshot name to restore from.
- chunk
Size String - Big files can be broken down into chunks during snapshotting if needed. Should be the same as for the 3rd party repository.
- compress Boolean
- When set to true metadata files are stored in compressed format.
- endpoint
Suffix String - Defines the DNS suffix for Azure Storage endpoints.
- include
Aliases Boolean - Whether to restore aliases alongside their associated indexes. Default is true.
- key String
- Azure account secret key. One of key or sas_token should be specified.
- restore
Global BooleanState - If true, restore the cluster state. Defaults to false.
- sas
Token String - A shared access signatures (SAS) token. One of key or sas_token should be specified.
GetOpenSearchOpensearchUserConfigGcsMigration
- Base
Path string - The path to the repository data within its container. The value of this setting should not start or end with a /.
- Bucket string
- The path to the repository data within its container.
- Credentials string
- Google Cloud Storage credentials file content.
- Indices string
- A comma-delimited list of indices to restore from the snapshot. Multi-index syntax is supported. Example:
metrics*,logs*,data-20240823
. - Snapshot
Name string - The snapshot name to restore from.
- Chunk
Size string - Big files can be broken down into chunks during snapshotting if needed. Should be the same as for the 3rd party repository.
- Compress bool
- When set to true metadata files are stored in compressed format.
- Include
Aliases bool - Whether to restore aliases alongside their associated indexes. Default is true.
- Restore
Global boolState - If true, restore the cluster state. Defaults to false.
- Base
Path string - The path to the repository data within its container. The value of this setting should not start or end with a /.
- Bucket string
- The path to the repository data within its container.
- Credentials string
- Google Cloud Storage credentials file content.
- Indices string
- A comma-delimited list of indices to restore from the snapshot. Multi-index syntax is supported. Example:
metrics*,logs*,data-20240823
. - Snapshot
Name string - The snapshot name to restore from.
- Chunk
Size string - Big files can be broken down into chunks during snapshotting if needed. Should be the same as for the 3rd party repository.
- Compress bool
- When set to true metadata files are stored in compressed format.
- Include
Aliases bool - Whether to restore aliases alongside their associated indexes. Default is true.
- Restore
Global boolState - If true, restore the cluster state. Defaults to false.
- base
Path String - The path to the repository data within its container. The value of this setting should not start or end with a /.
- bucket String
- The path to the repository data within its container.
- credentials String
- Google Cloud Storage credentials file content.
- indices String
- A comma-delimited list of indices to restore from the snapshot. Multi-index syntax is supported. Example:
metrics*,logs*,data-20240823
. - snapshot
Name String - The snapshot name to restore from.
- chunk
Size String - Big files can be broken down into chunks during snapshotting if needed. Should be the same as for the 3rd party repository.
- compress Boolean
- When set to true metadata files are stored in compressed format.
- include
Aliases Boolean - Whether to restore aliases alongside their associated indexes. Default is true.
- restore
Global BooleanState - If true, restore the cluster state. Defaults to false.
- base
Path string - The path to the repository data within its container. The value of this setting should not start or end with a /.
- bucket string
- The path to the repository data within its container.
- credentials string
- Google Cloud Storage credentials file content.
- indices string
- A comma-delimited list of indices to restore from the snapshot. Multi-index syntax is supported. Example:
metrics*,logs*,data-20240823
. - snapshot
Name string - The snapshot name to restore from.
- chunk
Size string - Big files can be broken down into chunks during snapshotting if needed. Should be the same as for the 3rd party repository.
- compress boolean
- When set to true metadata files are stored in compressed format.
- include
Aliases boolean - Whether to restore aliases alongside their associated indexes. Default is true.
- restore
Global booleanState - If true, restore the cluster state. Defaults to false.
- base_
path str - The path to the repository data within its container. The value of this setting should not start or end with a /.
- bucket str
- The path to the repository data within its container.
- credentials str
- Google Cloud Storage credentials file content.
- indices str
- A comma-delimited list of indices to restore from the snapshot. Multi-index syntax is supported. Example:
metrics*,logs*,data-20240823
. - snapshot_
name str - The snapshot name to restore from.
- chunk_
size str - Big files can be broken down into chunks during snapshotting if needed. Should be the same as for the 3rd party repository.
- compress bool
- When set to true metadata files are stored in compressed format.
- include_
aliases bool - Whether to restore aliases alongside their associated indexes. Default is true.
- restore_
global_ boolstate - If true, restore the cluster state. Defaults to false.
- base
Path String - The path to the repository data within its container. The value of this setting should not start or end with a /.
- bucket String
- The path to the repository data within its container.
- credentials String
- Google Cloud Storage credentials file content.
- indices String
- A comma-delimited list of indices to restore from the snapshot. Multi-index syntax is supported. Example:
metrics*,logs*,data-20240823
. - snapshot
Name String - The snapshot name to restore from.
- chunk
Size String - Big files can be broken down into chunks during snapshotting if needed. Should be the same as for the 3rd party repository.
- compress Boolean
- When set to true metadata files are stored in compressed format.
- include
Aliases Boolean - Whether to restore aliases alongside their associated indexes. Default is true.
- restore
Global BooleanState - If true, restore the cluster state. Defaults to false.
GetOpenSearchOpensearchUserConfigIndexPattern
- Max
Index intCount - Maximum number of indexes to keep. Example:
3
. - Pattern string
- fnmatch pattern. Example:
logs_*_foo_*
. - Sorting
Algorithm string - Enum:
alphabetical
,creation_date
. Deletion sorting algorithm. Default:creation_date
.
- Max
Index intCount - Maximum number of indexes to keep. Example:
3
. - Pattern string
- fnmatch pattern. Example:
logs_*_foo_*
. - Sorting
Algorithm string - Enum:
alphabetical
,creation_date
. Deletion sorting algorithm. Default:creation_date
.
- max
Index IntegerCount - Maximum number of indexes to keep. Example:
3
. - pattern String
- fnmatch pattern. Example:
logs_*_foo_*
. - sorting
Algorithm String - Enum:
alphabetical
,creation_date
. Deletion sorting algorithm. Default:creation_date
.
- max
Index numberCount - Maximum number of indexes to keep. Example:
3
. - pattern string
- fnmatch pattern. Example:
logs_*_foo_*
. - sorting
Algorithm string - Enum:
alphabetical
,creation_date
. Deletion sorting algorithm. Default:creation_date
.
- max_
index_ intcount - Maximum number of indexes to keep. Example:
3
. - pattern str
- fnmatch pattern. Example:
logs_*_foo_*
. - sorting_
algorithm str - Enum:
alphabetical
,creation_date
. Deletion sorting algorithm. Default:creation_date
.
- max
Index NumberCount - Maximum number of indexes to keep. Example:
3
. - pattern String
- fnmatch pattern. Example:
logs_*_foo_*
. - sorting
Algorithm String - Enum:
alphabetical
,creation_date
. Deletion sorting algorithm. Default:creation_date
.
GetOpenSearchOpensearchUserConfigIndexRollup
- Rollup
Dashboards boolEnabled - Whether rollups are enabled in OpenSearch Dashboards. Defaults to true.
- Rollup
Enabled bool - Whether the rollup plugin is enabled. Defaults to true.
- Rollup
Search intBackoff Count - How many retries the plugin should attempt for failed rollup jobs. Defaults to 5.
- Rollup
Search intBackoff Millis - The backoff time between retries for failed rollup jobs. Defaults to 1000ms.
- Rollup
Search boolSearch All Jobs - Whether OpenSearch should return all jobs that match all specified search terms. If disabled, OpenSearch returns just one, as opposed to all, of the jobs that matches the search terms. Defaults to false.
- Rollup
Dashboards boolEnabled - Whether rollups are enabled in OpenSearch Dashboards. Defaults to true.
- Rollup
Enabled bool - Whether the rollup plugin is enabled. Defaults to true.
- Rollup
Search intBackoff Count - How many retries the plugin should attempt for failed rollup jobs. Defaults to 5.
- Rollup
Search intBackoff Millis - The backoff time between retries for failed rollup jobs. Defaults to 1000ms.
- Rollup
Search boolSearch All Jobs - Whether OpenSearch should return all jobs that match all specified search terms. If disabled, OpenSearch returns just one, as opposed to all, of the jobs that matches the search terms. Defaults to false.
- rollup
Dashboards BooleanEnabled - Whether rollups are enabled in OpenSearch Dashboards. Defaults to true.
- rollup
Enabled Boolean - Whether the rollup plugin is enabled. Defaults to true.
- rollup
Search IntegerBackoff Count - How many retries the plugin should attempt for failed rollup jobs. Defaults to 5.
- rollup
Search IntegerBackoff Millis - The backoff time between retries for failed rollup jobs. Defaults to 1000ms.
- rollup
Search BooleanSearch All Jobs - Whether OpenSearch should return all jobs that match all specified search terms. If disabled, OpenSearch returns just one, as opposed to all, of the jobs that matches the search terms. Defaults to false.
- rollup
Dashboards booleanEnabled - Whether rollups are enabled in OpenSearch Dashboards. Defaults to true.
- rollup
Enabled boolean - Whether the rollup plugin is enabled. Defaults to true.
- rollup
Search numberBackoff Count - How many retries the plugin should attempt for failed rollup jobs. Defaults to 5.
- rollup
Search numberBackoff Millis - The backoff time between retries for failed rollup jobs. Defaults to 1000ms.
- rollup
Search booleanSearch All Jobs - Whether OpenSearch should return all jobs that match all specified search terms. If disabled, OpenSearch returns just one, as opposed to all, of the jobs that matches the search terms. Defaults to false.
- rollup_
dashboards_ boolenabled - Whether rollups are enabled in OpenSearch Dashboards. Defaults to true.
- rollup_
enabled bool - Whether the rollup plugin is enabled. Defaults to true.
- rollup_
search_ intbackoff_ count - How many retries the plugin should attempt for failed rollup jobs. Defaults to 5.
- rollup_
search_ intbackoff_ millis - The backoff time between retries for failed rollup jobs. Defaults to 1000ms.
- rollup_
search_ boolsearch_ all_ jobs - Whether OpenSearch should return all jobs that match all specified search terms. If disabled, OpenSearch returns just one, as opposed to all, of the jobs that matches the search terms. Defaults to false.
- rollup
Dashboards BooleanEnabled - Whether rollups are enabled in OpenSearch Dashboards. Defaults to true.
- rollup
Enabled Boolean - Whether the rollup plugin is enabled. Defaults to true.
- rollup
Search NumberBackoff Count - How many retries the plugin should attempt for failed rollup jobs. Defaults to 5.
- rollup
Search NumberBackoff Millis - The backoff time between retries for failed rollup jobs. Defaults to 1000ms.
- rollup
Search BooleanSearch All Jobs - Whether OpenSearch should return all jobs that match all specified search terms. If disabled, OpenSearch returns just one, as opposed to all, of the jobs that matches the search terms. Defaults to false.
GetOpenSearchOpensearchUserConfigIndexTemplate
- Mapping
Nested intObjects Limit - The maximum number of nested JSON objects that a single document can contain across all nested types. This limit helps to prevent out of memory errors when a document contains too many nested objects. Default is 10000. Example:
10000
. - Number
Of intReplicas - The number of replicas each primary shard has. Example:
1
. - Number
Of intShards - The number of primary shards that an index should have. Example:
1
.
- Mapping
Nested intObjects Limit - The maximum number of nested JSON objects that a single document can contain across all nested types. This limit helps to prevent out of memory errors when a document contains too many nested objects. Default is 10000. Example:
10000
. - Number
Of intReplicas - The number of replicas each primary shard has. Example:
1
. - Number
Of intShards - The number of primary shards that an index should have. Example:
1
.
- mapping
Nested IntegerObjects Limit - The maximum number of nested JSON objects that a single document can contain across all nested types. This limit helps to prevent out of memory errors when a document contains too many nested objects. Default is 10000. Example:
10000
. - number
Of IntegerReplicas - The number of replicas each primary shard has. Example:
1
. - number
Of IntegerShards - The number of primary shards that an index should have. Example:
1
.
- mapping
Nested numberObjects Limit - The maximum number of nested JSON objects that a single document can contain across all nested types. This limit helps to prevent out of memory errors when a document contains too many nested objects. Default is 10000. Example:
10000
. - number
Of numberReplicas - The number of replicas each primary shard has. Example:
1
. - number
Of numberShards - The number of primary shards that an index should have. Example:
1
.
- mapping_
nested_ intobjects_ limit - The maximum number of nested JSON objects that a single document can contain across all nested types. This limit helps to prevent out of memory errors when a document contains too many nested objects. Default is 10000. Example:
10000
. - number_
of_ intreplicas - The number of replicas each primary shard has. Example:
1
. - number_
of_ intshards - The number of primary shards that an index should have. Example:
1
.
- mapping
Nested NumberObjects Limit - The maximum number of nested JSON objects that a single document can contain across all nested types. This limit helps to prevent out of memory errors when a document contains too many nested objects. Default is 10000. Example:
10000
. - number
Of NumberReplicas - The number of replicas each primary shard has. Example:
1
. - number
Of NumberShards - The number of primary shards that an index should have. Example:
1
.
GetOpenSearchOpensearchUserConfigIpFilterObject
- Network string
- CIDR address block. Example:
10.20.0.0/16
. - Description string
- Description for IP filter list entry. Example:
Production service IP range
.
- Network string
- CIDR address block. Example:
10.20.0.0/16
. - Description string
- Description for IP filter list entry. Example:
Production service IP range
.
- network String
- CIDR address block. Example:
10.20.0.0/16
. - description String
- Description for IP filter list entry. Example:
Production service IP range
.
- network string
- CIDR address block. Example:
10.20.0.0/16
. - description string
- Description for IP filter list entry. Example:
Production service IP range
.
- network str
- CIDR address block. Example:
10.20.0.0/16
. - description str
- Description for IP filter list entry. Example:
Production service IP range
.
- network String
- CIDR address block. Example:
10.20.0.0/16
. - description String
- Description for IP filter list entry. Example:
Production service IP range
.
GetOpenSearchOpensearchUserConfigOpenid
- Client
Id string - The ID of the OpenID Connect client configured in your IdP. Required.
- Client
Secret string - The client secret of the OpenID Connect client configured in your IdP. Required.
- Connect
Url string - The URL of your IdP where the Security plugin can find the OpenID Connect metadata/configuration settings. Example:
https://test-account.okta.com/app/exk491jujcVc83LEX697/sso/saml/metadata
. - Enabled bool
- Enables or disables OpenID Connect authentication for OpenSearch. When enabled, users can authenticate using OpenID Connect with an Identity Provider. Default:
true
. - Header string
- HTTP header name of the JWT token. Optional. Default is Authorization. Default:
Authorization
. - Jwt
Header string - The HTTP header that stores the token. Typically the Authorization header with the Bearer schema: Authorization: Bearer . Optional. Default is Authorization. Example:
preferred_username
. - Jwt
Url stringParameter - If the token is not transmitted in the HTTP header, but as an URL parameter, define the name of the parameter here. Optional. Example:
preferred_username
. - Refresh
Rate intLimit Count - The maximum number of unknown key IDs in the time frame. Default is 10. Optional. Default:
10
. - Refresh
Rate intLimit Time Window Ms - The time frame to use when checking the maximum number of unknown key IDs, in milliseconds. Optional.Default is 10000 (10 seconds). Default:
10000
. - Roles
Key string - The key in the JSON payload that stores the user’s roles. The value of this key must be a comma-separated list of roles. Required only if you want to use roles in the JWT. Example:
roles
. - Scope string
- The scope of the identity token issued by the IdP. Optional. Default is openid profile email address phone.
- Subject
Key string - The key in the JSON payload that stores the user’s name. If not defined, the subject registered claim is used. Most IdP providers use the preferred_username claim. Optional. Example:
preferred_username
.
- Client
Id string - The ID of the OpenID Connect client configured in your IdP. Required.
- Client
Secret string - The client secret of the OpenID Connect client configured in your IdP. Required.
- Connect
Url string - The URL of your IdP where the Security plugin can find the OpenID Connect metadata/configuration settings. Example:
https://test-account.okta.com/app/exk491jujcVc83LEX697/sso/saml/metadata
. - Enabled bool
- Enables or disables OpenID Connect authentication for OpenSearch. When enabled, users can authenticate using OpenID Connect with an Identity Provider. Default:
true
. - Header string
- HTTP header name of the JWT token. Optional. Default is Authorization. Default:
Authorization
. - Jwt
Header string - The HTTP header that stores the token. Typically the Authorization header with the Bearer schema: Authorization: Bearer . Optional. Default is Authorization. Example:
preferred_username
. - Jwt
Url stringParameter - If the token is not transmitted in the HTTP header, but as an URL parameter, define the name of the parameter here. Optional. Example:
preferred_username
. - Refresh
Rate intLimit Count - The maximum number of unknown key IDs in the time frame. Default is 10. Optional. Default:
10
. - Refresh
Rate intLimit Time Window Ms - The time frame to use when checking the maximum number of unknown key IDs, in milliseconds. Optional.Default is 10000 (10 seconds). Default:
10000
. - Roles
Key string - The key in the JSON payload that stores the user’s roles. The value of this key must be a comma-separated list of roles. Required only if you want to use roles in the JWT. Example:
roles
. - Scope string
- The scope of the identity token issued by the IdP. Optional. Default is openid profile email address phone.
- Subject
Key string - The key in the JSON payload that stores the user’s name. If not defined, the subject registered claim is used. Most IdP providers use the preferred_username claim. Optional. Example:
preferred_username
.
- client
Id String - The ID of the OpenID Connect client configured in your IdP. Required.
- client
Secret String - The client secret of the OpenID Connect client configured in your IdP. Required.
- connect
Url String - The URL of your IdP where the Security plugin can find the OpenID Connect metadata/configuration settings. Example:
https://test-account.okta.com/app/exk491jujcVc83LEX697/sso/saml/metadata
. - enabled Boolean
- Enables or disables OpenID Connect authentication for OpenSearch. When enabled, users can authenticate using OpenID Connect with an Identity Provider. Default:
true
. - header String
- HTTP header name of the JWT token. Optional. Default is Authorization. Default:
Authorization
. - jwt
Header String - The HTTP header that stores the token. Typically the Authorization header with the Bearer schema: Authorization: Bearer . Optional. Default is Authorization. Example:
preferred_username
. - jwt
Url StringParameter - If the token is not transmitted in the HTTP header, but as an URL parameter, define the name of the parameter here. Optional. Example:
preferred_username
. - refresh
Rate IntegerLimit Count - The maximum number of unknown key IDs in the time frame. Default is 10. Optional. Default:
10
. - refresh
Rate IntegerLimit Time Window Ms - The time frame to use when checking the maximum number of unknown key IDs, in milliseconds. Optional.Default is 10000 (10 seconds). Default:
10000
. - roles
Key String - The key in the JSON payload that stores the user’s roles. The value of this key must be a comma-separated list of roles. Required only if you want to use roles in the JWT. Example:
roles
. - scope String
- The scope of the identity token issued by the IdP. Optional. Default is openid profile email address phone.
- subject
Key String - The key in the JSON payload that stores the user’s name. If not defined, the subject registered claim is used. Most IdP providers use the preferred_username claim. Optional. Example:
preferred_username
.
- client
Id string - The ID of the OpenID Connect client configured in your IdP. Required.
- client
Secret string - The client secret of the OpenID Connect client configured in your IdP. Required.
- connect
Url string - The URL of your IdP where the Security plugin can find the OpenID Connect metadata/configuration settings. Example:
https://test-account.okta.com/app/exk491jujcVc83LEX697/sso/saml/metadata
. - enabled boolean
- Enables or disables OpenID Connect authentication for OpenSearch. When enabled, users can authenticate using OpenID Connect with an Identity Provider. Default:
true
. - header string
- HTTP header name of the JWT token. Optional. Default is Authorization. Default:
Authorization
. - jwt
Header string - The HTTP header that stores the token. Typically the Authorization header with the Bearer schema: Authorization: Bearer . Optional. Default is Authorization. Example:
preferred_username
. - jwt
Url stringParameter - If the token is not transmitted in the HTTP header, but as an URL parameter, define the name of the parameter here. Optional. Example:
preferred_username
. - refresh
Rate numberLimit Count - The maximum number of unknown key IDs in the time frame. Default is 10. Optional. Default:
10
. - refresh
Rate numberLimit Time Window Ms - The time frame to use when checking the maximum number of unknown key IDs, in milliseconds. Optional.Default is 10000 (10 seconds). Default:
10000
. - roles
Key string - The key in the JSON payload that stores the user’s roles. The value of this key must be a comma-separated list of roles. Required only if you want to use roles in the JWT. Example:
roles
. - scope string
- The scope of the identity token issued by the IdP. Optional. Default is openid profile email address phone.
- subject
Key string - The key in the JSON payload that stores the user’s name. If not defined, the subject registered claim is used. Most IdP providers use the preferred_username claim. Optional. Example:
preferred_username
.
- client_
id str - The ID of the OpenID Connect client configured in your IdP. Required.
- client_
secret str - The client secret of the OpenID Connect client configured in your IdP. Required.
- connect_
url str - The URL of your IdP where the Security plugin can find the OpenID Connect metadata/configuration settings. Example:
https://test-account.okta.com/app/exk491jujcVc83LEX697/sso/saml/metadata
. - enabled bool
- Enables or disables OpenID Connect authentication for OpenSearch. When enabled, users can authenticate using OpenID Connect with an Identity Provider. Default:
true
. - header str
- HTTP header name of the JWT token. Optional. Default is Authorization. Default:
Authorization
. - jwt_
header str - The HTTP header that stores the token. Typically the Authorization header with the Bearer schema: Authorization: Bearer . Optional. Default is Authorization. Example:
preferred_username
. - jwt_
url_ strparameter - If the token is not transmitted in the HTTP header, but as an URL parameter, define the name of the parameter here. Optional. Example:
preferred_username
. - refresh_
rate_ intlimit_ count - The maximum number of unknown key IDs in the time frame. Default is 10. Optional. Default:
10
. - refresh_
rate_ intlimit_ time_ window_ ms - The time frame to use when checking the maximum number of unknown key IDs, in milliseconds. Optional.Default is 10000 (10 seconds). Default:
10000
. - roles_
key str - The key in the JSON payload that stores the user’s roles. The value of this key must be a comma-separated list of roles. Required only if you want to use roles in the JWT. Example:
roles
. - scope str
- The scope of the identity token issued by the IdP. Optional. Default is openid profile email address phone.
- subject_
key str - The key in the JSON payload that stores the user’s name. If not defined, the subject registered claim is used. Most IdP providers use the preferred_username claim. Optional. Example:
preferred_username
.
- client
Id String - The ID of the OpenID Connect client configured in your IdP. Required.
- client
Secret String - The client secret of the OpenID Connect client configured in your IdP. Required.
- connect
Url String - The URL of your IdP where the Security plugin can find the OpenID Connect metadata/configuration settings. Example:
https://test-account.okta.com/app/exk491jujcVc83LEX697/sso/saml/metadata
. - enabled Boolean
- Enables or disables OpenID Connect authentication for OpenSearch. When enabled, users can authenticate using OpenID Connect with an Identity Provider. Default:
true
. - header String
- HTTP header name of the JWT token. Optional. Default is Authorization. Default:
Authorization
. - jwt
Header String - The HTTP header that stores the token. Typically the Authorization header with the Bearer schema: Authorization: Bearer . Optional. Default is Authorization. Example:
preferred_username
. - jwt
Url StringParameter - If the token is not transmitted in the HTTP header, but as an URL parameter, define the name of the parameter here. Optional. Example:
preferred_username
. - refresh
Rate NumberLimit Count - The maximum number of unknown key IDs in the time frame. Default is 10. Optional. Default:
10
. - refresh
Rate NumberLimit Time Window Ms - The time frame to use when checking the maximum number of unknown key IDs, in milliseconds. Optional.Default is 10000 (10 seconds). Default:
10000
. - roles
Key String - The key in the JSON payload that stores the user’s roles. The value of this key must be a comma-separated list of roles. Required only if you want to use roles in the JWT. Example:
roles
. - scope String
- The scope of the identity token issued by the IdP. Optional. Default is openid profile email address phone.
- subject
Key String - The key in the JSON payload that stores the user’s name. If not defined, the subject registered claim is used. Most IdP providers use the preferred_username claim. Optional. Example:
preferred_username
.
GetOpenSearchOpensearchUserConfigOpensearch
- Action
Auto boolCreate Index Enabled - Explicitly allow or block automatic creation of indices. Defaults to true.
- Action
Destructive boolRequires Name - Require explicit index names when deleting.
- Auth
Failure GetListeners Open Search Opensearch User Config Opensearch Auth Failure Listeners - Opensearch Security Plugin Settings
- Cluster
Max intShards Per Node - Controls the number of shards allowed in the cluster per data node. Example:
1000
. - Cluster
Routing intAllocation Node Concurrent Recoveries - How many concurrent incoming/outgoing shard recoveries (normally replicas) are allowed to happen on a node. Defaults to node cpu count * 2.
- Email
Sender stringName - Sender name placeholder to be used in Opensearch Dashboards and Opensearch keystore. Example:
alert-sender
. - Email
Sender stringPassword - Sender password for Opensearch alerts to authenticate with SMTP server. Example:
very-secure-mail-password
. - Email
Sender stringUsername - Sender username for Opensearch alerts. Example:
jane@example.com
. - Enable
Security boolAudit - Enable/Disable security audit.
- Http
Max intContent Length - Maximum content length for HTTP requests to the OpenSearch HTTP API, in bytes.
- Http
Max intHeader Size - The max size of allowed headers, in bytes. Example:
8192
. - Http
Max intInitial Line Length - The max length of an HTTP URL, in bytes. Example:
4096
. - Indices
Fielddata intCache Size - Relative amount. Maximum amount of heap memory used for field data cache. This is an expert setting; decreasing the value too much will increase overhead of loading field data; too much memory used for field data cache will decrease amount of heap available for other operations.
- Indices
Memory intIndex Buffer Size - Percentage value. Default is 10%. Total amount of heap used for indexing buffer, before writing segments to disk. This is an expert setting. Too low value will slow down indexing; too high value will increase indexing performance but causes performance issues for query performance.
- Indices
Memory intMax Index Buffer Size - Absolute value. Default is unbound. Doesn't work without indices.memory.index_buffer_size. Maximum amount of heap used for query cache, an absolute indices.memory.index_buffer_size maximum hard limit.
- Indices
Memory intMin Index Buffer Size - Absolute value. Default is 48mb. Doesn't work without indices.memory.index_buffer_size. Minimum amount of heap used for query cache, an absolute indices.memory.index_buffer_size minimal hard limit.
- Indices
Queries intCache Size - Percentage value. Default is 10%. Maximum amount of heap used for query cache. This is an expert setting. Too low value will decrease query performance and increase performance for other operations; too high value will cause issues with other OpenSearch functionality.
- Indices
Query intBool Max Clause Count - Maximum number of clauses Lucene BooleanQuery can have. The default value (1024) is relatively high, and increasing it may cause performance issues. Investigate other approaches first before increasing this value.
- Indices
Recovery intMax Bytes Per Sec - Limits total inbound and outbound recovery traffic for each node. Applies to both peer recoveries as well as snapshot recoveries (i.e., restores from a snapshot). Defaults to 40mb.
- Indices
Recovery intMax Concurrent File Chunks - Number of file chunks sent in parallel for each recovery. Defaults to 2.
- Ism
Enabled bool - Specifies whether ISM is enabled or not.
- Ism
History boolEnabled - Specifies whether audit history is enabled or not. The logs from ISM are automatically indexed to a logs document.
- Ism
History intMax Age - The maximum age before rolling over the audit history index in hours. Example:
24
. - Ism
History intMax Docs - The maximum number of documents before rolling over the audit history index. Example:
2500000
. - Ism
History intRollover Check Period - The time between rollover checks for the audit history index in hours. Example:
8
. - Ism
History intRollover Retention Period - How long audit history indices are kept in days. Example:
30
. - Knn
Memory boolCircuit Breaker Enabled - Enable or disable KNN memory circuit breaker. Defaults to true.
- Knn
Memory intCircuit Breaker Limit - Maximum amount of memory that can be used for KNN index. Defaults to 50% of the JVM heap size.
- Override
Main boolResponse Version - Compatibility mode sets OpenSearch to report its version as 7.10 so clients continue to work. Default is false.
- Plugins
Alerting boolFilter By Backend Roles - Enable or disable filtering of alerting by backend roles. Requires Security plugin. Defaults to false.
- Reindex
Remote List<string>Whitelists - Whitelisted addresses for reindexing. Changing this value will cause all OpenSearch instances to restart.
- Script
Max stringCompilations Rate - Script compilation circuit breaker limits the number of inline script compilations within a period of time. Default is use-context. Example:
75/5m
. - Search
Backpressure GetOpen Search Opensearch User Config Opensearch Search Backpressure - Search Backpressure Settings
- Search
Max intBuckets - Maximum number of aggregation buckets allowed in a single response. OpenSearch default value is used when this is not defined. Example:
10000
. - Get
Open Search Opensearch User Config Opensearch Shard Indexing Pressure - Shard indexing back pressure settings
- Thread
Pool intAnalyze Queue Size - Size for the thread pool queue. See documentation for exact details.
- Thread
Pool intAnalyze Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- Thread
Pool intForce Merge Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- Thread
Pool intGet Queue Size - Size for the thread pool queue. See documentation for exact details.
- Thread
Pool intGet Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- Thread
Pool intSearch Queue Size - Size for the thread pool queue. See documentation for exact details.
- Thread
Pool intSearch Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- Thread
Pool intSearch Throttled Queue Size - Size for the thread pool queue. See documentation for exact details.
- Thread
Pool intSearch Throttled Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- Thread
Pool intWrite Queue Size - Size for the thread pool queue. See documentation for exact details.
- Thread
Pool intWrite Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- Action
Auto boolCreate Index Enabled - Explicitly allow or block automatic creation of indices. Defaults to true.
- Action
Destructive boolRequires Name - Require explicit index names when deleting.
- Auth
Failure GetListeners Open Search Opensearch User Config Opensearch Auth Failure Listeners - Opensearch Security Plugin Settings
- Cluster
Max intShards Per Node - Controls the number of shards allowed in the cluster per data node. Example:
1000
. - Cluster
Routing intAllocation Node Concurrent Recoveries - How many concurrent incoming/outgoing shard recoveries (normally replicas) are allowed to happen on a node. Defaults to node cpu count * 2.
- Email
Sender stringName - Sender name placeholder to be used in Opensearch Dashboards and Opensearch keystore. Example:
alert-sender
. - Email
Sender stringPassword - Sender password for Opensearch alerts to authenticate with SMTP server. Example:
very-secure-mail-password
. - Email
Sender stringUsername - Sender username for Opensearch alerts. Example:
jane@example.com
. - Enable
Security boolAudit - Enable/Disable security audit.
- Http
Max intContent Length - Maximum content length for HTTP requests to the OpenSearch HTTP API, in bytes.
- Http
Max intHeader Size - The max size of allowed headers, in bytes. Example:
8192
. - Http
Max intInitial Line Length - The max length of an HTTP URL, in bytes. Example:
4096
. - Indices
Fielddata intCache Size - Relative amount. Maximum amount of heap memory used for field data cache. This is an expert setting; decreasing the value too much will increase overhead of loading field data; too much memory used for field data cache will decrease amount of heap available for other operations.
- Indices
Memory intIndex Buffer Size - Percentage value. Default is 10%. Total amount of heap used for indexing buffer, before writing segments to disk. This is an expert setting. Too low value will slow down indexing; too high value will increase indexing performance but causes performance issues for query performance.
- Indices
Memory intMax Index Buffer Size - Absolute value. Default is unbound. Doesn't work without indices.memory.index_buffer_size. Maximum amount of heap used for query cache, an absolute indices.memory.index_buffer_size maximum hard limit.
- Indices
Memory intMin Index Buffer Size - Absolute value. Default is 48mb. Doesn't work without indices.memory.index_buffer_size. Minimum amount of heap used for query cache, an absolute indices.memory.index_buffer_size minimal hard limit.
- Indices
Queries intCache Size - Percentage value. Default is 10%. Maximum amount of heap used for query cache. This is an expert setting. Too low value will decrease query performance and increase performance for other operations; too high value will cause issues with other OpenSearch functionality.
- Indices
Query intBool Max Clause Count - Maximum number of clauses Lucene BooleanQuery can have. The default value (1024) is relatively high, and increasing it may cause performance issues. Investigate other approaches first before increasing this value.
- Indices
Recovery intMax Bytes Per Sec - Limits total inbound and outbound recovery traffic for each node. Applies to both peer recoveries as well as snapshot recoveries (i.e., restores from a snapshot). Defaults to 40mb.
- Indices
Recovery intMax Concurrent File Chunks - Number of file chunks sent in parallel for each recovery. Defaults to 2.
- Ism
Enabled bool - Specifies whether ISM is enabled or not.
- Ism
History boolEnabled - Specifies whether audit history is enabled or not. The logs from ISM are automatically indexed to a logs document.
- Ism
History intMax Age - The maximum age before rolling over the audit history index in hours. Example:
24
. - Ism
History intMax Docs - The maximum number of documents before rolling over the audit history index. Example:
2500000
. - Ism
History intRollover Check Period - The time between rollover checks for the audit history index in hours. Example:
8
. - Ism
History intRollover Retention Period - How long audit history indices are kept in days. Example:
30
. - Knn
Memory boolCircuit Breaker Enabled - Enable or disable KNN memory circuit breaker. Defaults to true.
- Knn
Memory intCircuit Breaker Limit - Maximum amount of memory that can be used for KNN index. Defaults to 50% of the JVM heap size.
- Override
Main boolResponse Version - Compatibility mode sets OpenSearch to report its version as 7.10 so clients continue to work. Default is false.
- Plugins
Alerting boolFilter By Backend Roles - Enable or disable filtering of alerting by backend roles. Requires Security plugin. Defaults to false.
- Reindex
Remote []stringWhitelists - Whitelisted addresses for reindexing. Changing this value will cause all OpenSearch instances to restart.
- Script
Max stringCompilations Rate - Script compilation circuit breaker limits the number of inline script compilations within a period of time. Default is use-context. Example:
75/5m
. - Search
Backpressure GetOpen Search Opensearch User Config Opensearch Search Backpressure - Search Backpressure Settings
- Search
Max intBuckets - Maximum number of aggregation buckets allowed in a single response. OpenSearch default value is used when this is not defined. Example:
10000
. - Get
Open Search Opensearch User Config Opensearch Shard Indexing Pressure - Shard indexing back pressure settings
- Thread
Pool intAnalyze Queue Size - Size for the thread pool queue. See documentation for exact details.
- Thread
Pool intAnalyze Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- Thread
Pool intForce Merge Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- Thread
Pool intGet Queue Size - Size for the thread pool queue. See documentation for exact details.
- Thread
Pool intGet Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- Thread
Pool intSearch Queue Size - Size for the thread pool queue. See documentation for exact details.
- Thread
Pool intSearch Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- Thread
Pool intSearch Throttled Queue Size - Size for the thread pool queue. See documentation for exact details.
- Thread
Pool intSearch Throttled Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- Thread
Pool intWrite Queue Size - Size for the thread pool queue. See documentation for exact details.
- Thread
Pool intWrite Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- action
Auto BooleanCreate Index Enabled - Explicitly allow or block automatic creation of indices. Defaults to true.
- action
Destructive BooleanRequires Name - Require explicit index names when deleting.
- auth
Failure GetListeners Open Search Opensearch User Config Opensearch Auth Failure Listeners - Opensearch Security Plugin Settings
- cluster
Max IntegerShards Per Node - Controls the number of shards allowed in the cluster per data node. Example:
1000
. - cluster
Routing IntegerAllocation Node Concurrent Recoveries - How many concurrent incoming/outgoing shard recoveries (normally replicas) are allowed to happen on a node. Defaults to node cpu count * 2.
- email
Sender StringName - Sender name placeholder to be used in Opensearch Dashboards and Opensearch keystore. Example:
alert-sender
. - email
Sender StringPassword - Sender password for Opensearch alerts to authenticate with SMTP server. Example:
very-secure-mail-password
. - email
Sender StringUsername - Sender username for Opensearch alerts. Example:
jane@example.com
. - enable
Security BooleanAudit - Enable/Disable security audit.
- http
Max IntegerContent Length - Maximum content length for HTTP requests to the OpenSearch HTTP API, in bytes.
- http
Max IntegerHeader Size - The max size of allowed headers, in bytes. Example:
8192
. - http
Max IntegerInitial Line Length - The max length of an HTTP URL, in bytes. Example:
4096
. - indices
Fielddata IntegerCache Size - Relative amount. Maximum amount of heap memory used for field data cache. This is an expert setting; decreasing the value too much will increase overhead of loading field data; too much memory used for field data cache will decrease amount of heap available for other operations.
- indices
Memory IntegerIndex Buffer Size - Percentage value. Default is 10%. Total amount of heap used for indexing buffer, before writing segments to disk. This is an expert setting. Too low value will slow down indexing; too high value will increase indexing performance but causes performance issues for query performance.
- indices
Memory IntegerMax Index Buffer Size - Absolute value. Default is unbound. Doesn't work without indices.memory.index_buffer_size. Maximum amount of heap used for query cache, an absolute indices.memory.index_buffer_size maximum hard limit.
- indices
Memory IntegerMin Index Buffer Size - Absolute value. Default is 48mb. Doesn't work without indices.memory.index_buffer_size. Minimum amount of heap used for query cache, an absolute indices.memory.index_buffer_size minimal hard limit.
- indices
Queries IntegerCache Size - Percentage value. Default is 10%. Maximum amount of heap used for query cache. This is an expert setting. Too low value will decrease query performance and increase performance for other operations; too high value will cause issues with other OpenSearch functionality.
- indices
Query IntegerBool Max Clause Count - Maximum number of clauses Lucene BooleanQuery can have. The default value (1024) is relatively high, and increasing it may cause performance issues. Investigate other approaches first before increasing this value.
- indices
Recovery IntegerMax Bytes Per Sec - Limits total inbound and outbound recovery traffic for each node. Applies to both peer recoveries as well as snapshot recoveries (i.e., restores from a snapshot). Defaults to 40mb.
- indices
Recovery IntegerMax Concurrent File Chunks - Number of file chunks sent in parallel for each recovery. Defaults to 2.
- ism
Enabled Boolean - Specifies whether ISM is enabled or not.
- ism
History BooleanEnabled - Specifies whether audit history is enabled or not. The logs from ISM are automatically indexed to a logs document.
- ism
History IntegerMax Age - The maximum age before rolling over the audit history index in hours. Example:
24
. - ism
History IntegerMax Docs - The maximum number of documents before rolling over the audit history index. Example:
2500000
. - ism
History IntegerRollover Check Period - The time between rollover checks for the audit history index in hours. Example:
8
. - ism
History IntegerRollover Retention Period - How long audit history indices are kept in days. Example:
30
. - knn
Memory BooleanCircuit Breaker Enabled - Enable or disable KNN memory circuit breaker. Defaults to true.
- knn
Memory IntegerCircuit Breaker Limit - Maximum amount of memory that can be used for KNN index. Defaults to 50% of the JVM heap size.
- override
Main BooleanResponse Version - Compatibility mode sets OpenSearch to report its version as 7.10 so clients continue to work. Default is false.
- plugins
Alerting BooleanFilter By Backend Roles - Enable or disable filtering of alerting by backend roles. Requires Security plugin. Defaults to false.
- reindex
Remote List<String>Whitelists - Whitelisted addresses for reindexing. Changing this value will cause all OpenSearch instances to restart.
- script
Max StringCompilations Rate - Script compilation circuit breaker limits the number of inline script compilations within a period of time. Default is use-context. Example:
75/5m
. - search
Backpressure GetOpen Search Opensearch User Config Opensearch Search Backpressure - Search Backpressure Settings
- search
Max IntegerBuckets - Maximum number of aggregation buckets allowed in a single response. OpenSearch default value is used when this is not defined. Example:
10000
. - Get
Open Search Opensearch User Config Opensearch Shard Indexing Pressure - Shard indexing back pressure settings
- thread
Pool IntegerAnalyze Queue Size - Size for the thread pool queue. See documentation for exact details.
- thread
Pool IntegerAnalyze Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread
Pool IntegerForce Merge Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread
Pool IntegerGet Queue Size - Size for the thread pool queue. See documentation for exact details.
- thread
Pool IntegerGet Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread
Pool IntegerSearch Queue Size - Size for the thread pool queue. See documentation for exact details.
- thread
Pool IntegerSearch Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread
Pool IntegerSearch Throttled Queue Size - Size for the thread pool queue. See documentation for exact details.
- thread
Pool IntegerSearch Throttled Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread
Pool IntegerWrite Queue Size - Size for the thread pool queue. See documentation for exact details.
- thread
Pool IntegerWrite Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- action
Auto booleanCreate Index Enabled - Explicitly allow or block automatic creation of indices. Defaults to true.
- action
Destructive booleanRequires Name - Require explicit index names when deleting.
- auth
Failure GetListeners Open Search Opensearch User Config Opensearch Auth Failure Listeners - Opensearch Security Plugin Settings
- cluster
Max numberShards Per Node - Controls the number of shards allowed in the cluster per data node. Example:
1000
. - cluster
Routing numberAllocation Node Concurrent Recoveries - How many concurrent incoming/outgoing shard recoveries (normally replicas) are allowed to happen on a node. Defaults to node cpu count * 2.
- email
Sender stringName - Sender name placeholder to be used in Opensearch Dashboards and Opensearch keystore. Example:
alert-sender
. - email
Sender stringPassword - Sender password for Opensearch alerts to authenticate with SMTP server. Example:
very-secure-mail-password
. - email
Sender stringUsername - Sender username for Opensearch alerts. Example:
jane@example.com
. - enable
Security booleanAudit - Enable/Disable security audit.
- http
Max numberContent Length - Maximum content length for HTTP requests to the OpenSearch HTTP API, in bytes.
- http
Max numberHeader Size - The max size of allowed headers, in bytes. Example:
8192
. - http
Max numberInitial Line Length - The max length of an HTTP URL, in bytes. Example:
4096
. - indices
Fielddata numberCache Size - Relative amount. Maximum amount of heap memory used for field data cache. This is an expert setting; decreasing the value too much will increase overhead of loading field data; too much memory used for field data cache will decrease amount of heap available for other operations.
- indices
Memory numberIndex Buffer Size - Percentage value. Default is 10%. Total amount of heap used for indexing buffer, before writing segments to disk. This is an expert setting. Too low value will slow down indexing; too high value will increase indexing performance but causes performance issues for query performance.
- indices
Memory numberMax Index Buffer Size - Absolute value. Default is unbound. Doesn't work without indices.memory.index_buffer_size. Maximum amount of heap used for query cache, an absolute indices.memory.index_buffer_size maximum hard limit.
- indices
Memory numberMin Index Buffer Size - Absolute value. Default is 48mb. Doesn't work without indices.memory.index_buffer_size. Minimum amount of heap used for query cache, an absolute indices.memory.index_buffer_size minimal hard limit.
- indices
Queries numberCache Size - Percentage value. Default is 10%. Maximum amount of heap used for query cache. This is an expert setting. Too low value will decrease query performance and increase performance for other operations; too high value will cause issues with other OpenSearch functionality.
- indices
Query numberBool Max Clause Count - Maximum number of clauses Lucene BooleanQuery can have. The default value (1024) is relatively high, and increasing it may cause performance issues. Investigate other approaches first before increasing this value.
- indices
Recovery numberMax Bytes Per Sec - Limits total inbound and outbound recovery traffic for each node. Applies to both peer recoveries as well as snapshot recoveries (i.e., restores from a snapshot). Defaults to 40mb.
- indices
Recovery numberMax Concurrent File Chunks - Number of file chunks sent in parallel for each recovery. Defaults to 2.
- ism
Enabled boolean - Specifies whether ISM is enabled or not.
- ism
History booleanEnabled - Specifies whether audit history is enabled or not. The logs from ISM are automatically indexed to a logs document.
- ism
History numberMax Age - The maximum age before rolling over the audit history index in hours. Example:
24
. - ism
History numberMax Docs - The maximum number of documents before rolling over the audit history index. Example:
2500000
. - ism
History numberRollover Check Period - The time between rollover checks for the audit history index in hours. Example:
8
. - ism
History numberRollover Retention Period - How long audit history indices are kept in days. Example:
30
. - knn
Memory booleanCircuit Breaker Enabled - Enable or disable KNN memory circuit breaker. Defaults to true.
- knn
Memory numberCircuit Breaker Limit - Maximum amount of memory that can be used for KNN index. Defaults to 50% of the JVM heap size.
- override
Main booleanResponse Version - Compatibility mode sets OpenSearch to report its version as 7.10 so clients continue to work. Default is false.
- plugins
Alerting booleanFilter By Backend Roles - Enable or disable filtering of alerting by backend roles. Requires Security plugin. Defaults to false.
- reindex
Remote string[]Whitelists - Whitelisted addresses for reindexing. Changing this value will cause all OpenSearch instances to restart.
- script
Max stringCompilations Rate - Script compilation circuit breaker limits the number of inline script compilations within a period of time. Default is use-context. Example:
75/5m
. - search
Backpressure GetOpen Search Opensearch User Config Opensearch Search Backpressure - Search Backpressure Settings
- search
Max numberBuckets - Maximum number of aggregation buckets allowed in a single response. OpenSearch default value is used when this is not defined. Example:
10000
. - Get
Open Search Opensearch User Config Opensearch Shard Indexing Pressure - Shard indexing back pressure settings
- thread
Pool numberAnalyze Queue Size - Size for the thread pool queue. See documentation for exact details.
- thread
Pool numberAnalyze Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread
Pool numberForce Merge Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread
Pool numberGet Queue Size - Size for the thread pool queue. See documentation for exact details.
- thread
Pool numberGet Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread
Pool numberSearch Queue Size - Size for the thread pool queue. See documentation for exact details.
- thread
Pool numberSearch Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread
Pool numberSearch Throttled Queue Size - Size for the thread pool queue. See documentation for exact details.
- thread
Pool numberSearch Throttled Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread
Pool numberWrite Queue Size - Size for the thread pool queue. See documentation for exact details.
- thread
Pool numberWrite Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- action_
auto_ boolcreate_ index_ enabled - Explicitly allow or block automatic creation of indices. Defaults to true.
- action_
destructive_ boolrequires_ name - Require explicit index names when deleting.
- auth_
failure_ Getlisteners Open Search Opensearch User Config Opensearch Auth Failure Listeners - Opensearch Security Plugin Settings
- cluster_
max_ intshards_ per_ node - Controls the number of shards allowed in the cluster per data node. Example:
1000
. - cluster_
routing_ intallocation_ node_ concurrent_ recoveries - How many concurrent incoming/outgoing shard recoveries (normally replicas) are allowed to happen on a node. Defaults to node cpu count * 2.
- email_
sender_ strname - Sender name placeholder to be used in Opensearch Dashboards and Opensearch keystore. Example:
alert-sender
. - email_
sender_ strpassword - Sender password for Opensearch alerts to authenticate with SMTP server. Example:
very-secure-mail-password
. - email_
sender_ strusername - Sender username for Opensearch alerts. Example:
jane@example.com
. - enable_
security_ boolaudit - Enable/Disable security audit.
- http_
max_ intcontent_ length - Maximum content length for HTTP requests to the OpenSearch HTTP API, in bytes.
- http_
max_ intheader_ size - The max size of allowed headers, in bytes. Example:
8192
. - http_
max_ intinitial_ line_ length - The max length of an HTTP URL, in bytes. Example:
4096
. - indices_
fielddata_ intcache_ size - Relative amount. Maximum amount of heap memory used for field data cache. This is an expert setting; decreasing the value too much will increase overhead of loading field data; too much memory used for field data cache will decrease amount of heap available for other operations.
- indices_
memory_ intindex_ buffer_ size - Percentage value. Default is 10%. Total amount of heap used for indexing buffer, before writing segments to disk. This is an expert setting. Too low value will slow down indexing; too high value will increase indexing performance but causes performance issues for query performance.
- indices_
memory_ intmax_ index_ buffer_ size - Absolute value. Default is unbound. Doesn't work without indices.memory.index_buffer_size. Maximum amount of heap used for query cache, an absolute indices.memory.index_buffer_size maximum hard limit.
- indices_
memory_ intmin_ index_ buffer_ size - Absolute value. Default is 48mb. Doesn't work without indices.memory.index_buffer_size. Minimum amount of heap used for query cache, an absolute indices.memory.index_buffer_size minimal hard limit.
- indices_
queries_ intcache_ size - Percentage value. Default is 10%. Maximum amount of heap used for query cache. This is an expert setting. Too low value will decrease query performance and increase performance for other operations; too high value will cause issues with other OpenSearch functionality.
- indices_
query_ intbool_ max_ clause_ count - Maximum number of clauses Lucene BooleanQuery can have. The default value (1024) is relatively high, and increasing it may cause performance issues. Investigate other approaches first before increasing this value.
- indices_
recovery_ intmax_ bytes_ per_ sec - Limits total inbound and outbound recovery traffic for each node. Applies to both peer recoveries as well as snapshot recoveries (i.e., restores from a snapshot). Defaults to 40mb.
- indices_
recovery_ intmax_ concurrent_ file_ chunks - Number of file chunks sent in parallel for each recovery. Defaults to 2.
- ism_
enabled bool - Specifies whether ISM is enabled or not.
- ism_
history_ boolenabled - Specifies whether audit history is enabled or not. The logs from ISM are automatically indexed to a logs document.
- ism_
history_ intmax_ age - The maximum age before rolling over the audit history index in hours. Example:
24
. - ism_
history_ intmax_ docs - The maximum number of documents before rolling over the audit history index. Example:
2500000
. - ism_
history_ introllover_ check_ period - The time between rollover checks for the audit history index in hours. Example:
8
. - ism_
history_ introllover_ retention_ period - How long audit history indices are kept in days. Example:
30
. - knn_
memory_ boolcircuit_ breaker_ enabled - Enable or disable KNN memory circuit breaker. Defaults to true.
- knn_
memory_ intcircuit_ breaker_ limit - Maximum amount of memory that can be used for KNN index. Defaults to 50% of the JVM heap size.
- override_
main_ boolresponse_ version - Compatibility mode sets OpenSearch to report its version as 7.10 so clients continue to work. Default is false.
- plugins_
alerting_ boolfilter_ by_ backend_ roles - Enable or disable filtering of alerting by backend roles. Requires Security plugin. Defaults to false.
- reindex_
remote_ Sequence[str]whitelists - Whitelisted addresses for reindexing. Changing this value will cause all OpenSearch instances to restart.
- script_
max_ strcompilations_ rate - Script compilation circuit breaker limits the number of inline script compilations within a period of time. Default is use-context. Example:
75/5m
. - search_
backpressure GetOpen Search Opensearch User Config Opensearch Search Backpressure - Search Backpressure Settings
- search_
max_ intbuckets - Maximum number of aggregation buckets allowed in a single response. OpenSearch default value is used when this is not defined. Example:
10000
. - Get
Open Search Opensearch User Config Opensearch Shard Indexing Pressure - Shard indexing back pressure settings
- thread_
pool_ intanalyze_ queue_ size - Size for the thread pool queue. See documentation for exact details.
- thread_
pool_ intanalyze_ size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread_
pool_ intforce_ merge_ size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread_
pool_ intget_ queue_ size - Size for the thread pool queue. See documentation for exact details.
- thread_
pool_ intget_ size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread_
pool_ intsearch_ queue_ size - Size for the thread pool queue. See documentation for exact details.
- thread_
pool_ intsearch_ size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread_
pool_ intsearch_ throttled_ queue_ size - Size for the thread pool queue. See documentation for exact details.
- thread_
pool_ intsearch_ throttled_ size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread_
pool_ intwrite_ queue_ size - Size for the thread pool queue. See documentation for exact details.
- thread_
pool_ intwrite_ size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- action
Auto BooleanCreate Index Enabled - Explicitly allow or block automatic creation of indices. Defaults to true.
- action
Destructive BooleanRequires Name - Require explicit index names when deleting.
- auth
Failure Property MapListeners - Opensearch Security Plugin Settings
- cluster
Max NumberShards Per Node - Controls the number of shards allowed in the cluster per data node. Example:
1000
. - cluster
Routing NumberAllocation Node Concurrent Recoveries - How many concurrent incoming/outgoing shard recoveries (normally replicas) are allowed to happen on a node. Defaults to node cpu count * 2.
- email
Sender StringName - Sender name placeholder to be used in Opensearch Dashboards and Opensearch keystore. Example:
alert-sender
. - email
Sender StringPassword - Sender password for Opensearch alerts to authenticate with SMTP server. Example:
very-secure-mail-password
. - email
Sender StringUsername - Sender username for Opensearch alerts. Example:
jane@example.com
. - enable
Security BooleanAudit - Enable/Disable security audit.
- http
Max NumberContent Length - Maximum content length for HTTP requests to the OpenSearch HTTP API, in bytes.
- http
Max NumberHeader Size - The max size of allowed headers, in bytes. Example:
8192
. - http
Max NumberInitial Line Length - The max length of an HTTP URL, in bytes. Example:
4096
. - indices
Fielddata NumberCache Size - Relative amount. Maximum amount of heap memory used for field data cache. This is an expert setting; decreasing the value too much will increase overhead of loading field data; too much memory used for field data cache will decrease amount of heap available for other operations.
- indices
Memory NumberIndex Buffer Size - Percentage value. Default is 10%. Total amount of heap used for indexing buffer, before writing segments to disk. This is an expert setting. Too low value will slow down indexing; too high value will increase indexing performance but causes performance issues for query performance.
- indices
Memory NumberMax Index Buffer Size - Absolute value. Default is unbound. Doesn't work without indices.memory.index_buffer_size. Maximum amount of heap used for query cache, an absolute indices.memory.index_buffer_size maximum hard limit.
- indices
Memory NumberMin Index Buffer Size - Absolute value. Default is 48mb. Doesn't work without indices.memory.index_buffer_size. Minimum amount of heap used for query cache, an absolute indices.memory.index_buffer_size minimal hard limit.
- indices
Queries NumberCache Size - Percentage value. Default is 10%. Maximum amount of heap used for query cache. This is an expert setting. Too low value will decrease query performance and increase performance for other operations; too high value will cause issues with other OpenSearch functionality.
- indices
Query NumberBool Max Clause Count - Maximum number of clauses Lucene BooleanQuery can have. The default value (1024) is relatively high, and increasing it may cause performance issues. Investigate other approaches first before increasing this value.
- indices
Recovery NumberMax Bytes Per Sec - Limits total inbound and outbound recovery traffic for each node. Applies to both peer recoveries as well as snapshot recoveries (i.e., restores from a snapshot). Defaults to 40mb.
- indices
Recovery NumberMax Concurrent File Chunks - Number of file chunks sent in parallel for each recovery. Defaults to 2.
- ism
Enabled Boolean - Specifies whether ISM is enabled or not.
- ism
History BooleanEnabled - Specifies whether audit history is enabled or not. The logs from ISM are automatically indexed to a logs document.
- ism
History NumberMax Age - The maximum age before rolling over the audit history index in hours. Example:
24
. - ism
History NumberMax Docs - The maximum number of documents before rolling over the audit history index. Example:
2500000
. - ism
History NumberRollover Check Period - The time between rollover checks for the audit history index in hours. Example:
8
. - ism
History NumberRollover Retention Period - How long audit history indices are kept in days. Example:
30
. - knn
Memory BooleanCircuit Breaker Enabled - Enable or disable KNN memory circuit breaker. Defaults to true.
- knn
Memory NumberCircuit Breaker Limit - Maximum amount of memory that can be used for KNN index. Defaults to 50% of the JVM heap size.
- override
Main BooleanResponse Version - Compatibility mode sets OpenSearch to report its version as 7.10 so clients continue to work. Default is false.
- plugins
Alerting BooleanFilter By Backend Roles - Enable or disable filtering of alerting by backend roles. Requires Security plugin. Defaults to false.
- reindex
Remote List<String>Whitelists - Whitelisted addresses for reindexing. Changing this value will cause all OpenSearch instances to restart.
- script
Max StringCompilations Rate - Script compilation circuit breaker limits the number of inline script compilations within a period of time. Default is use-context. Example:
75/5m
. - search
Backpressure Property Map - Search Backpressure Settings
- search
Max NumberBuckets - Maximum number of aggregation buckets allowed in a single response. OpenSearch default value is used when this is not defined. Example:
10000
. - Property Map
- Shard indexing back pressure settings
- thread
Pool NumberAnalyze Queue Size - Size for the thread pool queue. See documentation for exact details.
- thread
Pool NumberAnalyze Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread
Pool NumberForce Merge Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread
Pool NumberGet Queue Size - Size for the thread pool queue. See documentation for exact details.
- thread
Pool NumberGet Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread
Pool NumberSearch Queue Size - Size for the thread pool queue. See documentation for exact details.
- thread
Pool NumberSearch Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread
Pool NumberSearch Throttled Queue Size - Size for the thread pool queue. See documentation for exact details.
- thread
Pool NumberSearch Throttled Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
- thread
Pool NumberWrite Queue Size - Size for the thread pool queue. See documentation for exact details.
- thread
Pool NumberWrite Size - Size for the thread pool. See documentation for exact details. Do note this may have maximum value depending on CPU count - value is automatically lowered if set to higher than maximum value.
GetOpenSearchOpensearchUserConfigOpensearchAuthFailureListeners
- internal
Authentication Property MapBackend Limiting - ip
Rate Property MapLimiting - IP address rate limiting settings
GetOpenSearchOpensearchUserConfigOpensearchAuthFailureListenersInternalAuthenticationBackendLimiting
- Allowed
Tries int - The number of login attempts allowed before login is blocked. Example:
10
. - Authentication
Backend string - Enum:
internal
. internal_authentication_backend_limiting.authentication_backend. - Block
Expiry intSeconds - The duration of time that login remains blocked after a failed login. Example:
600
. - Max
Blocked intClients - internal_authentication_backend_limiting.max_blocked_clients. Example:
100000
. - Max
Tracked intClients - The maximum number of tracked IP addresses that have failed login. Example:
100000
. - Time
Window intSeconds - The window of time in which the value for
allowed_tries
is enforced. Example:3600
. - Type string
- Enum:
username
. internal_authentication_backend_limiting.type.
- Allowed
Tries int - The number of login attempts allowed before login is blocked. Example:
10
. - Authentication
Backend string - Enum:
internal
. internal_authentication_backend_limiting.authentication_backend. - Block
Expiry intSeconds - The duration of time that login remains blocked after a failed login. Example:
600
. - Max
Blocked intClients - internal_authentication_backend_limiting.max_blocked_clients. Example:
100000
. - Max
Tracked intClients - The maximum number of tracked IP addresses that have failed login. Example:
100000
. - Time
Window intSeconds - The window of time in which the value for
allowed_tries
is enforced. Example:3600
. - Type string
- Enum:
username
. internal_authentication_backend_limiting.type.
- allowed
Tries Integer - The number of login attempts allowed before login is blocked. Example:
10
. - authentication
Backend String - Enum:
internal
. internal_authentication_backend_limiting.authentication_backend. - block
Expiry IntegerSeconds - The duration of time that login remains blocked after a failed login. Example:
600
. - max
Blocked IntegerClients - internal_authentication_backend_limiting.max_blocked_clients. Example:
100000
. - max
Tracked IntegerClients - The maximum number of tracked IP addresses that have failed login. Example:
100000
. - time
Window IntegerSeconds - The window of time in which the value for
allowed_tries
is enforced. Example:3600
. - type String
- Enum:
username
. internal_authentication_backend_limiting.type.
- allowed
Tries number - The number of login attempts allowed before login is blocked. Example:
10
. - authentication
Backend string - Enum:
internal
. internal_authentication_backend_limiting.authentication_backend. - block
Expiry numberSeconds - The duration of time that login remains blocked after a failed login. Example:
600
. - max
Blocked numberClients - internal_authentication_backend_limiting.max_blocked_clients. Example:
100000
. - max
Tracked numberClients - The maximum number of tracked IP addresses that have failed login. Example:
100000
. - time
Window numberSeconds - The window of time in which the value for
allowed_tries
is enforced. Example:3600
. - type string
- Enum:
username
. internal_authentication_backend_limiting.type.
- allowed_
tries int - The number of login attempts allowed before login is blocked. Example:
10
. - authentication_
backend str - Enum:
internal
. internal_authentication_backend_limiting.authentication_backend. - block_
expiry_ intseconds - The duration of time that login remains blocked after a failed login. Example:
600
. - max_
blocked_ intclients - internal_authentication_backend_limiting.max_blocked_clients. Example:
100000
. - max_
tracked_ intclients - The maximum number of tracked IP addresses that have failed login. Example:
100000
. - time_
window_ intseconds - The window of time in which the value for
allowed_tries
is enforced. Example:3600
. - type str
- Enum:
username
. internal_authentication_backend_limiting.type.
- allowed
Tries Number - The number of login attempts allowed before login is blocked. Example:
10
. - authentication
Backend String - Enum:
internal
. internal_authentication_backend_limiting.authentication_backend. - block
Expiry NumberSeconds - The duration of time that login remains blocked after a failed login. Example:
600
. - max
Blocked NumberClients - internal_authentication_backend_limiting.max_blocked_clients. Example:
100000
. - max
Tracked NumberClients - The maximum number of tracked IP addresses that have failed login. Example:
100000
. - time
Window NumberSeconds - The window of time in which the value for
allowed_tries
is enforced. Example:3600
. - type String
- Enum:
username
. internal_authentication_backend_limiting.type.
GetOpenSearchOpensearchUserConfigOpensearchAuthFailureListenersIpRateLimiting
- Allowed
Tries int - The number of login attempts allowed before login is blocked. Example:
10
. - Block
Expiry intSeconds - The duration of time that login remains blocked after a failed login. Example:
600
. - Max
Blocked intClients - The maximum number of blocked IP addresses. Example:
100000
. - Max
Tracked intClients - The maximum number of tracked IP addresses that have failed login. Example:
100000
. - Time
Window intSeconds - The window of time in which the value for
allowed_tries
is enforced. Example:3600
. - Type string
- Enum:
ip
. The type of rate limiting.
- Allowed
Tries int - The number of login attempts allowed before login is blocked. Example:
10
. - Block
Expiry intSeconds - The duration of time that login remains blocked after a failed login. Example:
600
. - Max
Blocked intClients - The maximum number of blocked IP addresses. Example:
100000
. - Max
Tracked intClients - The maximum number of tracked IP addresses that have failed login. Example:
100000
. - Time
Window intSeconds - The window of time in which the value for
allowed_tries
is enforced. Example:3600
. - Type string
- Enum:
ip
. The type of rate limiting.
- allowed
Tries Integer - The number of login attempts allowed before login is blocked. Example:
10
. - block
Expiry IntegerSeconds - The duration of time that login remains blocked after a failed login. Example:
600
. - max
Blocked IntegerClients - The maximum number of blocked IP addresses. Example:
100000
. - max
Tracked IntegerClients - The maximum number of tracked IP addresses that have failed login. Example:
100000
. - time
Window IntegerSeconds - The window of time in which the value for
allowed_tries
is enforced. Example:3600
. - type String
- Enum:
ip
. The type of rate limiting.
- allowed
Tries number - The number of login attempts allowed before login is blocked. Example:
10
. - block
Expiry numberSeconds - The duration of time that login remains blocked after a failed login. Example:
600
. - max
Blocked numberClients - The maximum number of blocked IP addresses. Example:
100000
. - max
Tracked numberClients - The maximum number of tracked IP addresses that have failed login. Example:
100000
. - time
Window numberSeconds - The window of time in which the value for
allowed_tries
is enforced. Example:3600
. - type string
- Enum:
ip
. The type of rate limiting.
- allowed_
tries int - The number of login attempts allowed before login is blocked. Example:
10
. - block_
expiry_ intseconds - The duration of time that login remains blocked after a failed login. Example:
600
. - max_
blocked_ intclients - The maximum number of blocked IP addresses. Example:
100000
. - max_
tracked_ intclients - The maximum number of tracked IP addresses that have failed login. Example:
100000
. - time_
window_ intseconds - The window of time in which the value for
allowed_tries
is enforced. Example:3600
. - type str
- Enum:
ip
. The type of rate limiting.
- allowed
Tries Number - The number of login attempts allowed before login is blocked. Example:
10
. - block
Expiry NumberSeconds - The duration of time that login remains blocked after a failed login. Example:
600
. - max
Blocked NumberClients - The maximum number of blocked IP addresses. Example:
100000
. - max
Tracked NumberClients - The maximum number of tracked IP addresses that have failed login. Example:
100000
. - time
Window NumberSeconds - The window of time in which the value for
allowed_tries
is enforced. Example:3600
. - type String
- Enum:
ip
. The type of rate limiting.
GetOpenSearchOpensearchUserConfigOpensearchDashboards
- Enabled bool
- Enable or disable OpenSearch Dashboards. Default:
true
. - Max
Old intSpace Size - Limits the maximum amount of memory (in MiB) the OpenSearch Dashboards process can use. This sets the max_old_space_size option of the nodejs running the OpenSearch Dashboards. Note: the memory reserved by OpenSearch Dashboards is not available for OpenSearch. Default:
128
. - Opensearch
Request intTimeout - Timeout in milliseconds for requests made by OpenSearch Dashboards towards OpenSearch. Default:
30000
.
- Enabled bool
- Enable or disable OpenSearch Dashboards. Default:
true
. - Max
Old intSpace Size - Limits the maximum amount of memory (in MiB) the OpenSearch Dashboards process can use. This sets the max_old_space_size option of the nodejs running the OpenSearch Dashboards. Note: the memory reserved by OpenSearch Dashboards is not available for OpenSearch. Default:
128
. - Opensearch
Request intTimeout - Timeout in milliseconds for requests made by OpenSearch Dashboards towards OpenSearch. Default:
30000
.
- enabled Boolean
- Enable or disable OpenSearch Dashboards. Default:
true
. - max
Old IntegerSpace Size - Limits the maximum amount of memory (in MiB) the OpenSearch Dashboards process can use. This sets the max_old_space_size option of the nodejs running the OpenSearch Dashboards. Note: the memory reserved by OpenSearch Dashboards is not available for OpenSearch. Default:
128
. - opensearch
Request IntegerTimeout - Timeout in milliseconds for requests made by OpenSearch Dashboards towards OpenSearch. Default:
30000
.
- enabled boolean
- Enable or disable OpenSearch Dashboards. Default:
true
. - max
Old numberSpace Size - Limits the maximum amount of memory (in MiB) the OpenSearch Dashboards process can use. This sets the max_old_space_size option of the nodejs running the OpenSearch Dashboards. Note: the memory reserved by OpenSearch Dashboards is not available for OpenSearch. Default:
128
. - opensearch
Request numberTimeout - Timeout in milliseconds for requests made by OpenSearch Dashboards towards OpenSearch. Default:
30000
.
- enabled bool
- Enable or disable OpenSearch Dashboards. Default:
true
. - max_
old_ intspace_ size - Limits the maximum amount of memory (in MiB) the OpenSearch Dashboards process can use. This sets the max_old_space_size option of the nodejs running the OpenSearch Dashboards. Note: the memory reserved by OpenSearch Dashboards is not available for OpenSearch. Default:
128
. - opensearch_
request_ inttimeout - Timeout in milliseconds for requests made by OpenSearch Dashboards towards OpenSearch. Default:
30000
.
- enabled Boolean
- Enable or disable OpenSearch Dashboards. Default:
true
. - max
Old NumberSpace Size - Limits the maximum amount of memory (in MiB) the OpenSearch Dashboards process can use. This sets the max_old_space_size option of the nodejs running the OpenSearch Dashboards. Note: the memory reserved by OpenSearch Dashboards is not available for OpenSearch. Default:
128
. - opensearch
Request NumberTimeout - Timeout in milliseconds for requests made by OpenSearch Dashboards towards OpenSearch. Default:
30000
.
GetOpenSearchOpensearchUserConfigOpensearchSearchBackpressure
- Mode string
- Enum:
disabled
,enforced
,monitor_only
. The search backpressure mode. Valid values are monitor_only, enforced, or disabled. Default is monitor_only. - Node
Duress GetOpen Search Opensearch User Config Opensearch Search Backpressure Node Duress - Node duress settings
- Search
Shard GetTask Open Search Opensearch User Config Opensearch Search Backpressure Search Shard Task - Search shard settings
- Search
Task GetOpen Search Opensearch User Config Opensearch Search Backpressure Search Task - Search task settings
- Mode string
- Enum:
disabled
,enforced
,monitor_only
. The search backpressure mode. Valid values are monitor_only, enforced, or disabled. Default is monitor_only. - Node
Duress GetOpen Search Opensearch User Config Opensearch Search Backpressure Node Duress - Node duress settings
- Search
Shard GetTask Open Search Opensearch User Config Opensearch Search Backpressure Search Shard Task - Search shard settings
- Search
Task GetOpen Search Opensearch User Config Opensearch Search Backpressure Search Task - Search task settings
- mode String
- Enum:
disabled
,enforced
,monitor_only
. The search backpressure mode. Valid values are monitor_only, enforced, or disabled. Default is monitor_only. - node
Duress GetOpen Search Opensearch User Config Opensearch Search Backpressure Node Duress - Node duress settings
- search
Shard GetTask Open Search Opensearch User Config Opensearch Search Backpressure Search Shard Task - Search shard settings
- search
Task GetOpen Search Opensearch User Config Opensearch Search Backpressure Search Task - Search task settings
- mode string
- Enum:
disabled
,enforced
,monitor_only
. The search backpressure mode. Valid values are monitor_only, enforced, or disabled. Default is monitor_only. - node
Duress GetOpen Search Opensearch User Config Opensearch Search Backpressure Node Duress - Node duress settings
- search
Shard GetTask Open Search Opensearch User Config Opensearch Search Backpressure Search Shard Task - Search shard settings
- search
Task GetOpen Search Opensearch User Config Opensearch Search Backpressure Search Task - Search task settings
- mode str
- Enum:
disabled
,enforced
,monitor_only
. The search backpressure mode. Valid values are monitor_only, enforced, or disabled. Default is monitor_only. - node_
duress GetOpen Search Opensearch User Config Opensearch Search Backpressure Node Duress - Node duress settings
- search_
shard_ Gettask Open Search Opensearch User Config Opensearch Search Backpressure Search Shard Task - Search shard settings
- search_
task GetOpen Search Opensearch User Config Opensearch Search Backpressure Search Task - Search task settings
- mode String
- Enum:
disabled
,enforced
,monitor_only
. The search backpressure mode. Valid values are monitor_only, enforced, or disabled. Default is monitor_only. - node
Duress Property Map - Node duress settings
- search
Shard Property MapTask - Search shard settings
- search
Task Property Map - Search task settings
GetOpenSearchOpensearchUserConfigOpensearchSearchBackpressureNodeDuress
- Cpu
Threshold double - The CPU usage threshold (as a percentage) required for a node to be considered to be under duress. Default is 0.9.
- Heap
Threshold double - The heap usage threshold (as a percentage) required for a node to be considered to be under duress. Default is 0.7.
- Num
Successive intBreaches - The number of successive limit breaches after which the node is considered to be under duress. Default is 3.
- Cpu
Threshold float64 - The CPU usage threshold (as a percentage) required for a node to be considered to be under duress. Default is 0.9.
- Heap
Threshold float64 - The heap usage threshold (as a percentage) required for a node to be considered to be under duress. Default is 0.7.
- Num
Successive intBreaches - The number of successive limit breaches after which the node is considered to be under duress. Default is 3.
- cpu
Threshold Double - The CPU usage threshold (as a percentage) required for a node to be considered to be under duress. Default is 0.9.
- heap
Threshold Double - The heap usage threshold (as a percentage) required for a node to be considered to be under duress. Default is 0.7.
- num
Successive IntegerBreaches - The number of successive limit breaches after which the node is considered to be under duress. Default is 3.
- cpu
Threshold number - The CPU usage threshold (as a percentage) required for a node to be considered to be under duress. Default is 0.9.
- heap
Threshold number - The heap usage threshold (as a percentage) required for a node to be considered to be under duress. Default is 0.7.
- num
Successive numberBreaches - The number of successive limit breaches after which the node is considered to be under duress. Default is 3.
- cpu_
threshold float - The CPU usage threshold (as a percentage) required for a node to be considered to be under duress. Default is 0.9.
- heap_
threshold float - The heap usage threshold (as a percentage) required for a node to be considered to be under duress. Default is 0.7.
- num_
successive_ intbreaches - The number of successive limit breaches after which the node is considered to be under duress. Default is 3.
- cpu
Threshold Number - The CPU usage threshold (as a percentage) required for a node to be considered to be under duress. Default is 0.9.
- heap
Threshold Number - The heap usage threshold (as a percentage) required for a node to be considered to be under duress. Default is 0.7.
- num
Successive NumberBreaches - The number of successive limit breaches after which the node is considered to be under duress. Default is 3.
GetOpenSearchOpensearchUserConfigOpensearchSearchBackpressureSearchShardTask
- Cancellation
Burst double - The maximum number of search tasks to cancel in a single iteration of the observer thread. Default is 10.0.
- Cancellation
Rate double - The maximum number of tasks to cancel per millisecond of elapsed time. Default is 0.003.
- Cancellation
Ratio double - The maximum number of tasks to cancel, as a percentage of successful task completions. Default is 0.1.
- Cpu
Time intMillis Threshold - The CPU usage threshold (in milliseconds) required for a single search shard task before it is considered for cancellation. Default is 15000.
- Elapsed
Time intMillis Threshold - The elapsed time threshold (in milliseconds) required for a single search shard task before it is considered for cancellation. Default is 30000.
- Heap
Moving intAverage Window Size - The number of previously completed search shard tasks to consider when calculating the rolling average of heap usage. Default is 100.
- Heap
Percent doubleThreshold - The heap usage threshold (as a percentage) required for a single search shard task before it is considered for cancellation. Default is 0.5.
- Heap
Variance double - The minimum variance required for a single search shard task’s heap usage compared to the rolling average of previously completed tasks before it is considered for cancellation. Default is 2.0.
- Total
Heap doublePercent Threshold - The heap usage threshold (as a percentage) required for the sum of heap usages of all search shard tasks before cancellation is applied. Default is 0.5.
- Cancellation
Burst float64 - The maximum number of search tasks to cancel in a single iteration of the observer thread. Default is 10.0.
- Cancellation
Rate float64 - The maximum number of tasks to cancel per millisecond of elapsed time. Default is 0.003.
- Cancellation
Ratio float64 - The maximum number of tasks to cancel, as a percentage of successful task completions. Default is 0.1.
- Cpu
Time intMillis Threshold - The CPU usage threshold (in milliseconds) required for a single search shard task before it is considered for cancellation. Default is 15000.
- Elapsed
Time intMillis Threshold - The elapsed time threshold (in milliseconds) required for a single search shard task before it is considered for cancellation. Default is 30000.
- Heap
Moving intAverage Window Size - The number of previously completed search shard tasks to consider when calculating the rolling average of heap usage. Default is 100.
- Heap
Percent float64Threshold - The heap usage threshold (as a percentage) required for a single search shard task before it is considered for cancellation. Default is 0.5.
- Heap
Variance float64 - The minimum variance required for a single search shard task’s heap usage compared to the rolling average of previously completed tasks before it is considered for cancellation. Default is 2.0.
- Total
Heap float64Percent Threshold - The heap usage threshold (as a percentage) required for the sum of heap usages of all search shard tasks before cancellation is applied. Default is 0.5.
- cancellation
Burst Double - The maximum number of search tasks to cancel in a single iteration of the observer thread. Default is 10.0.
- cancellation
Rate Double - The maximum number of tasks to cancel per millisecond of elapsed time. Default is 0.003.
- cancellation
Ratio Double - The maximum number of tasks to cancel, as a percentage of successful task completions. Default is 0.1.
- cpu
Time IntegerMillis Threshold - The CPU usage threshold (in milliseconds) required for a single search shard task before it is considered for cancellation. Default is 15000.
- elapsed
Time IntegerMillis Threshold - The elapsed time threshold (in milliseconds) required for a single search shard task before it is considered for cancellation. Default is 30000.
- heap
Moving IntegerAverage Window Size - The number of previously completed search shard tasks to consider when calculating the rolling average of heap usage. Default is 100.
- heap
Percent DoubleThreshold - The heap usage threshold (as a percentage) required for a single search shard task before it is considered for cancellation. Default is 0.5.
- heap
Variance Double - The minimum variance required for a single search shard task’s heap usage compared to the rolling average of previously completed tasks before it is considered for cancellation. Default is 2.0.
- total
Heap DoublePercent Threshold - The heap usage threshold (as a percentage) required for the sum of heap usages of all search shard tasks before cancellation is applied. Default is 0.5.
- cancellation
Burst number - The maximum number of search tasks to cancel in a single iteration of the observer thread. Default is 10.0.
- cancellation
Rate number - The maximum number of tasks to cancel per millisecond of elapsed time. Default is 0.003.
- cancellation
Ratio number - The maximum number of tasks to cancel, as a percentage of successful task completions. Default is 0.1.
- cpu
Time numberMillis Threshold - The CPU usage threshold (in milliseconds) required for a single search shard task before it is considered for cancellation. Default is 15000.
- elapsed
Time numberMillis Threshold - The elapsed time threshold (in milliseconds) required for a single search shard task before it is considered for cancellation. Default is 30000.
- heap
Moving numberAverage Window Size - The number of previously completed search shard tasks to consider when calculating the rolling average of heap usage. Default is 100.
- heap
Percent numberThreshold - The heap usage threshold (as a percentage) required for a single search shard task before it is considered for cancellation. Default is 0.5.
- heap
Variance number - The minimum variance required for a single search shard task’s heap usage compared to the rolling average of previously completed tasks before it is considered for cancellation. Default is 2.0.
- total
Heap numberPercent Threshold - The heap usage threshold (as a percentage) required for the sum of heap usages of all search shard tasks before cancellation is applied. Default is 0.5.
- cancellation_
burst float - The maximum number of search tasks to cancel in a single iteration of the observer thread. Default is 10.0.
- cancellation_
rate float - The maximum number of tasks to cancel per millisecond of elapsed time. Default is 0.003.
- cancellation_
ratio float - The maximum number of tasks to cancel, as a percentage of successful task completions. Default is 0.1.
- cpu_
time_ intmillis_ threshold - The CPU usage threshold (in milliseconds) required for a single search shard task before it is considered for cancellation. Default is 15000.
- elapsed_
time_ intmillis_ threshold - The elapsed time threshold (in milliseconds) required for a single search shard task before it is considered for cancellation. Default is 30000.
- heap_
moving_ intaverage_ window_ size - The number of previously completed search shard tasks to consider when calculating the rolling average of heap usage. Default is 100.
- heap_
percent_ floatthreshold - The heap usage threshold (as a percentage) required for a single search shard task before it is considered for cancellation. Default is 0.5.
- heap_
variance float - The minimum variance required for a single search shard task’s heap usage compared to the rolling average of previously completed tasks before it is considered for cancellation. Default is 2.0.
- total_
heap_ floatpercent_ threshold - The heap usage threshold (as a percentage) required for the sum of heap usages of all search shard tasks before cancellation is applied. Default is 0.5.
- cancellation
Burst Number - The maximum number of search tasks to cancel in a single iteration of the observer thread. Default is 10.0.
- cancellation
Rate Number - The maximum number of tasks to cancel per millisecond of elapsed time. Default is 0.003.
- cancellation
Ratio Number - The maximum number of tasks to cancel, as a percentage of successful task completions. Default is 0.1.
- cpu
Time NumberMillis Threshold - The CPU usage threshold (in milliseconds) required for a single search shard task before it is considered for cancellation. Default is 15000.
- elapsed
Time NumberMillis Threshold - The elapsed time threshold (in milliseconds) required for a single search shard task before it is considered for cancellation. Default is 30000.
- heap
Moving NumberAverage Window Size - The number of previously completed search shard tasks to consider when calculating the rolling average of heap usage. Default is 100.
- heap
Percent NumberThreshold - The heap usage threshold (as a percentage) required for a single search shard task before it is considered for cancellation. Default is 0.5.
- heap
Variance Number - The minimum variance required for a single search shard task’s heap usage compared to the rolling average of previously completed tasks before it is considered for cancellation. Default is 2.0.
- total
Heap NumberPercent Threshold - The heap usage threshold (as a percentage) required for the sum of heap usages of all search shard tasks before cancellation is applied. Default is 0.5.
GetOpenSearchOpensearchUserConfigOpensearchSearchBackpressureSearchTask
- Cancellation
Burst double - The maximum number of search tasks to cancel in a single iteration of the observer thread. Default is 5.0.
- Cancellation
Rate double - The maximum number of search tasks to cancel per millisecond of elapsed time. Default is 0.003.
- Cancellation
Ratio double - The maximum number of search tasks to cancel, as a percentage of successful search task completions. Default is 0.1.
- Cpu
Time intMillis Threshold - The CPU usage threshold (in milliseconds) required for an individual parent task before it is considered for cancellation. Default is 30000.
- Elapsed
Time intMillis Threshold - The elapsed time threshold (in milliseconds) required for an individual parent task before it is considered for cancellation. Default is 45000.
- Heap
Moving intAverage Window Size - The window size used to calculate the rolling average of the heap usage for the completed parent tasks. Default is 10.
- Heap
Percent doubleThreshold - The heap usage threshold (as a percentage) required for an individual parent task before it is considered for cancellation. Default is 0.2.
- Heap
Variance double - The heap usage variance required for an individual parent task before it is considered for cancellation. A task is considered for cancellation when taskHeapUsage is greater than or equal to heapUsageMovingAverage * variance. Default is 2.0.
- Total
Heap doublePercent Threshold - The heap usage threshold (as a percentage) required for the sum of heap usages of all search tasks before cancellation is applied. Default is 0.5.
- Cancellation
Burst float64 - The maximum number of search tasks to cancel in a single iteration of the observer thread. Default is 5.0.
- Cancellation
Rate float64 - The maximum number of search tasks to cancel per millisecond of elapsed time. Default is 0.003.
- Cancellation
Ratio float64 - The maximum number of search tasks to cancel, as a percentage of successful search task completions. Default is 0.1.
- Cpu
Time intMillis Threshold - The CPU usage threshold (in milliseconds) required for an individual parent task before it is considered for cancellation. Default is 30000.
- Elapsed
Time intMillis Threshold - The elapsed time threshold (in milliseconds) required for an individual parent task before it is considered for cancellation. Default is 45000.
- Heap
Moving intAverage Window Size - The window size used to calculate the rolling average of the heap usage for the completed parent tasks. Default is 10.
- Heap
Percent float64Threshold - The heap usage threshold (as a percentage) required for an individual parent task before it is considered for cancellation. Default is 0.2.
- Heap
Variance float64 - The heap usage variance required for an individual parent task before it is considered for cancellation. A task is considered for cancellation when taskHeapUsage is greater than or equal to heapUsageMovingAverage * variance. Default is 2.0.
- Total
Heap float64Percent Threshold - The heap usage threshold (as a percentage) required for the sum of heap usages of all search tasks before cancellation is applied. Default is 0.5.
- cancellation
Burst Double - The maximum number of search tasks to cancel in a single iteration of the observer thread. Default is 5.0.
- cancellation
Rate Double - The maximum number of search tasks to cancel per millisecond of elapsed time. Default is 0.003.
- cancellation
Ratio Double - The maximum number of search tasks to cancel, as a percentage of successful search task completions. Default is 0.1.
- cpu
Time IntegerMillis Threshold - The CPU usage threshold (in milliseconds) required for an individual parent task before it is considered for cancellation. Default is 30000.
- elapsed
Time IntegerMillis Threshold - The elapsed time threshold (in milliseconds) required for an individual parent task before it is considered for cancellation. Default is 45000.
- heap
Moving IntegerAverage Window Size - The window size used to calculate the rolling average of the heap usage for the completed parent tasks. Default is 10.
- heap
Percent DoubleThreshold - The heap usage threshold (as a percentage) required for an individual parent task before it is considered for cancellation. Default is 0.2.
- heap
Variance Double - The heap usage variance required for an individual parent task before it is considered for cancellation. A task is considered for cancellation when taskHeapUsage is greater than or equal to heapUsageMovingAverage * variance. Default is 2.0.
- total
Heap DoublePercent Threshold - The heap usage threshold (as a percentage) required for the sum of heap usages of all search tasks before cancellation is applied. Default is 0.5.
- cancellation
Burst number - The maximum number of search tasks to cancel in a single iteration of the observer thread. Default is 5.0.
- cancellation
Rate number - The maximum number of search tasks to cancel per millisecond of elapsed time. Default is 0.003.
- cancellation
Ratio number - The maximum number of search tasks to cancel, as a percentage of successful search task completions. Default is 0.1.
- cpu
Time numberMillis Threshold - The CPU usage threshold (in milliseconds) required for an individual parent task before it is considered for cancellation. Default is 30000.
- elapsed
Time numberMillis Threshold - The elapsed time threshold (in milliseconds) required for an individual parent task before it is considered for cancellation. Default is 45000.
- heap
Moving numberAverage Window Size - The window size used to calculate the rolling average of the heap usage for the completed parent tasks. Default is 10.
- heap
Percent numberThreshold - The heap usage threshold (as a percentage) required for an individual parent task before it is considered for cancellation. Default is 0.2.
- heap
Variance number - The heap usage variance required for an individual parent task before it is considered for cancellation. A task is considered for cancellation when taskHeapUsage is greater than or equal to heapUsageMovingAverage * variance. Default is 2.0.
- total
Heap numberPercent Threshold - The heap usage threshold (as a percentage) required for the sum of heap usages of all search tasks before cancellation is applied. Default is 0.5.
- cancellation_
burst float - The maximum number of search tasks to cancel in a single iteration of the observer thread. Default is 5.0.
- cancellation_
rate float - The maximum number of search tasks to cancel per millisecond of elapsed time. Default is 0.003.
- cancellation_
ratio float - The maximum number of search tasks to cancel, as a percentage of successful search task completions. Default is 0.1.
- cpu_
time_ intmillis_ threshold - The CPU usage threshold (in milliseconds) required for an individual parent task before it is considered for cancellation. Default is 30000.
- elapsed_
time_ intmillis_ threshold - The elapsed time threshold (in milliseconds) required for an individual parent task before it is considered for cancellation. Default is 45000.
- heap_
moving_ intaverage_ window_ size - The window size used to calculate the rolling average of the heap usage for the completed parent tasks. Default is 10.
- heap_
percent_ floatthreshold - The heap usage threshold (as a percentage) required for an individual parent task before it is considered for cancellation. Default is 0.2.
- heap_
variance float - The heap usage variance required for an individual parent task before it is considered for cancellation. A task is considered for cancellation when taskHeapUsage is greater than or equal to heapUsageMovingAverage * variance. Default is 2.0.
- total_
heap_ floatpercent_ threshold - The heap usage threshold (as a percentage) required for the sum of heap usages of all search tasks before cancellation is applied. Default is 0.5.
- cancellation
Burst Number - The maximum number of search tasks to cancel in a single iteration of the observer thread. Default is 5.0.
- cancellation
Rate Number - The maximum number of search tasks to cancel per millisecond of elapsed time. Default is 0.003.
- cancellation
Ratio Number - The maximum number of search tasks to cancel, as a percentage of successful search task completions. Default is 0.1.
- cpu
Time NumberMillis Threshold - The CPU usage threshold (in milliseconds) required for an individual parent task before it is considered for cancellation. Default is 30000.
- elapsed
Time NumberMillis Threshold - The elapsed time threshold (in milliseconds) required for an individual parent task before it is considered for cancellation. Default is 45000.
- heap
Moving NumberAverage Window Size - The window size used to calculate the rolling average of the heap usage for the completed parent tasks. Default is 10.
- heap
Percent NumberThreshold - The heap usage threshold (as a percentage) required for an individual parent task before it is considered for cancellation. Default is 0.2.
- heap
Variance Number - The heap usage variance required for an individual parent task before it is considered for cancellation. A task is considered for cancellation when taskHeapUsage is greater than or equal to heapUsageMovingAverage * variance. Default is 2.0.
- total
Heap NumberPercent Threshold - The heap usage threshold (as a percentage) required for the sum of heap usages of all search tasks before cancellation is applied. Default is 0.5.
GetOpenSearchOpensearchUserConfigOpensearchShardIndexingPressure
- Enabled bool
- Enable or disable shard indexing backpressure. Default is false.
- Enforced bool
- Run shard indexing backpressure in shadow mode or enforced mode. In shadow mode (value set as false), shard indexing backpressure tracks all granular-level metrics, but it doesn’t actually reject any indexing requests. In enforced mode (value set as true), shard indexing backpressure rejects any requests to the cluster that might cause a dip in its performance. Default is false.
- Operating
Factor GetOpen Search Opensearch User Config Opensearch Shard Indexing Pressure Operating Factor - Operating factor
- Primary
Parameter GetOpen Search Opensearch User Config Opensearch Shard Indexing Pressure Primary Parameter - Primary parameter
- Enabled bool
- Enable or disable shard indexing backpressure. Default is false.
- Enforced bool
- Run shard indexing backpressure in shadow mode or enforced mode. In shadow mode (value set as false), shard indexing backpressure tracks all granular-level metrics, but it doesn’t actually reject any indexing requests. In enforced mode (value set as true), shard indexing backpressure rejects any requests to the cluster that might cause a dip in its performance. Default is false.
- Operating
Factor GetOpen Search Opensearch User Config Opensearch Shard Indexing Pressure Operating Factor - Operating factor
- Primary
Parameter GetOpen Search Opensearch User Config Opensearch Shard Indexing Pressure Primary Parameter - Primary parameter
- enabled Boolean
- Enable or disable shard indexing backpressure. Default is false.
- enforced Boolean
- Run shard indexing backpressure in shadow mode or enforced mode. In shadow mode (value set as false), shard indexing backpressure tracks all granular-level metrics, but it doesn’t actually reject any indexing requests. In enforced mode (value set as true), shard indexing backpressure rejects any requests to the cluster that might cause a dip in its performance. Default is false.
- operating
Factor GetOpen Search Opensearch User Config Opensearch Shard Indexing Pressure Operating Factor - Operating factor
- primary
Parameter GetOpen Search Opensearch User Config Opensearch Shard Indexing Pressure Primary Parameter - Primary parameter
- enabled boolean
- Enable or disable shard indexing backpressure. Default is false.
- enforced boolean
- Run shard indexing backpressure in shadow mode or enforced mode. In shadow mode (value set as false), shard indexing backpressure tracks all granular-level metrics, but it doesn’t actually reject any indexing requests. In enforced mode (value set as true), shard indexing backpressure rejects any requests to the cluster that might cause a dip in its performance. Default is false.
- operating
Factor GetOpen Search Opensearch User Config Opensearch Shard Indexing Pressure Operating Factor - Operating factor
- primary
Parameter GetOpen Search Opensearch User Config Opensearch Shard Indexing Pressure Primary Parameter - Primary parameter
- enabled bool
- Enable or disable shard indexing backpressure. Default is false.
- enforced bool
- Run shard indexing backpressure in shadow mode or enforced mode. In shadow mode (value set as false), shard indexing backpressure tracks all granular-level metrics, but it doesn’t actually reject any indexing requests. In enforced mode (value set as true), shard indexing backpressure rejects any requests to the cluster that might cause a dip in its performance. Default is false.
- operating_
factor GetOpen Search Opensearch User Config Opensearch Shard Indexing Pressure Operating Factor - Operating factor
- primary_
parameter GetOpen Search Opensearch User Config Opensearch Shard Indexing Pressure Primary Parameter - Primary parameter
- enabled Boolean
- Enable or disable shard indexing backpressure. Default is false.
- enforced Boolean
- Run shard indexing backpressure in shadow mode or enforced mode. In shadow mode (value set as false), shard indexing backpressure tracks all granular-level metrics, but it doesn’t actually reject any indexing requests. In enforced mode (value set as true), shard indexing backpressure rejects any requests to the cluster that might cause a dip in its performance. Default is false.
- operating
Factor Property Map - Operating factor
- primary
Parameter Property Map - Primary parameter
GetOpenSearchOpensearchUserConfigOpensearchShardIndexingPressureOperatingFactor
- Lower double
- Specify the lower occupancy limit of the allocated quota of memory for the shard. If the total memory usage of a shard is below this limit, shard indexing backpressure decreases the current allocated memory for that shard. Default is 0.75.
- Optimal double
- Specify the optimal occupancy of the allocated quota of memory for the shard. If the total memory usage of a shard is at this level, shard indexing backpressure doesn’t change the current allocated memory for that shard. Default is 0.85.
- Upper double
- Specify the upper occupancy limit of the allocated quota of memory for the shard. If the total memory usage of a shard is above this limit, shard indexing backpressure increases the current allocated memory for that shard. Default is 0.95.
- Lower float64
- Specify the lower occupancy limit of the allocated quota of memory for the shard. If the total memory usage of a shard is below this limit, shard indexing backpressure decreases the current allocated memory for that shard. Default is 0.75.
- Optimal float64
- Specify the optimal occupancy of the allocated quota of memory for the shard. If the total memory usage of a shard is at this level, shard indexing backpressure doesn’t change the current allocated memory for that shard. Default is 0.85.
- Upper float64
- Specify the upper occupancy limit of the allocated quota of memory for the shard. If the total memory usage of a shard is above this limit, shard indexing backpressure increases the current allocated memory for that shard. Default is 0.95.
- lower Double
- Specify the lower occupancy limit of the allocated quota of memory for the shard. If the total memory usage of a shard is below this limit, shard indexing backpressure decreases the current allocated memory for that shard. Default is 0.75.
- optimal Double
- Specify the optimal occupancy of the allocated quota of memory for the shard. If the total memory usage of a shard is at this level, shard indexing backpressure doesn’t change the current allocated memory for that shard. Default is 0.85.
- upper Double
- Specify the upper occupancy limit of the allocated quota of memory for the shard. If the total memory usage of a shard is above this limit, shard indexing backpressure increases the current allocated memory for that shard. Default is 0.95.
- lower number
- Specify the lower occupancy limit of the allocated quota of memory for the shard. If the total memory usage of a shard is below this limit, shard indexing backpressure decreases the current allocated memory for that shard. Default is 0.75.
- optimal number
- Specify the optimal occupancy of the allocated quota of memory for the shard. If the total memory usage of a shard is at this level, shard indexing backpressure doesn’t change the current allocated memory for that shard. Default is 0.85.
- upper number
- Specify the upper occupancy limit of the allocated quota of memory for the shard. If the total memory usage of a shard is above this limit, shard indexing backpressure increases the current allocated memory for that shard. Default is 0.95.
- lower float
- Specify the lower occupancy limit of the allocated quota of memory for the shard. If the total memory usage of a shard is below this limit, shard indexing backpressure decreases the current allocated memory for that shard. Default is 0.75.
- optimal float
- Specify the optimal occupancy of the allocated quota of memory for the shard. If the total memory usage of a shard is at this level, shard indexing backpressure doesn’t change the current allocated memory for that shard. Default is 0.85.
- upper float
- Specify the upper occupancy limit of the allocated quota of memory for the shard. If the total memory usage of a shard is above this limit, shard indexing backpressure increases the current allocated memory for that shard. Default is 0.95.
- lower Number
- Specify the lower occupancy limit of the allocated quota of memory for the shard. If the total memory usage of a shard is below this limit, shard indexing backpressure decreases the current allocated memory for that shard. Default is 0.75.
- optimal Number
- Specify the optimal occupancy of the allocated quota of memory for the shard. If the total memory usage of a shard is at this level, shard indexing backpressure doesn’t change the current allocated memory for that shard. Default is 0.85.
- upper Number
- Specify the upper occupancy limit of the allocated quota of memory for the shard. If the total memory usage of a shard is above this limit, shard indexing backpressure increases the current allocated memory for that shard. Default is 0.95.
GetOpenSearchOpensearchUserConfigOpensearchShardIndexingPressurePrimaryParameter
GetOpenSearchOpensearchUserConfigOpensearchShardIndexingPressurePrimaryParameterNode
- Soft
Limit double - Define the percentage of the node-level memory threshold that acts as a soft indicator for strain on a node. Default is 0.7.
- Soft
Limit float64 - Define the percentage of the node-level memory threshold that acts as a soft indicator for strain on a node. Default is 0.7.
- soft
Limit Double - Define the percentage of the node-level memory threshold that acts as a soft indicator for strain on a node. Default is 0.7.
- soft
Limit number - Define the percentage of the node-level memory threshold that acts as a soft indicator for strain on a node. Default is 0.7.
- soft_
limit float - Define the percentage of the node-level memory threshold that acts as a soft indicator for strain on a node. Default is 0.7.
- soft
Limit Number - Define the percentage of the node-level memory threshold that acts as a soft indicator for strain on a node. Default is 0.7.
GetOpenSearchOpensearchUserConfigOpensearchShardIndexingPressurePrimaryParameterShard
- Min
Limit double - Specify the minimum assigned quota for a new shard in any role (coordinator, primary, or replica). Shard indexing backpressure increases or decreases this allocated quota based on the inflow of traffic for the shard. Default is 0.001.
- Min
Limit float64 - Specify the minimum assigned quota for a new shard in any role (coordinator, primary, or replica). Shard indexing backpressure increases or decreases this allocated quota based on the inflow of traffic for the shard. Default is 0.001.
- min
Limit Double - Specify the minimum assigned quota for a new shard in any role (coordinator, primary, or replica). Shard indexing backpressure increases or decreases this allocated quota based on the inflow of traffic for the shard. Default is 0.001.
- min
Limit number - Specify the minimum assigned quota for a new shard in any role (coordinator, primary, or replica). Shard indexing backpressure increases or decreases this allocated quota based on the inflow of traffic for the shard. Default is 0.001.
- min_
limit float - Specify the minimum assigned quota for a new shard in any role (coordinator, primary, or replica). Shard indexing backpressure increases or decreases this allocated quota based on the inflow of traffic for the shard. Default is 0.001.
- min
Limit Number - Specify the minimum assigned quota for a new shard in any role (coordinator, primary, or replica). Shard indexing backpressure increases or decreases this allocated quota based on the inflow of traffic for the shard. Default is 0.001.
GetOpenSearchOpensearchUserConfigPrivateAccess
- Opensearch bool
- Allow clients to connect to opensearch with a DNS name that always resolves to the service's private IP addresses. Only available in certain network locations.
- Opensearch
Dashboards bool - Allow clients to connect to opensearch_dashboards with a DNS name that always resolves to the service's private IP addresses. Only available in certain network locations.
- Prometheus bool
- Allow clients to connect to prometheus with a DNS name that always resolves to the service's private IP addresses. Only available in certain network locations.
- Opensearch bool
- Allow clients to connect to opensearch with a DNS name that always resolves to the service's private IP addresses. Only available in certain network locations.
- Opensearch
Dashboards bool - Allow clients to connect to opensearch_dashboards with a DNS name that always resolves to the service's private IP addresses. Only available in certain network locations.
- Prometheus bool
- Allow clients to connect to prometheus with a DNS name that always resolves to the service's private IP addresses. Only available in certain network locations.
- opensearch Boolean
- Allow clients to connect to opensearch with a DNS name that always resolves to the service's private IP addresses. Only available in certain network locations.
- opensearch
Dashboards Boolean - Allow clients to connect to opensearch_dashboards with a DNS name that always resolves to the service's private IP addresses. Only available in certain network locations.
- prometheus Boolean
- Allow clients to connect to prometheus with a DNS name that always resolves to the service's private IP addresses. Only available in certain network locations.
- opensearch boolean
- Allow clients to connect to opensearch with a DNS name that always resolves to the service's private IP addresses. Only available in certain network locations.
- opensearch
Dashboards boolean - Allow clients to connect to opensearch_dashboards with a DNS name that always resolves to the service's private IP addresses. Only available in certain network locations.
- prometheus boolean
- Allow clients to connect to prometheus with a DNS name that always resolves to the service's private IP addresses. Only available in certain network locations.
- opensearch bool
- Allow clients to connect to opensearch with a DNS name that always resolves to the service's private IP addresses. Only available in certain network locations.
- opensearch_
dashboards bool - Allow clients to connect to opensearch_dashboards with a DNS name that always resolves to the service's private IP addresses. Only available in certain network locations.
- prometheus bool
- Allow clients to connect to prometheus with a DNS name that always resolves to the service's private IP addresses. Only available in certain network locations.
- opensearch Boolean
- Allow clients to connect to opensearch with a DNS name that always resolves to the service's private IP addresses. Only available in certain network locations.
- opensearch
Dashboards Boolean - Allow clients to connect to opensearch_dashboards with a DNS name that always resolves to the service's private IP addresses. Only available in certain network locations.
- prometheus Boolean
- Allow clients to connect to prometheus with a DNS name that always resolves to the service's private IP addresses. Only available in certain network locations.
GetOpenSearchOpensearchUserConfigPrivatelinkAccess
- Opensearch bool
- Enable opensearch.
- Opensearch
Dashboards bool - Enable opensearch_dashboards.
- Prometheus bool
- Enable prometheus.
- Opensearch bool
- Enable opensearch.
- Opensearch
Dashboards bool - Enable opensearch_dashboards.
- Prometheus bool
- Enable prometheus.
- opensearch Boolean
- Enable opensearch.
- opensearch
Dashboards Boolean - Enable opensearch_dashboards.
- prometheus Boolean
- Enable prometheus.
- opensearch boolean
- Enable opensearch.
- opensearch
Dashboards boolean - Enable opensearch_dashboards.
- prometheus boolean
- Enable prometheus.
- opensearch bool
- Enable opensearch.
- opensearch_
dashboards bool - Enable opensearch_dashboards.
- prometheus bool
- Enable prometheus.
- opensearch Boolean
- Enable opensearch.
- opensearch
Dashboards Boolean - Enable opensearch_dashboards.
- prometheus Boolean
- Enable prometheus.
GetOpenSearchOpensearchUserConfigPublicAccess
- Opensearch bool
- Allow clients to connect to opensearch from the public internet for service nodes that are in a project VPC or another type of private network.
- Opensearch
Dashboards bool - Allow clients to connect to opensearch_dashboards from the public internet for service nodes that are in a project VPC or another type of private network.
- Prometheus bool
- Allow clients to connect to prometheus from the public internet for service nodes that are in a project VPC or another type of private network.
- Opensearch bool
- Allow clients to connect to opensearch from the public internet for service nodes that are in a project VPC or another type of private network.
- Opensearch
Dashboards bool - Allow clients to connect to opensearch_dashboards from the public internet for service nodes that are in a project VPC or another type of private network.
- Prometheus bool
- Allow clients to connect to prometheus from the public internet for service nodes that are in a project VPC or another type of private network.
- opensearch Boolean
- Allow clients to connect to opensearch from the public internet for service nodes that are in a project VPC or another type of private network.
- opensearch
Dashboards Boolean - Allow clients to connect to opensearch_dashboards from the public internet for service nodes that are in a project VPC or another type of private network.
- prometheus Boolean
- Allow clients to connect to prometheus from the public internet for service nodes that are in a project VPC or another type of private network.
- opensearch boolean
- Allow clients to connect to opensearch from the public internet for service nodes that are in a project VPC or another type of private network.
- opensearch
Dashboards boolean - Allow clients to connect to opensearch_dashboards from the public internet for service nodes that are in a project VPC or another type of private network.
- prometheus boolean
- Allow clients to connect to prometheus from the public internet for service nodes that are in a project VPC or another type of private network.
- opensearch bool
- Allow clients to connect to opensearch from the public internet for service nodes that are in a project VPC or another type of private network.
- opensearch_
dashboards bool - Allow clients to connect to opensearch_dashboards from the public internet for service nodes that are in a project VPC or another type of private network.
- prometheus bool
- Allow clients to connect to prometheus from the public internet for service nodes that are in a project VPC or another type of private network.
- opensearch Boolean
- Allow clients to connect to opensearch from the public internet for service nodes that are in a project VPC or another type of private network.
- opensearch
Dashboards Boolean - Allow clients to connect to opensearch_dashboards from the public internet for service nodes that are in a project VPC or another type of private network.
- prometheus Boolean
- Allow clients to connect to prometheus from the public internet for service nodes that are in a project VPC or another type of private network.
GetOpenSearchOpensearchUserConfigS3Migration
- Access
Key string - AWS Access key.
- Base
Path string - The path to the repository data within its container. The value of this setting should not start or end with a /.
- Bucket string
- S3 bucket name.
- Indices string
- A comma-delimited list of indices to restore from the snapshot. Multi-index syntax is supported. Example:
metrics*,logs*,data-20240823
. - Region string
- S3 region.
- Secret
Key string - AWS secret key.
- Snapshot
Name string - The snapshot name to restore from.
- Chunk
Size string - Big files can be broken down into chunks during snapshotting if needed. Should be the same as for the 3rd party repository.
- Compress bool
- When set to true metadata files are stored in compressed format.
- Endpoint string
- The S3 service endpoint to connect to. If you are using an S3-compatible service then you should set this to the service’s endpoint.
- Include
Aliases bool - Whether to restore aliases alongside their associated indexes. Default is true.
- Restore
Global boolState - If true, restore the cluster state. Defaults to false.
- Server
Side boolEncryption - When set to true files are encrypted on server side.
- Access
Key string - AWS Access key.
- Base
Path string - The path to the repository data within its container. The value of this setting should not start or end with a /.
- Bucket string
- S3 bucket name.
- Indices string
- A comma-delimited list of indices to restore from the snapshot. Multi-index syntax is supported. Example:
metrics*,logs*,data-20240823
. - Region string
- S3 region.
- Secret
Key string - AWS secret key.
- Snapshot
Name string - The snapshot name to restore from.
- Chunk
Size string - Big files can be broken down into chunks during snapshotting if needed. Should be the same as for the 3rd party repository.
- Compress bool
- When set to true metadata files are stored in compressed format.
- Endpoint string
- The S3 service endpoint to connect to. If you are using an S3-compatible service then you should set this to the service’s endpoint.
- Include
Aliases bool - Whether to restore aliases alongside their associated indexes. Default is true.
- Restore
Global boolState - If true, restore the cluster state. Defaults to false.
- Server
Side boolEncryption - When set to true files are encrypted on server side.
- access
Key String - AWS Access key.
- base
Path String - The path to the repository data within its container. The value of this setting should not start or end with a /.
- bucket String
- S3 bucket name.
- indices String
- A comma-delimited list of indices to restore from the snapshot. Multi-index syntax is supported. Example:
metrics*,logs*,data-20240823
. - region String
- S3 region.
- secret
Key String - AWS secret key.
- snapshot
Name String - The snapshot name to restore from.
- chunk
Size String - Big files can be broken down into chunks during snapshotting if needed. Should be the same as for the 3rd party repository.
- compress Boolean
- When set to true metadata files are stored in compressed format.
- endpoint String
- The S3 service endpoint to connect to. If you are using an S3-compatible service then you should set this to the service’s endpoint.
- include
Aliases Boolean - Whether to restore aliases alongside their associated indexes. Default is true.
- restore
Global BooleanState - If true, restore the cluster state. Defaults to false.
- server
Side BooleanEncryption - When set to true files are encrypted on server side.
- access
Key string - AWS Access key.
- base
Path string - The path to the repository data within its container. The value of this setting should not start or end with a /.
- bucket string
- S3 bucket name.
- indices string
- A comma-delimited list of indices to restore from the snapshot. Multi-index syntax is supported. Example:
metrics*,logs*,data-20240823
. - region string
- S3 region.
- secret
Key string - AWS secret key.
- snapshot
Name string - The snapshot name to restore from.
- chunk
Size string - Big files can be broken down into chunks during snapshotting if needed. Should be the same as for the 3rd party repository.
- compress boolean
- When set to true metadata files are stored in compressed format.
- endpoint string
- The S3 service endpoint to connect to. If you are using an S3-compatible service then you should set this to the service’s endpoint.
- include
Aliases boolean - Whether to restore aliases alongside their associated indexes. Default is true.
- restore
Global booleanState - If true, restore the cluster state. Defaults to false.
- server
Side booleanEncryption - When set to true files are encrypted on server side.
- access_
key str - AWS Access key.
- base_
path str - The path to the repository data within its container. The value of this setting should not start or end with a /.
- bucket str
- S3 bucket name.
- indices str
- A comma-delimited list of indices to restore from the snapshot. Multi-index syntax is supported. Example:
metrics*,logs*,data-20240823
. - region str
- S3 region.
- secret_
key str - AWS secret key.
- snapshot_
name str - The snapshot name to restore from.
- chunk_
size str - Big files can be broken down into chunks during snapshotting if needed. Should be the same as for the 3rd party repository.
- compress bool
- When set to true metadata files are stored in compressed format.
- endpoint str
- The S3 service endpoint to connect to. If you are using an S3-compatible service then you should set this to the service’s endpoint.
- include_
aliases bool - Whether to restore aliases alongside their associated indexes. Default is true.
- restore_
global_ boolstate - If true, restore the cluster state. Defaults to false.
- server_
side_ boolencryption - When set to true files are encrypted on server side.
- access
Key String - AWS Access key.
- base
Path String - The path to the repository data within its container. The value of this setting should not start or end with a /.
- bucket String
- S3 bucket name.
- indices String
- A comma-delimited list of indices to restore from the snapshot. Multi-index syntax is supported. Example:
metrics*,logs*,data-20240823
. - region String
- S3 region.
- secret
Key String - AWS secret key.
- snapshot
Name String - The snapshot name to restore from.
- chunk
Size String - Big files can be broken down into chunks during snapshotting if needed. Should be the same as for the 3rd party repository.
- compress Boolean
- When set to true metadata files are stored in compressed format.
- endpoint String
- The S3 service endpoint to connect to. If you are using an S3-compatible service then you should set this to the service’s endpoint.
- include
Aliases Boolean - Whether to restore aliases alongside their associated indexes. Default is true.
- restore
Global BooleanState - If true, restore the cluster state. Defaults to false.
- server
Side BooleanEncryption - When set to true files are encrypted on server side.
GetOpenSearchOpensearchUserConfigSaml
- Enabled bool
- Enables or disables SAML-based authentication for OpenSearch. When enabled, users can authenticate using SAML with an Identity Provider. Default:
true
. - Idp
Entity stringId - The unique identifier for the Identity Provider (IdP) entity that is used for SAML authentication. This value is typically provided by the IdP. Example:
test-idp-entity-id
. - Idp
Metadata stringUrl - The URL of the SAML metadata for the Identity Provider (IdP). This is used to configure SAML-based authentication with the IdP. Example:
https://test-account.okta.com/app/exk491jujcVc83LEX697/sso/saml/metadata
. - Sp
Entity stringId - The unique identifier for the Service Provider (SP) entity that is used for SAML authentication. This value is typically provided by the SP. Example:
test-sp-entity-id
. - Idp
Pemtrustedcas stringContent - This parameter specifies the PEM-encoded root certificate authority (CA) content for the SAML identity provider (IdP) server verification. The root CA content is used to verify the SSL/TLS certificate presented by the server. Example:
-----BEGIN CERTIFICATE----- ... -----END CERTIFICATE-----
. - Roles
Key string - Optional. Specifies the attribute in the SAML response where role information is stored, if available. Role attributes are not required for SAML authentication, but can be included in SAML assertions by most Identity Providers (IdPs) to determine user access levels or permissions. Example:
RoleName
. - Subject
Key string - Optional. Specifies the attribute in the SAML response where the subject identifier is stored. If not configured, the NameID attribute is used by default. Example:
NameID
.
- Enabled bool
- Enables or disables SAML-based authentication for OpenSearch. When enabled, users can authenticate using SAML with an Identity Provider. Default:
true
. - Idp
Entity stringId - The unique identifier for the Identity Provider (IdP) entity that is used for SAML authentication. This value is typically provided by the IdP. Example:
test-idp-entity-id
. - Idp
Metadata stringUrl - The URL of the SAML metadata for the Identity Provider (IdP). This is used to configure SAML-based authentication with the IdP. Example:
https://test-account.okta.com/app/exk491jujcVc83LEX697/sso/saml/metadata
. - Sp
Entity stringId - The unique identifier for the Service Provider (SP) entity that is used for SAML authentication. This value is typically provided by the SP. Example:
test-sp-entity-id
. - Idp
Pemtrustedcas stringContent - This parameter specifies the PEM-encoded root certificate authority (CA) content for the SAML identity provider (IdP) server verification. The root CA content is used to verify the SSL/TLS certificate presented by the server. Example:
-----BEGIN CERTIFICATE----- ... -----END CERTIFICATE-----
. - Roles
Key string - Optional. Specifies the attribute in the SAML response where role information is stored, if available. Role attributes are not required for SAML authentication, but can be included in SAML assertions by most Identity Providers (IdPs) to determine user access levels or permissions. Example:
RoleName
. - Subject
Key string - Optional. Specifies the attribute in the SAML response where the subject identifier is stored. If not configured, the NameID attribute is used by default. Example:
NameID
.
- enabled Boolean
- Enables or disables SAML-based authentication for OpenSearch. When enabled, users can authenticate using SAML with an Identity Provider. Default:
true
. - idp
Entity StringId - The unique identifier for the Identity Provider (IdP) entity that is used for SAML authentication. This value is typically provided by the IdP. Example:
test-idp-entity-id
. - idp
Metadata StringUrl - The URL of the SAML metadata for the Identity Provider (IdP). This is used to configure SAML-based authentication with the IdP. Example:
https://test-account.okta.com/app/exk491jujcVc83LEX697/sso/saml/metadata
. - sp
Entity StringId - The unique identifier for the Service Provider (SP) entity that is used for SAML authentication. This value is typically provided by the SP. Example:
test-sp-entity-id
. - idp
Pemtrustedcas StringContent - This parameter specifies the PEM-encoded root certificate authority (CA) content for the SAML identity provider (IdP) server verification. The root CA content is used to verify the SSL/TLS certificate presented by the server. Example:
-----BEGIN CERTIFICATE----- ... -----END CERTIFICATE-----
. - roles
Key String - Optional. Specifies the attribute in the SAML response where role information is stored, if available. Role attributes are not required for SAML authentication, but can be included in SAML assertions by most Identity Providers (IdPs) to determine user access levels or permissions. Example:
RoleName
. - subject
Key String - Optional. Specifies the attribute in the SAML response where the subject identifier is stored. If not configured, the NameID attribute is used by default. Example:
NameID
.
- enabled boolean
- Enables or disables SAML-based authentication for OpenSearch. When enabled, users can authenticate using SAML with an Identity Provider. Default:
true
. - idp
Entity stringId - The unique identifier for the Identity Provider (IdP) entity that is used for SAML authentication. This value is typically provided by the IdP. Example:
test-idp-entity-id
. - idp
Metadata stringUrl - The URL of the SAML metadata for the Identity Provider (IdP). This is used to configure SAML-based authentication with the IdP. Example:
https://test-account.okta.com/app/exk491jujcVc83LEX697/sso/saml/metadata
. - sp
Entity stringId - The unique identifier for the Service Provider (SP) entity that is used for SAML authentication. This value is typically provided by the SP. Example:
test-sp-entity-id
. - idp
Pemtrustedcas stringContent - This parameter specifies the PEM-encoded root certificate authority (CA) content for the SAML identity provider (IdP) server verification. The root CA content is used to verify the SSL/TLS certificate presented by the server. Example:
-----BEGIN CERTIFICATE----- ... -----END CERTIFICATE-----
. - roles
Key string - Optional. Specifies the attribute in the SAML response where role information is stored, if available. Role attributes are not required for SAML authentication, but can be included in SAML assertions by most Identity Providers (IdPs) to determine user access levels or permissions. Example:
RoleName
. - subject
Key string - Optional. Specifies the attribute in the SAML response where the subject identifier is stored. If not configured, the NameID attribute is used by default. Example:
NameID
.
- enabled bool
- Enables or disables SAML-based authentication for OpenSearch. When enabled, users can authenticate using SAML with an Identity Provider. Default:
true
. - idp_
entity_ strid - The unique identifier for the Identity Provider (IdP) entity that is used for SAML authentication. This value is typically provided by the IdP. Example:
test-idp-entity-id
. - idp_
metadata_ strurl - The URL of the SAML metadata for the Identity Provider (IdP). This is used to configure SAML-based authentication with the IdP. Example:
https://test-account.okta.com/app/exk491jujcVc83LEX697/sso/saml/metadata
. - sp_
entity_ strid - The unique identifier for the Service Provider (SP) entity that is used for SAML authentication. This value is typically provided by the SP. Example:
test-sp-entity-id
. - idp_
pemtrustedcas_ strcontent - This parameter specifies the PEM-encoded root certificate authority (CA) content for the SAML identity provider (IdP) server verification. The root CA content is used to verify the SSL/TLS certificate presented by the server. Example:
-----BEGIN CERTIFICATE----- ... -----END CERTIFICATE-----
. - roles_
key str - Optional. Specifies the attribute in the SAML response where role information is stored, if available. Role attributes are not required for SAML authentication, but can be included in SAML assertions by most Identity Providers (IdPs) to determine user access levels or permissions. Example:
RoleName
. - subject_
key str - Optional. Specifies the attribute in the SAML response where the subject identifier is stored. If not configured, the NameID attribute is used by default. Example:
NameID
.
- enabled Boolean
- Enables or disables SAML-based authentication for OpenSearch. When enabled, users can authenticate using SAML with an Identity Provider. Default:
true
. - idp
Entity StringId - The unique identifier for the Identity Provider (IdP) entity that is used for SAML authentication. This value is typically provided by the IdP. Example:
test-idp-entity-id
. - idp
Metadata StringUrl - The URL of the SAML metadata for the Identity Provider (IdP). This is used to configure SAML-based authentication with the IdP. Example:
https://test-account.okta.com/app/exk491jujcVc83LEX697/sso/saml/metadata
. - sp
Entity StringId - The unique identifier for the Service Provider (SP) entity that is used for SAML authentication. This value is typically provided by the SP. Example:
test-sp-entity-id
. - idp
Pemtrustedcas StringContent - This parameter specifies the PEM-encoded root certificate authority (CA) content for the SAML identity provider (IdP) server verification. The root CA content is used to verify the SSL/TLS certificate presented by the server. Example:
-----BEGIN CERTIFICATE----- ... -----END CERTIFICATE-----
. - roles
Key String - Optional. Specifies the attribute in the SAML response where role information is stored, if available. Role attributes are not required for SAML authentication, but can be included in SAML assertions by most Identity Providers (IdPs) to determine user access levels or permissions. Example:
RoleName
. - subject
Key String - Optional. Specifies the attribute in the SAML response where the subject identifier is stored. If not configured, the NameID attribute is used by default. Example:
NameID
.
GetOpenSearchServiceIntegration
- Integration
Type string - Type of the service integration. The only supported value at the moment is
read_replica
- Source
Service stringName - Name of the source service
- Integration
Type string - Type of the service integration. The only supported value at the moment is
read_replica
- Source
Service stringName - Name of the source service
- integration
Type String - Type of the service integration. The only supported value at the moment is
read_replica
- source
Service StringName - Name of the source service
- integration
Type string - Type of the service integration. The only supported value at the moment is
read_replica
- source
Service stringName - Name of the source service
- integration_
type str - Type of the service integration. The only supported value at the moment is
read_replica
- source_
service_ strname - Name of the source service
- integration
Type String - Type of the service integration. The only supported value at the moment is
read_replica
- source
Service StringName - Name of the source service
GetOpenSearchTag
GetOpenSearchTechEmail
- Email string
- An email address to contact for technical issues
- Email string
- An email address to contact for technical issues
- email String
- An email address to contact for technical issues
- email string
- An email address to contact for technical issues
- email str
- An email address to contact for technical issues
- email String
- An email address to contact for technical issues
Package Details
- Repository
- Aiven pulumi/pulumi-aiven
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
aiven
Terraform Provider.