opensearch

OpenSearch

Chainguard's redistribution of the OpenSearch (opensearch) Helm chart, pre-configured with hardened Chainguard Images.

OpenSearch is a community-driven, open-source search and analytics suite derived from Elasticsearch and Kibana. This chart deploys an OpenSearch cluster as a StatefulSet.

Prerequisites

Authentication is required to access this chart and its images. First, authenticate with Chainguard and configure your environment:

chainctl auth login
chainctl auth configure-docker --pull-token --save
helm registry login cgr.dev

Create an image pull secret for the cluster:

kubectl create secret docker-registry cgr-pull-secret \
  --docker-server=cgr.dev \
  --docker-username="$(echo cgr.dev | docker-credential-cgr get | jq -r '.Username')" \
  --docker-password="$(echo cgr.dev | docker-credential-cgr get | jq -r '.Secret')"

Installation

OpenSearch 2.12+ requires a strong initial admin password. Provide one via extraEnvs and reference the pull secret you created above:

helm install opensearch oci://cgr.dev/ORGANIZATION/charts/opensearch \
  --set imagePullSecrets[0].name=cgr-pull-secret \
  --set 'extraEnvs[0].name=OPENSEARCH_INITIAL_ADMIN_PASSWORD' \
  --set 'extraEnvs[0].value=<strong-password>'

About This Chart

This is a redistribution of the upstream OpenSearch Helm chart. All upstream configuration options and documentation apply. The chart is pinned to OpenSearch 3.x; the opensearch image is served by Chainguard's opensearch repository, and the optional persistence and sysctlInit init containers use the Chainguard busybox image.

For full documentation, see: https://github.com/opensearch-project/helm-charts/tree/main/charts/opensearch