Domain

opensearchservice.services.k8s.aws/v1alpha1

TypeLink
GoDocopensearchservice-controller/apis/v1alpha1#Domain

Metadata

PropertyValue
ScopeNamespaced
KindDomain
ListKindDomainList
Pluraldomains
Singulardomain

Spec

accessPolicies: string
advancedOptions: {}
advancedSecurityOptions: 
  anonymousAuthEnabled: boolean
  enabled: boolean
  internalUserDatabaseEnabled: boolean
  jwtOptions: 
    enabled: boolean
    publicKey: string
    rolesKey: string
    subjectKey: string
  masterUserOptions: 
    masterUserARN: string
    masterUserName: string
    masterUserPassword: 
      key: string
      name: string
      namespace: string
  sAMLOptions: 
    enabled: boolean
    idp: 
      entityID: string
      metadataContent: string
    masterBackendRole: string
    masterUserName: string
    rolesKey: string
    sessionTimeoutMinutes: integer
    subjectKey: string
aimlOptions: 
  naturalLanguageQueryGenerationOptions: 
    desiredState: string
autoTuneOptions: 
  desiredState: string
  maintenanceSchedules:
  - cronExpressionForRecurrence: string
    duration: 
      unit: string
      value: integer
    startAt: string
  useOffPeakWindow: boolean
clusterConfig: 
  coldStorageOptions: 
    enabled: boolean
  dedicatedMasterCount: integer
  dedicatedMasterEnabled: boolean
  dedicatedMasterType: string
  instanceCount: integer
  instanceType: string
  multiAZWithStandbyEnabled: boolean
  warmCount: integer
  warmEnabled: boolean
  warmType: string
  zoneAwarenessConfig: 
    availabilityZoneCount: integer
  zoneAwarenessEnabled: boolean
cognitoOptions: 
  enabled: boolean
  identityPoolID: string
  roleARN: string
  userPoolID: string
domainEndpointOptions: 
  customEndpoint: string
  customEndpointCertificateARN: string
  customEndpointEnabled: boolean
  enforceHTTPS: boolean
  tlsSecurityPolicy: string
ebsOptions: 
  ebsEnabled: boolean
  iops: integer
  throughput: integer
  volumeSize: integer
  volumeType: string
encryptionAtRestOptions: 
  enabled: boolean
  kmsKeyID: string
engineVersion: string
ipAddressType: string
logPublishingOptions: {}
name: string
nodeToNodeEncryptionOptions: 
  enabled: boolean
offPeakWindowOptions: 
  enabled: boolean
  offPeakWindow: 
    windowStartTime: 
      hours: integer
      minutes: integer
softwareUpdateOptions: 
  autoSoftwareUpdateEnabled: boolean
tags:
- key: string
  value: string
vpcOptions: 
  securityGroupIDs:
  - string
  subnetIDs:
  - string
FieldDescription
accessPolicies
Optional
string
Identity and Access Management (IAM) policy document specifying the access
policies for the new domain.
advancedOptions
Optional
object
Key-value pairs to specify advanced configuration options. The following
key-value pairs are supported:

* “rest.action.multi.allow_explicit_index”: “true”
advancedSecurityOptions
Optional
object
Options for fine-grained access control.
advancedSecurityOptions.anonymousAuthEnabled
Optional
boolean
advancedSecurityOptions.enabled
Optional
boolean
advancedSecurityOptions.internalUserDatabaseEnabled
Optional
boolean
advancedSecurityOptions.jwtOptions
Optional
object
The JWT authentication and authorization configuration for an Amazon OpenSearch
Service domain.
advancedSecurityOptions.jwtOptions.enabled
Optional
boolean
advancedSecurityOptions.jwtOptions.publicKey
Optional
string
advancedSecurityOptions.jwtOptions.rolesKey
Optional
string
advancedSecurityOptions.jwtOptions.subjectKey
Optional
string
advancedSecurityOptions.masterUserOptions
Optional
object
Credentials for the master user for a domain.
advancedSecurityOptions.masterUserOptions.masterUserARN
Optional
string
The Amazon Resource Name (ARN) of the domain. See Identifiers for IAM Entities
(https://docs.aws.amazon.com/IAM/latest/UserGuide/index.html) in Using Amazon
Web Services Identity and Access Management for more information.
advancedSecurityOptions.masterUserOptions.masterUserName
Optional
string
advancedSecurityOptions.masterUserOptions.masterUserPassword
Optional
object
SecretKeyReference combines a k8s corev1.SecretReference with a
specific key within the referred-to Secret
advancedSecurityOptions.masterUserOptions.masterUserPassword.key
Required
string
Key is the key within the secret
advancedSecurityOptions.masterUserOptions.masterUserPassword.name
Optional
string
name is unique within a namespace to reference a secret resource.
advancedSecurityOptions.masterUserOptions.masterUserPassword.namespace
Optional
string
namespace defines the space within which the secret name must be unique.
advancedSecurityOptions.sAMLOptions
Optional
object
The SAML authentication configuration for an Amazon OpenSearch Service domain.
advancedSecurityOptions.sAMLOptions.enabled
Optional
boolean
advancedSecurityOptions.sAMLOptions.idp
Optional
object
The SAML identity povider information.
advancedSecurityOptions.sAMLOptions.idp.entityID
Optional
string
advancedSecurityOptions.sAMLOptions.idp.metadataContent
Optional
string
advancedSecurityOptions.sAMLOptions.masterBackendRole
Optional
string
advancedSecurityOptions.sAMLOptions.masterUserName
Optional
string
advancedSecurityOptions.sAMLOptions.rolesKey
Optional
string
advancedSecurityOptions.sAMLOptions.sessionTimeoutMinutes
Optional
integer
advancedSecurityOptions.sAMLOptions.subjectKey
Optional
string
aimlOptions
Optional
object
Options for all machine learning features for the specified domain.
aimlOptions.naturalLanguageQueryGenerationOptions
Optional
object
Container for parameters required to enable the natural language query generation
feature.
aimlOptions.naturalLanguageQueryGenerationOptions.desiredState
Optional
string
autoTuneOptions
Optional
object
Options for Auto-Tune.
autoTuneOptions.desiredState
Optional
string
The Auto-Tune desired state. Valid values are ENABLED and DISABLED.
autoTuneOptions.maintenanceSchedules
Optional
array
autoTuneOptions.maintenanceSchedules.[]
Required
object
This object is deprecated. Use the domain’s off-peak window (https://docs.aws.amazon.com/opensearch-service/latest/developerguide/off-peak.html)
to schedule Auto-Tune optimizations. For migration instructions, see Migrating
from Auto-Tune maintenance windows (https://docs.aws.amazon.com/opensearch-service/latest/developerguide/off-peak.html#off-peak-migrate).

The Auto-Tune maintenance schedule. For more information, see Auto-Tune for Amazon OpenSearch Service (https://docs.aws.amazon.com/opensearch-service/latest/developerguide/auto-tune.html). || autoTuneOptions.maintenanceSchedules.[].cronExpressionForRecurrence
Optional | string
| | autoTuneOptions.maintenanceSchedules.[].duration
Optional | object
The duration of a maintenance schedule. For more information, see Auto-Tune
for Amazon OpenSearch Service (https://docs.aws.amazon.com/opensearch-service/latest/developerguide/auto-tune.html). | | autoTuneOptions.maintenanceSchedules.[].duration.unit
Optional | string
The unit of a maintenance schedule duration. Valid value is HOUR. | | autoTuneOptions.maintenanceSchedules.[].duration.value
Optional | integer
Integer that specifies the value of a maintenance schedule duration. | | autoTuneOptions.maintenanceSchedules.[].startAt
Optional | string
| | autoTuneOptions.useOffPeakWindow
Optional | boolean
| | clusterConfig
Optional | object
Container for the cluster configuration of a domain. | | clusterConfig.coldStorageOptions
Optional | object
Container for the parameters required to enable cold storage for an OpenSearch
Service domain. For more information, see Cold storage for Amazon OpenSearch
Service (https://docs.aws.amazon.com/opensearch-service/latest/developerguide/cold-storage.html). | | clusterConfig.coldStorageOptions.enabled
Optional | boolean
| | clusterConfig.dedicatedMasterCount
Optional | integer
| | clusterConfig.dedicatedMasterEnabled
Optional | boolean
| | clusterConfig.dedicatedMasterType
Optional | string
| | clusterConfig.instanceCount
Optional | integer
| | clusterConfig.instanceType
Optional | string
| | clusterConfig.multiAZWithStandbyEnabled
Optional | boolean
| | clusterConfig.warmCount
Optional | integer
| | clusterConfig.warmEnabled
Optional | boolean
| | clusterConfig.warmType
Optional | string
| | clusterConfig.zoneAwarenessConfig
Optional | object
The zone awareness configuration for an Amazon OpenSearch Service domain. | | clusterConfig.zoneAwarenessConfig.availabilityZoneCount
Optional | integer
| | clusterConfig.zoneAwarenessEnabled
Optional | boolean
| | cognitoOptions
Optional | object
Key-value pairs to configure Amazon Cognito authentication. For more information,
see Configuring Amazon Cognito authentication for OpenSearch Dashboards (https://docs.aws.amazon.com/opensearch-service/latest/developerguide/cognito-auth.html). | | cognitoOptions.enabled
Optional | boolean
| | cognitoOptions.identityPoolID
Optional | string
| | cognitoOptions.roleARN
Optional | string
| | cognitoOptions.userPoolID
Optional | string
| | domainEndpointOptions
Optional | object
Additional options for the domain endpoint, such as whether to require HTTPS
for all traffic. | | domainEndpointOptions.customEndpoint
Optional | string
| | domainEndpointOptions.customEndpointCertificateARN
Optional | string
The Amazon Resource Name (ARN) of the domain. See Identifiers for IAM Entities
(https://docs.aws.amazon.com/IAM/latest/UserGuide/index.html) in Using Amazon
Web Services Identity and Access Management for more information. | | domainEndpointOptions.customEndpointEnabled
Optional | boolean
| | domainEndpointOptions.enforceHTTPS
Optional | boolean
| | domainEndpointOptions.tlsSecurityPolicy
Optional | string
| | ebsOptions
Optional | object
Container for the parameters required to enable EBS-based storage for an
OpenSearch Service domain. | | ebsOptions.ebsEnabled
Optional | boolean
| | ebsOptions.iops
Optional | integer
| | ebsOptions.throughput
Optional | integer
| | ebsOptions.volumeSize
Optional | integer
| | ebsOptions.volumeType
Optional | string
The type of EBS volume that a domain uses. For more information, see Configuring
EBS-based storage (https://docs.aws.amazon.com/opensearch-service/latest/developerguide/opensearch-createupdatedomains.html#opensearch-createdomain-configure-ebs). | | encryptionAtRestOptions
Optional | object
Key-value pairs to enable encryption at rest. | | encryptionAtRestOptions.enabled
Optional | boolean
| | encryptionAtRestOptions.kmsKeyID
Optional | string
| | engineVersion
Optional | string
String of format Elasticsearch_X.Y or OpenSearch_X.Y to specify the engine
version for the OpenSearch Service domain. For example, OpenSearch_1.0 or
Elasticsearch_7.9. For more information, see Creating and managing Amazon
OpenSearch Service domains (https://docs.aws.amazon.com/opensearch-service/latest/developerguide/createupdatedomains.html#createdomains). | | ipAddressType
Optional | string
Specify either dual stack or IPv4 as your IP address type. Dual stack allows
you to share domain resources across IPv4 and IPv6 address types, and is
the recommended option. If you set your IP address type to dual stack, you
can’t change your address type later. | | logPublishingOptions
Optional | object
Key-value pairs to configure log publishing. | | name
Required | string
Name of the OpenSearch Service domain to create. Domain names are unique
across the domains owned by an account within an Amazon Web Services Region. | | nodeToNodeEncryptionOptions
Optional | object
Enables node-to-node encryption. | | nodeToNodeEncryptionOptions.enabled
Optional | boolean
| | offPeakWindowOptions
Optional | object
Specifies a daily 10-hour time block during which OpenSearch Service can
perform configuration changes on the domain, including service software updates
and Auto-Tune enhancements that require a blue/green deployment. If no options
are specified, the default start time of 10:00 P.M. local time (for the Region
that the domain is created in) is used. | | offPeakWindowOptions.enabled
Optional | boolean
| | offPeakWindowOptions.offPeakWindow
Optional | object
A custom 10-hour, low-traffic window during which OpenSearch Service can
perform mandatory configuration changes on the domain. These actions can
include scheduled service software updates and blue/green Auto-Tune enhancements.
OpenSearch Service will schedule these actions during the window that you
specify.

If you don’t specify a window start time, it defaults to 10:00 P.M. local
time.

For more information, see Defining off-peak maintenance windows for Amazon
OpenSearch Service (https://docs.aws.amazon.com/opensearch-service/latest/developerguide/off-peak.html). | | offPeakWindowOptions.offPeakWindow.windowStartTime
Optional | object
The desired start time for an off-peak maintenance window (https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_OffPeakWindow.html). | | offPeakWindowOptions.offPeakWindow.windowStartTime.hours
Optional | integer
| | offPeakWindowOptions.offPeakWindow.windowStartTime.minutes
Optional | integer
| | softwareUpdateOptions
Optional | object
Software update options for the domain. | | softwareUpdateOptions.autoSoftwareUpdateEnabled
Optional | boolean
| | tags
Optional | array
List of tags to add to the domain upon creation. | | tags.[]
Required | object
A tag (key-value pair) for an Amazon OpenSearch Service resource. || tags.[].key
Optional | string
A string between 1 to 128 characters that specifies the key for a tag. Tag
keys must be unique for the domain to which they’re attached. | | tags.[].value
Optional | string
A string between 0 to 256 characters that specifies the value for a tag.
Tag values can be null and don’t have to be unique in a tag set. | | vpcOptions
Optional | object
Container for the values required to configure VPC access domains. If you
don’t specify these values, OpenSearch Service creates the domain with a
public endpoint. For more information, see Launching your Amazon OpenSearch
Service domains using a VPC (https://docs.aws.amazon.com/opensearch-service/latest/developerguide/vpc.html). | | vpcOptions.securityGroupIDs
Optional | array
| | vpcOptions.securityGroupIDs.[]
Required | string
|| vpcOptions.subnetIDs
Optional | array
| | vpcOptions.subnetIDs.[]
Required | string
|

Status

ackResourceMetadata: 
  arn: string
  ownerAccountID: string
  region: string
changeProgressDetails: 
  changeID: string
  configChangeStatus: string
  initiatedBy: string
  lastUpdatedTime: string
  message: string
  startTime: string
conditions:
- lastTransitionTime: string
  message: string
  reason: string
  status: string
  type: string
created: boolean
deleted: boolean
domainEndpointV2HostedZoneID: string
domainID: string
domainProcessingStatus: string
endpoint: string
endpointV2: string
endpoints: {}
modifyingProperties:
- activeValue: string
  name: string
  pendingValue: string
  valueType: string
processing: boolean
serviceSoftwareOptions: 
  automatedUpdateDate: string
  cancellable: boolean
  currentVersion: string
  description: string
  newVersion: string
  optionalDeployment: boolean
  updateAvailable: boolean
  updateStatus: string
snapshotOptions: 
  automatedSnapshotStartHour: integer
upgradeProcessing: boolean
FieldDescription
ackResourceMetadata
Optional
object
All CRs managed by ACK have a common Status.ACKResourceMetadata member
that is used to contain resource sync state, account ownership,
constructed ARN for the resource
ackResourceMetadata.arn
Optional
string
ARN is the Amazon Resource Name for the resource. This is a
globally-unique identifier and is set only by the ACK service controller
once the controller has orchestrated the creation of the resource OR
when it has verified that an “adopted” resource (a resource where the
ARN annotation was set by the Kubernetes user on the CR) exists and
matches the supplied CR’s Spec field values.
https://github.com/aws/aws-controllers-k8s/issues/270
ackResourceMetadata.ownerAccountID
Required
string
OwnerAccountID is the AWS Account ID of the account that owns the
backend AWS service API resource.
ackResourceMetadata.region
Required
string
Region is the AWS region in which the resource exists or will exist.
changeProgressDetails
Optional
object
Information about a configuration change happening on the domain.
changeProgressDetails.changeID
Optional
string
changeProgressDetails.configChangeStatus
Optional
string
changeProgressDetails.initiatedBy
Optional
string
changeProgressDetails.lastUpdatedTime
Optional
string
changeProgressDetails.message
Optional
string
changeProgressDetails.startTime
Optional
string
conditions
Optional
array
All CRS managed by ACK have a common Status.Conditions member that
contains a collection of ackv1alpha1.Condition objects that describe
the various terminal states of the CR and its backend AWS service API
resource
conditions.[]
Required
object
Condition is the common struct used by all CRDs managed by ACK service
controllers to indicate terminal states of the CR and its backend AWS
service API resource
conditions.[].message
Optional
string
A human readable message indicating details about the transition.
conditions.[].reason
Optional
string
The reason for the condition’s last transition.
conditions.[].status
Optional
string
Status of the condition, one of True, False, Unknown.
conditions.[].type
Optional
string
Type is the type of the Condition
created
Optional
boolean
Creation status of an OpenSearch Service domain. True if domain creation
is complete. False if domain creation is still in progress.
deleted
Optional
boolean
Deletion status of an OpenSearch Service domain. True if domain deletion
is complete. False if domain deletion is still in progress. Once deletion
is complete, the status of the domain is no longer returned.
domainEndpointV2HostedZoneID
Optional
string
The dual stack hosted zone ID for the domain.
domainID
Optional
string
Unique identifier for the domain.
domainProcessingStatus
Optional
string
The status of any changes that are currently in progress for the domain.
endpoint
Optional
string
Domain-specific endpoint used to submit index, search, and data upload requests
to the domain.
endpointV2
Optional
string
If IPAddressType to set to dualstack, a version 2 domain endpoint is provisioned.
This endpoint functions like a normal endpoint, except that it works with
both IPv4 and IPv6 IP addresses. Normal endpoints work only with IPv4 IP
addresses.
endpoints
Optional
object
The key-value pair that exists if the OpenSearch Service domain uses VPC
endpoints. For example:

* IPv4 IP addresses - ‘vpc’,‘vpc-endpoint-h2dsd34efgyghrtguk5gt6j2foh4.us-east-1.es.amazonaws.com’

* Dual stack IP addresses - ‘vpcv2’:‘vpc-endpoint-h2dsd34efgyghrtguk5gt6j2foh4.aos.us-east-1.on.aws’
modifyingProperties
Optional
array
Information about the domain properties that are currently being modified.
modifyingProperties.[]
Required
object
Information about the domain properties that are currently being modified.
modifyingProperties.[].name
Optional
string
modifyingProperties.[].pendingValue
Optional
string
modifyingProperties.[].valueType
Optional
string
processing
Optional
boolean
The status of the domain configuration. True if OpenSearch Service is processing
configuration changes. False if the configuration is active.
serviceSoftwareOptions
Optional
object
The current status of the domain’s service software.
serviceSoftwareOptions.automatedUpdateDate
Optional
string
serviceSoftwareOptions.cancellable
Optional
boolean
serviceSoftwareOptions.currentVersion
Optional
string
serviceSoftwareOptions.description
Optional
string
serviceSoftwareOptions.newVersion
Optional
string
serviceSoftwareOptions.optionalDeployment
Optional
boolean
serviceSoftwareOptions.updateAvailable
Optional
boolean
serviceSoftwareOptions.updateStatus
Optional
string
snapshotOptions
Optional
object
DEPRECATED. Container for parameters required to configure automated snapshots
of domain indexes.
snapshotOptions.automatedSnapshotStartHour
Optional
integer
upgradeProcessing
Optional
boolean
The status of a domain version upgrade to a new version of OpenSearch or
Elasticsearch. True if OpenSearch Service is in the process of a version
upgrade. False if the configuration is active.