titan-iac/services/logging/opensearch-helmrelease.yaml

# services/logging/opensearch-helmrelease.yaml
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: opensearch
  namespace: logging
spec:
  interval: 15m
  timeout: 20m
  install:
    remediation:
      retries: 3
  upgrade:
    cleanupOnFail: true
    remediation:
      retries: 3
      strategy: rollback
  chart:
    spec:
      chart: opensearch
      version: "~2.36.0"
      sourceRef:
        kind: HelmRepository
        name: opensearch
        namespace: flux-system
  values:
    fullnameOverride: opensearch
    clusterName: opensearch
    nodeGroup: master
    masterService: opensearch-master
    singleNode: true
    replicas: 1
    minimumMasterNodes: 1
    opensearchJavaOpts: "-Xms1536m -Xmx1536m"
    resources:
      requests:
        cpu: "500m"
        memory: "2Gi"
      limits:
        memory: "3Gi"
    persistence:
      enabled: true
      storageClass: asteria
      size: 500Gi
    config:
      opensearch.yml: |
        cluster.name: opensearch
        network.host: 0.0.0.0
        discovery.type: single-node
        plugins.security.disabled: true
        node.store.allow_mmap: false
    nodeSelector:
      node-role.kubernetes.io/worker: "true"
      hardware: rpi5
    affinity:
      nodeAffinity:
        requiredDuringSchedulingIgnoredDuringExecution:
          nodeSelectorTerms:
            - matchExpressions:
                - key: hardware
                  operator: In
                  values:
                    - rpi5
    sysctlInit:
      enabled: true