Working with OpenSearch Clusters
OCI Search with OpenSearch lets you create OpenSearch clusters for your search solutions.
After you've created your OpenSearch cluster, Search with OpenSearch handles most of the management and operations of search clusters, including operations such as security updates, upgrades, resizing, and scheduled backups.
This topic covers the following OpenSearch cluster tasks:
- Creating a cluster.
- Viewing cluster configuration details.
- Changing a cluster's name.
- Resizing a cluster.
- Upgrading a cluster.
- Deleting a cluster.
IAM Policy
To use Oracle Cloud Infrastructure, you must be granted security access in a policy by an administrator. This access is required whether you're using the Console or the REST API with an SDK, CLI, or other tool. If you get a message that you don’t have permission or are unauthorized, verify with your administrator what type of access you have and which compartment to work in.
To create or manage a cluster, you need to configure permissions to grant access for users to create and manage the required Networking resources, in addition to users permissions to create and manage Search with OpenSearch resources. The Networking permissions need to be configured for the compartment that contains the Networking resources, so if the cluster is in a different compartment from the VCN and subnet, ensure that the Networking permissions are configured for the compartment containing the VCN and subnet.
The following policy example includes the required permissions for a custom group
SearchOpenSearchAdmins
:
Allow group SearchOpenSearchAdmins to manage vnics in compartment <NETWORK_RESOURCES_COMPARTMENT>
Allow group SearchOpenSearchAdmins to manage vcns in compartment <NETWORK_RESOURCES_COMPARTMENT>
Allow group SearchOpenSearchAdmins to manage subnets in compartment <NETWORK_RESOURCES_COMPARTMENT>
Allow group SearchOpenSearchAdmins to use network-security-groups in compartment <NETWORK_RESOURCES_COMPARTMENT>
Allow group SearchOpenSearchAdmins to manage opensearch-family in compartment <CLUSTER_RESOURCES_COMPARTMENT>
The
SearchOpenSearchAdmins
group in this example refers
to a custom group that you create. See Managing
Groups for more information.The permissions to Networking resources included in this example are required as specified. You can configure the permissions for Search with OpenSearch resources, specified in the last line in this example, with more granularity.
If you're new to policies, see Getting Started with Policies and Common Policies.
Tagging Resources
You can apply tags to your resources to help you organize them according to your business needs. You can apply tags at the time you create a resource, or you can update the resource later with the wanted tags. For general information about applying tags, see Resource Tags.