cozystack/packages/core/platform/sources
Andrei Kvapil a0f60d4377
[apps] Add managed OpenSearch service (#1953)
## Summary
- Add `packages/apps/opensearch/` — managed OpenSearch application chart
with multi-version support (v1/v2/v3), TLS, HTTP Basic auth, custom
users, OpenSearch Dashboards, external access, topology spread policies
- Add `packages/system/opensearch-operator/` — wrapper around opster
OpenSearch operator v2.8.0 with sysctl daemonset for `vm.max_map_count`
- Add `packages/system/opensearch-rd/` — ApplicationDefinition for
Cozystack platform integration (dashboard UI, schema validation,
resource exposure)

## Details
- **Versions**: v1 → 1.3.20, v2 → 2.11.1, v3 → 3.0.0
- **Security**: Auto-generated admin credentials, TLS on transport +
HTTP, bcrypt-hashed security config
- **Dashboards**: Optional deployment with TLS, configurable replicas
and resources
- **External access**: LoadBalancer services for OpenSearch (9200) and
Dashboards (5601) with DNS annotations
- **Tests**: Comprehensive Helm test suite (opensearch, security, users)

## Test plan
- [x] `helm template` renders correctly with default values
- [x] `helm template` renders correctly with dashboards, external
access, and custom users enabled
- [ ] Deploy on a test cluster with the operator installed
- [ ] Verify OpenSearch cluster reaches green status
- [ ] Verify Dashboards connectivity
- [ ] Verify external access via LoadBalancer

🤖 Generated with [Claude Code](https://claude.com/claude-code)

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **New Features**
* Managed OpenSearch charts and operator with CRDs, RBAC, external
LoadBalancer services, per-user secrets, security/config secrets,
dashboards, and a sysctl DaemonSet.

* **Documentation**
* New chart READMEs, values.yaml, and JSON schema documenting
configuration, defaults, and version mappings.

* **Tests**
* Extensive manifest tests covering rendering, security, users, storage,
topology, and version selection.

* **Chores**
* Build tooling, Makefiles, packaging ignores, and version update
scripts added.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2026-03-18 11:22:00 +01:00
..
backup-controller.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
backupstrategy-controller.yaml [backups] Added fix to roles and backupstrategy-controller location 2026-03-12 13:44:16 +05:00
bootbox-application.yaml fix(bootbox): auto-create bootbox-application as dependency 2026-02-03 23:52:54 +01:00
bootbox.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
bucket-application.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
capi-operator.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
capi-provider-bootstrap-kubeadm.yaml refactor(platform): restructure bundles and add PackageSources 2026-01-15 14:15:00 +01:00
capi-provider-core.yaml refactor(platform): restructure bundles and add PackageSources 2026-01-15 14:15:00 +01:00
capi-provider-cp-kamaji.yaml refactor(platform): restructure bundles and add PackageSources 2026-01-15 14:15:00 +01:00
capi-provider-infra-kubevirt.yaml refactor(platform): restructure bundles and add PackageSources 2026-01-15 14:15:00 +01:00
cert-manager.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
clickhouse-application.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
clickhouse-operator.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
cluster-autoscaler-azure.yaml [system] Remove privileged flag from cluster-autoscaler PackageSources 2026-02-10 20:42:47 +01:00
cluster-autoscaler-hetzner.yaml [system] Remove privileged flag from cluster-autoscaler PackageSources 2026-02-10 20:42:47 +01:00
clustersecret-operator.yaml Add clustersecret-operator system package 2026-02-10 22:47:20 +05:00
cozy-proxy.yaml Post upgrade fixes for v1.0 packagesources 2026-01-28 20:08:35 +03:00
cozystack-basics.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
cozystack-engine.yaml refactor(api): rename CozystackResourceDefinition to ApplicationDefinition 2026-01-15 22:35:56 +01:00
cozystack-scheduler.yaml [cozystack-scheduler] Add custom scheduler as an optional system package 2026-03-10 22:43:41 +03:00
etcd-application.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
etcd-operator.yaml [etcd-operator] fix dependencies: add vertical-pod-autoscaler 2026-02-13 23:03:48 +05:00
external-dns-application.yaml feat(extra): add external-dns as standalone extra package 2026-03-10 12:48:01 +01:00
external-dns.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
external-secrets-operator.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
flux-plunger.yaml feat(platform): add flux-plunger controller 2026-01-19 13:20:08 +01:00
foundationdb-application.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
foundationdb-operator.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
goldpinger.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
gpu-operator.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
grafana-operator.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
harbor-application.yaml feat(harbor): switch registry storage to S3 via COSI BucketClaim 2026-02-18 01:23:02 +03:00
hetzner-robotlb.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
http-cache-application.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
info-application.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
ingress-application.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
ingress-nginx.yaml refactor(platform): restructure bundles and add PackageSources 2026-01-15 14:15:00 +01:00
kafka-application.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
kafka-operator.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
kamaji.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
keycloak-operator.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
keycloak.yaml refactor(platform): restructure bundles and add PackageSources 2026-01-15 14:15:00 +01:00
kubeovn-plunger.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
kubeovn-webhook.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
kubernetes-application.yaml refactor(platform): restructure bundles and add PackageSources 2026-01-15 14:15:00 +01:00
kubevirt-cdi.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
kubevirt.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
linstor-scheduler.yaml feat(linstor): add linstor-scheduler package 2026-01-07 15:22:26 +01:00
linstor.yaml fix(linstor): extract piraeus-operator CRDs into separate package 2026-02-06 02:01:37 +03:00
local-ccm.yaml feat(packages): add local-ccm package 2026-01-19 14:15:51 +01:00
mariadb-application.yaml refactor: rename mysql application to mariadb 2026-02-12 15:15:20 +01:00
mariadb-operator.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
metallb.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
metrics-server.yaml Post upgrade fixes for v1.0 packagesources 2026-01-28 20:08:35 +03:00
mongodb-application.yaml feat(apps): add MongoDB managed application 2026-01-19 13:39:57 +01:00
mongodb-operator.yaml feat(apps): add MongoDB managed application 2026-01-19 13:39:57 +01:00
monitoring-agents.yaml Post upgrade fixes for v1.0 packagesources 2026-01-28 20:08:35 +03:00
monitoring-application.yaml feat(monitoring): add migration for monitoring-system HelmRelease 2026-02-04 04:04:00 +01:00
monitoring.yaml fix(monitoring): parametrize namespace for monitoring-agents 2026-02-06 18:33:13 +03:00
multus.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
nats-application.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
networking.yaml feat(platform): add cilium-kilo networking variant 2026-02-17 19:32:19 +01:00
nfs-driver.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
objectstorage-controller.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
openbao-application.yaml feat(openbao): add resource definition, PackageSource, and PaaS bundle entry 2026-02-17 20:03:02 +03:00
opensearch-application.yaml Fix YAML style issues in OpenSearch packages 2026-02-16 22:54:41 +01:00
opensearch-operator.yaml Add PackageSource definitions for OpenSearch 2026-02-16 22:54:41 +01:00
postgres-application.yaml refactor(platform): restructure bundles and add PackageSources 2026-01-15 14:15:00 +01:00
postgres-operator.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
prometheus-operator-crds.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
qdrant-application.yaml [qdrant] Register Qdrant application in platform catalog 2026-02-09 14:21:11 +03:00
rabbitmq-application.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
rabbitmq-operator.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
redis-application.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
redis-operator.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
reloader.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
seaweedfs-application.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
snapshot-controller.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
tcp-balancer-application.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
telepresence.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
tenant-application.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
velero.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
vertical-pod-autoscaler.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
victoria-metrics-operator.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
virtualprivatecloud-application.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
vm-disk-application.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
vm-instance-application.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00
vpn-application.yaml [platform] Add PackageSources for cozystack-operator 2025-12-25 15:48:52 +01:00