mastodon new opensearch

manifests/opensearch/secrets.yaml

@@ -1,9 +1,9 @@
 apiVersion: v1
 kind: Secret
 metadata:
-  name: shared-os-admin-credentials
+  name: mastodon-os-password
   namespace: opensearch
 type: Opaque
 stringData:
-  username: admin
-  password: "OiYj2^J1@1HuHSOk"
+  password: "2&ey0J8c1pHbu%kP"
+

manifests/opensearch/user.yaml

@@ -0,0 +1,40 @@
+apiVersion: opensearch.org/v1
+kind: OpensearchUser
+metadata:
+  name: mastodon
+  namespace: opensearch
+spec:
+  opensearchCluster:
+    name: shared-os
+  passwordFrom:
+    name: mastodon-os-password
+    key: password
+---
+apiVersion: opensearch.org/v1
+kind: OpensearchRole
+metadata:
+  name: mastodon
+  namespace: opensearch
+spec:
+  opensearchCluster:
+    name: shared-os
+  clusterPermissions:
+    - cluster_monitor
+  indexPermissions:
+    - indexPatterns:
+        - "*"
+      allowedActions:
+        - indices_all
+---
+apiVersion: opensearch.org/v1
+kind: OpensearchUserRoleBinding
+metadata:
+  name: mastodon
+  namespace: opensearch
+spec:
+  opensearchCluster:
+    name: shared-os
+  users:
+    - mastodon
+  roles:
+    - mastodon