From ea57d44228d55114cfaebef59e550daea687e5ae Mon Sep 17 00:00:00 2001
From: Alexander Rogov <i_am@rogov.al>
Date: Mon, 13 Jul 2026 00:11:51 +0300
Subject: [PATCH] fix: enable search (fix opensearch security, enable es, bump
 web memory)

- Fix OpenSearch security plugin: change "true" string to true boolean
  in cluster.yaml to actually disable security (TLS + auth)
- Enable elasticsearch in mastodon connecting to shared-os cluster
  (port 9200, TLS disabled, single_node_cluster preset)
- Enable deploySearch hook to build search indexes
- Increase mastodon-web memory limit from 512Mi to 1Gi to fix OOMKill
---
 argocd/apps/mastodon.yaml         | 10 +++++++---
 manifests/opensearch/cluster.yaml |  2 +-
 2 files changed, 8 insertions(+), 4 deletions(-)

diff --git a/argocd/apps/mastodon.yaml b/argocd/apps/mastodon.yaml
index 9831a03..43c55aa 100644
--- a/argocd/apps/mastodon.yaml
+++ b/argocd/apps/mastodon.yaml
@@ -32,7 +32,7 @@ spec:
 
             hooks:
               deploySearch:
-                enabled: false
+                enabled: true
 
             s3:
               enabled: true
@@ -50,7 +50,7 @@ spec:
                   memory: 256Mi
                 limits:
                   cpu: 500m
-                  memory: 512Mi
+                  memory: 1Gi
 
             sidekiq:
               workers:
@@ -111,7 +111,11 @@ spec:
             password: change-me
 
           elasticsearch:
-            enabled: false
+            enabled: true
+            hostname: shared-os.opensearch.svc.cluster.local
+            port: 9200
+            tls: false
+            preset: single_node_cluster
           ingress:
             enabled: true
             className: traefik
diff --git a/manifests/opensearch/cluster.yaml b/manifests/opensearch/cluster.yaml
index f35076e..93317ca 100644
--- a/manifests/opensearch/cluster.yaml
+++ b/manifests/opensearch/cluster.yaml
@@ -9,7 +9,7 @@ spec:
     serviceName: shared-os
     setVMMaxMapCount: true
     additionalConfig:
-      plugins.security.disabled: "true"
+      plugins.security.disabled: true
   nodePools:
     - component: nodes
       replicas: 3