Ansible playbook

You can use an Ansible playbook to install and configure a production-ready OpenSearch cluster along with OpenSearch Dashboards.

The Ansible playbook only supports deployment of OpenSearch and OpenSearch Dashboards to CentOS7 hosts.

Prerequisites

Make sure you have Ansible and Java 8 installed.

Configuration

1. Clone the OpenSearch ansible-playbook repository:

   git clone https://github.com/opensearch-project/ansible-playbook

   copy

2. Configure the node properties in the inventories/opensearch/hosts file:

   ansible_host=<Public IP address> ansible_user=root ip=<Private IP address / 0.0.0.0>

   copy

   where:

   • ansible_host is the IP address of the target node that you want the Ansible playbook to install OpenSearch and OpenSearch DashBoards on.
   • ip is the IP address that you want OpenSearch and OpenSearch DashBoards to bind to. You can specify the private IP of the target node, or localhost, or 0.0.0.0.

3. You can modify the default configuration values in the inventories/opensearch/group_vars/all/all.yml file. For example, you can increase the Java memory heap size:

   xms_value: 8
   xmx_value: 8

   copy

Make sure you have direct SSH access into the root user of the target node.

Run OpenSearch and OpenSearch Dashboards using Ansible playbook

1. Run the Ansible playbook with root privileges:

   ansible-playbook -i inventories/opensearch/hosts opensearch.yml --extra-vars "admin_password=Test@123 kibanaserver_password=Test@6789 logstash_password=Test@456"

   copy

   You can set the passwords for reserved users (admin, kibanaserver, and logstash) using the admin_password, kibanaserver_password, and logstash_password variables.

2. After the deployment process is complete, you can access OpenSearch and OpenSearch Dashboards with the username admin and the password that you set for the admin_password variable.

   If you bind ip to a private IP or localhost, make sure you’re logged into the server that deployed the playbook to access OpenSearch and OpenSearch Dashboards:

   curl https://localhost:9200 -u 'admin:Test@123' --insecure

   copy

   If you bind ip to 0.0.0.0, then replace localhost with the public IP or the private IP (if it’s in the same network).