Configuring access to Object Storage from an OpenSearch cluster

Managed Service for OpenSearch supports using Yandex Object Storage as an OpenSearch snapshot repository. This allows you to use Object Storage to store backups. To learn more about snapshot repository, see the OpenSearch documentation.

To access Object Storage bucket data from a cluster:

1. Connect a service account to a cluster.
2. Configure access rights.
3. Connect a snapshot repository.

Connecting a service account to a clusterConnecting a service account to a cluster

1. When creating or updating a cluster, either select an existing service account or create a new one.

2. Make sure that this account has the role storage.editor.

Setting up access rightsSetting up access rights

Connecting a snapshot repositoryConnecting a snapshot repository

1. Install the repository-s3 plugin.

2. Connect to the cluster.

3. Register the bucket as a snapshot repository using the public OpenSearch API:

   PUT --cacert ~/.opensearch/root.crt https://admin:<password>@<OpenSearch_DATA_host_ID>.mdb.yandexcloud.net:9200/_snapshot/<repository_name>
   

   In the request parameters, specify the bucket associated with the cluster service account:

   curl --request PUT \
        "https://admin:<password>@<OpenSearch_DATA_host_ID>.mdb.yandexcloud.net:9200/_snapshot/<repository_name>" \
        --cacert ~/.opensearch/root.crt \
        --header "Content-Type: application/json" \
        --data '{
          "type": "s3",
          "settings": {
            "endpoint": "storage.yandexcloud.net",
            "bucket": "<bucket_name>"
          }
        }'