Free Database Audit

Learn More
Operator architecture and operations

Operate OpenSearch on Kubernetes with the project operator

In short: OpenSearch on Kubernetes uses the OpenSearch Kubernetes Operator to reconcile clusters and Dashboards from custom resources. JusDB designs operator scope, node pools, storage, scheduling, TLS, security, plugins, snapshots, scaling, upgrades, recovery, observability, and GitOps ownership, then tests those choices against the workload, failure domains, and platform constraints.

The operator reduces repetitive lifecycle work but does not choose mappings, shards, workload limits, recovery objectives, or platform controls. The implementation uses the exact operator compatibility matrix and treats scaling, rolling changes, volume operations, and failure recovery as behaviors to validate—not assumed availability outcomes.

DBRE scope

Operator and platform responsibilities designed together

The work is led as database reliability engineering. Traditional DBA responsibilities such as access, backups, schema, lifecycle, and maintenance are included when they affect reliability.

Operator and custom resources

Define namespaces, Helm ownership, CRDs, admission webhooks, permissions, release compatibility, reconciliation scope, and GitOps controls.

Node pools and scheduling

Map cluster-manager, data, ingest, and coordinating roles to StatefulSets, resources, affinity, topology spread, taints, and disruption controls.

Storage and recovery

Select storage classes, PVC behavior, expansion, zone placement, snapshot repositories, restore tests, and capacity thresholds.

Security and plugins

Review TLS, credentials, users, roles, keystore secrets, plugin compatibility, network policy, service exposure, and administrative access.

Scaling and performance

Test node-pool changes, shard movement, resource limits, JVM and native memory, disk watermarks, and query and ingest behavior during change.

Upgrades and incidents

Review operator and engine compatibility, plugins, snapshots, staged restarts, volume operations, monitoring, recovery, rollback, and on-call ownership.

Validate Kubernetes behavior before production ownership

  1. 01

    Platform and workload review

    Inventory Kubernetes, storage, networking, quotas, security, GitOps, failure domains, OpenSearch versions, plugins, data, load, and objectives.

  2. 02

    Staged operator validation

    Install controlled CRDs and operator scope, deploy representative node pools, and test TLS, storage, snapshots, scaling, upgrades, and disruption.

  3. 03

    Production handoff

    Promote reviewed resources, configure monitoring, rehearse recovery, document rollback, and transfer runbooks to platform and DBRE owners.

Evidence you can operate from

Deliverables document assumptions, decisions, test evidence, risk, ownership, and the conditions that would change the recommendation.

  • Operator scope, CRD, permission, and GitOps design
  • Node-pool, scheduling, storage, and topology resources
  • TLS, secret, plugin, user, role, and network review
  • Snapshot, restore, rescheduling, and failure-test evidence
  • Operator and OpenSearch upgrade runbooks
  • Capacity, alerting, incident, and responsibility matrix

OpenSearch on Kubernetes questions

What is the OpenSearch Kubernetes Operator?

The OpenSearch Kubernetes Operator is an open-source operator that provisions and manages OpenSearch and OpenSearch Dashboards through custom resources. Its official documentation covers node pools, TLS, plugins, keystore secrets, persistence, lifecycle operations, users, roles, and snapshots. It automates reconciliation, while teams remain responsible for Kubernetes, capacity, recovery, and workload design.

Does the operator support a single-node OpenSearch cluster?

The current operator documentation states that single-node clusters are not supported and requires at least three nodes with the master or cluster_manager role. That requirement must be checked against the exact operator release used. Production topology then adds data, ingest, or coordinating node pools based on workload, failure domains, and recovery objectives.

Can OpenSearch autoscale safely on Kubernetes?

Node-pool replica counts can be changed declaratively, but safe scaling depends on shard placement, storage, JVM and native memory, disk watermarks, recovery bandwidth, failure capacity, and the operator version. A generic CPU or memory HPA does not understand every OpenSearch constraint. JusDB tests scaling and shard movement under representative workload before automating it.

How should persistent storage be designed?

The operator creates StatefulSets and supports node-pool storage configuration. We choose storage classes, volume size and expansion, topology, reclaim policy, throughput, and latency from workload and recovery evidence. PersistentVolumeClaims preserve data across ordinary pod replacement, but external snapshots and restore tests are still required for recoverability.

Are OpenSearch Kubernetes upgrades non-disruptive?

The operator supports lifecycle operations, but upgrade impact depends on the source and target versions, plugin compatibility, node pools, shard health, capacity, storage, disruption controls, and workload. We review release notes and compatibility, take and test snapshots, stage changes, observe each node pool, and define rollback or rebuild conditions before production rollout.

Technical review and primary sources

OpenSearch Kubernetes guidance checked against operator documentation

Review scope: Operator installation, OpenSearchCluster resources, node pools, TLS, storage, scheduling, security, plugins, snapshots, volume expansion, upgrades, recovery, and GitOps ownership. Recommendations and outcomes remain specific to the exact OpenSearch version, plugins, workload, topology, infrastructure, and engagement scope.

Technically reviewed by the JusDB Database Reliability Engineering team. Last reviewed: . See the team and roles.

Related OpenSearch Services

Explore more ways our OpenSearch experts can help with your database infrastructure.

Turn the next decision into tested evidence

Share the current version, deployment model, workload symptoms, and desired outcome. A JusDB DBRE will help define the smallest useful assessment.

Contact the DBRE team