Operator and custom resources
Define namespaces, Helm ownership, CRDs, admission webhooks, permissions, release compatibility, reconciliation scope, and GitOps controls.
Free Database Audit: Get a comprehensive health report for your database - no obligation, NDA protected
Learn MoreSchedule AuditIn short: OpenSearch on Kubernetes uses the OpenSearch Kubernetes Operator to reconcile clusters and Dashboards from custom resources. JusDB designs operator scope, node pools, storage, scheduling, TLS, security, plugins, snapshots, scaling, upgrades, recovery, observability, and GitOps ownership, then tests those choices against the workload, failure domains, and platform constraints.
The operator reduces repetitive lifecycle work but does not choose mappings, shards, workload limits, recovery objectives, or platform controls. The implementation uses the exact operator compatibility matrix and treats scaling, rolling changes, volume operations, and failure recovery as behaviors to validate—not assumed availability outcomes.
DBRE scope
The work is led as database reliability engineering. Traditional DBA responsibilities such as access, backups, schema, lifecycle, and maintenance are included when they affect reliability.
Define namespaces, Helm ownership, CRDs, admission webhooks, permissions, release compatibility, reconciliation scope, and GitOps controls.
Map cluster-manager, data, ingest, and coordinating roles to StatefulSets, resources, affinity, topology spread, taints, and disruption controls.
Select storage classes, PVC behavior, expansion, zone placement, snapshot repositories, restore tests, and capacity thresholds.
Review TLS, credentials, users, roles, keystore secrets, plugin compatibility, network policy, service exposure, and administrative access.
Test node-pool changes, shard movement, resource limits, JVM and native memory, disk watermarks, and query and ingest behavior during change.
Review operator and engine compatibility, plugins, snapshots, staged restarts, volume operations, monitoring, recovery, rollback, and on-call ownership.
Inventory Kubernetes, storage, networking, quotas, security, GitOps, failure domains, OpenSearch versions, plugins, data, load, and objectives.
Install controlled CRDs and operator scope, deploy representative node pools, and test TLS, storage, snapshots, scaling, upgrades, and disruption.
Promote reviewed resources, configure monitoring, rehearse recovery, document rollback, and transfer runbooks to platform and DBRE owners.
Deliverables document assumptions, decisions, test evidence, risk, ownership, and the conditions that would change the recommendation.
The OpenSearch Kubernetes Operator is an open-source operator that provisions and manages OpenSearch and OpenSearch Dashboards through custom resources. Its official documentation covers node pools, TLS, plugins, keystore secrets, persistence, lifecycle operations, users, roles, and snapshots. It automates reconciliation, while teams remain responsible for Kubernetes, capacity, recovery, and workload design.
The current operator documentation states that single-node clusters are not supported and requires at least three nodes with the master or cluster_manager role. That requirement must be checked against the exact operator release used. Production topology then adds data, ingest, or coordinating node pools based on workload, failure domains, and recovery objectives.
Node-pool replica counts can be changed declaratively, but safe scaling depends on shard placement, storage, JVM and native memory, disk watermarks, recovery bandwidth, failure capacity, and the operator version. A generic CPU or memory HPA does not understand every OpenSearch constraint. JusDB tests scaling and shard movement under representative workload before automating it.
The operator creates StatefulSets and supports node-pool storage configuration. We choose storage classes, volume size and expansion, topology, reclaim policy, throughput, and latency from workload and recovery evidence. PersistentVolumeClaims preserve data across ordinary pod replacement, but external snapshots and restore tests are still required for recoverability.
The operator supports lifecycle operations, but upgrade impact depends on the source and target versions, plugin compatibility, node pools, shard health, capacity, storage, disruption controls, and workload. We review release notes and compatibility, take and test snapshots, stage changes, observe each node pool, and define rollback or rebuild conditions before production rollout.
Review scope: Operator installation, OpenSearchCluster resources, node pools, TLS, storage, scheduling, security, plugins, snapshots, volume expansion, upgrades, recovery, and GitOps ownership. Recommendations and outcomes remain specific to the exact OpenSearch version, plugins, workload, topology, infrastructure, and engagement scope.
Technically reviewed by the JusDB Database Reliability Engineering team. Last reviewed: . See the team and roles.
Official operator quickstart, lifecycle scope, constraints, and production documentation routes.
Primary reference for node pools, StatefulSets, storage, TLS, plugins, and keystore configuration.
Official installation and upgrade entry point, including Helm and the Kubernetes operator.
Explore more ways our OpenSearch experts can help with your database infrastructure.
Share the current version, deployment model, workload symptoms, and desired outcome. A JusDB DBRE will help define the smallest useful assessment.
Contact the DBRE team