crds.yaml

---
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
  name: opensearchclusters.opensearch.stackable.tech
spec:
  group: opensearch.stackable.tech
  names:
    categories: []
    kind: OpenSearchCluster
    plural: opensearchclusters
    shortNames:
    - opensearch
    singular: opensearchcluster
  scope: Namespaced
  versions:
  - additionalPrinterColumns: []
    name: v1alpha1
    schema:
      openAPIV3Schema:
        description: Auto-generated derived type for OpenSearchClusterSpec via `CustomResource`
        properties:
          spec:
            description: |-
              An OpenSearch cluster stacklet. This resource is managed by the Stackable operator for
              OpenSearch. Find more information on how to use it and the resources that the operator
              generates in the [operator documentation](https://docs.stackable.tech/home/nightly/opensearch/).
            properties:
              clusterConfig:
                default:
                  keystore: []
                  security:
                    enabled: true
                    managingRoleGroup: security-config
                    settings:
                      actionGroups:
                        content:
                          value:
                            _meta:
                              config_version: 2
                              type: actiongroups
                        managedBy: API
                      allowList:
                        content:
                          value:
                            _meta:
                              config_version: 2
                              type: allowlist
                            config:
                              enabled: false
                        managedBy: API
                      audit:
                        content:
                          value:
                            _meta:
                              config_version: 2
                              type: audit
                            config:
                              enabled: false
                        managedBy: API
                      config:
                        content:
                          value:
                            _meta:
                              config_version: 2
                              type: config
                            config:
                              dynamic:
                                authc: {}
                                authz: {}
                                http: {}
                        managedBy: API
                      internalUsers:
                        content:
                          value:
                            _meta:
                              config_version: 2
                              type: internalusers
                        managedBy: API
                      nodesDn:
                        content:
                          value:
                            _meta:
                              config_version: 2
                              type: nodesdn
                        managedBy: API
                      roles:
                        content:
                          value:
                            _meta:
                              config_version: 2
                              type: roles
                        managedBy: API
                      rolesMapping:
                        content:
                          value:
                            _meta:
                              config_version: 2
                              type: rolesmapping
                        managedBy: API
                      tenants:
                        content:
                          value:
                            _meta:
                              config_version: 2
                              type: tenants
                        managedBy: API
                  tls:
                    internalSecretClass: tls
                    serverSecretClass: tls
                description: Configuration that applies to all roles and role groups
                properties:
                  keystore:
                    default: []
                    description: Entries to add to the OpenSearch keystore.
                    items:
                      properties:
                        key:
                          description: Key in the OpenSearch keystore
                          minLength: 1
                          pattern: ^[A-Za-z0-9_\-.]+$
                          type: string
                        secretKeyRef:
                          description: Reference to the Secret containing the value which will be stored in the OpenSearch keystore
                          properties:
                            key:
                              description: Key in the Secret that contains the value
                              maxLength: 253
                              minLength: 1
                              pattern: ^[-._a-zA-Z0-9]+$
                              type: string
                            name:
                              description: Name of the Secret
                              maxLength: 253
                              minLength: 1
                              pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
                              type: string
                          required:
                          - key
                          - name
                          type: object
                      required:
                      - key
                      - secretKeyRef
                      type: object
                    type: array
                  security:
                    default:
                      enabled: true
                      managingRoleGroup: security-config
                      settings:
                        actionGroups:
                          content:
                            value:
                              _meta:
                                config_version: 2
                                type: actiongroups
                          managedBy: API
                        allowList:
                          content:
                            value:
                              _meta:
                                config_version: 2
                                type: allowlist
                              config:
                                enabled: false
                          managedBy: API
                        audit:
                          content:
                            value:
                              _meta:
                                config_version: 2
                                type: audit
                              config:
                                enabled: false
                          managedBy: API
                        config:
                          content:
                            value:
                              _meta:
                                config_version: 2
                                type: config
                              config:
                                dynamic:
                                  authc: {}
                                  authz: {}
                                  http: {}
                          managedBy: API
                        internalUsers:
                          content:
                            value:
                              _meta:
                                config_version: 2
                                type: internalusers
                          managedBy: API
                        nodesDn:
                          content:
                            value:
                              _meta:
                                config_version: 2
                                type: nodesdn
                          managedBy: API
                        roles:
                          content:
                            value:
                              _meta:
                                config_version: 2
                                type: roles
                          managedBy: API
                        rolesMapping:
                          content:
                            value:
                              _meta:
                                config_version: 2
                                type: rolesmapping
                          managedBy: API
                        tenants:
                          content:
                            value:
                              _meta:
                                config_version: 2
                                type: tenants
                          managedBy: API
                    description: Configuration of the OpenSearch security plugin
                    properties:
                      enabled:
                        default: true
                        description: |-
                          Whether to enable the OpenSearch security plugin

                          Disabling the security plugin also disables TLS and exposes the security index if it
                          exists.
                        type: boolean
                      managingRoleGroup:
                        default: security-config
                        description: The role group that updates the security index if any setting is managed by the operator.
                        maxLength: 16
                        minLength: 1
                        type: string
                      settings:
                        default:
                          actionGroups:
                            content:
                              value:
                                _meta:
                                  config_version: 2
                                  type: actiongroups
                            managedBy: API
                          allowList:
                            content:
                              value:
                                _meta:
                                  config_version: 2
                                  type: allowlist
                                config:
                                  enabled: false
                            managedBy: API
                          audit:
                            content:
                              value:
                                _meta:
                                  config_version: 2
                                  type: audit
                                config:
                                  enabled: false
                            managedBy: API
                          config:
                            content:
                              value:
                                _meta:
                                  config_version: 2
                                  type: config
                                config:
                                  dynamic:
                                    authc: {}
                                    authz: {}
                                    http: {}
                            managedBy: API
                          internalUsers:
                            content:
                              value:
                                _meta:
                                  config_version: 2
                                  type: internalusers
                            managedBy: API
                          nodesDn:
                            content:
                              value:
                                _meta:
                                  config_version: 2
                                  type: nodesdn
                            managedBy: API
                          roles:
                            content:
                              value:
                                _meta:
                                  config_version: 2
                                  type: roles
                            managedBy: API
                          rolesMapping:
                            content:
                              value:
                                _meta:
                                  config_version: 2
                                  type: rolesmapping
                            managedBy: API
                          tenants:
                            content:
                              value:
                                _meta:
                                  config_version: 2
                                  type: tenants
                            managedBy: API
                        description: Settings for the OpenSearch security plugin
                        properties:
                          actionGroups:
                            default:
                              content:
                                value:
                                  _meta:
                                    config_version: 2
                                    type: actiongroups
                              managedBy: API
                            description: |-
                              User-defined action groups

                              see <https://docs.opensearch.org/latest/security/configuration/yaml/#action_groupsyml>
                            properties:
                              content:
                                description: The content of the security configuration file
                                oneOf:
                                - required:
                                  - value
                                - required:
                                  - valueFrom
                                properties:
                                  value:
                                    description: Security configuration file content defined inline
                                    type: object
                                    x-kubernetes-preserve-unknown-fields: true
                                  valueFrom:
                                    description: Security configuration file content ingested from a ConfigMap or Secret
                                    oneOf:
                                    - required:
                                      - configMapKeyRef
                                    - required:
                                      - secretKeyRef
                                    properties:
                                      configMapKeyRef:
                                        description: Reference to a key in a ConfigMap
                                        properties:
                                          key:
                                            description: Key in the ConfigMap that contains the value
                                            maxLength: 253
                                            minLength: 1
                                            pattern: ^[-._a-zA-Z0-9]+$
                                            type: string
                                          name:
                                            description: Name of the ConfigMap
                                            maxLength: 253
                                            minLength: 1
                                            pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
                                            type: string
                                        required:
                                        - key
                                        - name
                                        type: object
                                      secretKeyRef:
                                        description: Reference to a key in a Secret
                                        properties:
                                          key:
                                            description: Key in the Secret that contains the value
                                            maxLength: 253
                                            minLength: 1
                                            pattern: ^[-._a-zA-Z0-9]+$
                                            type: string
                                          name:
                                            description: Name of the Secret
                                            maxLength: 253
                                            minLength: 1
                                            pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
                                            type: string
                                        required:
                                        - key
                                        - name
                                        type: object
                                    type: object
                                type: object
                              managedBy:
                                description: |-
                                  Whether this configuration should only be applied initially and afterwards be managed
                                  via the "API", or managed all the time by the "operator".

                                  If this configuration is changed later from "API" to "operator", then the changes made
                                  via the API are overridden.
                                enum:
                                - API
                                - operator
                                type: string
                            required:
                            - content
                            - managedBy
                            type: object
                          allowList:
                            default:
                              content:
                                value:
                                  _meta:
                                    config_version: 2
                                    type: allowlist
                                  config:
                                    enabled: false
                              managedBy: API
                            description: |-
                              List of allowed HTTP endpoints

                              see <https://docs.opensearch.org/latest/security/configuration/yaml/#allowlistyml>
                            properties:
                              content:
                                description: The content of the security configuration file
                                oneOf:
                                - required:
                                  - value
                                - required:
                                  - valueFrom
                                properties:
                                  value:
                                    description: Security configuration file content defined inline
                                    type: object
                                    x-kubernetes-preserve-unknown-fields: true
                                  valueFrom:
                                    description: Security configuration file content ingested from a ConfigMap or Secret
                                    oneOf:
                                    - required:
                                      - configMapKeyRef
                                    - required:
                                      - secretKeyRef
                                    properties:
                                      configMapKeyRef:
                                        description: Reference to a key in a ConfigMap
                                        properties:
                                          key:
                                            description: Key in the ConfigMap that contains the value
                                            maxLength: 253
                                            minLength: 1
                                            pattern: ^[-._a-zA-Z0-9]+$
                                            type: string
                                          name:
                                            description: Name of the ConfigMap
                                            maxLength: 253
                                            minLength: 1
                                            pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
                                            type: string
                                        required:
                                        - key
                                        - name
                                        type: object
                                      secretKeyRef:
                                        description: Reference to a key in a Secret
                                        properties:
                                          key:
                                            description: Key in the Secret that contains the value
                                            maxLength: 253
                                            minLength: 1
                                            pattern: ^[-._a-zA-Z0-9]+$
                                            type: string
                                          name:
                                            description: Name of the Secret
                                            maxLength: 253
                                            minLength: 1
                                            pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
                                            type: string
                                        required:
                                        - key
                                        - name
                                        type: object
                                    type: object
                                type: object
                              managedBy:
                                description: |-
                                  Whether this configuration should only be applied initially and afterwards be managed
                                  via the "API", or managed all the time by the "operator".

                                  If this configuration is changed later from "API" to "operator", then the changes made
                                  via the API are overridden.
                                enum:
                                - API
                                - operator
                                type: string
                            required:
                            - content
                            - managedBy
                            type: object
                          audit:
                            default:
                              content:
                                value:
                                  _meta:
                                    config_version: 2
                                    type: audit
                                  config:
                                    enabled: false
                              managedBy: API
                            description: |-
                              Settings for audit logging

                              see
                              <https://docs.opensearch.org/latest/security/audit-logs/index/#settings-in-audityml>
                            properties:
                              content:
                                description: The content of the security configuration file
                                oneOf:
                                - required:
                                  - value
                                - required:
                                  - valueFrom
                                properties:
                                  value:
                                    description: Security configuration file content defined inline
                                    type: object
                                    x-kubernetes-preserve-unknown-fields: true
                                  valueFrom:
                                    description: Security configuration file content ingested from a ConfigMap or Secret
                                    oneOf:
                                    - required:
                                      - configMapKeyRef
                                    - required:
                                      - secretKeyRef
                                    properties:
                                      configMapKeyRef:
                                        description: Reference to a key in a ConfigMap
                                        properties:
                                          key:
                                            description: Key in the ConfigMap that contains the value
                                            maxLength: 253
                                            minLength: 1
                                            pattern: ^[-._a-zA-Z0-9]+$
                                            type: string
                                          name:
                                            description: Name of the ConfigMap
                                            maxLength: 253
                                            minLength: 1
                                            pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
                                            type: string
                                        required:
                                        - key
                                        - name
                                        type: object
                                      secretKeyRef:
                                        description: Reference to a key in a Secret
                                        properties:
                                          key:
                                            description: Key in the Secret that contains the value
                                            maxLength: 253
                                            minLength: 1
                                            pattern: ^[-._a-zA-Z0-9]+$
                                            type: string
                                          name:
                                            description: Name of the Secret
                                            maxLength: 253
                                            minLength: 1
                                            pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
                                            type: string
                                        required:
                                        - key
                                        - name
                                        type: object
                                    type: object
                                type: object
                              managedBy:
                                description: |-
                                  Whether this configuration should only be applied initially and afterwards be managed
                                  via the "API", or managed all the time by the "operator".

                                  If this configuration is changed later from "API" to "operator", then the changes made
                                  via the API are overridden.
                                enum:
                                - API
                                - operator
                                type: string
                            required:
                            - content
                            - managedBy
                            type: object
                          config:
                            default:
                              content:
                                value:
                                  _meta:
                                    config_version: 2
                                    type: config
                                  config:
                                    dynamic:
                                      authc: {}
                                      authz: {}
                                      http: {}
                              managedBy: API
                            description: |-
                              Configuration of the security backend

                              see <https://docs.opensearch.org/latest/security/configuration/configuration/>
                            properties:
                              content:
                                description: The content of the security configuration file
                                oneOf:
                                - required:
                                  - value
                                - required:
                                  - valueFrom
                                properties:
                                  value:
                                    description: Security configuration file content defined inline
                                    type: object
                                    x-kubernetes-preserve-unknown-fields: true
                                  valueFrom:
                                    description: Security configuration file content ingested from a ConfigMap or Secret
                                    oneOf:
                                    - required:
                                      - configMapKeyRef
                                    - required:
                                      - secretKeyRef
                                    properties:
                                      configMapKeyRef:
                                        description: Reference to a key in a ConfigMap
                                        properties:
                                          key:
                                            description: Key in the ConfigMap that contains the value
                                            maxLength: 253
                                            minLength: 1
                                            pattern: ^[-._a-zA-Z0-9]+$
                                            type: string
                                          name:
                                            description: Name of the ConfigMap
                                            maxLength: 253
                                            minLength: 1
                                            pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
                                            type: string
                                        required:
                                        - key
                                        - name
                                        type: object
                                      secretKeyRef:
                                        description: Reference to a key in a Secret
                                        properties:
                                          key:
                                            description: Key in the Secret that contains the value
                                            maxLength: 253
                                            minLength: 1
                                            pattern: ^[-._a-zA-Z0-9]+$
                                            type: string
                                          name:
                                            description: Name of the Secret
                                            maxLength: 253
                                            minLength: 1
                                            pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
                                            type: string
                                        required:
                                        - key
                                        - name
                                        type: object
                                    type: object
                                type: object
                              managedBy:
                                description: |-
                                  Whether this configuration should only be applied initially and afterwards be managed
                                  via the "API", or managed all the time by the "operator".

                                  If this configuration is changed later from "API" to "operator", then the changes made
                                  via the API are overridden.
                                enum:
                                - API
                                - operator
                                type: string
                            required:
                            - content
                            - managedBy
                            type: object
                          internalUsers:
                            default:
                              content:
                                value:
                                  _meta:
                                    config_version: 2
                                    type: internalusers
                              managedBy: API
                            description: |-
                              The internal user database

                              see <https://docs.opensearch.org/latest/security/configuration/yaml/#internal_usersyml>
                            properties:
                              content:
                                description: The content of the security configuration file
                                oneOf:
                                - required:
                                  - value
                                - required:
                                  - valueFrom
                                properties:
                                  value:
                                    description: Security configuration file content defined inline
                                    type: object
                                    x-kubernetes-preserve-unknown-fields: true
                                  valueFrom:
                                    description: Security configuration file content ingested from a ConfigMap or Secret
                                    oneOf:
                                    - required:
                                      - configMapKeyRef
                                    - required:
                                      - secretKeyRef
                                    properties:
                                      configMapKeyRef:
                                        description: Reference to a key in a ConfigMap
                                        properties:
                                          key:
                                            description: Key in the ConfigMap that contains the value
                                            maxLength: 253
                                            minLength: 1
                                            pattern: ^[-._a-zA-Z0-9]+$
                                            type: string
                                          name:
                                            description: Name of the ConfigMap
                                            maxLength: 253
                                            minLength: 1
                                            pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
                                            type: string
                                        required:
                                        - key
                                        - name
                                        type: object
                                      secretKeyRef:
                                        description: Reference to a key in a Secret
                                        properties:
                                          key:
                                            description: Key in the Secret that contains the value
                                            maxLength: 253
                                            minLength: 1
                                            pattern: ^[-._a-zA-Z0-9]+$
                                            type: string
                                          name:
                                            description: Name of the Secret
                                            maxLength: 253
                                            minLength: 1
                                            pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
                                            type: string
                                        required:
                                        - key
                                        - name
                                        type: object
                                    type: object
                                type: object
                              managedBy:
                                description: |-
                                  Whether this configuration should only be applied initially and afterwards be managed
                                  via the "API", or managed all the time by the "operator".

                                  If this configuration is changed later from "API" to "operator", then the changes made
                                  via the API are overridden.
                                enum:
                                - API
                                - operator
                                type: string
                            required:
                            - content
                            - managedBy
                            type: object
                          nodesDn:
                            default:
                              content:
                                value:
                                  _meta:
                                    config_version: 2
                                    type: nodesdn
                              managedBy: API
                            description: |-
                              Distinguished names (DNs) of nodes to allow communication between nodes and clusters

                              see <https://docs.opensearch.org/latest/security/configuration/yaml/#nodes_dnyml>
                            properties:
                              content:
                                description: The content of the security configuration file
                                oneOf:
                                - required:
                                  - value
                                - required:
                                  - valueFrom
                                properties:
                                  value:
                                    description: Security configuration file content defined inline
                                    type: object
                                    x-kubernetes-preserve-unknown-fields: true
                                  valueFrom:
                                    description: Security configuration file content ingested from a ConfigMap or Secret
                                    oneOf:
                                    - required:
                                      - configMapKeyRef
                                    - required:
                                      - secretKeyRef
                                    properties:
                                      configMapKeyRef:
                                        description: Reference to a key in a ConfigMap
                                        properties:
                                          key:
                                            description: Key in the ConfigMap that contains the value
                                            maxLength: 253
                                            minLength: 1
                                            pattern: ^[-._a-zA-Z0-9]+$
                                            type: string
                                          name:
                                            description: Name of the ConfigMap
                                            maxLength: 253
                                            minLength: 1
                                            pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
                                            type: string
                                        required:
                                        - key
                                        - name
                                        type: object
                                      secretKeyRef:
                                        description: Reference to a key in a Secret
                                        properties:
                                          key:
                                            description: Key in the Secret that contains the value
                                            maxLength: 253
                                            minLength: 1
                                            pattern: ^[-._a-zA-Z0-9]+$
                                            type: string
                                          name:
                                            description: Name of the Secret
                                            maxLength: 253
                                            minLength: 1
                                            pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
                                            type: string
                                        required:
                                        - key
                                        - name
                                        type: object
                                    type: object
                                type: object
                              managedBy:
                                description: |-
                                  Whether this configuration should only be applied initially and afterwards be managed
                                  via the "API", or managed all the time by the "operator".

                                  If this configuration is changed later from "API" to "operator", then the changes made
                                  via the API are overridden.
                                enum:
                                - API
                                - operator
                                type: string
                            required:
                            - content
                            - managedBy
                            type: object
                          roles:
                            default:
                              content:
                                value:
                                  _meta:
                                    config_version: 2
                                    type: roles
                              managedBy: API
                            description: |-
                              Definition of roles in the security plugin

                              see <https://docs.opensearch.org/latest/security/configuration/yaml/#rolesyml>
                            properties:
                              content:
                                description: The content of the security configuration file
                                oneOf:
                                - required:
                                  - value
                                - required:
                                  - valueFrom
                                properties:
                                  value:
                                    description: Security configuration file content defined inline
                                    type: object
                                    x-kubernetes-preserve-unknown-fields: true
                                  valueFrom:
                                    description: Security configuration file content ingested from a ConfigMap or Secret
                                    oneOf:
                                    - required:
                                      - configMapKeyRef
                                    - required:
                                      - secretKeyRef
                                    properties:
                                      configMapKeyRef:
                                        description: Reference to a key in a ConfigMap
                                        properties:
                                          key:
                                            description: Key in the ConfigMap that contains the value
                                            maxLength: 253
                                            minLength: 1
                                            pattern: ^[-._a-zA-Z0-9]+$
                                            type: string
                                          name:
                                            description: Name of the ConfigMap
                                            maxLength: 253
                                            minLength: 1
                                            pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
                                            type: string
                                        required:
                                        - key
                                        - name
                                        type: object
                                      secretKeyRef:
                                        description: Reference to a key in a Secret
                                        properties:
                                          key:
                                            description: Key in the Secret that contains the value
                                            maxLength: 253
                                            minLength: 1
                                            pattern: ^[-._a-zA-Z0-9]+$
                                            type: string
                                          name:
                                            description: Name of the Secret
                                            maxLength: 253
                                            minLength: 1
                                            pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
                                            type: string
                                        required:
                                        - key
                                        - name
                                        type: object
                                    type: object
                                type: object
                              managedBy:
                                description: |-
                                  Whether this configuration should only be applied initially and afterwards be managed
                                  via the "API", or managed all the time by the "operator".

                                  If this configuration is changed later from "API" to "operator", then the changes made
                                  via the API are overridden.
                                enum:
                                - API
                                - operator
                                type: string
                            required:
                            - content
                            - managedBy
                            type: object
                          rolesMapping:
                            default:
                              content:
                                value:
                                  _meta:
                                    config_version: 2
                                    type: rolesmapping
                              managedBy: API
                            description: |-
                              Role mappings to users or backend roles

                              see <https://docs.opensearch.org/latest/security/configuration/yaml/#roles_mappingyml>
                            properties:
                              content:
                                description: The content of the security configuration file
                                oneOf:
                                - required:
                                  - value
                                - required:
                                  - valueFrom
                                properties:
                                  value:
                                    description: Security configuration file content defined inline
                                    type: object
                                    x-kubernetes-preserve-unknown-fields: true
                                  valueFrom:
                                    description: Security configuration file content ingested from a ConfigMap or Secret
                                    oneOf:
                                    - required:
                                      - configMapKeyRef
                                    - required:
                                      - secretKeyRef
                                    properties:
                                      configMapKeyRef:
                                        description: Reference to a key in a ConfigMap
                                        properties:
                                          key:
                                            description: Key in the ConfigMap that contains the value
                                            maxLength: 253
                                            minLength: 1
                                            pattern: ^[-._a-zA-Z0-9]+$
                                            type: string
                                          name:
                                            description: Name of the ConfigMap
                                            maxLength: 253
                                            minLength: 1
                                            pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
                                            type: string
                                        required:
                                        - key
                                        - name
                                        type: object
                                      secretKeyRef:
                                        description: Reference to a key in a Secret
                                        properties:
                                          key:
                                            description: Key in the Secret that contains the value
                                            maxLength: 253
                                            minLength: 1
                                            pattern: ^[-._a-zA-Z0-9]+$
                                            type: string
                                          name:
                                            description: Name of the Secret
                                            maxLength: 253
                                            minLength: 1
                                            pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
                                            type: string
                                        required:
                                        - key
                                        - name
                                        type: object
                                    type: object
                                type: object
                              managedBy:
                                description: |-
                                  Whether this configuration should only be applied initially and afterwards be managed
                                  via the "API", or managed all the time by the "operator".

                                  If this configuration is changed later from "API" to "operator", then the changes made
                                  via the API are overridden.
                                enum:
                                - API
                                - operator
                                type: string
                            required:
                            - content
                            - managedBy
                            type: object
                          tenants:
                            default:
                              content:
                                value:
                                  _meta:
                                    config_version: 2
                                    type: tenants
                              managedBy: API
                            description: |-
                              OpenSearch Dashboards tenants

                              see <https://docs.opensearch.org/latest/security/configuration/yaml/#tenantsyml>
                            properties:
                              content:
                                description: The content of the security configuration file
                                oneOf:
                                - required:
                                  - value
                                - required:
                                  - valueFrom
                                properties:
                                  value:
                                    description: Security configuration file content defined inline
                                    type: object
                                    x-kubernetes-preserve-unknown-fields: true
                                  valueFrom:
                                    description: Security configuration file content ingested from a ConfigMap or Secret
                                    oneOf:
                                    - required:
                                      - configMapKeyRef
                                    - required:
                                      - secretKeyRef
                                    properties:
                                      configMapKeyRef:
                                        description: Reference to a key in a ConfigMap
                                        properties:
                                          key:
                                            description: Key in the ConfigMap that contains the value
                                            maxLength: 253
                                            minLength: 1
                                            pattern: ^[-._a-zA-Z0-9]+$
                                            type: string
                                          name:
                                            description: Name of the ConfigMap
                                            maxLength: 253
                                            minLength: 1
                                            pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
                                            type: string
                                        required:
                                        - key
                                        - name
                                        type: object
                                      secretKeyRef:
                                        description: Reference to a key in a Secret
                                        properties:
                                          key:
                                            description: Key in the Secret that contains the value
                                            maxLength: 253
                                            minLength: 1
                                            pattern: ^[-._a-zA-Z0-9]+$
                                            type: string
                                          name:
                                            description: Name of the Secret
                                            maxLength: 253
                                            minLength: 1
                                            pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
                                            type: string
                                        required:
                                        - key
                                        - name
                                        type: object
                                    type: object
                                type: object
                              managedBy:
                                description: |-
                                  Whether this configuration should only be applied initially and afterwards be managed
                                  via the "API", or managed all the time by the "operator".

                                  If this configuration is changed later from "API" to "operator", then the changes made
                                  via the API are overridden.
                                enum:
                                - API
                                - operator
                                type: string
                            required:
                            - content
                            - managedBy
                            type: object
                        type: object
                    type: object
                  tls:
                    default:
                      internalSecretClass: tls
                      serverSecretClass: tls
                    description: |-
                      TLS configuration options for the server (REST API) and internal communication (transport).

                      This configuration is only effective if the OpenSearch security plugin is not disabled.
                    properties:
                      internalSecretClass:
                        default: tls
                        description: |-
                          Only affects internal communication (transport). Used for mutual verification between OpenSearch nodes.
                          This setting controls:
                          - Which cert the servers should use to authenticate themselves against other servers
                          - Which ca.crt to use when validating the other server
                        maxLength: 253
                        minLength: 1
                        pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
                        type: string
                      serverSecretClass:
                        default: tls
                        description: |-
                          Only affects client connections to the REST API.
                          This setting controls:
                          - If TLS encryption is used at all
                          - Which cert the servers should use to authenticate themselves against the client
                        maxLength: 253
                        minLength: 1
                        nullable: true
                        pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
                        type: string
                    type: object
                  vectorAggregatorConfigMapName:
                    description: |-
                      Name of the Vector aggregator [discovery ConfigMap](https://docs.stackable.tech/home/nightly/concepts/service_discovery).
                      It must contain the key `ADDRESS` with the address of the Vector aggregator.
                      Follow the [logging tutorial](https://docs.stackable.tech/home/nightly/tutorials/logging-vector-aggregator)
                      to learn how to configure log aggregation with Vector.
                    maxLength: 253
                    minLength: 1
                    nullable: true
                    pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
                    type: string
                type: object
              clusterOperation:
                default:
                  reconciliationPaused: false
                  stopped: false
                description: |-
                  [Cluster operations](https://docs.stackable.tech/home/nightly/concepts/operations/cluster_operations)
                  properties, allow stopping the product instance as well as pausing reconciliation.
                properties:
                  reconciliationPaused:
                    default: false
                    description: |-
                      Flag to stop cluster reconciliation by the operator. This means that all changes in the
                      custom resource spec are ignored until this flag is set to false or removed. The operator
                      will however still watch the deployed resources at the time and update the custom resource
                      status field.
                      If applied at the same time with `stopped`, `reconciliationPaused` will take precedence over
                      `stopped` and stop the reconciliation immediately.
                    type: boolean
                  stopped:
                    default: false
                    description: |-
                      Flag to stop the cluster. This means all deployed resources (e.g. Services, StatefulSets,
                      ConfigMaps) are kept but all deployed Pods (e.g. replicas from a StatefulSet) are scaled to 0
                      and therefore stopped and removed.
                      If applied at the same time with `reconciliationPaused`, the latter will pause reconciliation
                      and `stopped` will take no effect until `reconciliationPaused` is set to false or removed.
                    type: boolean
                type: object
              image:
                anyOf:
                - required:
                  - custom
                  - productVersion
                - required:
                  - productVersion
                description: |-
                  Specify which image to use, the easiest way is to only configure the `productVersion`.
                  You can also configure a custom image registry to pull from, as well as completely custom
                  images.

                  Consult the [Product image selection documentation](https://docs.stackable.tech/home/nightly/concepts/product_image_selection)
                  for details.
                properties:
                  custom:
                    description: |-
                      Provide a custom container image.

                      Specify the full container image name, e.g. `oci.example.tech/namespace/superset:1.4.1-my-tag`
                    type: string
                  productVersion:
                    description: Version of the product, e.g. `1.4.1`.
                    type: string
                  pullPolicy:
                    default: Always
                    description: '[Pull policy](https://kubernetes.io/docs/concepts/containers/images/#image-pull-policy) used when pulling the image.'
                    enum:
                    - IfNotPresent
                    - Always
                    - Never
                    type: string
                  pullSecrets:
                    description: '[Image pull secrets](https://kubernetes.io/docs/concepts/containers/images/#specifying-imagepullsecrets-on-a-pod) to pull images from a private registry.'
                    items:
                      description: LocalObjectReference contains enough information to let you locate the referenced object inside the same namespace.
                      properties:
                        name:
                          description: 'Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
                          type: string
                      required:
                      - name
                      type: object
                    nullable: true
                    type: array
                  repo:
                    description: |-
                      The repository on the container image registry where the container image is located, e.g.
                      `oci.example.com/namespace`.

                      If not specified, the operator will use the image registry provided via the operator
                      environment options.
                    nullable: true
                    type: string
                  stackableVersion:
                    description: |-
                      Stackable version of the product, e.g. `23.4`, `23.4.1` or `0.0.0-dev`.

                      If not specified, the operator will use its own version, e.g. `23.4.1`. When using a nightly
                      operator or a PR version, it will use the nightly `0.0.0-dev` image.
                    nullable: true
                    type: string
                type: object
              nodes:
                description: |-
                  This struct represents a role - e.g. HDFS datanodes or Trino workers. It has a key-value-map containing
                  all the roleGroups that are part of this role. Additionally, there is a `config`, which is configurable
                  at the role *and* roleGroup level. Everything at roleGroup level is merged on top of what is configured
                  on role level. There is also a second form of config, which can only be configured
                  at role level, the `roleConfig`.
                  You can learn more about this in the
                  [Roles and role group concept documentation](https://docs.stackable.tech/home/nightly/concepts/roles-and-role-groups).
                properties:
                  cliOverrides:
                    additionalProperties:
                      type: string
                    default: {}
                    type: object
                  config:
                    default: {}
                    properties:
                      affinity:
                        default:
                          nodeAffinity: null
                          nodeSelector: null
                          podAffinity: null
                          podAntiAffinity: null
                        description: |-
                          These configuration settings control
                          [Pod placement](https://docs.stackable.tech/home/nightly/concepts/operations/pod_placement).
                        properties:
                          nodeAffinity:
                            description: Same as the `spec.affinity.nodeAffinity` field on the Pod, see the [Kubernetes docs](https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node)
                            nullable: true
                            type: object
                            x-kubernetes-preserve-unknown-fields: true
                          nodeSelector:
                            additionalProperties:
                              type: string
                            description: Simple key-value pairs forming a nodeSelector, see the [Kubernetes docs](https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node)
                            nullable: true
                            type: object
                          podAffinity:
                            description: Same as the `spec.affinity.podAffinity` field on the Pod, see the [Kubernetes docs](https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node)
                            nullable: true
                            type: object
                            x-kubernetes-preserve-unknown-fields: true
                          podAntiAffinity:
                            description: Same as the `spec.affinity.podAntiAffinity` field on the Pod, see the [Kubernetes docs](https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node)
                            nullable: true
                            type: object
                            x-kubernetes-preserve-unknown-fields: true
                        type: object
                      discoveryServiceExposed:
                        description: Determines whether this role group is exposed in the discovery service.
                        nullable: true
                        type: boolean
                      gracefulShutdownTimeout:
                        description: |-
                          Time period Pods have to gracefully shut down, e.g. `30m`, `1h` or `2d`. Consult the
                          operator documentation for details.
                        nullable: true
                        type: string
                      listenerClass:
                        description: |-
                          This field controls which
                          [ListenerClass](https://docs.stackable.tech/home/nightly/listener-operator/listenerclass.html)
                          is used to expose the HTTP communication.
                        maxLength: 253
                        minLength: 1
                        nullable: true
                        pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
                        type: string
                      logging:
                        default:
                          containers: {}
                          enableVectorAgent: null
                        description: Logging configuration, learn more in the [logging concept documentation](https://docs.stackable.tech/home/nightly/concepts/logging).
                        properties:
                          containers:
                            description: Log configuration per container.
                            properties:
                              create-admin-certificate:
                                anyOf:
                                - required:
                                  - custom
                                - {}
                                - {}
                                description: Log configuration of the container
                                properties:
                                  console:
                                    description: Configuration for the console appender
                                    nullable: true
                                    properties:
                                      level:
                                        description: |-
                                          The log level threshold.
                                          Log events with a lower log level are discarded.
                                        enum:
                                        - TRACE
                                        - DEBUG
                                        - INFO
                                        - WARN
                                        - ERROR
                                        - FATAL
                                        - NONE
                                        - null
                                        nullable: true
                                        type: string
                                    type: object
                                  custom:
                                    description: Log configuration provided in a ConfigMap
                                    properties:
                                      configMap:
                                        description: ConfigMap containing the log configuration files
                                        nullable: true
                                        type: string
                                    type: object
                                  file:
                                    description: Configuration for the file appender
                                    nullable: true
                                    properties:
                                      level:
                                        description: |-
                                          The log level threshold.
                                          Log events with a lower log level are discarded.
                                        enum:
                                        - TRACE
                                        - DEBUG
                                        - INFO
                                        - WARN
                                        - ERROR
                                        - FATAL
                                        - NONE
                                        - null
                                        nullable: true
                                        type: string
                                    type: object
                                  loggers:
                                    additionalProperties:
                                      description: Configuration of a logger
                                      properties:
                                        level:
                                          description: |-
                                            The log level threshold.
                                            Log events with a lower log level are discarded.
                                          enum:
                                          - TRACE
                                          - DEBUG
                                          - INFO
                                          - WARN
                                          - ERROR
                                          - FATAL
                                          - NONE
                                          - null
                                          nullable: true
                                          type: string
                                      type: object
                                    default: {}
                                    description: Configuration per logger
                                    type: object
                                type: object
                              init-keystore:
                                anyOf:
                                - required:
                                  - custom
                                - {}
                                - {}
                                description: Log configuration of the container
                                properties:
                                  console:
                                    description: Configuration for the console appender
                                    nullable: true
                                    properties:
                                      level:
                                        description: |-
                                          The log level threshold.
                                          Log events with a lower log level are discarded.
                                        enum:
                                        - TRACE
                                        - DEBUG
                                        - INFO
                                        - WARN
                                        - ERROR
                                        - FATAL
                                        - NONE
                                        - null
                                        nullable: true
                                        type: string
                                    type: object
                                  custom:
                                    description: Log configuration provided in a ConfigMap
                                    properties:
                                      configMap:
                                        description: ConfigMap containing the log configuration files
                                        nullable: true
                                        type: string
                                    type: object
                                  file:
                                    description: Configuration for the file appender
                                    nullable: true
                                    properties:
                                      level:
                                        description: |-
                                          The log level threshold.
                                          Log events with a lower log level are discarded.
                                        enum:
                                        - TRACE
                                        - DEBUG
                                        - INFO
                                        - WARN
                                        - ERROR
                                        - FATAL
                                        - NONE
                                        - null
                                        nullable: true
                                        type: string
                                    type: object
                                  loggers:
                                    additionalProperties:
                                      description: Configuration of a logger
                                      properties:
                                        level:
                                          description: |-
                                            The log level threshold.
                                            Log events with a lower log level are discarded.
                                          enum:
                                          - TRACE
                                          - DEBUG
                                          - INFO
                                          - WARN
                                          - ERROR
                                          - FATAL
                                          - NONE
                                          - null
                                          nullable: true
                                          type: string
                                      type: object
                                    default: {}
                                    description: Configuration per logger
                                    type: object
                                type: object
                              opensearch:
                                anyOf:
                                - required:
                                  - custom
                                - {}
                                - {}
                                description: Log configuration of the container
                                properties:
                                  console:
                                    description: Configuration for the console appender
                                    nullable: true
                                    properties:
                                      level:
                                        description: |-
                                          The log level threshold.
                                          Log events with a lower log level are discarded.
                                        enum:
                                        - TRACE
                                        - DEBUG
                                        - INFO
                                        - WARN
                                        - ERROR
                                        - FATAL
                                        - NONE
                                        - null
                                        nullable: true
                                        type: string
                                    type: object
                                  custom:
                                    description: Log configuration provided in a ConfigMap
                                    properties:
                                      configMap:
                                        description: ConfigMap containing the log configuration files
                                        nullable: true
                                        type: string
                                    type: object
                                  file:
                                    description: Configuration for the file appender
                                    nullable: true
                                    properties:
                                      level:
                                        description: |-
                                          The log level threshold.
                                          Log events with a lower log level are discarded.
                                        enum:
                                        - TRACE
                                        - DEBUG
                                        - INFO
                                        - WARN
                                        - ERROR
                                        - FATAL
                                        - NONE
                                        - null
                                        nullable: true
                                        type: string
                                    type: object
                                  loggers:
                                    additionalProperties:
                                      description: Configuration of a logger
                                      properties:
                                        level:
                                          description: |-
                                            The log level threshold.
                                            Log events with a lower log level are discarded.
                                          enum:
                                          - TRACE
                                          - DEBUG
                                          - INFO
                                          - WARN
                                          - ERROR
                                          - FATAL
                                          - NONE
                                          - null
                                          nullable: true
                                          type: string
                                      type: object
                                    default: {}
                                    description: Configuration per logger
                                    type: object
                                type: object
                              update-security-config:
                                anyOf:
                                - required:
                                  - custom
                                - {}
                                - {}
                                description: Log configuration of the container
                                properties:
                                  console:
                                    description: Configuration for the console appender
                                    nullable: true
                                    properties:
                                      level:
                                        description: |-
                                          The log level threshold.
                                          Log events with a lower log level are discarded.
                                        enum:
                                        - TRACE
                                        - DEBUG
                                        - INFO
                                        - WARN
                                        - ERROR
                                        - FATAL
                                        - NONE
                                        - null
                                        nullable: true
                                        type: string
                                    type: object
                                  custom:
                                    description: Log configuration provided in a ConfigMap
                                    properties:
                                      configMap:
                                        description: ConfigMap containing the log configuration files
                                        nullable: true
                                        type: string
                                    type: object
                                  file:
                                    description: Configuration for the file appender
                                    nullable: true
                                    properties:
                                      level:
                                        description: |-
                                          The log level threshold.
                                          Log events with a lower log level are discarded.
                                        enum:
                                        - TRACE
                                        - DEBUG
                                        - INFO
                                        - WARN
                                        - ERROR
                                        - FATAL
                                        - NONE
                                        - null
                                        nullable: true
                                        type: string
                                    type: object
                                  loggers:
                                    additionalProperties:
                                      description: Configuration of a logger
                                      properties:
                                        level:
                                          description: |-
                                            The log level threshold.
                                            Log events with a lower log level are discarded.
                                          enum:
                                          - TRACE
                                          - DEBUG
                                          - INFO
                                          - WARN
                                          - ERROR
                                          - FATAL
                                          - NONE
                                          - null
                                          nullable: true
                                          type: string
                                      type: object
                                    default: {}
                                    description: Configuration per logger
                                    type: object
                                type: object
                              vector:
                                anyOf:
                                - required:
                                  - custom
                                - {}
                                - {}
                                description: Log configuration of the container
                                properties:
                                  console:
                                    description: Configuration for the console appender
                                    nullable: true
                                    properties:
                                      level:
                                        description: |-
                                          The log level threshold.
                                          Log events with a lower log level are discarded.
                                        enum:
                                        - TRACE
                                        - DEBUG
                                        - INFO
                                        - WARN
                                        - ERROR
                                        - FATAL
                                        - NONE
                                        - null
                                        nullable: true
                                        type: string
                                    type: object
                                  custom:
                                    description: Log configuration provided in a ConfigMap
                                    properties:
                                      configMap:
                                        description: ConfigMap containing the log configuration files
                                        nullable: true
                                        type: string
                                    type: object
                                  file:
                                    description: Configuration for the file appender
                                    nullable: true
                                    properties:
                                      level:
                                        description: |-
                                          The log level threshold.
                                          Log events with a lower log level are discarded.
                                        enum:
                                        - TRACE
                                        - DEBUG
                                        - INFO
                                        - WARN
                                        - ERROR
                                        - FATAL
                                        - NONE
                                        - null
                                        nullable: true
                                        type: string
                                    type: object
                                  loggers:
                                    additionalProperties:
                                      description: Configuration of a logger
                                      properties:
                                        level:
                                          description: |-
                                            The log level threshold.
                                            Log events with a lower log level are discarded.
                                          enum:
                                          - TRACE
                                          - DEBUG
                                          - INFO
                                          - WARN
                                          - ERROR
                                          - FATAL
                                          - NONE
                                          - null
                                          nullable: true
                                          type: string
                                      type: object
                                    default: {}
                                    description: Configuration per logger
                                    type: object
                                type: object
                            type: object
                          enableVectorAgent:
                            description: Whether or not to deploy a container with the Vector log agent.
                            nullable: true
                            type: boolean
                        type: object
                      nodeRoles:
                        description: |-
                          Roles of the OpenSearch node.

                          Consult the [node roles
                          documentation](https://docs.stackable.tech/home/nightly/opensearch/usage-guide/node-roles) for details.
                        items:
                          enum:
                          - cluster_manager
                          - coordinating_only
                          - data
                          - ingest
                          - remote_cluster_client
                          - warm
                          - search
                          type: string
                        nullable: true
                        type: array
                      requestedSecretLifetime:
                        description: |-
                          Request secret (currently only autoTls certificates) lifetime from the secret operator, e.g. `7d`, or `30d`.
                          This can be shortened by the `maxCertificateLifetime` setting on the SecretClass issuing the TLS certificate.

                          Defaults to 1d.
                        nullable: true
                        type: string
                      resources:
                        default:
                          cpu:
                            max: null
                            min: null
                          memory:
                            limit: null
                            runtimeLimits: {}
                          storage:
                            data:
                              capacity: null
                        description: |-
                          Resource usage is configured here, this includes CPU usage, memory usage and disk storage
                          usage, if this role needs any.
                        properties:
                          cpu:
                            default:
                              max: null
                              min: null
                            properties:
                              max:
                                description: |-
                                  The maximum amount of CPU cores that can be requested by Pods.
                                  Equivalent to the `limit` for Pod resource configuration.
                                  Cores are specified either as a decimal point number or as milli units.
                                  For example:`1.5` will be 1.5 cores, also written as `1500m`.
                                nullable: true
                                x-kubernetes-int-or-string: true
                              min:
                                description: |-
                                  The minimal amount of CPU cores that Pods need to run.
                                  Equivalent to the `request` for Pod resource configuration.
                                  Cores are specified either as a decimal point number or as milli units.
                                  For example:`1.5` will be 1.5 cores, also written as `1500m`.
                                nullable: true
                                x-kubernetes-int-or-string: true
                            type: object
                          memory:
                            properties:
                              limit:
                                description: |-
                                  The maximum amount of memory that should be available to the Pod.
                                  Specified as a byte [Quantity](https://kubernetes.io/docs/reference/kubernetes-api/common-definitions/quantity/),
                                  which means these suffixes are supported: E, P, T, G, M, k.
                                  You can also use the power-of-two equivalents: Ei, Pi, Ti, Gi, Mi, Ki.
                                  For example, the following represent roughly the same value:
                                  `128974848, 129e6, 129M,  128974848000m, 123Mi`
                                nullable: true
                                x-kubernetes-int-or-string: true
                              runtimeLimits:
                                description: Additional options that can be specified.
                                type: object
                            type: object
                          storage:
                            properties:
                              data:
                                default:
                                  capacity: null
                                properties:
                                  capacity:
                                    description: "Quantity is a fixed-point representation of a number. It provides convenient marshaling/unmarshaling in JSON and YAML, in addition to String() and AsInt64() accessors.\n\nThe serialization format is:\n\n``` <quantity>        ::= <signedNumber><suffix>\n\n\t(Note that <suffix> may be empty, from the \"\" case in <decimalSI>.)\n\n<digit>           ::= 0 | 1 | ... | 9 <digits>          ::= <digit> | <digit><digits> <number>          ::= <digits> | <digits>.<digits> | <digits>. | .<digits> <sign>            ::= \"+\" | \"-\" <signedNumber>    ::= <number> | <sign><number> <suffix>          ::= <binarySI> | <decimalExponent> | <decimalSI> <binarySI>        ::= Ki | Mi | Gi | Ti | Pi | Ei\n\n\t(International System of units; See: http://physics.nist.gov/cuu/Units/binary.html)\n\n<decimalSI>       ::= m | \"\" | k | M | G | T | P | E\n\n\t(Note that 1024 = 1Ki but 1000 = 1k; I didn't choose the capitalization.)\n\n<decimalExponent> ::= \"e\" <signedNumber> | \"E\" <signedNumber> ```\n\nNo matter which of the three exponent forms is used, no quantity may represent a number greater than 2^63-1 in magnitude, nor may it have more than 3 decimal places. Numbers larger or more precise will be capped or rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the future if we require larger or smaller quantities.\n\nWhen a Quantity is parsed from a string, it will remember the type of suffix it had, and will use the same type again when it is serialized.\n\nBefore serializing, Quantity will be put in \"canonical form\". This means that Exponent/suffix will be adjusted up or down (with a corresponding increase or decrease in Mantissa) such that:\n\n- No precision is lost - No fractional digits will be emitted - The exponent (or suffix) is as large as possible.\n\nThe sign will be omitted unless the number is negative.\n\nExamples:\n\n- 1.5 will be serialized as \"1500m\" - 1.5Gi will be serialized as \"1536Mi\"\n\nNote that the quantity will NEVER be internally represented by a floating point number. That is the whole point of this exercise.\n\nNon-canonical values will still parse as long as they are well formed, but will be re-emitted in their canonical form. (So always use canonical form, or don't diff.)\n\nThis format is intended to make it difficult to use these numbers without writing some sort of special handling code in the hopes that that will cause implementors to also use a fixed point implementation."
                                    nullable: true
                                    x-kubernetes-int-or-string: true
                                  selectors:
                                    description: A label selector is a label query over a set of resources. The result of matchLabels and matchExpressions are ANDed. An empty label selector matches all objects. A null label selector matches no objects.
                                    nullable: true
                                    properties:
                                      matchExpressions:
                                        description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
                                        items:
                                          description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.
                                          properties:
                                            key:
                                              description: key is the label key that the selector applies to.
                                              type: string
                                            operator:
                                              description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
                                              type: string
                                            values:
                                              description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
                                              items:
                                                type: string
                                              type: array
                                          required:
                                          - key
                                          - operator
                                          type: object
                                        type: array
                                      matchLabels:
                                        additionalProperties:
                                          type: string
                                        description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed.
                                        type: object
                                    type: object
                                  storageClass:
                                    nullable: true
                                    type: string
                                type: object
                            type: object
                        type: object
                    type: object
                  configOverrides:
                    description: |-
                      The `configOverrides` can be used to configure properties in product config files
                      that are not exposed in the CRD. Read the
                      [config overrides documentation](https://docs.stackable.tech/home/nightly/concepts/overrides#config-overrides)
                      and consult the operator specific usage guide documentation for details on the
                      available config files and settings for the specific product.
                    properties:
                      opensearch.yml:
                        default:
                          jsonMergePatch: {}
                        description: |-
                          ConfigOverrides as key-value pairs, JSON merge patch, JSON patch or JSON object.

                          The key-value pairs, JSON merge patch and JSON patch are merged with/applied to the
                          configuration provided by the operator. The user-provided JSON object replaces the
                          configuration of the operator.

                          Example for key-value pairs:

                              stringProperty: new value
                              booleanProperty: "true"

                          Example for a JSON merge patch:

                              jsonMergePatch:
                                stringProperty: new value
                                booleanProperty: true
                                nestedProperty:
                                  key: value

                          Example for a JSON patch:

                              jsonPatch:
                                - op: replace
                                  path: /stringProperty
                                  value: new value

                          Example for a JSON object:

                              userProvided:
                                stringProperty: new value
                                booleanProperty: true
                                nestedProperty:
                                  key: value
                        type: object
                        x-kubernetes-preserve-unknown-fields: true
                    type: object
                  envOverrides:
                    additionalProperties:
                      type: string
                    default: {}
                    description: |-
                      `envOverrides` configure environment variables to be set in the Pods.
                      It is a map from strings to strings - environment variables and the value to set.
                      Read the
                      [environment variable overrides documentation](https://docs.stackable.tech/home/nightly/concepts/overrides#env-overrides)
                      for more information and consult the operator specific usage guide to find out about
                      the product specific environment variables that are available.
                    type: object
                  podOverrides:
                    default: {}
                    description: |-
                      In the `podOverrides` property you can define a
                      [PodTemplateSpec](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.34/#podtemplatespec-v1-core)
                      to override any property that can be set on a Kubernetes Pod.
                      Read the
                      [Pod overrides documentation](https://docs.stackable.tech/home/nightly/concepts/overrides#pod-overrides)
                      for more information.
                    type: object
                    x-kubernetes-preserve-unknown-fields: true
                  roleConfig:
                    default:
                      discoveryServiceListenerClass: cluster-internal
                      podDisruptionBudget:
                        enabled: true
                        maxUnavailable: null
                    description: This is a product-agnostic RoleConfig, which is sufficient for most of the products.
                    properties:
                      discoveryServiceListenerClass:
                        default: cluster-internal
                        description: The [ListenerClass](https://docs.stackable.tech/home/nightly/listener-operator/listenerclass.html) that is used for the discovery service.
                        maxLength: 253
                        minLength: 1
                        pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
                        type: string
                      podDisruptionBudget:
                        default:
                          enabled: true
                          maxUnavailable: null
                        description: |-
                          This struct is used to configure:

                          1. If PodDisruptionBudgets are created by the operator
                          2. The allowed number of Pods to be unavailable (`maxUnavailable`)

                          Learn more in the
                          [allowed Pod disruptions documentation](https://docs.stackable.tech/home/nightly/concepts/operations/pod_disruptions).
                        properties:
                          enabled:
                            default: true
                            description: |-
                              Whether a PodDisruptionBudget should be written out for this role.
                              Disabling this enables you to specify your own - custom - one.
                              Defaults to true.
                            type: boolean
                          maxUnavailable:
                            description: |-
                              The number of Pods that are allowed to be down because of voluntary disruptions.
                              If you don't explicitly set this, the operator will use a sane default based
                              upon knowledge about the individual product.
                            format: uint16
                            maximum: 65535.0
                            minimum: 0.0
                            nullable: true
                            type: integer
                        type: object
                    type: object
                  roleGroups:
                    additionalProperties:
                      properties:
                        cliOverrides:
                          additionalProperties:
                            type: string
                          default: {}
                          type: object
                        config:
                          default: {}
                          properties:
                            affinity:
                              default:
                                nodeAffinity: null
                                nodeSelector: null
                                podAffinity: null
                                podAntiAffinity: null
                              description: |-
                                These configuration settings control
                                [Pod placement](https://docs.stackable.tech/home/nightly/concepts/operations/pod_placement).
                              properties:
                                nodeAffinity:
                                  description: Same as the `spec.affinity.nodeAffinity` field on the Pod, see the [Kubernetes docs](https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node)
                                  nullable: true
                                  type: object
                                  x-kubernetes-preserve-unknown-fields: true
                                nodeSelector:
                                  additionalProperties:
                                    type: string
                                  description: Simple key-value pairs forming a nodeSelector, see the [Kubernetes docs](https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node)
                                  nullable: true
                                  type: object
                                podAffinity:
                                  description: Same as the `spec.affinity.podAffinity` field on the Pod, see the [Kubernetes docs](https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node)
                                  nullable: true
                                  type: object
                                  x-kubernetes-preserve-unknown-fields: true
                                podAntiAffinity:
                                  description: Same as the `spec.affinity.podAntiAffinity` field on the Pod, see the [Kubernetes docs](https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node)
                                  nullable: true
                                  type: object
                                  x-kubernetes-preserve-unknown-fields: true
                              type: object
                            discoveryServiceExposed:
                              description: Determines whether this role group is exposed in the discovery service.
                              nullable: true
                              type: boolean
                            gracefulShutdownTimeout:
                              description: |-
                                Time period Pods have to gracefully shut down, e.g. `30m`, `1h` or `2d`. Consult the
                                operator documentation for details.
                              nullable: true
                              type: string
                            listenerClass:
                              description: |-
                                This field controls which
                                [ListenerClass](https://docs.stackable.tech/home/nightly/listener-operator/listenerclass.html)
                                is used to expose the HTTP communication.
                              maxLength: 253
                              minLength: 1
                              nullable: true
                              pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
                              type: string
                            logging:
                              default:
                                containers: {}
                                enableVectorAgent: null
                              description: Logging configuration, learn more in the [logging concept documentation](https://docs.stackable.tech/home/nightly/concepts/logging).
                              properties:
                                containers:
                                  description: Log configuration per container.
                                  properties:
                                    create-admin-certificate:
                                      anyOf:
                                      - required:
                                        - custom
                                      - {}
                                      - {}
                                      description: Log configuration of the container
                                      properties:
                                        console:
                                          description: Configuration for the console appender
                                          nullable: true
                                          properties:
                                            level:
                                              description: |-
                                                The log level threshold.
                                                Log events with a lower log level are discarded.
                                              enum:
                                              - TRACE
                                              - DEBUG
                                              - INFO
                                              - WARN
                                              - ERROR
                                              - FATAL
                                              - NONE
                                              - null
                                              nullable: true
                                              type: string
                                          type: object
                                        custom:
                                          description: Log configuration provided in a ConfigMap
                                          properties:
                                            configMap:
                                              description: ConfigMap containing the log configuration files
                                              nullable: true
                                              type: string
                                          type: object
                                        file:
                                          description: Configuration for the file appender
                                          nullable: true
                                          properties:
                                            level:
                                              description: |-
                                                The log level threshold.
                                                Log events with a lower log level are discarded.
                                              enum:
                                              - TRACE
                                              - DEBUG
                                              - INFO
                                              - WARN
                                              - ERROR
                                              - FATAL
                                              - NONE
                                              - null
                                              nullable: true
                                              type: string
                                          type: object
                                        loggers:
                                          additionalProperties:
                                            description: Configuration of a logger
                                            properties:
                                              level:
                                                description: |-
                                                  The log level threshold.
                                                  Log events with a lower log level are discarded.
                                                enum:
                                                - TRACE
                                                - DEBUG
                                                - INFO
                                                - WARN
                                                - ERROR
                                                - FATAL
                                                - NONE
                                                - null
                                                nullable: true
                                                type: string
                                            type: object
                                          default: {}
                                          description: Configuration per logger
                                          type: object
                                      type: object
                                    init-keystore:
                                      anyOf:
                                      - required:
                                        - custom
                                      - {}
                                      - {}
                                      description: Log configuration of the container
                                      properties:
                                        console:
                                          description: Configuration for the console appender
                                          nullable: true
                                          properties:
                                            level:
                                              description: |-
                                                The log level threshold.
                                                Log events with a lower log level are discarded.
                                              enum:
                                              - TRACE
                                              - DEBUG
                                              - INFO
                                              - WARN
                                              - ERROR
                                              - FATAL
                                              - NONE
                                              - null
                                              nullable: true
                                              type: string
                                          type: object
                                        custom:
                                          description: Log configuration provided in a ConfigMap
                                          properties:
                                            configMap:
                                              description: ConfigMap containing the log configuration files
                                              nullable: true
                                              type: string
                                          type: object
                                        file:
                                          description: Configuration for the file appender
                                          nullable: true
                                          properties:
                                            level:
                                              description: |-
                                                The log level threshold.
                                                Log events with a lower log level are discarded.
                                              enum:
                                              - TRACE
                                              - DEBUG
                                              - INFO
                                              - WARN
                                              - ERROR
                                              - FATAL
                                              - NONE
                                              - null
                                              nullable: true
                                              type: string
                                          type: object
                                        loggers:
                                          additionalProperties:
                                            description: Configuration of a logger
                                            properties:
                                              level:
                                                description: |-
                                                  The log level threshold.
                                                  Log events with a lower log level are discarded.
                                                enum:
                                                - TRACE
                                                - DEBUG
                                                - INFO
                                                - WARN
                                                - ERROR
                                                - FATAL
                                                - NONE
                                                - null
                                                nullable: true
                                                type: string
                                            type: object
                                          default: {}
                                          description: Configuration per logger
                                          type: object
                                      type: object
                                    opensearch:
                                      anyOf:
                                      - required:
                                        - custom
                                      - {}
                                      - {}
                                      description: Log configuration of the container
                                      properties:
                                        console:
                                          description: Configuration for the console appender
                                          nullable: true
                                          properties:
                                            level:
                                              description: |-
                                                The log level threshold.
                                                Log events with a lower log level are discarded.
                                              enum:
                                              - TRACE
                                              - DEBUG
                                              - INFO
                                              - WARN
                                              - ERROR
                                              - FATAL
                                              - NONE
                                              - null
                                              nullable: true
                                              type: string
                                          type: object
                                        custom:
                                          description: Log configuration provided in a ConfigMap
                                          properties:
                                            configMap:
                                              description: ConfigMap containing the log configuration files
                                              nullable: true
                                              type: string
                                          type: object
                                        file:
                                          description: Configuration for the file appender
                                          nullable: true
                                          properties:
                                            level:
                                              description: |-
                                                The log level threshold.
                                                Log events with a lower log level are discarded.
                                              enum:
                                              - TRACE
                                              - DEBUG
                                              - INFO
                                              - WARN
                                              - ERROR
                                              - FATAL
                                              - NONE
                                              - null
                                              nullable: true
                                              type: string
                                          type: object
                                        loggers:
                                          additionalProperties:
                                            description: Configuration of a logger
                                            properties:
                                              level:
                                                description: |-
                                                  The log level threshold.
                                                  Log events with a lower log level are discarded.
                                                enum:
                                                - TRACE
                                                - DEBUG
                                                - INFO
                                                - WARN
                                                - ERROR
                                                - FATAL
                                                - NONE
                                                - null
                                                nullable: true
                                                type: string
                                            type: object
                                          default: {}
                                          description: Configuration per logger
                                          type: object
                                      type: object
                                    update-security-config:
                                      anyOf:
                                      - required:
                                        - custom
                                      - {}
                                      - {}
                                      description: Log configuration of the container
                                      properties:
                                        console:
                                          description: Configuration for the console appender
                                          nullable: true
                                          properties:
                                            level:
                                              description: |-
                                                The log level threshold.
                                                Log events with a lower log level are discarded.
                                              enum:
                                              - TRACE
                                              - DEBUG
                                              - INFO
                                              - WARN
                                              - ERROR
                                              - FATAL
                                              - NONE
                                              - null
                                              nullable: true
                                              type: string
                                          type: object
                                        custom:
                                          description: Log configuration provided in a ConfigMap
                                          properties:
                                            configMap:
                                              description: ConfigMap containing the log configuration files
                                              nullable: true
                                              type: string
                                          type: object
                                        file:
                                          description: Configuration for the file appender
                                          nullable: true
                                          properties:
                                            level:
                                              description: |-
                                                The log level threshold.
                                                Log events with a lower log level are discarded.
                                              enum:
                                              - TRACE
                                              - DEBUG
                                              - INFO
                                              - WARN
                                              - ERROR
                                              - FATAL
                                              - NONE
                                              - null
                                              nullable: true
                                              type: string
                                          type: object
                                        loggers:
                                          additionalProperties:
                                            description: Configuration of a logger
                                            properties:
                                              level:
                                                description: |-
                                                  The log level threshold.
                                                  Log events with a lower log level are discarded.
                                                enum:
                                                - TRACE
                                                - DEBUG
                                                - INFO
                                                - WARN
                                                - ERROR
                                                - FATAL
                                                - NONE
                                                - null
                                                nullable: true
                                                type: string
                                            type: object
                                          default: {}
                                          description: Configuration per logger
                                          type: object
                                      type: object
                                    vector:
                                      anyOf:
                                      - required:
                                        - custom
                                      - {}
                                      - {}
                                      description: Log configuration of the container
                                      properties:
                                        console:
                                          description: Configuration for the console appender
                                          nullable: true
                                          properties:
                                            level:
                                              description: |-
                                                The log level threshold.
                                                Log events with a lower log level are discarded.
                                              enum:
                                              - TRACE
                                              - DEBUG
                                              - INFO
                                              - WARN
                                              - ERROR
                                              - FATAL
                                              - NONE
                                              - null
                                              nullable: true
                                              type: string
                                          type: object
                                        custom:
                                          description: Log configuration provided in a ConfigMap
                                          properties:
                                            configMap:
                                              description: ConfigMap containing the log configuration files
                                              nullable: true
                                              type: string
                                          type: object
                                        file:
                                          description: Configuration for the file appender
                                          nullable: true
                                          properties:
                                            level:
                                              description: |-
                                                The log level threshold.
                                                Log events with a lower log level are discarded.
                                              enum:
                                              - TRACE
                                              - DEBUG
                                              - INFO
                                              - WARN
                                              - ERROR
                                              - FATAL
                                              - NONE
                                              - null
                                              nullable: true
                                              type: string
                                          type: object
                                        loggers:
                                          additionalProperties:
                                            description: Configuration of a logger
                                            properties:
                                              level:
                                                description: |-
                                                  The log level threshold.
                                                  Log events with a lower log level are discarded.
                                                enum:
                                                - TRACE
                                                - DEBUG
                                                - INFO
                                                - WARN
                                                - ERROR
                                                - FATAL
                                                - NONE
                                                - null
                                                nullable: true
                                                type: string
                                            type: object
                                          default: {}
                                          description: Configuration per logger
                                          type: object
                                      type: object
                                  type: object
                                enableVectorAgent:
                                  description: Whether or not to deploy a container with the Vector log agent.
                                  nullable: true
                                  type: boolean
                              type: object
                            nodeRoles:
                              description: |-
                                Roles of the OpenSearch node.

                                Consult the [node roles
                                documentation](https://docs.stackable.tech/home/nightly/opensearch/usage-guide/node-roles) for details.
                              items:
                                enum:
                                - cluster_manager
                                - coordinating_only
                                - data
                                - ingest
                                - remote_cluster_client
                                - warm
                                - search
                                type: string
                              nullable: true
                              type: array
                            requestedSecretLifetime:
                              description: |-
                                Request secret (currently only autoTls certificates) lifetime from the secret operator, e.g. `7d`, or `30d`.
                                This can be shortened by the `maxCertificateLifetime` setting on the SecretClass issuing the TLS certificate.

                                Defaults to 1d.
                              nullable: true
                              type: string
                            resources:
                              default:
                                cpu:
                                  max: null
                                  min: null
                                memory:
                                  limit: null
                                  runtimeLimits: {}
                                storage:
                                  data:
                                    capacity: null
                              description: |-
                                Resource usage is configured here, this includes CPU usage, memory usage and disk storage
                                usage, if this role needs any.
                              properties:
                                cpu:
                                  default:
                                    max: null
                                    min: null
                                  properties:
                                    max:
                                      description: |-
                                        The maximum amount of CPU cores that can be requested by Pods.
                                        Equivalent to the `limit` for Pod resource configuration.
                                        Cores are specified either as a decimal point number or as milli units.
                                        For example:`1.5` will be 1.5 cores, also written as `1500m`.
                                      nullable: true
                                      x-kubernetes-int-or-string: true
                                    min:
                                      description: |-
                                        The minimal amount of CPU cores that Pods need to run.
                                        Equivalent to the `request` for Pod resource configuration.
                                        Cores are specified either as a decimal point number or as milli units.
                                        For example:`1.5` will be 1.5 cores, also written as `1500m`.
                                      nullable: true
                                      x-kubernetes-int-or-string: true
                                  type: object
                                memory:
                                  properties:
                                    limit:
                                      description: |-
                                        The maximum amount of memory that should be available to the Pod.
                                        Specified as a byte [Quantity](https://kubernetes.io/docs/reference/kubernetes-api/common-definitions/quantity/),
                                        which means these suffixes are supported: E, P, T, G, M, k.
                                        You can also use the power-of-two equivalents: Ei, Pi, Ti, Gi, Mi, Ki.
                                        For example, the following represent roughly the same value:
                                        `128974848, 129e6, 129M,  128974848000m, 123Mi`
                                      nullable: true
                                      x-kubernetes-int-or-string: true
                                    runtimeLimits:
                                      description: Additional options that can be specified.
                                      type: object
                                  type: object
                                storage:
                                  properties:
                                    data:
                                      default:
                                        capacity: null
                                      properties:
                                        capacity:
                                          description: "Quantity is a fixed-point representation of a number. It provides convenient marshaling/unmarshaling in JSON and YAML, in addition to String() and AsInt64() accessors.\n\nThe serialization format is:\n\n``` <quantity>        ::= <signedNumber><suffix>\n\n\t(Note that <suffix> may be empty, from the \"\" case in <decimalSI>.)\n\n<digit>           ::= 0 | 1 | ... | 9 <digits>          ::= <digit> | <digit><digits> <number>          ::= <digits> | <digits>.<digits> | <digits>. | .<digits> <sign>            ::= \"+\" | \"-\" <signedNumber>    ::= <number> | <sign><number> <suffix>          ::= <binarySI> | <decimalExponent> | <decimalSI> <binarySI>        ::= Ki | Mi | Gi | Ti | Pi | Ei\n\n\t(International System of units; See: http://physics.nist.gov/cuu/Units/binary.html)\n\n<decimalSI>       ::= m | \"\" | k | M | G | T | P | E\n\n\t(Note that 1024 = 1Ki but 1000 = 1k; I didn't choose the capitalization.)\n\n<decimalExponent> ::= \"e\" <signedNumber> | \"E\" <signedNumber> ```\n\nNo matter which of the three exponent forms is used, no quantity may represent a number greater than 2^63-1 in magnitude, nor may it have more than 3 decimal places. Numbers larger or more precise will be capped or rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the future if we require larger or smaller quantities.\n\nWhen a Quantity is parsed from a string, it will remember the type of suffix it had, and will use the same type again when it is serialized.\n\nBefore serializing, Quantity will be put in \"canonical form\". This means that Exponent/suffix will be adjusted up or down (with a corresponding increase or decrease in Mantissa) such that:\n\n- No precision is lost - No fractional digits will be emitted - The exponent (or suffix) is as large as possible.\n\nThe sign will be omitted unless the number is negative.\n\nExamples:\n\n- 1.5 will be serialized as \"1500m\" - 1.5Gi will be serialized as \"1536Mi\"\n\nNote that the quantity will NEVER be internally represented by a floating point number. That is the whole point of this exercise.\n\nNon-canonical values will still parse as long as they are well formed, but will be re-emitted in their canonical form. (So always use canonical form, or don't diff.)\n\nThis format is intended to make it difficult to use these numbers without writing some sort of special handling code in the hopes that that will cause implementors to also use a fixed point implementation."
                                          nullable: true
                                          x-kubernetes-int-or-string: true
                                        selectors:
                                          description: A label selector is a label query over a set of resources. The result of matchLabels and matchExpressions are ANDed. An empty label selector matches all objects. A null label selector matches no objects.
                                          nullable: true
                                          properties:
                                            matchExpressions:
                                              description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
                                              items:
                                                description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.
                                                properties:
                                                  key:
                                                    description: key is the label key that the selector applies to.
                                                    type: string
                                                  operator:
                                                    description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
                                                    type: string
                                                  values:
                                                    description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
                                                    items:
                                                      type: string
                                                    type: array
                                                required:
                                                - key
                                                - operator
                                                type: object
                                              type: array
                                            matchLabels:
                                              additionalProperties:
                                                type: string
                                              description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed.
                                              type: object
                                          type: object
                                        storageClass:
                                          nullable: true
                                          type: string
                                      type: object
                                  type: object
                              type: object
                          type: object
                        configOverrides:
                          description: |-
                            The `configOverrides` can be used to configure properties in product config files
                            that are not exposed in the CRD. Read the
                            [config overrides documentation](https://docs.stackable.tech/home/nightly/concepts/overrides#config-overrides)
                            and consult the operator specific usage guide documentation for details on the
                            available config files and settings for the specific product.
                          properties:
                            opensearch.yml:
                              default:
                                jsonMergePatch: {}
                              description: |-
                                ConfigOverrides as key-value pairs, JSON merge patch, JSON patch or JSON object.

                                The key-value pairs, JSON merge patch and JSON patch are merged with/applied to the
                                configuration provided by the operator. The user-provided JSON object replaces the
                                configuration of the operator.

                                Example for key-value pairs:

                                    stringProperty: new value
                                    booleanProperty: "true"

                                Example for a JSON merge patch:

                                    jsonMergePatch:
                                      stringProperty: new value
                                      booleanProperty: true
                                      nestedProperty:
                                        key: value

                                Example for a JSON patch:

                                    jsonPatch:
                                      - op: replace
                                        path: /stringProperty
                                        value: new value

                                Example for a JSON object:

                                    userProvided:
                                      stringProperty: new value
                                      booleanProperty: true
                                      nestedProperty:
                                        key: value
                              type: object
                              x-kubernetes-preserve-unknown-fields: true
                          type: object
                        envOverrides:
                          additionalProperties:
                            type: string
                          default: {}
                          description: |-
                            `envOverrides` configure environment variables to be set in the Pods.
                            It is a map from strings to strings - environment variables and the value to set.
                            Read the
                            [environment variable overrides documentation](https://docs.stackable.tech/home/nightly/concepts/overrides#env-overrides)
                            for more information and consult the operator specific usage guide to find out about
                            the product specific environment variables that are available.
                          type: object
                        podOverrides:
                          default: {}
                          description: |-
                            In the `podOverrides` property you can define a
                            [PodTemplateSpec](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.34/#podtemplatespec-v1-core)
                            to override any property that can be set on a Kubernetes Pod.
                            Read the
                            [Pod overrides documentation](https://docs.stackable.tech/home/nightly/concepts/overrides#pod-overrides)
                            for more information.
                          type: object
                          x-kubernetes-preserve-unknown-fields: true
                        replicas:
                          format: uint16
                          maximum: 65535.0
                          minimum: 0.0
                          nullable: true
                          type: integer
                      type: object
                    type: object
                required:
                - roleGroups
                type: object
              objectOverrides:
                default: []
                description: |-
                  A list of generic Kubernetes objects, which are merged into the objects that the operator
                  creates.

                  List entries are arbitrary YAML objects, which need to be valid Kubernetes objects.

                  Read the [Object overrides documentation](https://docs.stackable.tech/home/nightly/concepts/overrides#object-overrides)
                  for more information.
                items:
                  type: object
                  x-kubernetes-preserve-unknown-fields: true
                type: array
            required:
            - image
            - nodes
            type: object
          status:
            nullable: true
            properties:
              conditions:
                default: []
                items:
                  properties:
                    lastTransitionTime:
                      description: Last time the condition transitioned from one status to another.
                      format: date-time
                      nullable: true
                      type: string
                    message:
                      description: A human readable message indicating details about the transition.
                      nullable: true
                      type: string
                    reason:
                      description: The reason for the condition's last transition.
                      nullable: true
                      type: string
                    status:
                      description: Status of the condition, one of True, False, Unknown.
                      enum:
                      - 'True'
                      - 'False'
                      - Unknown
                      type: string
                    type:
                      description: Type of deployment condition.
                      enum:
                      - Available
                      - Degraded
                      - Progressing
                      - ReconciliationPaused
                      - Stopped
                      type: string
                  required:
                  - status
                  - type
                  type: object
                type: array
              discoveryHash:
                description: An opaque value that changes every time a discovery detail does
                nullable: true
                type: string
            type: object
        required:
        - spec
        title: OpenSearchCluster
        type: object
    served: true
    storage: true
    subresources:
      status: {}