doc: Add note on Opensearch configuration
-
Minimal permissions on the certificates/index prefix:
- indices:data/write/update
- indices:admin/get
- indices:admin/aliases/get
- indices:admin/mappings/get
- cluster:monitor/main
-
DIRAC Configuration:
-
in dirac.cfg, configure the Opensearch/Elastic client:
Services { Monitoring { CTADIRAC-alma { Databases { MonitoringDB { Host = opensearch-api Port = 9200 SSL = False IndexPrefix = index-prefix CRT = True ca_certs = /path/to/ca client_cert = /path/to/cert client_key =/path/to/cert-key } } } } WorkloadManagement { CTADIRAC-alma { Databases { ElasticJobParametersDB { Host = opensearch-api Port = 9200 SSL = False IndexPrefix = index-prefix CRT = True ca_certs = /path/to/ca client_cert = /path/to/cert client_key =/path/to/cert-key } } } } }
- Operations/<Setup>
- MonitoringBackends
- WMSHistory = Monitoring
- DataOperation = Monitoring
- PilotsHistory = Monitoring
- PilotSubmissionMonitoring = Monitoring
- AgentMonitoring = Monitoring
- ServiceMonitoring = Monitoring
- RMSMonitoring = Monitoring
- Services/JobMonitoring/useESForJobParametersFlag = True
- MonitoringBackends
- Operations/<Setup>
-
Restart the services JobStateJobMonitoring, WMSAdministrator, StatesAccountingAgent, etc
-
See: index prefix fix in DIRAC for ElasticJobParametersDB