Oracle Cloud Infrastructure Documentation

Working with OpenSearch Clusters

OCI Search with OpenSearch lets you create OpenSearch clusters for your search solutions. After you've created your OpenSearch cluster, Search with OpenSearch handles most of the management and operations of search clusters, including operations such as security updates, upgrades, resizing, and scheduled backups.

This topic covers the following OpenSearch cluster tasks:

  • Creating a cluster.
  • Viewing cluster configuration details.
  • Changing a cluster's name.
  • Resizing a cluster.
  • Upgrading a cluster.
  • Deleting a cluster.

IAM Policy

To use Oracle Cloud Infrastructure, you must be granted security access in a policy  by an administrator. This access is required whether you're using the Console or the REST API with an SDK, CLI, or other tool. If you get a message that you don’t have permission or are unauthorized, verify with your administrator what type of access you have and which compartment  to work in.

Before you can create or manage a cluster or a cluster backup, you need to configure permissions to allow Search with OpenSearch access to create and manage the required Networking resources. The permissions need to be configured for the compartment that contains the Networking resources, so if the cluster is in a different compartment from the VCN and subnet, ensure that the service permissions are configured for the compartment containing the VCN and subnet.

The group needs access to create Search with OpenSearch resources.

The following policy includes the required permissions: 

Allow service opensearch to manage vnics in compartment <NETWORK_RESOURCES_COMPARTMENT>
Allow service opensearch to manage vcns in compartment <NETWORK_RESOURCES_COMPARTMENT>
Allow service opensearch to use subnets in compartment <NETWORK_RESOURCES_COMPARTMENT>
Allow service opensearch to use network-security-groups in compartment <NETWORK_RESOURCES_COMPARTMENT>
Allow group SearchOpenSearchAdmins to manage opensearch-family in compartment <CLUSTER_RESOURCES_COMPARTMENT>

The service permissions included in this example are required as specified. You can configure the user permissions, specified in the last line in this example, with more granularity. For more details, see Service Permissions.

If you're new to policies, see Getting Started with Policies and Common Policies.

Tagging Resources

You can apply tags to your resources to help you organize them according to your business needs. You can apply tags at the time you create a resource, or you can update the resource later with the wanted tags. For general information about applying tags, see Resource Tags.