opensearchHosts: https://vpc-clinic-prod2-dods2xlfokkntc25k2gy4dmwry.cn-north-1.es.amazonaws.com.cn
image:
  repository: 350982700484.dkr.ecr.cn-north-1.amazonaws.com.cn/opensearch-dashboards
  tag: 1.1.0
service:
  type: NodePort
opensearchAccount:
  secret: clinic-api-opensearch-secrets
config:
  opensearch_dashboards.yml: |-
    server.host: '0.0.0.0'

    opensearch.hosts: ['https://vpc-clinic-prod2-dods2xlfokkntc25k2gy4dmwry.cn-north-1.es.amazonaws.com.cn']

    opensearch.ssl.verificationMode: none # if not using HTTPS

    opensearch_security.auth.type: basicauth
    opensearch_security.auth.anonymous_auth_enabled: false
    opensearch_security.cookie.secure: false # set to true when using HTTPS
    opensearch_security.cookie.ttl: 3600000
    opensearch_security.session.ttl: 3600000
    opensearch_security.session.keepalive: false
    opensearch_security.readonly_mode.roles: ['kibana_read_only']
    opensearch_security.auth.unauthenticated_routes: []
    opensearch_security.ui.basicauth.login.title: 'Please log in using your user name and password'
    opensearch.requestHeadersWhitelist: [authorization, securitytenant,security_tenant]

    server.basePath: "/kibana"

    server.rewriteBasePath: true

    opensearch_security.multitenancy.enabled: true
    opensearch_security.multitenancy.tenants.enable_global: true
    opensearch_security.multitenancy.tenants.enable_private: true
    opensearch_security.multitenancy.tenants.preferred: ["Private", "Global"]
    opensearch_security.multitenancy.enable_filter: false
extraObjects:
  - apiVersion: external-secrets.io/v1
    kind: ExternalSecret
    metadata:
      name: clinic-api-opensearch-secrets
    spec:
      refreshInterval: 1h
      secretStoreRef:
        kind: ClusterSecretStore
        name: default # name of the SecretStore (or kind specified)
      target:
        name: clinic-api-opensearch-secrets # name of the k8s Secret to be created
        creationPolicy: Owner
      dataFrom:
        - extract:
            key: prod-clinic-api-opensearch-secrets
