Add entries to the OpenSearch Keystore

The OpenSearch keystore provides secure storage for sensitive configuration settings such as credentials and API keys. You can populate the keystore by referencing Secrets within your OpenSearch configuration.

---
apiVersion: opensearch.stackable.tech/v1alpha1
kind: OpenSearchCluster
metadata:
  name: opensearch
spec:
  clusterConfig:
    keystore:
    - key: s3.client.default.access_key (1)
      secretKeyRef:
        name: s3-credentials (2)
        key: accessKey (3)
    - key: s3.client.default.secret_key
      secretKeyRef:
        name: s3-credentials
        key: secretKey
...
---
apiVersion: v1
kind: Secret
metadata:
  name: s3-credentials
stringData:
  accessKey: my-access-key
  secretKey: my-secret-key

1	The key in the OpenSearch keystore which corresponds to a setting in OpenSearch (e.g. `s3.client.default.access_key`).
2	The name of the Secret containing the value
3	The key within that Secret