Question

Tokyo Century Corporation
JP
Last activity: 12 Mar 2025 22:48 EDT
Inquiry Regarding Authentication Settings for Using Amazon OpenSearch Service in Pega Environment
Hello,
I am currently planning to externalize the Search functionality in our Pega environment using Amazon OpenSearch Service. We are using Pega version 24.2 and Amazon OpenSearch Service version 2.15. While trying to deploy backing services based on the official Pega Helm chart, I have encountered two issues that I would like to clarify:
- Setting up IAM Authentication
I would like to use IAM authentication for connecting to Amazon OpenSearch Service. I have configured the values.yaml as follows:
basicAuthentication:
enabled: false
awsIAM:
region: "ap-northeast-1"
requireInternetAccess: false
However, with this setup, I am unable to retrieve AWS credentials, resulting in a failed connection to OpenSearch. What additional configurations are necessary to enable IAM authentication properly? Could you provide detailed steps, particularly regarding service account settings or the use of IRSA?
- Using Basic Authentication
When opting for Basic authentication, I intend to use authCredentials. I set up the values.yaml as follows, but encountered a nil pointer error as the Helm chart template attempts to access esCredentials.username, which is not defined:
Hello,
I am currently planning to externalize the Search functionality in our Pega environment using Amazon OpenSearch Service. We are using Pega version 24.2 and Amazon OpenSearch Service version 2.15. While trying to deploy backing services based on the official Pega Helm chart, I have encountered two issues that I would like to clarify:
- Setting up IAM Authentication
I would like to use IAM authentication for connecting to Amazon OpenSearch Service. I have configured the values.yaml as follows:
basicAuthentication:
enabled: false
awsIAM:
region: "ap-northeast-1"
requireInternetAccess: false
However, with this setup, I am unable to retrieve AWS credentials, resulting in a failed connection to OpenSearch. What additional configurations are necessary to enable IAM authentication properly? Could you provide detailed steps, particularly regarding service account settings or the use of IRSA?
- Using Basic Authentication
When opting for Basic authentication, I intend to use authCredentials. I set up the values.yaml as follows, but encountered a nil pointer error as the Helm chart template attempts to access esCredentials.username, which is not defined:
basicAuthentication:
enabled: true
authCredentials:
username: "username"
password: "password"
requireInternetAccess: false
What steps should be taken to resolve this issue? If template modification is required, could you specify which files to edit and how?
I appreciate your assistance and look forward to your response.