Posted On: Aug 17, 2022
Amazon OpenSearch Service now provides improved visibility into validation failures during domain updates. You can monitor the progress of a domain update, which could involve a blue/green deployment, from the OpenSearch Service console, or through the configuration APIs. OpenSearch Service will publish any validation failure events to Amazon EventBridge. You can also view these validation events in the Notifications tab of the OpenSearch Service console.
Depending on the type of change being made, OpenSearch Service might use a blue/green deployment process to update a domain. A blue/green deployment is the practice of creating a new environment for domain updates, and routing users to the new environment after the updates are complete. This practice minimizes downtime and maintains the original environment in the event that deployment to the new environment is unsuccessful. Blue/green deployments are required in OpenSearch Service for activities such as service software updates and for certain types of configuration changes, such as changing the instance type or modifying advanced settings. For a complete list of changes that require a blue/green deployment, see Making configuration changes in Amazon OpenSearch Service.
In January 2022, we started providing better visibility into the progress of blue/green deployments and its various stages, such as creating a new environment, provisioning instances, and copying shards. With this launch, we have introduced a new validation stage, wherein OpenSearch Service checks your domain for common issues that might cause a blue/green deployment to fail. If your domain matches any of these conditions, we do not proceed with the blue/green deployment. Some of these scenarios include, but are not limited to, the presence of red indices in the cluster, unavailability of a chosen instance type, low disk space, and configuration issues related to Amazon Cognito or Amazon Key Management Service (Amazon KMS).
You can view the progress of a domain update, including details of any validation failures, under the Domain status tab in the OpenSearch Service console, or using the DescribeDomainChangeProgress API. You can also use the events that OpenSearch Service publishes to Amazon EventBridge to monitor failures. After you address the issue that caused the validation to fail, you can retry the configuration change from the OpenSearch Service console, or resubmit the change using the configuration APIs.
The improvements to blue/green deployment progress updates are available for Amazon OpenSearch Service domains in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD.