docker run -d --name wazuh-indexer \
  -p 9200:9200 \
  -e OPENSEARCH_INITIAL_ADMIN_PASSWORD=changeme \
  -v /data/wazuh-indexer:/var/lib/wazuh-indexer \
  docker.io/wazuh/wazuh-indexer:4.8.0

docker run -d --name wazuh-indexer \
  --restart unless-stopped \
  -p 9200:9200 \
  -e OPENSEARCH_INITIAL_ADMIN_PASSWORD=changeme \
  -v /data/wazuh-indexer:/var/lib/wazuh-indexer \
  docker.io/wazuh/wazuh-indexer:4.8.0

apiVersion: apps/v1
kind: StatefulSet
metadata:
  name: wazuh-indexer
spec:
  serviceName: wazuh-indexer
  replicas: 3
  selector:
    matchLabels:
      app: wazuh-indexer
  template:
    metadata:
      labels:
        app: wazuh-indexer
    spec:
      containers:
        - name: indexer
          image: docker.io/wazuh/wazuh-indexer:4.8.0
          ports:
            - containerPort: 9200
          envFrom:
            - secretRef:
                name: wazuh-indexer-env
          volumeMounts:
            - name: data
              mountPath: /var/lib/wazuh-indexer
  volumeClaimTemplates:
    - metadata:
        name: data
      spec:
        accessModes: [ReadWriteOnce]
        resources:
          requests:
            storage: 200Gi
---
apiVersion: v1
kind: Service
metadata:
  name: wazuh-indexer
spec:
  selector:
    app: wazuh-indexer
  ports:
    - port: 9200
      targetPort: 9200