[BUG] OpenSearch v1.2.4 Docker image is broken while v1.2.3 just works

This command works

But this one doesn't

Errors are shown below

cc: @peternied @peterzhuamazon

@q2dg I can't reproduce with docker, running docker container run --rm --name=puto -e "discovery.type=single-node" -p 9200:9200 opensearchproject/opensearch:latest
>curl --insecure https://admin:admin@localhost:9200
{
  "name" : "55051492a18e",
  "cluster_name" : "docker-cluster",
  "cluster_uuid" : "KMMSlu5NRQiECA1vdss2HA",
  "version" : {
    "distribution" : "opensearch",
    "number" : "1.2.4",
    "build_type" : "tar",
    "build_hash" : "e505b10357c03ae8d26d675172402f2f2144ef0f",
    "build_date" : "2022-01-14T03:38:06.881862Z",
    "build_snapshot" : false,
    "lucene_version" : "8.10.1",
    "minimum_wire_compatibility_version" : "6.8.0",
    "minimum_index_compatibility_version" : "6.0.0-beta1"
  },
  "tagline" : "The OpenSearch Project: https://opensearch.org/"
}

>docker pull opensearchproject/opensearch:latest
latest: Pulling from opensearchproject/opensearch
3a461b3ae562: Already exists
281f706dd97a: Pull complete
4f11d5532c74: Pull complete
2f071fa29f89: Pull complete
906ed3bd695c: Pull complete
1682fbe93720: Pull complete
Digest: sha256:0b6c57dbbfbf941f159b469ee755ea46014cd3735c446f616f59daef0b45c7d5
Status: Downloaded newer image for opensearchproject/opensearch:latest
docker.io/opensearchproject/opensearch:latest

>docker container run --rm --name=puto -e "discovery.type=single-node" -p 9200:9200 opensearchproject/opensearch:latest
Enabling execution of install_demo_configuration.sh for OpenSearch Security Plugin
OpenSearch Security Demo Installer
 ** Warning: Do not use on production or public reachable systems **
Basedir: /usr/share/opensearch
OpenSearch install type: rpm/deb on NAME="Amazon Linux"
OpenSearch config dir: /usr/share/opensearch/config
OpenSearch config file: /usr/share/opensearch/config/opensearch.yml
OpenSearch bin dir: /usr/share/opensearch/bin
OpenSearch plugins dir: /usr/share/opensearch/plugins
OpenSearch lib dir: /usr/share/opensearch/lib
Detected OpenSearch Version: x-content-1.2.4
Detected OpenSearch Security Version: <IP_ADDRESS>

### Success
### Execute this script now on all your nodes and then start all nodes
### OpenSearch Security will be automatically initialized.
### If you like to change the runtime configuration
### change the files in ../securityconfig and execute:
"/usr/share/opensearch/plugins/opensearch-security/tools/securityadmin.sh" -cd "/usr/share/opensearch/plugins/opensearch-security/securityconfig" -icl -key "/usr/share/opensearch/config/kirk-key.pem" -cert "/usr/share/opensearch/config/kirk.pem" -cacert "/usr/share/opensearch/config/root-ca.pem" -nhnv
### or run ./securityadmin_demo.sh
### To use the Security Plugin ConfigurationGUI
### To access your secured cluster open https://<hostname>:<HTTP port> and log in with admin/admin.
### (Ignore the SSL certificate warning because we installed self-signed demo certificates)
Enabling OpenSearch Security Plugin
cluster.name: docker-cluster

# Bind to all interfaces because we don't know what IP address Docker will assign to us.
network.host: <IP_ADDRESS>

# # minimum_master_nodes need to be explicitly set when bound on a public IP
# # set to 1 to allow single node clusters
# discovery.zen.minimum_master_nodes: 1

# Setting network.host to a non-loopback address enables the annoying bootstrap checks. "Single-node" mode disables them again.
#discovery.type: single-node

######## Start OpenSearch Security Demo Configuration ########
# WARNING: revise all the lines below before you go into production
plugins.security.ssl.transport.pemcert_filepath: esnode.pem
plugins.security.ssl.transport.pemkey_filepath: esnode-key.pem
plugins.security.ssl.transport.pemtrustedcas_filepath: root-ca.pem
plugins.security.ssl.transport.enforce_hostname_verification: false
plugins.security.ssl.http.enabled: true
plugins.security.ssl.http.pemcert_filepath: esnode.pem
plugins.security.ssl.http.pemkey_filepath: esnode-key.pem
plugins.security.ssl.http.pemtrustedcas_filepath: root-ca.pem
plugins.security.allow_unsafe_democertificates: true
plugins.security.allow_default_init_securityindex: true
plugins.security.authcz.admin_dn:
  - CN=kirk,OU=client,O=client,L=test, C=de

plugins.security.audit.type: internal_opensearch
plugins.security.enable_snapshot_restore_privilege: true
plugins.security.check_snapshot_restore_write_privileges: true
plugins.security.restapi.roles_enabled: ["all_access", "security_rest_api_access"]
plugins.security.system_indices.enabled: true
plugins.security.system_indices.indices: [".opendistro-alerting-config", ".opendistro-alerting-alert*", ".opendistro-anomaly-results*", ".opendistro-anomaly-detector*", ".opendistro-anomaly-checkpoints", ".opendistro-anomaly-detection-state", ".opendistro-reports-*", ".opendistro-notifications-*", ".opendistro-notebooks", ".opensearch-observability", ".opendistro-asynchronous-search-response*", ".replication-metadata-store"]
node.max_local_storage_nodes: 3
######## End OpenSearch Security Demo Configuration ########
[2022-01-21T18:27:19,896][INFO ][o.o.n.Node               ] [55051492a18e] version[1.2.4], pid[106], build[tar/e505b10357c03ae8d26d675172402f2f2144ef0f/2022-01-14T03:38:06.881862Z], OS[Linux/<IP_ADDRESS>-microsoft-standard-WSL2/amd64], JVM[AdoptOpenJDK/OpenJDK 64-Bit Server VM/15.0.1/15.0.1+9]
[2022-01-21T18:27:19,899][INFO ][o.o.n.Node               ] [55051492a18e] JVM home [/usr/share/opensearch/jdk], using bundled JDK [true]
[2022-01-21T18:27:19,900][INFO ][o.o.n.Node               ] [55051492a18e] JVM arguments [-Xshare:auto, -Dopensearch.networkaddress.cache.ttl=60, -Dopensearch.networkaddress.cache.negative.ttl=10, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -XX:+ShowCodeDetailsInExceptionMessages, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dio.netty.allocator.numDirectArenas=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Djava.locale.providers=SPI,COMPAT, -Xms1g, -Xmx1g, -XX:+UseG1GC, -XX:G1ReservePercent=25, -XX:InitiatingHeapOccupancyPercent=30, -Djava.io.tmpdir=/tmp/opensearch-18168651246503789432, -XX:+HeapDumpOnOutOfMemoryError, -XX:HeapDumpPath=data, -XX:ErrorFile=logs/hs_err_pid%p.log, -Xlog:gc*,gc+age=trace,safepoint:file=logs/gc.log:utctime,pid,tags:filecount=32,filesize=64m, -Dclk.tck=100, -Djdk.attach.allowAttachSelf=true, -Djava.security.policy=/usr/share/opensearch/plugins/opensearch-performance-analyzer/pa_config/opensearch_security.policy, -Dopensearch.cgroups.hierarchy.override=/, -XX:MaxDirectMemorySize=536870912, -Dopensearch.path.home=/usr/share/opensearch, -Dopensearch.path.conf=/usr/share/opensearch/config, -Dopensearch.distribution.type=tar, -Dopensearch.bundled_jdk=true]
[2022-01-21T18:27:21,848][INFO ][o.o.s.s.t.SSLConfig      ] [55051492a18e] SSL dual mode is disabled
[2022-01-21T18:27:21,848][INFO ][o.o.s.OpenSearchSecurityPlugin] [55051492a18e] OpenSearch Config path is /usr/share/opensearch/config
[2022-01-21T18:27:22,187][INFO ][o.o.s.s.DefaultSecurityKeyStore] [55051492a18e] JVM supports TLSv1.3
[2022-01-21T18:27:22,189][INFO ][o.o.s.s.DefaultSecurityKeyStore] [55051492a18e] Config directory is /usr/share/opensearch/config/, from there the key- and truststore files are resolved relatively
[2022-01-21T18:27:23,038][INFO ][o.o.s.s.DefaultSecurityKeyStore] [55051492a18e] TLS Transport Client Provider : JDK
[2022-01-21T18:27:23,038][INFO ][o.o.s.s.DefaultSecurityKeyStore] [55051492a18e] TLS Transport Server Provider : JDK
[2022-01-21T18:27:23,038][INFO ][o.o.s.s.DefaultSecurityKeyStore] [55051492a18e] TLS HTTP Provider             : JDK
[2022-01-21T18:27:23,039][INFO ][o.o.s.s.DefaultSecurityKeyStore] [55051492a18e] Enabled TLS protocols for transport layer : [TLSv1.3, TLSv1.2, TLSv1.1]
[2022-01-21T18:27:23,039][INFO ][o.o.s.s.DefaultSecurityKeyStore] [55051492a18e] Enabled TLS protocols for HTTP layer      : [TLSv1.3, TLSv1.2, TLSv1.1]
[2022-01-21T18:27:23,381][INFO ][o.o.s.OpenSearchSecurityPlugin] [55051492a18e] Clustername: docker-cluster
[2022-01-21T18:27:23,389][WARN ][o.o.s.OpenSearchSecurityPlugin] [55051492a18e] Directory /usr/share/opensearch/config has insecure file permissions (should be 0700)
[2022-01-21T18:27:23,390][WARN ][o.o.s.OpenSearchSecurityPlugin] [55051492a18e] File /usr/share/opensearch/config/kirk-key.pem has insecure file permissions (should be 0600)
[2022-01-21T18:27:23,391][WARN ][o.o.s.OpenSearchSecurityPlugin] [55051492a18e] File /usr/share/opensearch/config/root-ca.pem has insecure file permissions (should be 0600)
[2022-01-21T18:27:23,392][WARN ][o.o.s.OpenSearchSecurityPlugin] [55051492a18e] File /usr/share/opensearch/config/kirk.pem has insecure file permissions (should be 0600)
[2022-01-21T18:27:23,393][WARN ][o.o.s.OpenSearchSecurityPlugin] [55051492a18e] File /usr/share/opensearch/config/esnode.pem has insecure file permissions (should be 0600)
[2022-01-21T18:27:23,394][WARN ][o.o.s.OpenSearchSecurityPlugin] [55051492a18e] File /usr/share/opensearch/config/esnode-key.pem has insecure file permissions (should be 0600)
[2022-01-21T18:27:23,591][INFO ][o.o.p.c.PluginSettings   ] [55051492a18e] Config: metricsLocation: /dev/shm/performanceanalyzer/, metricsDeletionInterval: 1, httpsEnabled: false, cleanup-metrics-db-files: true, batch-metrics-retention-period-minutes: 7, rpc-port: 9650, webservice-port 9600
[2022-01-21T18:27:24,217][INFO ][o.o.i.r.ReindexPlugin    ] [55051492a18e] ReindexPlugin reloadSPI called
[2022-01-21T18:27:24,218][INFO ][o.o.i.r.ReindexPlugin    ] [55051492a18e] Unable to find any implementation for RemoteReindexExtension
[2022-01-21T18:27:24,241][INFO ][o.o.j.JobSchedulerPlugin ] [55051492a18e] Loaded scheduler extension: opendistro-index-management, index: .opendistro-ism-config
[2022-01-21T18:27:24,248][INFO ][o.o.j.JobSchedulerPlugin ] [55051492a18e] Loaded scheduler extension: opendistro_anomaly_detector, index: .opendistro-anomaly-detector-jobs
[2022-01-21T18:27:24,289][INFO ][o.o.j.JobSchedulerPlugin ] [55051492a18e] Loaded scheduler extension: reports-scheduler, index: .opendistro-reports-definitions
[2022-01-21T18:27:24,292][INFO ][o.o.p.PluginsService     ] [55051492a18e] loaded module [aggs-matrix-stats]
[2022-01-21T18:27:24,292][INFO ][o.o.p.PluginsService     ] [55051492a18e] loaded module [analysis-common]
[2022-01-21T18:27:24,293][INFO ][o.o.p.PluginsService     ] [55051492a18e] loaded module [geo]
[2022-01-21T18:27:24,293][INFO ][o.o.p.PluginsService     ] [55051492a18e] loaded module [ingest-common]
[2022-01-21T18:27:24,293][INFO ][o.o.p.PluginsService     ] [55051492a18e] loaded module [ingest-geoip]
[2022-01-21T18:27:24,293][INFO ][o.o.p.PluginsService     ] [55051492a18e] loaded module [ingest-user-agent]
[2022-01-21T18:27:24,293][INFO ][o.o.p.PluginsService     ] [55051492a18e] loaded module [lang-expression]
[2022-01-21T18:27:24,294][INFO ][o.o.p.PluginsService     ] [55051492a18e] loaded module [lang-mustache]
[2022-01-21T18:27:24,294][INFO ][o.o.p.PluginsService     ] [55051492a18e] loaded module [lang-painless]
[2022-01-21T18:27:24,294][INFO ][o.o.p.PluginsService     ] [55051492a18e] loaded module [mapper-extras]
[2022-01-21T18:27:24,294][INFO ][o.o.p.PluginsService     ] [55051492a18e] loaded module [opensearch-dashboards]
[2022-01-21T18:27:24,295][INFO ][o.o.p.PluginsService     ] [55051492a18e] loaded module [parent-join]
[2022-01-21T18:27:24,296][INFO ][o.o.p.PluginsService     ] [55051492a18e] loaded module [percolator]
[2022-01-21T18:27:24,296][INFO ][o.o.p.PluginsService     ] [55051492a18e] loaded module [rank-eval]
[2022-01-21T18:27:24,296][INFO ][o.o.p.PluginsService     ] [55051492a18e] loaded module [reindex]
[2022-01-21T18:27:24,297][INFO ][o.o.p.PluginsService     ] [55051492a18e] loaded module [repository-url]
[2022-01-21T18:27:24,297][INFO ][o.o.p.PluginsService     ] [55051492a18e] loaded module [transport-netty4]
[2022-01-21T18:27:24,298][INFO ][o.o.p.PluginsService     ] [55051492a18e] loaded plugin [opensearch-alerting]
[2022-01-21T18:27:24,299][INFO ][o.o.p.PluginsService     ] [55051492a18e] loaded plugin [opensearch-anomaly-detection]
[2022-01-21T18:27:24,299][INFO ][o.o.p.PluginsService     ] [55051492a18e] loaded plugin [opensearch-asynchronous-search]
[2022-01-21T18:27:24,299][INFO ][o.o.p.PluginsService     ] [55051492a18e] loaded plugin [opensearch-cross-cluster-replication]
[2022-01-21T18:27:24,299][INFO ][o.o.p.PluginsService     ] [55051492a18e] loaded plugin [opensearch-index-management]
[2022-01-21T18:27:24,299][INFO ][o.o.p.PluginsService     ] [55051492a18e] loaded plugin [opensearch-job-scheduler]
[2022-01-21T18:27:24,299][INFO ][o.o.p.PluginsService     ] [55051492a18e] loaded plugin [opensearch-knn]
[2022-01-21T18:27:24,300][INFO ][o.o.p.PluginsService     ] [55051492a18e] loaded plugin [opensearch-observability]
[2022-01-21T18:27:24,300][INFO ][o.o.p.PluginsService     ] [55051492a18e] loaded plugin [opensearch-performance-analyzer]
[2022-01-21T18:27:24,300][INFO ][o.o.p.PluginsService     ] [55051492a18e] loaded plugin [opensearch-reports-scheduler]
[2022-01-21T18:27:24,300][INFO ][o.o.p.PluginsService     ] [55051492a18e] loaded plugin [opensearch-security]
[2022-01-21T18:27:24,300][INFO ][o.o.p.PluginsService     ] [55051492a18e] loaded plugin [opensearch-sql]
[2022-01-21T18:27:24,339][INFO ][o.o.s.OpenSearchSecurityPlugin] [55051492a18e] Disabled https compression by default to mitigate BREACH attacks. You can enable it by setting 'http.compression: true' in opensearch.yml
[2022-01-21T18:27:24,359][DEPRECATION][o.o.d.c.s.Settings       ] [55051492a18e] [node.max_local_storage_nodes] setting was deprecated in OpenSearch and will be removed in a future release! See the breaking changes documentation for the next major version.
[2022-01-21T18:27:24,372][INFO ][o.o.e.NodeEnvironment    ] [55051492a18e] using [1] data paths, mounts [[/ (overlay)]], net usable_space [216.6gb], net total_space [250.9gb], types [overlay]
[2022-01-21T18:27:24,372][INFO ][o.o.e.NodeEnvironment    ] [55051492a18e] heap size [1gb], compressed ordinary object pointers [true]
[2022-01-21T18:27:24,420][INFO ][o.o.n.Node               ] [55051492a18e] node name [55051492a18e], node ID [IoWgVOg1RyiTomEMKIiFnw], cluster name [docker-cluster], roles [master, remote_cluster_client, data, ingest]
[2022-01-21T18:27:26,929][DEPRECATION][o.o.d.c.s.Settings       ] [55051492a18e] [node.max_local_storage_nodes] setting was deprecated in OpenSearch and will be removed in a future release! See the breaking changes documentation for the next major version.
[2022-01-21T18:27:28,164][WARN ][o.o.s.c.Salt             ] [55051492a18e] If you plan to use field masking pls configure compliance salt e1ukloTsQlOgPquJ to be a random string of 16 chars length identical on all nodes
[2022-01-21T18:27:28,194][INFO ][o.o.s.a.i.AuditLogImpl   ] [55051492a18e] Message routing enabled: true
[2022-01-21T18:27:28,264][INFO ][o.o.s.f.SecurityFilter   ] [55051492a18e] <NONE> indices are made immutable.
[2022-01-21T18:27:28,615][INFO ][o.o.a.b.ADCircuitBreakerService] [55051492a18e] Registered memory breaker.
WARNING: An illegal reflective access operation has occurred
WARNING: Illegal reflective access by io.protostuff.runtime.PolymorphicThrowableSchema (file:/usr/share/opensearch/plugins/opensearch-anomaly-detection/protostuff-runtime-1.7.4.jar) to field java.lang.Throwable.cause
WARNING: Please consider reporting this to the maintainers of io.protostuff.runtime.PolymorphicThrowableSchema
WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations
WARNING: All illegal access operations will be denied in a future release
[2022-01-21T18:27:29,458][INFO ][o.o.t.NettyAllocator     ] [55051492a18e] creating NettyAllocator with the following configs: [name=unpooled, suggested_max_allocation_size=256kb, factors={opensearch.unsafe.use_unpooled_allocator=null, g1gc_enabled=true, g1gc_region_size=1mb, heap_size=1gb}]
[2022-01-21T18:27:29,647][INFO ][o.o.d.DiscoveryModule    ] [55051492a18e] using discovery type [single-node] and seed hosts providers [settings]
[2022-01-21T18:27:30,414][WARN ][o.o.g.DanglingIndicesState] [55051492a18e] gateway.auto_import_dangling_indices is disabled, dangling indices will not be automatically detected or imported and must be managed manually
[2022-01-21T18:27:30,915][INFO ][o.o.p.h.c.PerformanceAnalyzerConfigAction] [55051492a18e] PerformanceAnalyzer Enabled: false
[2022-01-21T18:27:31,006][INFO ][o.o.n.Node               ] [55051492a18e] initialized
[2022-01-21T18:27:31,006][INFO ][o.o.n.Node               ] [55051492a18e] starting ...
[2022-01-21T18:27:31,139][INFO ][o.o.t.TransportService   ] [55051492a18e] publish_address {<IP_ADDRESS>:9300}, bound_addresses {<IP_ADDRESS>:9300}
[2022-01-21T18:27:31,382][WARN ][o.o.b.BootstrapChecks    ] [55051492a18e] max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]
[2022-01-21T18:27:31,394][INFO ][o.o.c.c.Coordinator      ] [55051492a18e] setting initial configuration to VotingConfiguration{IoWgVOg1RyiTomEMKIiFnw}
[2022-01-21T18:27:31,612][INFO ][o.o.c.s.MasterService    ] [55051492a18e] elected-as-master ([1] nodes joined)[{55051492a18e}{IoWgVOg1RyiTomEMKIiFnw}{9XTkoE1KR0OWYJ9IpYqHJg}{<IP_ADDRESS>}{<IP_ADDRESS>:9300}{dimr}{shard_indexing_pressure_enabled=true} elect leader, _BECOME_MASTER_TASK_, _FINISH_ELECTION_], term: 1, version: 1, delta: master node changed {previous [], current [{55051492a18e}{IoWgVOg1RyiTomEMKIiFnw}{9XTkoE1KR0OWYJ9IpYqHJg}{<IP_ADDRESS>}{<IP_ADDRESS>:9300}{dimr}{shard_indexing_pressure_enabled=true}]}
[2022-01-21T18:27:31,678][INFO ][o.o.c.c.CoordinationState] [55051492a18e] cluster UUID set to [KMMSlu5NRQiECA1vdss2HA]
[2022-01-21T18:27:31,735][INFO ][o.o.c.s.ClusterApplierService] [55051492a18e] master node changed {previous [], current [{55051492a18e}{IoWgVOg1RyiTomEMKIiFnw}{9XTkoE1KR0OWYJ9IpYqHJg}{<IP_ADDRESS>}{<IP_ADDRESS>:9300}{dimr}{shard_indexing_pressure_enabled=true}]}, term: 1, version: 1, reason: Publication{term=1, version=1}
[2022-01-21T18:27:31,775][WARN ][o.o.p.c.s.h.ConfigOverridesClusterSettingHandler] [55051492a18e] Config override setting update called with empty string. Ignoring.
[2022-01-21T18:27:31,776][INFO ][o.o.a.c.ADClusterEventListener] [55051492a18e] Cluster is not recovered yet.
[2022-01-21T18:27:31,810][INFO ][o.o.h.AbstractHttpServerTransport] [55051492a18e] publish_address {<IP_ADDRESS>:9200}, bound_addresses {<IP_ADDRESS>:9200}
[2022-01-21T18:27:31,811][INFO ][o.o.n.Node               ] [55051492a18e] started
[2022-01-21T18:27:31,812][INFO ][o.o.s.OpenSearchSecurityPlugin] [55051492a18e] Node started
[2022-01-21T18:27:31,813][INFO ][o.o.s.c.ConfigurationRepository] [55051492a18e] Will attempt to create index .opendistro_security and default configs if they are absent
[2022-01-21T18:27:31,814][INFO ][o.o.s.c.ConfigurationRepository] [55051492a18e] Background init thread started. Install default config?: true
[2022-01-21T18:27:31,815][INFO ][o.o.s.OpenSearchSecurityPlugin] [55051492a18e] 0 OpenSearch Security modules loaded so far: []
[2022-01-21T18:27:31,889][INFO ][o.o.a.c.HashRing         ] [55051492a18e] Node added: [IoWgVOg1RyiTomEMKIiFnw]
[2022-01-21T18:27:31,897][INFO ][o.o.a.c.HashRing         ] [55051492a18e] Add data node to AD version hash ring: IoWgVOg1RyiTomEMKIiFnw
[2022-01-21T18:27:31,902][INFO ][o.o.a.c.HashRing         ] [55051492a18e] All nodes with known AD version: {IoWgVOg1RyiTomEMKIiFnw=ADNodeInfo{version=1.2.4, isEligibleDataNode=true}}
[2022-01-21T18:27:31,903][INFO ][o.o.a.c.HashRing         ] [55051492a18e] Rebuild AD hash ring for realtime AD with cooldown, nodeChangeEvents size 0
[2022-01-21T18:27:31,903][INFO ][o.o.a.c.HashRing         ] [55051492a18e] Build AD version hash ring successfully
[2022-01-21T18:27:31,904][INFO ][o.o.g.GatewayService     ] [55051492a18e] recovered [0] indices into cluster_state
[2022-01-21T18:27:31,907][INFO ][o.o.a.c.ADDataMigrator   ] [55051492a18e] Start migrating AD data
[2022-01-21T18:27:31,908][INFO ][o.o.a.c.ADDataMigrator   ] [55051492a18e] AD job index doesn't exist, no need to migrate
[2022-01-21T18:27:31,908][INFO ][o.o.a.c.ADClusterEventListener] [55051492a18e] Init AD version hash ring successfully
[2022-01-21T18:27:32,153][INFO ][o.o.c.m.MetadataCreateIndexService] [55051492a18e] [.opendistro_security] creating index, cause [api], templates [], shards [1]/[1]
[2022-01-21T18:27:32,179][INFO ][o.o.c.r.a.AllocationService] [55051492a18e] updating number_of_replicas to [0] for indices [.opendistro_security]
[2022-01-21T18:27:32,702][INFO ][o.o.c.r.a.AllocationService] [55051492a18e] Cluster health status changed from [YELLOW] to [GREEN] (reason: [shards started [[.opendistro_security][0]]]).
[2022-01-21T18:27:32,814][INFO ][o.o.s.c.ConfigurationRepository] [55051492a18e] Index .opendistro_security created?: true
[2022-01-21T18:27:32,814][INFO ][o.o.s.c.ConfigurationRepository] [55051492a18e] Node started, try to initialize it. Wait for at least yellow cluster state....
[2022-01-21T18:27:32,826][INFO ][o.o.s.s.ConfigHelper     ] [55051492a18e] Will update 'config' with /usr/share/opensearch/plugins/opensearch-security/securityconfig/config.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=false
[2022-01-21T18:27:33,127][INFO ][o.o.c.m.MetadataMappingService] [55051492a18e] [.opendistro_security/66ChaNb_R9exJnxs4nENhQ] create_mapping [_doc]
[2022-01-21T18:27:33,411][INFO ][o.o.s.s.ConfigHelper     ] [55051492a18e] Doc with id 'config' and version 2 is updated in .opendistro_security index.
[2022-01-21T18:27:33,411][INFO ][o.o.s.s.ConfigHelper     ] [55051492a18e] Will update 'roles' with /usr/share/opensearch/plugins/opensearch-security/securityconfig/roles.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=false
[2022-01-21T18:27:33,468][INFO ][o.o.c.m.MetadataMappingService] [55051492a18e] [.opendistro_security/66ChaNb_R9exJnxs4nENhQ] update_mapping [_doc]
[2022-01-21T18:27:33,565][INFO ][o.o.s.s.ConfigHelper     ] [55051492a18e] Doc with id 'roles' and version 2 is updated in .opendistro_security index.
[2022-01-21T18:27:33,565][INFO ][o.o.s.s.ConfigHelper     ] [55051492a18e] Will update 'rolesmapping' with /usr/share/opensearch/plugins/opensearch-security/securityconfig/roles_mapping.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=false
[2022-01-21T18:27:33,618][INFO ][o.o.c.m.MetadataMappingService] [55051492a18e] [.opendistro_security/66ChaNb_R9exJnxs4nENhQ] update_mapping [_doc]
[2022-01-21T18:27:33,719][INFO ][o.o.s.s.ConfigHelper     ] [55051492a18e] Doc with id 'rolesmapping' and version 2 is updated in .opendistro_security index.
[2022-01-21T18:27:33,719][INFO ][o.o.s.s.ConfigHelper     ] [55051492a18e] Will update 'internalusers' with /usr/share/opensearch/plugins/opensearch-security/securityconfig/internal_users.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=false
[2022-01-21T18:27:33,757][INFO ][o.o.c.m.MetadataMappingService] [55051492a18e] [.opendistro_security/66ChaNb_R9exJnxs4nENhQ] update_mapping [_doc]
[2022-01-21T18:27:33,822][INFO ][o.o.s.s.ConfigHelper     ] [55051492a18e] Doc with id 'internalusers' and version 2 is updated in .opendistro_security index.
[2022-01-21T18:27:33,822][INFO ][o.o.s.s.ConfigHelper     ] [55051492a18e] Will update 'actiongroups' with /usr/share/opensearch/plugins/opensearch-security/securityconfig/action_groups.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=false
[2022-01-21T18:27:33,854][INFO ][o.o.c.m.MetadataMappingService] [55051492a18e] [.opendistro_security/66ChaNb_R9exJnxs4nENhQ] update_mapping [_doc]
[2022-01-21T18:27:33,959][INFO ][o.o.s.s.ConfigHelper     ] [55051492a18e] Doc with id 'actiongroups' and version 2 is updated in .opendistro_security index.
[2022-01-21T18:27:33,960][INFO ][o.o.s.s.ConfigHelper     ] [55051492a18e] Will update 'tenants' with /usr/share/opensearch/plugins/opensearch-security/securityconfig/tenants.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=false
[2022-01-21T18:27:33,991][INFO ][o.o.c.m.MetadataMappingService] [55051492a18e] [.opendistro_security/66ChaNb_R9exJnxs4nENhQ] update_mapping [_doc]
[2022-01-21T18:27:34,085][INFO ][o.o.s.s.ConfigHelper     ] [55051492a18e] Doc with id 'tenants' and version 2 is updated in .opendistro_security index.
[2022-01-21T18:27:34,086][INFO ][o.o.s.s.ConfigHelper     ] [55051492a18e] Will update 'nodesdn' with /usr/share/opensearch/plugins/opensearch-security/securityconfig/nodes_dn.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=true
[2022-01-21T18:27:34,118][INFO ][o.o.c.m.MetadataMappingService] [55051492a18e] [.opendistro_security/66ChaNb_R9exJnxs4nENhQ] update_mapping [_doc]
[2022-01-21T18:27:34,198][INFO ][o.o.s.s.ConfigHelper     ] [55051492a18e] Doc with id 'nodesdn' and version 2 is updated in .opendistro_security index.
[2022-01-21T18:27:34,199][INFO ][o.o.s.s.ConfigHelper     ] [55051492a18e] Will update 'whitelist' with /usr/share/opensearch/plugins/opensearch-security/securityconfig/whitelist.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=true
[2022-01-21T18:27:34,219][INFO ][o.o.c.m.MetadataMappingService] [55051492a18e] [.opendistro_security/66ChaNb_R9exJnxs4nENhQ] update_mapping [_doc]
[2022-01-21T18:27:34,291][INFO ][o.o.s.s.ConfigHelper     ] [55051492a18e] Doc with id 'whitelist' and version 2 is updated in .opendistro_security index.
[2022-01-21T18:27:34,291][INFO ][o.o.s.s.ConfigHelper     ] [55051492a18e] Will update 'audit' with /usr/share/opensearch/plugins/opensearch-security/securityconfig/audit.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=false
[2022-01-21T18:27:34,344][INFO ][o.o.c.m.MetadataMappingService] [55051492a18e] [.opendistro_security/66ChaNb_R9exJnxs4nENhQ] update_mapping [_doc]
[2022-01-21T18:27:34,408][INFO ][o.o.s.s.ConfigHelper     ] [55051492a18e] Doc with id 'audit' and version 2 is updated in .opendistro_security index.
[2022-01-21T18:27:34,744][INFO ][stdout                   ] [55051492a18e] [FINE] No subscribers registered for event class org.opensearch.security.securityconf.DynamicConfigFactory$NodesDnModelImpl
[2022-01-21T18:27:34,745][INFO ][stdout                   ] [55051492a18e] [FINE] No subscribers registered for event class org.greenrobot.eventbus.NoSubscriberEvent
[2022-01-21T18:27:34,747][INFO ][o.o.s.a.i.AuditLogImpl   ] [55051492a18e] Auditing on REST API is enabled.
[2022-01-21T18:27:34,749][INFO ][o.o.s.a.i.AuditLogImpl   ] [55051492a18e] [AUTHENTICATED, GRANTED_PRIVILEGES] are excluded from REST API auditing.
[2022-01-21T18:27:34,750][INFO ][o.o.s.a.i.AuditLogImpl   ] [55051492a18e] Auditing on Transport API is enabled.
[2022-01-21T18:27:34,750][INFO ][o.o.s.a.i.AuditLogImpl   ] [55051492a18e] [AUTHENTICATED, GRANTED_PRIVILEGES] are excluded from Transport API auditing.
[2022-01-21T18:27:34,750][INFO ][o.o.s.a.i.AuditLogImpl   ] [55051492a18e] Auditing of request body is enabled.
[2022-01-21T18:27:34,751][INFO ][o.o.s.a.i.AuditLogImpl   ] [55051492a18e] Bulk requests resolution is disabled during request auditing.
[2022-01-21T18:27:34,751][INFO ][o.o.s.a.i.AuditLogImpl   ] [55051492a18e] Index resolution is enabled during request auditing.
[2022-01-21T18:27:34,751][INFO ][o.o.s.a.i.AuditLogImpl   ] [55051492a18e] Sensitive headers auditing is enabled.
[2022-01-21T18:27:34,751][INFO ][o.o.s.a.i.AuditLogImpl   ] [55051492a18e] Auditing requests from kibanaserver users is disabled.
[2022-01-21T18:27:34,762][WARN ][o.o.s.a.r.AuditMessageRouter] [55051492a18e] No endpoint configured for categories [BAD_HEADERS, FAILED_LOGIN, MISSING_PRIVILEGES, GRANTED_PRIVILEGES, OPENDISTRO_SECURITY_INDEX_ATTEMPT, SSL_EXCEPTION, AUTHENTICATED, INDEX_EVENT, COMPLIANCE_DOC_READ, COMPLIANCE_DOC_WRITE, COMPLIANCE_EXTERNAL_CONFIG, COMPLIANCE_INTERNAL_CONFIG_READ, COMPLIANCE_INTERNAL_CONFIG_WRITE], using default endpoint
[2022-01-21T18:27:34,762][INFO ][o.o.s.a.i.AuditLogImpl   ] [55051492a18e] Auditing of external configuration is disabled.
[2022-01-21T18:27:34,763][INFO ][o.o.s.a.i.AuditLogImpl   ] [55051492a18e] Auditing of internal configuration is enabled.
[2022-01-21T18:27:34,763][INFO ][o.o.s.a.i.AuditLogImpl   ] [55051492a18e] Auditing only metadata information for read request is enabled.
[2022-01-21T18:27:34,765][INFO ][o.o.s.a.i.AuditLogImpl   ] [55051492a18e] Auditing will watch {} for read requests.
[2022-01-21T18:27:34,766][INFO ][o.o.s.a.i.AuditLogImpl   ] [55051492a18e] Auditing read operation requests from kibanaserver users is disabled.
[2022-01-21T18:27:34,768][INFO ][o.o.s.a.i.AuditLogImpl   ] [55051492a18e] Auditing only metadata information for write request is enabled.
[2022-01-21T18:27:34,768][INFO ][o.o.s.a.i.AuditLogImpl   ] [55051492a18e] Auditing diffs for write requests is disabled.
[2022-01-21T18:27:34,768][INFO ][o.o.s.a.i.AuditLogImpl   ] [55051492a18e] Auditing write operation requests from kibanaserver users is disabled.
[2022-01-21T18:27:34,769][INFO ][o.o.s.a.i.AuditLogImpl   ] [55051492a18e] Auditing will watch <NONE> for write requests.
[2022-01-21T18:27:34,770][INFO ][o.o.s.a.i.AuditLogImpl   ] [55051492a18e] .opendistro_security is used as internal security index.
[2022-01-21T18:27:34,770][INFO ][o.o.s.a.i.AuditLogImpl   ] [55051492a18e] Internal index used for posting audit logs is null
[2022-01-21T18:27:34,771][INFO ][o.o.s.c.ConfigurationRepository] [55051492a18e] Hot-reloading of audit configuration is enabled
[2022-01-21T18:27:34,772][INFO ][o.o.s.c.ConfigurationRepository] [55051492a18e] Node '55051492a18e' initialized
[2022-01-21T18:28:31,769][INFO ][o.o.i.i.ManagedIndexCoordinator] [55051492a18e] Performing move cluster state metadata.

I am going to install podman and give it a try.  @q2dg Can you get the image id, and then could you attempt to pull it again and get the image id again?
>docker image ls opensearchproject/opensearch:latest
REPOSITORY                     TAG       IMAGE ID       CREATED      SIZE
opensearchproject/opensearch   latest    9ae13ad440d3   3 days ago   826MB

I setup an EC2 instance running the AMI ubuntu/images/hvm-ssd/ubuntu-focal-20.04-amd64-server-20211129 after installing podman following the instructions on its getting started page I was able to run
$ podman container run --rm --name=puto -e "discovery.type=single-node" -p 9200:9200 opensearchproject/opensearch:latest
✔ docker.io/opensearchproject/opensearch:latest
Trying to pull docker.io/opensearchproject/opensearch:latest...
Getting image source signatures
Copying blob 3a461b3ae562 done
Copying blob 906ed3bd695c done
Copying blob 4f11d5532c74 done
Copying blob 1682fbe93720 done
Copying blob 281f706dd97a done
Copying blob 2f071fa29f89 done
Copying config 9ae13ad440 done
Writing manifest to image destination
Storing signatures
Enabling execution of install_demo_configuration.sh for OpenSearch Security Plugin
...

Image ID matches what I saw when I started up docker on my windows machine
$ podman image ls opensearchproject/opensearch:latest
REPOSITORY                              TAG         IMAGE ID      CREATED     SIZE
docker.io/opensearchproject/opensearch  latest      9ae13ad440d3  3 days ago  834 MB

@q2dg we don't have much more action to take at this point as I cannot reproduce the issue you had.  Please run those image ls ... commands, also if you can copy the full docker output as text and paste it into these comments, it might help us figure out what went wrong better

Thanks a lot for you patience.
I'm running a last-minute updated Fedora 35 system (kernel v5.15.15, podman v3.4.4)
If I run podman container run --rm --name=puto -e "discovery.type=single-node" -p 9200:9200 opensearchproject/opensearch:latest I get:
Resolved "opensearchproject/opensearch" as an alias (/home/usuari/.cache/containers/short-name-aliases.conf)
Trying to pull docker.io/opensearchproject/opensearch:latest...
Getting image source signatures
Copying blob 906ed3bd695c done
Copying blob 1682fbe93720 done
Copying blob 4f11d5532c74 done
Copying blob 3a461b3ae562 done
Copying blob 281f706dd97a done
Copying blob 2f071fa29f89 done
Copying config 9ae13ad440 done
Writing manifest to image destination
Storing signatures
Enabling execution of install_demo_configuration.sh for OpenSearch Security Plugin
OpenSearch Security Demo Installer
 ** Warning: Do not use on production or public reachable systems **
Basedir: /usr/share/opensearch
OpenSearch install type: rpm/deb on NAME="Amazon Linux"
OpenSearch config dir: /usr/share/opensearch/config
OpenSearch config file: /usr/share/opensearch/config/opensearch.yml
OpenSearch bin dir: /usr/share/opensearch/bin
OpenSearch plugins dir: /usr/share/opensearch/plugins
OpenSearch lib dir: /usr/share/opensearch/lib
Detected OpenSearch Version: x-content-1.2.4
Detected OpenSearch Security Version: <IP_ADDRESS>

### Success
### Execute this script now on all your nodes and then start all nodes
### OpenSearch Security will be automatically initialized.
### If you like to change the runtime configuration
### change the files in ../securityconfig and execute:
"/usr/share/opensearch/plugins/opensearch-security/tools/securityadmin.sh" -cd "/usr/share/opensearch/plugins/opensearch-security/securityconfig" -icl -key "/usr/share/opensearch/config/kirk-key.pem" -cert "/usr/share/opensearch/config/kirk.pem" -cacert "/usr/share/opensearch/config/root-ca.pem" -nhnv
### or run ./securityadmin_demo.sh
### To use the Security Plugin ConfigurationGUI
### To access your secured cluster open https://<hostname>:<HTTP port> and log in with admin/admin.
### (Ignore the SSL certificate warning because we installed self-signed demo certificates)
Enabling OpenSearch Security Plugin
[2022-01-21T20:33:39,054][INFO ][o.o.n.Node               ] [f69642b92937] version[1.2.4], pid[100], build[tar/e505b10357c03ae8d26d675172402f2f2144ef0f/2022-01-14T03:38:06.881862Z], OS[Linux/5.15.15-200.fc35.x86_64/amd64], JVM[AdoptOpenJDK/OpenJDK 64-Bit Server VM/15.0.1/15.0.1+9]
[2022-01-21T20:33:39,059][INFO ][o.o.n.Node               ] [f69642b92937] JVM home [/usr/share/opensearch/jdk], using bundled JDK [true]
[2022-01-21T20:33:39,073][INFO ][o.o.n.Node               ] [f69642b92937] JVM arguments [-Xshare:auto, -Dopensearch.networkaddress.cache.ttl=60, -Dopensearch.networkaddress.cache.negative.ttl=10, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -XX:+ShowCodeDetailsInExceptionMessages, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dio.netty.allocator.numDirectArenas=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Djava.locale.providers=SPI,COMPAT, -Xms1g, -Xmx1g, -XX:+UseG1GC, -XX:G1ReservePercent=25, -XX:InitiatingHeapOccupancyPercent=30, -Djava.io.tmpdir=/tmp/opensearch-16540438191390975168, -XX:+HeapDumpOnOutOfMemoryError, -XX:HeapDumpPath=data, -XX:ErrorFile=logs/hs_err_pid%p.log, -Xlog:gc*,gc+age=trace,safepoint:file=logs/gc.log:utctime,pid,tags:filecount=32,filesize=64m, -Dclk.tck=100, -Djdk.attach.allowAttachSelf=true, -Djava.security.policy=/usr/share/opensearch/plugins/opensearch-performance-analyzer/pa_config/opensearch_security.policy, -Dopensearch.cgroups.hierarchy.override=/, -XX:MaxDirectMemorySize=536870912, -Dopensearch.path.home=/usr/share/opensearch, -Dopensearch.path.conf=/usr/share/opensearch/config, -Dopensearch.distribution.type=tar, -Dopensearch.bundled_jdk=true]
[2022-01-21T20:33:40,971][INFO ][o.o.s.s.t.SSLConfig      ] [f69642b92937] SSL dual mode is disabled
[2022-01-21T20:33:40,972][INFO ][o.o.s.OpenSearchSecurityPlugin] [f69642b92937] OpenSearch Config path is /usr/share/opensearch/config
[2022-01-21T20:33:41,468][INFO ][o.o.s.s.DefaultSecurityKeyStore] [f69642b92937] JVM supports TLSv1.3
[2022-01-21T20:33:41,470][INFO ][o.o.s.s.DefaultSecurityKeyStore] [f69642b92937] Config directory is /usr/share/opensearch/config/, from there the key- and truststore files are resolved relatively
[2022-01-21T20:33:41,571][ERROR][o.o.b.OpenSearchUncaughtExceptionHandler] [f69642b92937] uncaught exception in thread [main]
org.opensearch.bootstrap.StartupException: java.lang.IllegalStateException: failed to load plugin class [org.opensearch.security.OpenSearchSecurityPlugin]
	at org.opensearch.bootstrap.OpenSearch.init(OpenSearch.java:182) ~[opensearch-1.2.4.jar:1.2.4]
	at org.opensearch.bootstrap.OpenSearch.execute(OpenSearch.java:169) ~[opensearch-1.2.4.jar:1.2.4]
	at org.opensearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:100) ~[opensearch-1.2.4.jar:1.2.4]
	at org.opensearch.cli.Command.mainWithoutErrorHandling(Command.java:138) ~[opensearch-cli-1.2.4.jar:1.2.4]
	at org.opensearch.cli.Command.main(Command.java:101) ~[opensearch-cli-1.2.4.jar:1.2.4]
	at org.opensearch.bootstrap.OpenSearch.main(OpenSearch.java:135) ~[opensearch-1.2.4.jar:1.2.4]
	at org.opensearch.bootstrap.OpenSearch.main(OpenSearch.java:101) ~[opensearch-1.2.4.jar:1.2.4]
Caused by: java.lang.IllegalStateException: failed to load plugin class [org.opensearch.security.OpenSearchSecurityPlugin]
	at org.opensearch.plugins.PluginsService.loadPlugin(PluginsService.java:790) ~[opensearch-1.2.4.jar:1.2.4]
	at org.opensearch.plugins.PluginsService.loadBundle(PluginsService.java:726) ~[opensearch-1.2.4.jar:1.2.4]
	at org.opensearch.plugins.PluginsService.loadBundles(PluginsService.java:528) ~[opensearch-1.2.4.jar:1.2.4]
	at org.opensearch.plugins.PluginsService.<init>(PluginsService.java:194) ~[opensearch-1.2.4.jar:1.2.4]
	at org.opensearch.node.Node.<init>(Node.java:396) ~[opensearch-1.2.4.jar:1.2.4]
	at org.opensearch.node.Node.<init>(Node.java:319) ~[opensearch-1.2.4.jar:1.2.4]
	at org.opensearch.bootstrap.Bootstrap$5.<init>(Bootstrap.java:242) ~[opensearch-1.2.4.jar:1.2.4]
	at org.opensearch.bootstrap.Bootstrap.setup(Bootstrap.java:242) ~[opensearch-1.2.4.jar:1.2.4]
	at org.opensearch.bootstrap.Bootstrap.init(Bootstrap.java:412) ~[opensearch-1.2.4.jar:1.2.4]
	at org.opensearch.bootstrap.OpenSearch.init(OpenSearch.java:178) ~[opensearch-1.2.4.jar:1.2.4]
	... 6 more
Caused by: java.lang.reflect.InvocationTargetException
	at jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) ~[?:?]
	at jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:64) ~[?:?]
	at jdk.internal.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) ~[?:?]
	at java.lang.reflect.Constructor.newInstanceWithCaller(Constructor.java:500) ~[?:?]
	at java.lang.reflect.Constructor.newInstance(Constructor.java:481) ~[?:?]
	at org.opensearch.plugins.PluginsService.loadPlugin(PluginsService.java:781) ~[opensearch-1.2.4.jar:1.2.4]
	at org.opensearch.plugins.PluginsService.loadBundle(PluginsService.java:726) ~[opensearch-1.2.4.jar:1.2.4]
	at org.opensearch.plugins.PluginsService.loadBundles(PluginsService.java:528) ~[opensearch-1.2.4.jar:1.2.4]
	at org.opensearch.plugins.PluginsService.<init>(PluginsService.java:194) ~[opensearch-1.2.4.jar:1.2.4]
	at org.opensearch.node.Node.<init>(Node.java:396) ~[opensearch-1.2.4.jar:1.2.4]
	at org.opensearch.node.Node.<init>(Node.java:319) ~[opensearch-1.2.4.jar:1.2.4]
	at org.opensearch.bootstrap.Bootstrap$5.<init>(Bootstrap.java:242) ~[opensearch-1.2.4.jar:1.2.4]
	at org.opensearch.bootstrap.Bootstrap.setup(Bootstrap.java:242) ~[opensearch-1.2.4.jar:1.2.4]
	at org.opensearch.bootstrap.Bootstrap.init(Bootstrap.java:412) ~[opensearch-1.2.4.jar:1.2.4]
	at org.opensearch.bootstrap.OpenSearch.init(OpenSearch.java:178) ~[opensearch-1.2.4.jar:1.2.4]
	... 6 more
Caused by: org.opensearch.OpenSearchException: plugins.security.ssl.transport.keystore_filepath or plugins.security.ssl.transport.server.pemcert_filepath and plugins.security.ssl.transport.client.pemcert_filepath must be set if transport ssl is requested.
	at org.opensearch.security.ssl.DefaultSecurityKeyStore.initTransportSSLConfig(DefaultSecurityKeyStore.java:422) ~[?:?]
	at org.opensearch.security.ssl.DefaultSecurityKeyStore.initSSLConfig(DefaultSecurityKeyStore.java:258) ~[?:?]
	at org.opensearch.security.ssl.DefaultSecurityKeyStore.<init>(DefaultSecurityKeyStore.java:179) ~[?:?]
	at org.opensearch.security.ssl.OpenSearchSecuritySSLPlugin.<init>(OpenSearchSecuritySSLPlugin.java:218) ~[?:?]
	at org.opensearch.security.OpenSearchSecurityPlugin.<init>(OpenSearchSecurityPlugin.java:252) ~[?:?]
	at jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) ~[?:?]
	at jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:64) ~[?:?]
	at jdk.internal.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) ~[?:?]
	at java.lang.reflect.Constructor.newInstanceWithCaller(Constructor.java:500) ~[?:?]
	at java.lang.reflect.Constructor.newInstance(Constructor.java:481) ~[?:?]
	at org.opensearch.plugins.PluginsService.loadPlugin(PluginsService.java:781) ~[opensearch-1.2.4.jar:1.2.4]
	at org.opensearch.plugins.PluginsService.loadBundle(PluginsService.java:726) ~[opensearch-1.2.4.jar:1.2.4]
	at org.opensearch.plugins.PluginsService.loadBundles(PluginsService.java:528) ~[opensearch-1.2.4.jar:1.2.4]
	at org.opensearch.plugins.PluginsService.<init>(PluginsService.java:194) ~[opensearch-1.2.4.jar:1.2.4]
	at org.opensearch.node.Node.<init>(Node.java:396) ~[opensearch-1.2.4.jar:1.2.4]
	at org.opensearch.node.Node.<init>(Node.java:319) ~[opensearch-1.2.4.jar:1.2.4]
	at org.opensearch.bootstrap.Bootstrap$5.<init>(Bootstrap.java:242) ~[opensearch-1.2.4.jar:1.2.4]
	at org.opensearch.bootstrap.Bootstrap.setup(Bootstrap.java:242) ~[opensearch-1.2.4.jar:1.2.4]
	at org.opensearch.bootstrap.Bootstrap.init(Bootstrap.java:412) ~[opensearch-1.2.4.jar:1.2.4]
	at org.opensearch.bootstrap.OpenSearch.init(OpenSearch.java:178) ~[opensearch-1.2.4.jar:1.2.4]
	... 6 more
uncaught exception in thread [main]
java.lang.IllegalStateException: failed to load plugin class [org.opensearch.security.OpenSearchSecurityPlugin]
Likely root cause: OpenSearchException[plugins.security.ssl.transport.keystore_filepath or plugins.security.ssl.transport.server.pemcert_filepath and plugins.security.ssl.transport.client.pemcert_filepath must be set if transport ssl is requested.]
	at org.opensearch.security.ssl.DefaultSecurityKeyStore.initTransportSSLConfig(DefaultSecurityKeyStore.java:422)
	at org.opensearch.security.ssl.DefaultSecurityKeyStore.initSSLConfig(DefaultSecurityKeyStore.java:258)
	at org.opensearch.security.ssl.DefaultSecurityKeyStore.<init>(DefaultSecurityKeyStore.java:179)
	at org.opensearch.security.ssl.OpenSearchSecuritySSLPlugin.<init>(OpenSearchSecuritySSLPlugin.java:218)
	at org.opensearch.security.OpenSearchSecurityPlugin.<init>(OpenSearchSecurityPlugin.java:252)
	at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
	at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:64)
	at java.base/jdk.internal.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
	at java.base/java.lang.reflect.Constructor.newInstanceWithCaller(Constructor.java:500)
	at java.base/java.lang.reflect.Constructor.newInstance(Constructor.java:481)
	at org.opensearch.plugins.PluginsService.loadPlugin(PluginsService.java:781)
	at org.opensearch.plugins.PluginsService.loadBundle(PluginsService.java:726)
	at org.opensearch.plugins.PluginsService.loadBundles(PluginsService.java:528)
	at org.opensearch.plugins.PluginsService.<init>(PluginsService.java:194)
	at org.opensearch.node.Node.<init>(Node.java:396)
	at org.opensearch.node.Node.<init>(Node.java:319)
	at org.opensearch.bootstrap.Bootstrap$5.<init>(Bootstrap.java:242)
	at org.opensearch.bootstrap.Bootstrap.setup(Bootstrap.java:242)
	at org.opensearch.bootstrap.Bootstrap.init(Bootstrap.java:412)
	at org.opensearch.bootstrap.OpenSearch.init(OpenSearch.java:178)
	at org.opensearch.bootstrap.OpenSearch.execute(OpenSearch.java:169)
	at org.opensearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:100)
	at org.opensearch.cli.Command.mainWithoutErrorHandling(Command.java:138)
	at org.opensearch.cli.Command.main(Command.java:101)
	at org.opensearch.bootstrap.OpenSearch.main(OpenSearch.java:135)
	at org.opensearch.bootstrap.OpenSearch.main(OpenSearch.java:101)
For complete error details, refer to the log at /usr/share/opensearch/logs/opensearch.log
Killing performance analyzer process 101
OpenSearch exited with code 1
Performance analyzer exited with code 143

The output of podman image ls is:
REPOSITORY                              TAG         IMAGE ID      CREATED     SIZE
docker.io/opensearchproject/opensearch  latest      9ae13ad440d3  3 days ago  834 MB

BUT if I run podman container run --rm --name=puto -e "discovery.type=single-node" -p 9200:9200 opensearchproject/opensearch:1.2.3 I get this, instead:
Resolved "opensearchproject/opensearch" as an alias (/home/usuari/.cache/containers/short-name-aliases.conf)
Trying to pull docker.io/opensearchproject/opensearch:1.2.3...
Getting image source signatures
Copying blob 8b8a142162d2 done
Copying blob 5d5ff2b51d5a done
Copying blob a478f063859a done
Copying blob f4a5866299c0 done
Copying blob fa411a7d2505 done
Copying blob 3099d63a1eeb done
Copying config e72207c604 done
Writing manifest to image destination
Storing signatures
Enabling execution of install_demo_configuration.sh for OpenSearch Security Plugin
OpenSearch Security Demo Installer
 ** Warning: Do not use on production or public reachable systems **
Basedir: /usr/share/opensearch
OpenSearch install type: rpm/deb on NAME="Amazon Linux"
OpenSearch config dir: /usr/share/opensearch/config
OpenSearch config file: /usr/share/opensearch/config/opensearch.yml
OpenSearch bin dir: /usr/share/opensearch/bin
OpenSearch plugins dir: /usr/share/opensearch/plugins
OpenSearch lib dir: /usr/share/opensearch/lib
Detected OpenSearch Version: x-content-1.2.3
Detected OpenSearch Security Version: <IP_ADDRESS>

### Success
### Execute this script now on all your nodes and then start all nodes
### OpenSearch Security will be automatically initialized.
### If you like to change the runtime configuration
### change the files in ../securityconfig and execute:
"/usr/share/opensearch/plugins/opensearch-security/tools/securityadmin.sh" -cd "/usr/share/opensearch/plugins/opensearch-security/securityconfig" -icl -key "/usr/share/opensearch/config/kirk-key.pem" -cert "/usr/share/opensearch/config/kirk.pem" -cacert "/usr/share/opensearch/config/root-ca.pem" -nhnv
### or run ./securityadmin_demo.sh
### To use the Security Plugin ConfigurationGUI
### To access your secured cluster open https://<hostname>:<HTTP port> and log in with admin/admin.
### (Ignore the SSL certificate warning because we installed self-signed demo certificates)
Enabling OpenSearch Security Plugin
[2022-01-21T20:36:55,927][INFO ][o.o.n.Node               ] [755252261b9b] version[1.2.3], pid[98], build[tar/8a529d77c7432bc45b005ac1c4ba3b2741b57d4a/2021-12-21T01:36:21.407473Z], OS[Linux/5.15.15-200.fc35.x86_64/amd64], JVM[AdoptOpenJDK/OpenJDK 64-Bit Server VM/15.0.1/15.0.1+9]
[2022-01-21T20:36:55,931][INFO ][o.o.n.Node               ] [755252261b9b] JVM home [/usr/share/opensearch/jdk], using bundled JDK [true]
[2022-01-21T20:36:55,931][INFO ][o.o.n.Node               ] [755252261b9b] JVM arguments [-Xshare:auto, -Dopensearch.networkaddress.cache.ttl=60, -Dopensearch.networkaddress.cache.negative.ttl=10, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -XX:+ShowCodeDetailsInExceptionMessages, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dio.netty.allocator.numDirectArenas=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Djava.locale.providers=SPI,COMPAT, -Xms1g, -Xmx1g, -XX:+UseG1GC, -XX:G1ReservePercent=25, -XX:InitiatingHeapOccupancyPercent=30, -Djava.io.tmpdir=/tmp/opensearch-14041432674666057114, -XX:+HeapDumpOnOutOfMemoryError, -XX:HeapDumpPath=data, -XX:ErrorFile=logs/hs_err_pid%p.log, -Xlog:gc*,gc+age=trace,safepoint:file=logs/gc.log:utctime,pid,tags:filecount=32,filesize=64m, -Dclk.tck=100, -Djdk.attach.allowAttachSelf=true, -Djava.security.policy=/usr/share/opensearch/plugins/opensearch-performance-analyzer/pa_config/opensearch_security.policy, -Dopensearch.cgroups.hierarchy.override=/, -XX:MaxDirectMemorySize=536870912, -Dopensearch.path.home=/usr/share/opensearch, -Dopensearch.path.conf=/usr/share/opensearch/config, -Dopensearch.distribution.type=tar, -Dopensearch.bundled_jdk=true]
[2022-01-21T20:36:57,925][INFO ][o.o.s.s.t.SSLConfig      ] [755252261b9b] SSL dual mode is disabled
[2022-01-21T20:36:57,926][INFO ][o.o.s.OpenSearchSecurityPlugin] [755252261b9b] OpenSearch Config path is /usr/share/opensearch/config
[2022-01-21T20:36:58,571][INFO ][o.o.s.s.DefaultSecurityKeyStore] [755252261b9b] JVM supports TLSv1.3
[2022-01-21T20:36:58,574][INFO ][o.o.s.s.DefaultSecurityKeyStore] [755252261b9b] Config directory is /usr/share/opensearch/config/, from there the key- and truststore files are resolved relatively
[2022-01-21T20:36:59,663][INFO ][o.o.s.s.DefaultSecurityKeyStore] [755252261b9b] TLS Transport Client Provider : JDK
[2022-01-21T20:36:59,664][INFO ][o.o.s.s.DefaultSecurityKeyStore] [755252261b9b] TLS Transport Server Provider : JDK
[2022-01-21T20:36:59,665][INFO ][o.o.s.s.DefaultSecurityKeyStore] [755252261b9b] TLS HTTP Provider             : JDK
[2022-01-21T20:36:59,665][INFO ][o.o.s.s.DefaultSecurityKeyStore] [755252261b9b] Enabled TLS protocols for transport layer : [TLSv1.3, TLSv1.2, TLSv1.1]
[2022-01-21T20:36:59,666][INFO ][o.o.s.s.DefaultSecurityKeyStore] [755252261b9b] Enabled TLS protocols for HTTP layer      : [TLSv1.3, TLSv1.2, TLSv1.1]
[2022-01-21T20:37:00,218][INFO ][o.o.s.OpenSearchSecurityPlugin] [755252261b9b] Clustername: docker-cluster
[2022-01-21T20:37:00,232][WARN ][o.o.s.OpenSearchSecurityPlugin] [755252261b9b] Directory /usr/share/opensearch/config has insecure file permissions (should be 0700)
[2022-01-21T20:37:00,234][WARN ][o.o.s.OpenSearchSecurityPlugin] [755252261b9b] File /usr/share/opensearch/config/esnode-key.pem has insecure file permissions (should be 0600)
[2022-01-21T20:37:00,235][WARN ][o.o.s.OpenSearchSecurityPlugin] [755252261b9b] File /usr/share/opensearch/config/esnode.pem has insecure file permissions (should be 0600)
[2022-01-21T20:37:00,235][WARN ][o.o.s.OpenSearchSecurityPlugin] [755252261b9b] File /usr/share/opensearch/config/kirk-key.pem has insecure file permissions (should be 0600)
[2022-01-21T20:37:00,236][WARN ][o.o.s.OpenSearchSecurityPlugin] [755252261b9b] File /usr/share/opensearch/config/root-ca.pem has insecure file permissions (should be 0600)
[2022-01-21T20:37:00,237][WARN ][o.o.s.OpenSearchSecurityPlugin] [755252261b9b] File /usr/share/opensearch/config/kirk.pem has insecure file permissions (should be 0600)
[2022-01-21T20:37:00,527][INFO ][o.o.p.c.PluginSettings   ] [755252261b9b] Config: metricsLocation: /dev/shm/performanceanalyzer/, metricsDeletionInterval: 1, httpsEnabled: false, cleanup-metrics-db-files: true, batch-metrics-retention-period-minutes: 7, rpc-port: 9650, webservice-port 9600
[2022-01-21T20:37:01,647][INFO ][o.o.i.r.ReindexPlugin    ] [755252261b9b] ReindexPlugin reloadSPI called
[2022-01-21T20:37:01,649][INFO ][o.o.i.r.ReindexPlugin    ] [755252261b9b] Unable to find any implementation for RemoteReindexExtension
[2022-01-21T20:37:01,681][INFO ][o.o.j.JobSchedulerPlugin ] [755252261b9b] Loaded scheduler extension: opendistro-index-management, index: .opendistro-ism-config
[2022-01-21T20:37:01,722][INFO ][o.o.j.JobSchedulerPlugin ] [755252261b9b] Loaded scheduler extension: reports-scheduler, index: .opendistro-reports-definitions
[2022-01-21T20:37:01,734][INFO ][o.o.j.JobSchedulerPlugin ] [755252261b9b] Loaded scheduler extension: opendistro_anomaly_detector, index: .opendistro-anomaly-detector-jobs
[2022-01-21T20:37:01,745][INFO ][o.o.p.PluginsService     ] [755252261b9b] loaded module [aggs-matrix-stats]
[2022-01-21T20:37:01,746][INFO ][o.o.p.PluginsService     ] [755252261b9b] loaded module [analysis-common]
[2022-01-21T20:37:01,747][INFO ][o.o.p.PluginsService     ] [755252261b9b] loaded module [geo]
[2022-01-21T20:37:01,748][INFO ][o.o.p.PluginsService     ] [755252261b9b] loaded module [ingest-common]
[2022-01-21T20:37:01,749][INFO ][o.o.p.PluginsService     ] [755252261b9b] loaded module [ingest-geoip]
[2022-01-21T20:37:01,749][INFO ][o.o.p.PluginsService     ] [755252261b9b] loaded module [ingest-user-agent]
[2022-01-21T20:37:01,750][INFO ][o.o.p.PluginsService     ] [755252261b9b] loaded module [lang-expression]
[2022-01-21T20:37:01,751][INFO ][o.o.p.PluginsService     ] [755252261b9b] loaded module [lang-mustache]
[2022-01-21T20:37:01,752][INFO ][o.o.p.PluginsService     ] [755252261b9b] loaded module [lang-painless]
[2022-01-21T20:37:01,753][INFO ][o.o.p.PluginsService     ] [755252261b9b] loaded module [mapper-extras]
[2022-01-21T20:37:01,753][INFO ][o.o.p.PluginsService     ] [755252261b9b] loaded module [opensearch-dashboards]
[2022-01-21T20:37:01,754][INFO ][o.o.p.PluginsService     ] [755252261b9b] loaded module [parent-join]
[2022-01-21T20:37:01,754][INFO ][o.o.p.PluginsService     ] [755252261b9b] loaded module [percolator]
[2022-01-21T20:37:01,755][INFO ][o.o.p.PluginsService     ] [755252261b9b] loaded module [rank-eval]
[2022-01-21T20:37:01,755][INFO ][o.o.p.PluginsService     ] [755252261b9b] loaded module [reindex]
[2022-01-21T20:37:01,756][INFO ][o.o.p.PluginsService     ] [755252261b9b] loaded module [repository-url]
[2022-01-21T20:37:01,757][INFO ][o.o.p.PluginsService     ] [755252261b9b] loaded module [transport-netty4]
[2022-01-21T20:37:01,759][INFO ][o.o.p.PluginsService     ] [755252261b9b] loaded plugin [opensearch-alerting]
[2022-01-21T20:37:01,760][INFO ][o.o.p.PluginsService     ] [755252261b9b] loaded plugin [opensearch-anomaly-detection]
[2022-01-21T20:37:01,761][INFO ][o.o.p.PluginsService     ] [755252261b9b] loaded plugin [opensearch-asynchronous-search]
[2022-01-21T20:37:01,761][INFO ][o.o.p.PluginsService     ] [755252261b9b] loaded plugin [opensearch-cross-cluster-replication]
[2022-01-21T20:37:01,762][INFO ][o.o.p.PluginsService     ] [755252261b9b] loaded plugin [opensearch-index-management]
[2022-01-21T20:37:01,762][INFO ][o.o.p.PluginsService     ] [755252261b9b] loaded plugin [opensearch-job-scheduler]
[2022-01-21T20:37:01,763][INFO ][o.o.p.PluginsService     ] [755252261b9b] loaded plugin [opensearch-knn]
[2022-01-21T20:37:01,763][INFO ][o.o.p.PluginsService     ] [755252261b9b] loaded plugin [opensearch-observability]
[2022-01-21T20:37:01,766][INFO ][o.o.p.PluginsService     ] [755252261b9b] loaded plugin [opensearch-performance-analyzer]
[2022-01-21T20:37:01,766][INFO ][o.o.p.PluginsService     ] [755252261b9b] loaded plugin [opensearch-reports-scheduler]
[2022-01-21T20:37:01,767][INFO ][o.o.p.PluginsService     ] [755252261b9b] loaded plugin [opensearch-security]
[2022-01-21T20:37:01,768][INFO ][o.o.p.PluginsService     ] [755252261b9b] loaded plugin [opensearch-sql]
[2022-01-21T20:37:01,811][INFO ][o.o.s.OpenSearchSecurityPlugin] [755252261b9b] Disabled https compression by default to mitigate BREACH attacks. You can enable it by setting 'http.compression: true' in opensearch.yml
[2022-01-21T20:37:01,835][DEPRECATION][o.o.d.c.s.Settings       ] [755252261b9b] [node.max_local_storage_nodes] setting was deprecated in OpenSearch and will be removed in a future release! See the breaking changes documentation for the next major version.
[2022-01-21T20:37:01,853][INFO ][o.o.e.NodeEnvironment    ] [755252261b9b] using [1] data paths, mounts [[/ (overlay)]], net usable_space [3.8gb], net total_space [13.3gb], types [overlay]
[2022-01-21T20:37:01,854][INFO ][o.o.e.NodeEnvironment    ] [755252261b9b] heap size [1gb], compressed ordinary object pointers [true]
[2022-01-21T20:37:01,933][INFO ][o.o.n.Node               ] [755252261b9b] node name [755252261b9b], node ID [uJQNvbsQQEa6QU0b13iy3g], cluster name [docker-cluster], roles [master, remote_cluster_client, data, ingest]
[2022-01-21T20:37:05,581][DEPRECATION][o.o.d.c.s.Settings       ] [755252261b9b] [node.max_local_storage_nodes] setting was deprecated in OpenSearch and will be removed in a future release! See the breaking changes documentation for the next major version.
[2022-01-21T20:37:07,724][WARN ][o.o.s.c.Salt             ] [755252261b9b] If you plan to use field masking pls configure compliance salt e1ukloTsQlOgPquJ to be a random string of 16 chars length identical on all nodes
[2022-01-21T20:37:07,774][INFO ][o.o.s.a.i.AuditLogImpl   ] [755252261b9b] Message routing enabled: true
[2022-01-21T20:37:07,880][INFO ][o.o.s.f.SecurityFilter   ] [755252261b9b] <NONE> indices are made immutable.
[2022-01-21T20:37:08,512][INFO ][o.o.a.b.ADCircuitBreakerService] [755252261b9b] Registered memory breaker.
WARNING: An illegal reflective access operation has occurred
WARNING: Illegal reflective access by io.protostuff.runtime.PolymorphicThrowableSchema (file:/usr/share/opensearch/plugins/opensearch-anomaly-detection/protostuff-runtime-1.7.4.jar) to field java.lang.Throwable.cause
WARNING: Please consider reporting this to the maintainers of io.protostuff.runtime.PolymorphicThrowableSchema
WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations
WARNING: All illegal access operations will be denied in a future release
[2022-01-21T20:37:09,494][INFO ][o.o.t.NettyAllocator     ] [755252261b9b] creating NettyAllocator with the following configs: [name=unpooled, suggested_max_allocation_size=256kb, factors={opensearch.unsafe.use_unpooled_allocator=null, g1gc_enabled=true, g1gc_region_size=1mb, heap_size=1gb}]
[2022-01-21T20:37:09,657][INFO ][o.o.d.DiscoveryModule    ] [755252261b9b] using discovery type [single-node] and seed hosts providers [settings]
[2022-01-21T20:37:10,653][WARN ][o.o.g.DanglingIndicesState] [755252261b9b] gateway.auto_import_dangling_indices is disabled, dangling indices will not be automatically detected or imported and must be managed manually
[2022-01-21T20:37:11,211][INFO ][o.o.p.h.c.PerformanceAnalyzerConfigAction] [755252261b9b] PerformanceAnalyzer Enabled: false
[2022-01-21T20:37:11,430][INFO ][o.o.n.Node               ] [755252261b9b] initialized
[2022-01-21T20:37:11,431][INFO ][o.o.n.Node               ] [755252261b9b] starting ...
[2022-01-21T20:37:11,697][INFO ][o.o.t.TransportService   ] [755252261b9b] publish_address {<IP_ADDRESS>:9300}, bound_addresses {[::]:9300}
[2022-01-21T20:37:11,891][WARN ][o.o.b.BootstrapChecks    ] [755252261b9b] max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]
[2022-01-21T20:37:11,911][INFO ][o.o.c.c.Coordinator      ] [755252261b9b] setting initial configuration to VotingConfiguration{uJQNvbsQQEa6QU0b13iy3g}
[2022-01-21T20:37:12,135][INFO ][o.o.c.s.MasterService    ] [755252261b9b] elected-as-master ([1] nodes joined)[{755252261b9b}{uJQNvbsQQEa6QU0b13iy3g}{TmZjDDaMRFK32BTvfY4XJg}{<IP_ADDRESS>}{<IP_ADDRESS>:9300}{dimr}{shard_indexing_pressure_enabled=true} elect leader, _BECOME_MASTER_TASK_, _FINISH_ELECTION_], term: 1, version: 1, delta: master node changed {previous [], current [{755252261b9b}{uJQNvbsQQEa6QU0b13iy3g}{TmZjDDaMRFK32BTvfY4XJg}{<IP_ADDRESS>}{<IP_ADDRESS>:9300}{dimr}{shard_indexing_pressure_enabled=true}]}
[2022-01-21T20:37:12,210][INFO ][o.o.c.c.CoordinationState] [755252261b9b] cluster UUID set to [oJr_PrzZS72xXdeYH6zdEw]
[2022-01-21T20:37:12,226][INFO ][o.o.c.s.ClusterApplierService] [755252261b9b] master node changed {previous [], current [{755252261b9b}{uJQNvbsQQEa6QU0b13iy3g}{TmZjDDaMRFK32BTvfY4XJg}{<IP_ADDRESS>}{<IP_ADDRESS>:9300}{dimr}{shard_indexing_pressure_enabled=true}]}, term: 1, version: 1, reason: Publication{term=1, version=1}
[2022-01-21T20:37:12,262][WARN ][o.o.p.c.s.h.ConfigOverridesClusterSettingHandler] [755252261b9b] Config override setting update called with empty string. Ignoring.
[2022-01-21T20:37:12,265][INFO ][o.o.a.c.ADClusterEventListener] [755252261b9b] Cluster is not recovered yet.
[2022-01-21T20:37:12,311][INFO ][o.o.h.AbstractHttpServerTransport] [755252261b9b] publish_address {<IP_ADDRESS>:9200}, bound_addresses {[::]:9200}
[2022-01-21T20:37:12,312][INFO ][o.o.n.Node               ] [755252261b9b] started
[2022-01-21T20:37:12,313][INFO ][o.o.s.OpenSearchSecurityPlugin] [755252261b9b] Node started
[2022-01-21T20:37:12,314][INFO ][o.o.s.c.ConfigurationRepository] [755252261b9b] Will attempt to create index .opendistro_security and default configs if they are absent
[2022-01-21T20:37:12,316][INFO ][o.o.s.OpenSearchSecurityPlugin] [755252261b9b] 0 OpenSearch Security modules loaded so far: []
[2022-01-21T20:37:12,317][INFO ][o.o.s.c.ConfigurationRepository] [755252261b9b] Background init thread started. Install default config?: true
[2022-01-21T20:37:12,373][INFO ][o.o.a.c.HashRing         ] [755252261b9b] Node added: [uJQNvbsQQEa6QU0b13iy3g]
[2022-01-21T20:37:12,397][INFO ][o.o.a.c.HashRing         ] [755252261b9b] Add data node to AD version hash ring: uJQNvbsQQEa6QU0b13iy3g
[2022-01-21T20:37:12,417][INFO ][o.o.a.c.HashRing         ] [755252261b9b] All nodes with known AD version: {uJQNvbsQQEa6QU0b13iy3g=ADNodeInfo{version=1.2.3, isEligibleDataNode=true}}
[2022-01-21T20:37:12,418][INFO ][o.o.a.c.HashRing         ] [755252261b9b] Rebuild AD hash ring for realtime AD with cooldown, nodeChangeEvents size 0
[2022-01-21T20:37:12,419][INFO ][o.o.a.c.HashRing         ] [755252261b9b] Build AD version hash ring successfully
[2022-01-21T20:37:12,421][INFO ][o.o.g.GatewayService     ] [755252261b9b] recovered [0] indices into cluster_state
[2022-01-21T20:37:12,430][INFO ][o.o.a.c.ADDataMigrator   ] [755252261b9b] Start migrating AD data
[2022-01-21T20:37:12,431][INFO ][o.o.a.c.ADDataMigrator   ] [755252261b9b] AD job index doesn't exist, no need to migrate
[2022-01-21T20:37:12,432][INFO ][o.o.a.c.ADClusterEventListener] [755252261b9b] Init AD version hash ring successfully
[2022-01-21T20:37:12,691][INFO ][o.o.c.m.MetadataCreateIndexService] [755252261b9b] [.opendistro_security] creating index, cause [api], templates [], shards [1]/[1]
[2022-01-21T20:37:12,705][INFO ][o.o.c.r.a.AllocationService] [755252261b9b] updating number_of_replicas to [0] for indices [.opendistro_security]
[2022-01-21T20:37:12,990][INFO ][o.o.c.r.a.AllocationService] [755252261b9b] Cluster health status changed from [YELLOW] to [GREEN] (reason: [shards started [[.opendistro_security][0]]]).
[2022-01-21T20:37:13,041][INFO ][o.o.s.c.ConfigurationRepository] [755252261b9b] Index .opendistro_security created?: true
[2022-01-21T20:37:13,042][INFO ][o.o.s.c.ConfigurationRepository] [755252261b9b] Node started, try to initialize it. Wait for at least yellow cluster state....
[2022-01-21T20:37:13,046][INFO ][o.o.s.s.ConfigHelper     ] [755252261b9b] Will update 'config' with /usr/share/opensearch/plugins/opensearch-security/securityconfig/config.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=false
[2022-01-21T20:37:13,223][INFO ][o.o.c.m.MetadataMappingService] [755252261b9b] [.opendistro_security/hBXfg7FcTA6FmoO-qK9tIA] create_mapping [_doc]
[2022-01-21T20:37:13,386][INFO ][o.o.s.s.ConfigHelper     ] [755252261b9b] Doc with id 'config' and version 2 is updated in .opendistro_security index.
[2022-01-21T20:37:13,386][INFO ][o.o.s.s.ConfigHelper     ] [755252261b9b] Will update 'roles' with /usr/share/opensearch/plugins/opensearch-security/securityconfig/roles.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=false
[2022-01-21T20:37:13,421][INFO ][o.o.c.m.MetadataMappingService] [755252261b9b] [.opendistro_security/hBXfg7FcTA6FmoO-qK9tIA] update_mapping [_doc]
[2022-01-21T20:37:13,482][INFO ][o.o.s.s.ConfigHelper     ] [755252261b9b] Doc with id 'roles' and version 2 is updated in .opendistro_security index.
[2022-01-21T20:37:13,483][INFO ][o.o.s.s.ConfigHelper     ] [755252261b9b] Will update 'rolesmapping' with /usr/share/opensearch/plugins/opensearch-security/securityconfig/roles_mapping.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=false
[2022-01-21T20:37:13,524][INFO ][o.o.c.m.MetadataMappingService] [755252261b9b] [.opendistro_security/hBXfg7FcTA6FmoO-qK9tIA] update_mapping [_doc]
[2022-01-21T20:37:13,598][INFO ][o.o.s.s.ConfigHelper     ] [755252261b9b] Doc with id 'rolesmapping' and version 2 is updated in .opendistro_security index.
[2022-01-21T20:37:13,599][INFO ][o.o.s.s.ConfigHelper     ] [755252261b9b] Will update 'internalusers' with /usr/share/opensearch/plugins/opensearch-security/securityconfig/internal_users.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=false
[2022-01-21T20:37:13,624][INFO ][o.o.c.m.MetadataMappingService] [755252261b9b] [.opendistro_security/hBXfg7FcTA6FmoO-qK9tIA] update_mapping [_doc]
[2022-01-21T20:37:13,689][INFO ][o.o.s.s.ConfigHelper     ] [755252261b9b] Doc with id 'internalusers' and version 2 is updated in .opendistro_security index.
[2022-01-21T20:37:13,690][INFO ][o.o.s.s.ConfigHelper     ] [755252261b9b] Will update 'actiongroups' with /usr/share/opensearch/plugins/opensearch-security/securityconfig/action_groups.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=false
[2022-01-21T20:37:13,722][INFO ][o.o.c.m.MetadataMappingService] [755252261b9b] [.opendistro_security/hBXfg7FcTA6FmoO-qK9tIA] update_mapping [_doc]
[2022-01-21T20:37:13,784][INFO ][o.o.s.s.ConfigHelper     ] [755252261b9b] Doc with id 'actiongroups' and version 2 is updated in .opendistro_security index.
[2022-01-21T20:37:13,786][INFO ][o.o.s.s.ConfigHelper     ] [755252261b9b] Will update 'tenants' with /usr/share/opensearch/plugins/opensearch-security/securityconfig/tenants.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=false
[2022-01-21T20:37:13,802][INFO ][o.o.c.m.MetadataMappingService] [755252261b9b] [.opendistro_security/hBXfg7FcTA6FmoO-qK9tIA] update_mapping [_doc]
[2022-01-21T20:37:13,850][INFO ][o.o.s.s.ConfigHelper     ] [755252261b9b] Doc with id 'tenants' and version 2 is updated in .opendistro_security index.
[2022-01-21T20:37:13,851][INFO ][o.o.s.s.ConfigHelper     ] [755252261b9b] Will update 'nodesdn' with /usr/share/opensearch/plugins/opensearch-security/securityconfig/nodes_dn.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=true
[2022-01-21T20:37:13,882][INFO ][o.o.c.m.MetadataMappingService] [755252261b9b] [.opendistro_security/hBXfg7FcTA6FmoO-qK9tIA] update_mapping [_doc]
[2022-01-21T20:37:13,951][INFO ][o.o.s.s.ConfigHelper     ] [755252261b9b] Doc with id 'nodesdn' and version 2 is updated in .opendistro_security index.
[2022-01-21T20:37:13,952][INFO ][o.o.s.s.ConfigHelper     ] [755252261b9b] Will update 'whitelist' with /usr/share/opensearch/plugins/opensearch-security/securityconfig/whitelist.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=true
[2022-01-21T20:37:13,966][INFO ][o.o.c.m.MetadataMappingService] [755252261b9b] [.opendistro_security/hBXfg7FcTA6FmoO-qK9tIA] update_mapping [_doc]
[2022-01-21T20:37:14,019][INFO ][o.o.s.s.ConfigHelper     ] [755252261b9b] Doc with id 'whitelist' and version 2 is updated in .opendistro_security index.
[2022-01-21T20:37:14,020][INFO ][o.o.s.s.ConfigHelper     ] [755252261b9b] Will update 'audit' with /usr/share/opensearch/plugins/opensearch-security/securityconfig/audit.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=false
[2022-01-21T20:37:14,062][INFO ][o.o.c.m.MetadataMappingService] [755252261b9b] [.opendistro_security/hBXfg7FcTA6FmoO-qK9tIA] update_mapping [_doc]
[2022-01-21T20:37:14,129][INFO ][o.o.s.s.ConfigHelper     ] [755252261b9b] Doc with id 'audit' and version 2 is updated in .opendistro_security index.
[2022-01-21T20:37:14,349][INFO ][stdout                   ] [755252261b9b] [FINE] No subscribers registered for event class org.opensearch.security.securityconf.DynamicConfigFactory$NodesDnModelImpl
[2022-01-21T20:37:14,350][INFO ][stdout                   ] [755252261b9b] [FINE] No subscribers registered for event class org.greenrobot.eventbus.NoSubscriberEvent
[2022-01-21T20:37:14,352][INFO ][o.o.s.a.i.AuditLogImpl   ] [755252261b9b] Auditing on REST API is enabled.
[2022-01-21T20:37:14,355][INFO ][o.o.s.a.i.AuditLogImpl   ] [755252261b9b] [AUTHENTICATED, GRANTED_PRIVILEGES] are excluded from REST API auditing.
[2022-01-21T20:37:14,356][INFO ][o.o.s.a.i.AuditLogImpl   ] [755252261b9b] Auditing on Transport API is enabled.
[2022-01-21T20:37:14,356][INFO ][o.o.s.a.i.AuditLogImpl   ] [755252261b9b] [AUTHENTICATED, GRANTED_PRIVILEGES] are excluded from Transport API auditing.
[2022-01-21T20:37:14,357][INFO ][o.o.s.a.i.AuditLogImpl   ] [755252261b9b] Auditing of request body is enabled.
[2022-01-21T20:37:14,358][INFO ][o.o.s.a.i.AuditLogImpl   ] [755252261b9b] Bulk requests resolution is disabled during request auditing.
[2022-01-21T20:37:14,358][INFO ][o.o.s.a.i.AuditLogImpl   ] [755252261b9b] Index resolution is enabled during request auditing.
[2022-01-21T20:37:14,359][INFO ][o.o.s.a.i.AuditLogImpl   ] [755252261b9b] Sensitive headers auditing is enabled.
[2022-01-21T20:37:14,359][INFO ][o.o.s.a.i.AuditLogImpl   ] [755252261b9b] Auditing requests from kibanaserver users is disabled.
[2022-01-21T20:37:14,371][WARN ][o.o.s.a.r.AuditMessageRouter] [755252261b9b] No endpoint configured for categories [BAD_HEADERS, FAILED_LOGIN, MISSING_PRIVILEGES, GRANTED_PRIVILEGES, OPENDISTRO_SECURITY_INDEX_ATTEMPT, SSL_EXCEPTION, AUTHENTICATED, INDEX_EVENT, COMPLIANCE_DOC_READ, COMPLIANCE_DOC_WRITE, COMPLIANCE_EXTERNAL_CONFIG, COMPLIANCE_INTERNAL_CONFIG_READ, COMPLIANCE_INTERNAL_CONFIG_WRITE], using default endpoint
[2022-01-21T20:37:14,372][INFO ][o.o.s.a.i.AuditLogImpl   ] [755252261b9b] Auditing of external configuration is disabled.
[2022-01-21T20:37:14,372][INFO ][o.o.s.a.i.AuditLogImpl   ] [755252261b9b] Auditing of internal configuration is enabled.
[2022-01-21T20:37:14,373][INFO ][o.o.s.a.i.AuditLogImpl   ] [755252261b9b] Auditing only metadata information for read request is enabled.
[2022-01-21T20:37:14,373][INFO ][o.o.s.a.i.AuditLogImpl   ] [755252261b9b] Auditing will watch {} for read requests.
[2022-01-21T20:37:14,374][INFO ][o.o.s.a.i.AuditLogImpl   ] [755252261b9b] Auditing read operation requests from kibanaserver users is disabled.
[2022-01-21T20:37:14,375][INFO ][o.o.s.a.i.AuditLogImpl   ] [755252261b9b] Auditing only metadata information for write request is enabled.
[2022-01-21T20:37:14,376][INFO ][o.o.s.a.i.AuditLogImpl   ] [755252261b9b] Auditing diffs for write requests is disabled.
[2022-01-21T20:37:14,376][INFO ][o.o.s.a.i.AuditLogImpl   ] [755252261b9b] Auditing write operation requests from kibanaserver users is disabled.
[2022-01-21T20:37:14,377][INFO ][o.o.s.a.i.AuditLogImpl   ] [755252261b9b] Auditing will watch <NONE> for write requests.
[2022-01-21T20:37:14,379][INFO ][o.o.s.a.i.AuditLogImpl   ] [755252261b9b] .opendistro_security is used as internal security index.
[2022-01-21T20:37:14,380][INFO ][o.o.s.a.i.AuditLogImpl   ] [755252261b9b] Internal index used for posting audit logs is null
[2022-01-21T20:37:14,381][INFO ][o.o.s.c.ConfigurationRepository] [755252261b9b] Hot-reloading of audit configuration is enabled
[2022-01-21T20:37:14,382][INFO ][o.o.s.c.ConfigurationRepository] [755252261b9b] Node '755252261b9b' initialized

The output of podman image ls now is:
REPOSITORY                              TAG         IMAGE ID      CREATED      SIZE
docker.io/opensearchproject/opensearch  latest      9ae13ad440d3  3 days ago   834 MB
docker.io/opensearchproject/opensearch  1.2.3       e72207c604f2  4 weeks ago  845 MB

Thanks a lot again!!

Details from my ubuntu machine
$ uname -srm
Linux 5.11.0-1022-aws x86_64

$ podman --version
podman version 3.4.2

OpenSearch 1.2.4 container startup
$ podman container run --rm --name=puto -e "discovery.type=single-node" -p 9200:9200 opensearchproject/opensearch:latest
Enabling execution of install_demo_configuration.sh for OpenSearch Security Plugin
OpenSearch Security Demo Installer
 ** Warning: Do not use on production or public reachable systems **
Basedir: /usr/share/opensearch
OpenSearch install type: rpm/deb on NAME="Amazon Linux"
OpenSearch config dir: /usr/share/opensearch/config
OpenSearch config file: /usr/share/opensearch/config/opensearch.yml
OpenSearch bin dir: /usr/share/opensearch/bin
OpenSearch plugins dir: /usr/share/opensearch/plugins
OpenSearch lib dir: /usr/share/opensearch/lib
Detected OpenSearch Version: x-content-1.2.4
Detected OpenSearch Security Version: <IP_ADDRESS>

### Success
### Execute this script now on all your nodes and then start all nodes
### OpenSearch Security will be automatically initialized.
### If you like to change the runtime configuration
### change the files in ../securityconfig and execute:
"/usr/share/opensearch/plugins/opensearch-security/tools/securityadmin.sh" -cd "/usr/share/opensearch/plugins/opensearch-security/securityconfig" -icl -key "/usr/share/opensearch/config/kirk-key.pem" -cert "/usr/share/opensearch/config/kirk.pem" -cacert "/usr/share/opensearch/config/root-ca.pem" -nhnv
### or run ./securityadmin_demo.sh
### To use the Security Plugin ConfigurationGUI
### To access your secured cluster open https://<hostname>:<HTTP port> and log in with admin/admin.
### (Ignore the SSL certificate warning because we installed self-signed demo certificates)
Enabling OpenSearch Security Plugin
cluster.name: docker-cluster

# Bind to all interfaces because we don't know what IP address Docker will assign to us.
network.host: <IP_ADDRESS>

# # minimum_master_nodes need to be explicitly set when bound on a public IP
# # set to 1 to allow single node clusters
# discovery.zen.minimum_master_nodes: 1

# Setting network.host to a non-loopback address enables the annoying bootstrap checks. "Single-node" mode disables them again.
#discovery.type: single-node

######## Start OpenSearch Security Demo Configuration ########
# WARNING: revise all the lines below before you go into production
plugins.security.ssl.transport.pemcert_filepath: esnode.pem
plugins.security.ssl.transport.pemkey_filepath: esnode-key.pem
plugins.security.ssl.transport.pemtrustedcas_filepath: root-ca.pem
plugins.security.ssl.transport.enforce_hostname_verification: false
plugins.security.ssl.http.enabled: true
plugins.security.ssl.http.pemcert_filepath: esnode.pem
plugins.security.ssl.http.pemkey_filepath: esnode-key.pem
plugins.security.ssl.http.pemtrustedcas_filepath: root-ca.pem
plugins.security.allow_unsafe_democertificates: true
plugins.security.allow_default_init_securityindex: true
plugins.security.authcz.admin_dn:
  - CN=kirk,OU=client,O=client,L=test, C=de

plugins.security.audit.type: internal_opensearch
plugins.security.enable_snapshot_restore_privilege: true
plugins.security.check_snapshot_restore_write_privileges: true
plugins.security.restapi.roles_enabled: ["all_access", "security_rest_api_access"]
plugins.security.system_indices.enabled: true
plugins.security.system_indices.indices: [".opendistro-alerting-config", ".opendistro-alerting-alert*", ".opendistro-anomaly-results*", ".opendistro-anomaly-detector*", ".opendistro-anomaly-checkpoints", ".opendistro-anomaly-detection-state", ".opendistro-reports-*", ".opendistro-notifications-*", ".opendistro-notebooks", ".opensearch-observability", ".opendistro-asynchronous-search-response*", ".replication-metadata-store"]
node.max_local_storage_nodes: 3
######## End OpenSearch Security Demo Configuration ########
[2022-01-21T20:51:26,163][INFO ][o.o.n.Node               ] [ed72c33e58d0] version[1.2.4], pid[100], build[tar/e505b10357c03ae8d26d675172402f2f2144ef0f/2022-01-14T03:38:06.881862Z], OS[Linux/5.11.0-1022-aws/amd64], JVM[AdoptOpenJDK/OpenJDK 64-Bit Server VM/15.0.1/15.0.1+9]
[2022-01-21T20:51:26,164][INFO ][o.o.n.Node               ] [ed72c33e58d0] JVM home [/usr/share/opensearch/jdk], using bundled JDK [true]
[2022-01-21T20:51:26,164][INFO ][o.o.n.Node               ] [ed72c33e58d0] JVM arguments [-Xshare:auto, -Dopensearch.networkaddress.cache.ttl=60, -Dopensearch.networkaddress.cache.negative.ttl=10, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -XX:+ShowCodeDetailsInExceptionMessages, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dio.netty.allocator.numDirectArenas=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Djava.locale.providers=SPI,COMPAT, -Xms1g, -Xmx1g, -XX:+UseG1GC, -XX:G1ReservePercent=25, -XX:InitiatingHeapOccupancyPercent=30, -Djava.io.tmpdir=/tmp/opensearch-13408943986752946482, -XX:+HeapDumpOnOutOfMemoryError, -XX:HeapDumpPath=data, -XX:ErrorFile=logs/hs_err_pid%p.log, -Xlog:gc*,gc+age=trace,safepoint:file=logs/gc.log:utctime,pid,tags:filecount=32,filesize=64m, -Dclk.tck=100, -Djdk.attach.allowAttachSelf=true, -Djava.security.policy=/usr/share/opensearch/plugins/opensearch-performance-analyzer/pa_config/opensearch_security.policy, -Dopensearch.cgroups.hierarchy.override=/, -XX:MaxDirectMemorySize=536870912, -Dopensearch.path.home=/usr/share/opensearch, -Dopensearch.path.conf=/usr/share/opensearch/config, -Dopensearch.distribution.type=tar, -Dopensearch.bundled_jdk=true]
[2022-01-21T20:51:26,928][INFO ][o.o.s.s.t.SSLConfig      ] [ed72c33e58d0] SSL dual mode is disabled
[2022-01-21T20:51:26,928][INFO ][o.o.s.OpenSearchSecurityPlugin] [ed72c33e58d0] OpenSearch Config path is /usr/share/opensearch/config
[2022-01-21T20:51:27,097][INFO ][o.o.s.s.DefaultSecurityKeyStore] [ed72c33e58d0] JVM supports TLSv1.3
[2022-01-21T20:51:27,098][INFO ][o.o.s.s.DefaultSecurityKeyStore] [ed72c33e58d0] Config directory is /usr/share/opensearch/config/, from there the key- and truststore files are resolved relatively
[2022-01-21T20:51:27,495][INFO ][o.o.s.s.DefaultSecurityKeyStore] [ed72c33e58d0] TLS Transport Client Provider : JDK
[2022-01-21T20:51:27,496][INFO ][o.o.s.s.DefaultSecurityKeyStore] [ed72c33e58d0] TLS Transport Server Provider : JDK
[2022-01-21T20:51:27,496][INFO ][o.o.s.s.DefaultSecurityKeyStore] [ed72c33e58d0] TLS HTTP Provider             : JDK
[2022-01-21T20:51:27,496][INFO ][o.o.s.s.DefaultSecurityKeyStore] [ed72c33e58d0] Enabled TLS protocols for transport layer : [TLSv1.3, TLSv1.2, TLSv1.1]
[2022-01-21T20:51:27,496][INFO ][o.o.s.s.DefaultSecurityKeyStore] [ed72c33e58d0] Enabled TLS protocols for HTTP layer      : [TLSv1.3, TLSv1.2, TLSv1.1]
[2022-01-21T20:51:27,653][INFO ][o.o.s.OpenSearchSecurityPlugin] [ed72c33e58d0] Clustername: docker-cluster
[2022-01-21T20:51:27,656][WARN ][o.o.s.OpenSearchSecurityPlugin] [ed72c33e58d0] Directory /usr/share/opensearch/config has insecure file permissions (should be 0700)
[2022-01-21T20:51:27,657][WARN ][o.o.s.OpenSearchSecurityPlugin] [ed72c33e58d0] File /usr/share/opensearch/config/kirk-key.pem has insecure file permissions (should be 0600)
[2022-01-21T20:51:27,657][WARN ][o.o.s.OpenSearchSecurityPlugin] [ed72c33e58d0] File /usr/share/opensearch/config/kirk.pem has insecure file permissions (should be 0600)
[2022-01-21T20:51:27,657][WARN ][o.o.s.OpenSearchSecurityPlugin] [ed72c33e58d0] File /usr/share/opensearch/config/esnode-key.pem has insecure file permissions (should be 0600)
[2022-01-21T20:51:27,657][WARN ][o.o.s.OpenSearchSecurityPlugin] [ed72c33e58d0] File /usr/share/opensearch/config/root-ca.pem has insecure file permissions (should be 0600)
[2022-01-21T20:51:27,657][WARN ][o.o.s.OpenSearchSecurityPlugin] [ed72c33e58d0] File /usr/share/opensearch/config/esnode.pem has insecure file permissions (should be 0600)
[2022-01-21T20:51:27,785][INFO ][o.o.p.c.PluginSettings   ] [ed72c33e58d0] Config: metricsLocation: /dev/shm/performanceanalyzer/, metricsDeletionInterval: 1, httpsEnabled: false, cleanup-metrics-db-files: true, batch-metrics-retention-period-minutes: 7, rpc-port: 9650, webservice-port 9600
[2022-01-21T20:51:28,110][INFO ][o.o.i.r.ReindexPlugin    ] [ed72c33e58d0] ReindexPlugin reloadSPI called
[2022-01-21T20:51:28,111][INFO ][o.o.i.r.ReindexPlugin    ] [ed72c33e58d0] Unable to find any implementation for RemoteReindexExtension
[2022-01-21T20:51:28,119][INFO ][o.o.j.JobSchedulerPlugin ] [ed72c33e58d0] Loaded scheduler extension: opendistro-index-management, index: .opendistro-ism-config
[2022-01-21T20:51:28,137][INFO ][o.o.j.JobSchedulerPlugin ] [ed72c33e58d0] Loaded scheduler extension: reports-scheduler, index: .opendistro-reports-definitions
[2022-01-21T20:51:28,140][INFO ][o.o.j.JobSchedulerPlugin ] [ed72c33e58d0] Loaded scheduler extension: opendistro_anomaly_detector, index: .opendistro-anomaly-detector-jobs
[2022-01-21T20:51:28,141][INFO ][o.o.p.PluginsService     ] [ed72c33e58d0] loaded module [aggs-matrix-stats]
[2022-01-21T20:51:28,141][INFO ][o.o.p.PluginsService     ] [ed72c33e58d0] loaded module [analysis-common]
[2022-01-21T20:51:28,141][INFO ][o.o.p.PluginsService     ] [ed72c33e58d0] loaded module [geo]
[2022-01-21T20:51:28,141][INFO ][o.o.p.PluginsService     ] [ed72c33e58d0] loaded module [ingest-common]
[2022-01-21T20:51:28,141][INFO ][o.o.p.PluginsService     ] [ed72c33e58d0] loaded module [ingest-geoip]
[2022-01-21T20:51:28,141][INFO ][o.o.p.PluginsService     ] [ed72c33e58d0] loaded module [ingest-user-agent]
[2022-01-21T20:51:28,141][INFO ][o.o.p.PluginsService     ] [ed72c33e58d0] loaded module [lang-expression]
[2022-01-21T20:51:28,141][INFO ][o.o.p.PluginsService     ] [ed72c33e58d0] loaded module [lang-mustache]
[2022-01-21T20:51:28,142][INFO ][o.o.p.PluginsService     ] [ed72c33e58d0] loaded module [lang-painless]
[2022-01-21T20:51:28,142][INFO ][o.o.p.PluginsService     ] [ed72c33e58d0] loaded module [mapper-extras]
[2022-01-21T20:51:28,142][INFO ][o.o.p.PluginsService     ] [ed72c33e58d0] loaded module [opensearch-dashboards]
[2022-01-21T20:51:28,142][INFO ][o.o.p.PluginsService     ] [ed72c33e58d0] loaded module [parent-join]
[2022-01-21T20:51:28,142][INFO ][o.o.p.PluginsService     ] [ed72c33e58d0] loaded module [percolator]
[2022-01-21T20:51:28,142][INFO ][o.o.p.PluginsService     ] [ed72c33e58d0] loaded module [rank-eval]
[2022-01-21T20:51:28,142][INFO ][o.o.p.PluginsService     ] [ed72c33e58d0] loaded module [reindex]
[2022-01-21T20:51:28,142][INFO ][o.o.p.PluginsService     ] [ed72c33e58d0] loaded module [repository-url]
[2022-01-21T20:51:28,142][INFO ][o.o.p.PluginsService     ] [ed72c33e58d0] loaded module [transport-netty4]
[2022-01-21T20:51:28,142][INFO ][o.o.p.PluginsService     ] [ed72c33e58d0] loaded plugin [opensearch-alerting]
[2022-01-21T20:51:28,142][INFO ][o.o.p.PluginsService     ] [ed72c33e58d0] loaded plugin [opensearch-anomaly-detection]
[2022-01-21T20:51:28,142][INFO ][o.o.p.PluginsService     ] [ed72c33e58d0] loaded plugin [opensearch-asynchronous-search]
[2022-01-21T20:51:28,142][INFO ][o.o.p.PluginsService     ] [ed72c33e58d0] loaded plugin [opensearch-cross-cluster-replication]
[2022-01-21T20:51:28,142][INFO ][o.o.p.PluginsService     ] [ed72c33e58d0] loaded plugin [opensearch-index-management]
[2022-01-21T20:51:28,142][INFO ][o.o.p.PluginsService     ] [ed72c33e58d0] loaded plugin [opensearch-job-scheduler]
[2022-01-21T20:51:28,142][INFO ][o.o.p.PluginsService     ] [ed72c33e58d0] loaded plugin [opensearch-knn]
[2022-01-21T20:51:28,143][INFO ][o.o.p.PluginsService     ] [ed72c33e58d0] loaded plugin [opensearch-observability]
[2022-01-21T20:51:28,143][INFO ][o.o.p.PluginsService     ] [ed72c33e58d0] loaded plugin [opensearch-performance-analyzer]
[2022-01-21T20:51:28,143][INFO ][o.o.p.PluginsService     ] [ed72c33e58d0] loaded plugin [opensearch-reports-scheduler]
[2022-01-21T20:51:28,143][INFO ][o.o.p.PluginsService     ] [ed72c33e58d0] loaded plugin [opensearch-security]
[2022-01-21T20:51:28,143][INFO ][o.o.p.PluginsService     ] [ed72c33e58d0] loaded plugin [opensearch-sql]
[2022-01-21T20:51:28,154][INFO ][o.o.s.OpenSearchSecurityPlugin] [ed72c33e58d0] Disabled https compression by default to mitigate BREACH attacks. You can enable it by setting 'http.compression: true' in opensearch.yml
[2022-01-21T20:51:28,162][DEPRECATION][o.o.d.c.s.Settings       ] [ed72c33e58d0] [node.max_local_storage_nodes] setting was deprecated in OpenSearch and will be removed in a futurerelease! See the breaking changes documentation for the next major version.
[2022-01-21T20:51:28,167][INFO ][o.o.e.NodeEnvironment    ] [ed72c33e58d0] using [1] data paths, mounts [[/ (overlay)]], net usable_space [16.7gb], net total_space [19.3gb], types [overlay]
[2022-01-21T20:51:28,167][INFO ][o.o.e.NodeEnvironment    ] [ed72c33e58d0] heap size [1gb], compressed ordinary object pointers [true]
[2022-01-21T20:51:28,190][INFO ][o.o.n.Node               ] [ed72c33e58d0] node name [ed72c33e58d0], node ID [5UejpQUtStKGrOmtmw621A], cluster name [docker-cluster], roles [master,remote_cluster_client, data, ingest]
[2022-01-21T20:51:29,484][DEPRECATION][o.o.d.c.s.Settings       ] [ed72c33e58d0] [node.max_local_storage_nodes] setting was deprecated in OpenSearch and will be removed in a futurerelease! See the breaking changes documentation for the next major version.
[2022-01-21T20:51:30,132][WARN ][o.o.s.c.Salt             ] [ed72c33e58d0] If you plan to use field masking pls configure compliance salt e1ukloTsQlOgPquJ to be a random string of 16 chars length identical on all nodes
[2022-01-21T20:51:30,147][INFO ][o.o.s.a.i.AuditLogImpl   ] [ed72c33e58d0] Message routing enabled: true
[2022-01-21T20:51:30,179][INFO ][o.o.s.f.SecurityFilter   ] [ed72c33e58d0] <NONE> indices are made immutable.
[2022-01-21T20:51:30,377][INFO ][o.o.a.b.ADCircuitBreakerService] [ed72c33e58d0] Registered memory breaker.
WARNING: An illegal reflective access operation has occurred
WARNING: Illegal reflective access by io.protostuff.runtime.PolymorphicThrowableSchema (file:/usr/share/opensearch/plugins/opensearch-anomaly-detection/protostuff-runtime-1.7.4.jar) to field java.lang.Throwable.cause
WARNING: Please consider reporting this to the maintainers of io.protostuff.runtime.PolymorphicThrowableSchema
WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations
WARNING: All illegal access operations will be denied in a future release
[2022-01-21T20:51:30,759][INFO ][o.o.t.NettyAllocator     ] [ed72c33e58d0] creating NettyAllocator with the following configs: [name=unpooled, suggested_max_allocation_size=256kb, factors={opensearch.unsafe.use_unpooled_allocator=null, g1gc_enabled=true, g1gc_region_size=1mb, heap_size=1gb}]
[2022-01-21T20:51:30,815][INFO ][o.o.d.DiscoveryModule    ] [ed72c33e58d0] using discovery type [single-node] and seed hosts providers [settings]
[2022-01-21T20:51:31,077][WARN ][o.o.g.DanglingIndicesState] [ed72c33e58d0] gateway.auto_import_dangling_indices is disabled, dangling indices will not be automatically detected orimported and must be managed manually
[2022-01-21T20:51:31,310][INFO ][o.o.p.h.c.PerformanceAnalyzerConfigAction] [ed72c33e58d0] PerformanceAnalyzer Enabled: false
[2022-01-21T20:51:31,347][INFO ][o.o.n.Node               ] [ed72c33e58d0] initialized
[2022-01-21T20:51:31,347][INFO ][o.o.n.Node               ] [ed72c33e58d0] starting ...
[2022-01-21T20:51:31,413][INFO ][o.o.t.TransportService   ] [ed72c33e58d0] publish_address {<IP_ADDRESS>:9300}, bound_addresses {[::]:9300}
[2022-01-21T20:51:31,517][WARN ][o.o.b.BootstrapChecks    ] [ed72c33e58d0] max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]
[2022-01-21T20:51:31,522][INFO ][o.o.c.c.Coordinator      ] [ed72c33e58d0] setting initial configuration to VotingConfiguration{5UejpQUtStKGrOmtmw621A}
[2022-01-21T20:51:31,627][INFO ][o.o.c.s.MasterService    ] [ed72c33e58d0] elected-as-master ([1] nodes joined)[{ed72c33e58d0}{5UejpQUtStKGrOmtmw621A}{tjhrPtLMSrqQnomjZM0lDg}{<IP_ADDRESS>}{<IP_ADDRESS>:9300}{dimr}{shard_indexing_pressure_enabled=true} elect leader, _BECOME_MASTER_TASK_, _FINISH_ELECTION_], term: 1, version: 1, delta: master node changed {previous[], current [{ed72c33e58d0}{5UejpQUtStKGrOmtmw621A}{tjhrPtLMSrqQnomjZM0lDg}{<IP_ADDRESS>}{<IP_ADDRESS>:9300}{dimr}{shard_indexing_pressure_enabled=true}]}
[2022-01-21T20:51:31,642][INFO ][o.o.c.c.CoordinationState] [ed72c33e58d0] cluster UUID set to [o6uOVvnoTMazwR-mp-fSvg]
[2022-01-21T20:51:31,652][INFO ][o.o.c.s.ClusterApplierService] [ed72c33e58d0] master node changed {previous [], current [{ed72c33e58d0}{5UejpQUtStKGrOmtmw621A}{tjhrPtLMSrqQnomjZM0lDg}{<IP_ADDRESS>}{<IP_ADDRESS>:9300}{dimr}{shard_indexing_pressure_enabled=true}]}, term: 1, version: 1, reason: Publication{term=1, version=1}
[2022-01-21T20:51:31,662][WARN ][o.o.p.c.s.h.ConfigOverridesClusterSettingHandler] [ed72c33e58d0] Config override setting update called with empty string. Ignoring.
[2022-01-21T20:51:31,662][INFO ][o.o.a.c.ADClusterEventListener] [ed72c33e58d0] Cluster is not recovered yet.
[2022-01-21T20:51:31,671][INFO ][o.o.h.AbstractHttpServerTransport] [ed72c33e58d0] publish_address {<IP_ADDRESS>:9200}, bound_addresses {[::]:9200}
[2022-01-21T20:51:31,671][INFO ][o.o.n.Node               ] [ed72c33e58d0] started
[2022-01-21T20:51:31,671][INFO ][o.o.s.OpenSearchSecurityPlugin] [ed72c33e58d0] Node started
[2022-01-21T20:51:31,671][INFO ][o.o.s.c.ConfigurationRepository] [ed72c33e58d0] Will attempt to create index .opendistro_security and default configs if they are absent
[2022-01-21T20:51:31,671][INFO ][o.o.s.c.ConfigurationRepository] [ed72c33e58d0] Background init thread started. Install default config?: true
[2022-01-21T20:51:31,672][INFO ][o.o.s.OpenSearchSecurityPlugin] [ed72c33e58d0] 0 OpenSearch Security modules loaded so far: []
[2022-01-21T20:51:31,694][INFO ][o.o.a.c.HashRing         ] [ed72c33e58d0] Node added: [5UejpQUtStKGrOmtmw621A]
[2022-01-21T20:51:31,696][INFO ][o.o.a.c.HashRing         ] [ed72c33e58d0] Add data node to AD version hash ring: 5UejpQUtStKGrOmtmw621A
[2022-01-21T20:51:31,697][INFO ][o.o.a.c.HashRing         ] [ed72c33e58d0] All nodes with known AD version: {5UejpQUtStKGrOmtmw621A=ADNodeInfo{version=1.2.4, isEligibleDataNode=true}}
[2022-01-21T20:51:31,698][INFO ][o.o.a.c.HashRing         ] [ed72c33e58d0] Rebuild AD hash ring for realtime AD with cooldown, nodeChangeEvents size 0
[2022-01-21T20:51:31,698][INFO ][o.o.a.c.HashRing         ] [ed72c33e58d0] Build AD version hash ring successfully
[2022-01-21T20:51:31,698][INFO ][o.o.g.GatewayService     ] [ed72c33e58d0] recovered [0] indices into cluster_state
[2022-01-21T20:51:31,698][INFO ][o.o.a.c.ADDataMigrator   ] [ed72c33e58d0] Start migrating AD data
[2022-01-21T20:51:31,698][INFO ][o.o.a.c.ADDataMigrator   ] [ed72c33e58d0] AD job index doesn't exist, no need to migrate
[2022-01-21T20:51:31,698][INFO ][o.o.a.c.ADClusterEventListener] [ed72c33e58d0] Init AD version hash ring successfully
[2022-01-21T20:51:31,777][INFO ][o.o.c.m.MetadataCreateIndexService] [ed72c33e58d0] [.opendistro_security] creating index, cause [api], templates [], shards [1]/[1]
[2022-01-21T20:51:31,783][INFO ][o.o.c.r.a.AllocationService] [ed72c33e58d0] updating number_of_replicas to [0] for indices [.opendistro_security]
[2022-01-21T20:51:31,902][INFO ][o.o.c.r.a.AllocationService] [ed72c33e58d0] Cluster health status changed from [YELLOW] to [GREEN] (reason: [shards started [[.opendistro_security][0]]]).
[2022-01-21T20:51:31,917][INFO ][o.o.s.c.ConfigurationRepository] [ed72c33e58d0] Index .opendistro_security created?: true
[2022-01-21T20:51:31,917][INFO ][o.o.s.c.ConfigurationRepository] [ed72c33e58d0] Node started, try to initialize it. Wait for at least yellow cluster state....
[2022-01-21T20:51:31,920][INFO ][o.o.s.s.ConfigHelper     ] [ed72c33e58d0] Will update 'config' with /usr/share/opensearch/plugins/opensearch-security/securityconfig/config.yml andpopulate it with empty doc if file missing and populateEmptyIfFileMissing=false
[2022-01-21T20:51:31,992][INFO ][o.o.c.m.MetadataMappingService] [ed72c33e58d0] [.opendistro_security/86obLAvWQvWRrPetbOduvg] create_mapping [_doc]
[2022-01-21T20:51:32,046][INFO ][o.o.s.s.ConfigHelper     ] [ed72c33e58d0] Doc with id 'config' and version 2 is updated in .opendistro_security index.
[2022-01-21T20:51:32,046][INFO ][o.o.s.s.ConfigHelper     ] [ed72c33e58d0] Will update 'roles' with /usr/share/opensearch/plugins/opensearch-security/securityconfig/roles.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=false
[2022-01-21T20:51:32,059][INFO ][o.o.c.m.MetadataMappingService] [ed72c33e58d0] [.opendistro_security/86obLAvWQvWRrPetbOduvg] update_mapping [_doc]
[2022-01-21T20:51:32,082][INFO ][o.o.s.s.ConfigHelper     ] [ed72c33e58d0] Doc with id 'roles' and version 2 is updated in .opendistro_security index.
[2022-01-21T20:51:32,082][INFO ][o.o.s.s.ConfigHelper     ] [ed72c33e58d0] Will update 'rolesmapping' with /usr/share/opensearch/plugins/opensearch-security/securityconfig/roles_mapping.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=false
[2022-01-21T20:51:32,095][INFO ][o.o.c.m.MetadataMappingService] [ed72c33e58d0] [.opendistro_security/86obLAvWQvWRrPetbOduvg] update_mapping [_doc]
[2022-01-21T20:51:32,114][INFO ][o.o.s.s.ConfigHelper     ] [ed72c33e58d0] Doc with id 'rolesmapping' and version 2 is updated in .opendistro_security index.
[2022-01-21T20:51:32,114][INFO ][o.o.s.s.ConfigHelper     ] [ed72c33e58d0] Will update 'internalusers' with /usr/share/opensearch/plugins/opensearch-security/securityconfig/internal_users.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=false
[2022-01-21T20:51:32,127][INFO ][o.o.c.m.MetadataMappingService] [ed72c33e58d0] [.opendistro_security/86obLAvWQvWRrPetbOduvg] update_mapping [_doc]
[2022-01-21T20:51:32,146][INFO ][o.o.s.s.ConfigHelper     ] [ed72c33e58d0] Doc with id 'internalusers' and version 2 is updated in .opendistro_security index.
[2022-01-21T20:51:32,146][INFO ][o.o.s.s.ConfigHelper     ] [ed72c33e58d0] Will update 'actiongroups' with /usr/share/opensearch/plugins/opensearch-security/securityconfig/action_groups.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=false
[2022-01-21T20:51:32,156][INFO ][o.o.c.m.MetadataMappingService] [ed72c33e58d0] [.opendistro_security/86obLAvWQvWRrPetbOduvg] update_mapping [_doc]
[2022-01-21T20:51:32,178][INFO ][o.o.s.s.ConfigHelper     ] [ed72c33e58d0] Doc with id 'actiongroups' and version 2 is updated in .opendistro_security index.
[2022-01-21T20:51:32,178][INFO ][o.o.s.s.ConfigHelper     ] [ed72c33e58d0] Will update 'tenants' with /usr/share/opensearch/plugins/opensearch-security/securityconfig/tenants.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=false
[2022-01-21T20:51:32,189][INFO ][o.o.c.m.MetadataMappingService] [ed72c33e58d0] [.opendistro_security/86obLAvWQvWRrPetbOduvg] update_mapping [_doc]
[2022-01-21T20:51:32,206][INFO ][o.o.s.s.ConfigHelper     ] [ed72c33e58d0] Doc with id 'tenants' and version 2 is updated in .opendistro_security index.
[2022-01-21T20:51:32,206][INFO ][o.o.s.s.ConfigHelper     ] [ed72c33e58d0] Will update 'nodesdn' with /usr/share/opensearch/plugins/opensearch-security/securityconfig/nodes_dn.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=true
[2022-01-21T20:51:32,214][INFO ][o.o.c.m.MetadataMappingService] [ed72c33e58d0] [.opendistro_security/86obLAvWQvWRrPetbOduvg] update_mapping [_doc]
[2022-01-21T20:51:32,232][INFO ][o.o.s.s.ConfigHelper     ] [ed72c33e58d0] Doc with id 'nodesdn' and version 2 is updated in .opendistro_security index.
[2022-01-21T20:51:32,232][INFO ][o.o.s.s.ConfigHelper     ] [ed72c33e58d0] Will update 'whitelist' with /usr/share/opensearch/plugins/opensearch-security/securityconfig/whitelist.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=true
[2022-01-21T20:51:32,240][INFO ][o.o.c.m.MetadataMappingService] [ed72c33e58d0] [.opendistro_security/86obLAvWQvWRrPetbOduvg] update_mapping [_doc]
[2022-01-21T20:51:32,257][INFO ][o.o.s.s.ConfigHelper     ] [ed72c33e58d0] Doc with id 'whitelist' and version 2 is updated in .opendistro_security index.
[2022-01-21T20:51:32,257][INFO ][o.o.s.s.ConfigHelper     ] [ed72c33e58d0] Will update 'audit' with /usr/share/opensearch/plugins/opensearch-security/securityconfig/audit.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=false
[2022-01-21T20:51:32,277][INFO ][o.o.c.m.MetadataMappingService] [ed72c33e58d0] [.opendistro_security/86obLAvWQvWRrPetbOduvg] update_mapping [_doc]
[2022-01-21T20:51:32,293][INFO ][o.o.s.s.ConfigHelper     ] [ed72c33e58d0] Doc with id 'audit' and version 2 is updated in .opendistro_security index.
[2022-01-21T20:51:32,370][INFO ][stdout                   ] [ed72c33e58d0] [FINE] No subscribers registered for event class org.opensearch.security.securityconf.DynamicConfigFactory$NodesDnModelImpl
[2022-01-21T20:51:32,371][INFO ][stdout                   ] [ed72c33e58d0] [FINE] No subscribers registered for event class org.greenrobot.eventbus.NoSubscriberEvent
[2022-01-21T20:51:32,371][INFO ][o.o.s.a.i.AuditLogImpl   ] [ed72c33e58d0] Auditing on REST API is enabled.
[2022-01-21T20:51:32,372][INFO ][o.o.s.a.i.AuditLogImpl   ] [ed72c33e58d0] [AUTHENTICATED, GRANTED_PRIVILEGES] are excluded from REST API auditing.
[2022-01-21T20:51:32,372][INFO ][o.o.s.a.i.AuditLogImpl   ] [ed72c33e58d0] Auditing on Transport API is enabled.
[2022-01-21T20:51:32,372][INFO ][o.o.s.a.i.AuditLogImpl   ] [ed72c33e58d0] [AUTHENTICATED, GRANTED_PRIVILEGES] are excluded from Transport API auditing.
[2022-01-21T20:51:32,372][INFO ][o.o.s.a.i.AuditLogImpl   ] [ed72c33e58d0] Auditing of request body is enabled.
[2022-01-21T20:51:32,372][INFO ][o.o.s.a.i.AuditLogImpl   ] [ed72c33e58d0] Bulk requests resolution is disabled during request auditing.
[2022-01-21T20:51:32,372][INFO ][o.o.s.a.i.AuditLogImpl   ] [ed72c33e58d0] Index resolution is enabled during request auditing.
[2022-01-21T20:51:32,372][INFO ][o.o.s.a.i.AuditLogImpl   ] [ed72c33e58d0] Sensitive headers auditing is enabled.
[2022-01-21T20:51:32,372][INFO ][o.o.s.a.i.AuditLogImpl   ] [ed72c33e58d0] Auditing requests from kibanaserver users is disabled.
[2022-01-21T20:51:32,374][WARN ][o.o.s.a.r.AuditMessageRouter] [ed72c33e58d0] No endpoint configured for categories [BAD_HEADERS, FAILED_LOGIN, MISSING_PRIVILEGES, GRANTED_PRIVILEGES, OPENDISTRO_SECURITY_INDEX_ATTEMPT, SSL_EXCEPTION, AUTHENTICATED, INDEX_EVENT, COMPLIANCE_DOC_READ, COMPLIANCE_DOC_WRITE, COMPLIANCE_EXTERNAL_CONFIG, COMPLIANCE_INTERNAL_CONFIG_READ, COMPLIANCE_INTERNAL_CONFIG_WRITE], using default endpoint
[2022-01-21T20:51:32,374][INFO ][o.o.s.a.i.AuditLogImpl   ] [ed72c33e58d0] Auditing of external configuration is disabled.
[2022-01-21T20:51:32,374][INFO ][o.o.s.a.i.AuditLogImpl   ] [ed72c33e58d0] Auditing of internal configuration is enabled.
[2022-01-21T20:51:32,374][INFO ][o.o.s.a.i.AuditLogImpl   ] [ed72c33e58d0] Auditing only metadata information for read request is enabled.
[2022-01-21T20:51:32,374][INFO ][o.o.s.a.i.AuditLogImpl   ] [ed72c33e58d0] Auditing will watch {} for read requests.
[2022-01-21T20:51:32,374][INFO ][o.o.s.a.i.AuditLogImpl   ] [ed72c33e58d0] Auditing read operation requests from kibanaserver users is disabled.
[2022-01-21T20:51:32,374][INFO ][o.o.s.a.i.AuditLogImpl   ] [ed72c33e58d0] Auditing only metadata information for write request is enabled.
[2022-01-21T20:51:32,374][INFO ][o.o.s.a.i.AuditLogImpl   ] [ed72c33e58d0] Auditing diffs for write requests is disabled.
[2022-01-21T20:51:32,374][INFO ][o.o.s.a.i.AuditLogImpl   ] [ed72c33e58d0] Auditing write operation requests from kibanaserver users is disabled.
[2022-01-21T20:51:32,374][INFO ][o.o.s.a.i.AuditLogImpl   ] [ed72c33e58d0] Auditing will watch <NONE> for write requests.
[2022-01-21T20:51:32,374][INFO ][o.o.s.a.i.AuditLogImpl   ] [ed72c33e58d0] .opendistro_security is used as internal security index.
[2022-01-21T20:51:32,374][INFO ][o.o.s.a.i.AuditLogImpl   ] [ed72c33e58d0] Internal index used for posting audit logs is null
[2022-01-21T20:51:32,375][INFO ][o.o.s.c.ConfigurationRepository] [ed72c33e58d0] Hot-reloading of audit configuration is enabled
[2022-01-21T20:51:32,375][INFO ][o.o.s.c.ConfigurationRepository] [ed72c33e58d0] Node 'ed72c33e58d0' initialized

When look at at a diff between the different images outputs, after the line Enabling OpenSearch Security Plugin, the whole of the output is catted and an string subsitution takes place, it looks like that is missing from your image.
https://github.com/opensearch-project/opensearch-build/blob/eb7c932e78f5995fad5433291f0ac6bc55efde61/docker/release/config/opensearch/opensearch-docker-entrypoint.sh#L72-L73
The failure is on the left and the operational one on the right

I think you'll need to inspect if the cat / sed / tee commands are failing which is aborting the rest of the script execution.
Adding @peterzhuamazon in case you have any debugging advice

Well, you're true!
I've entered (by executing podman exec -it puto /bin/bash ) into my functional v1.2.3 container and I've run cat->sed->tee pipeline manually. The fact is that running just cat or cat->sed is the same: there's no difference in the shown output (that is, sed doesn't delete any line because there's no line with the "plugins.security.disabled" string in the original opensearch.yml file). So all it's all right... BUT when sed's output is piped into tee command, this output disappears!! There's no output when running entire pipeline...tee swallows it!  In fact, it's worst, because tee overwrittes original "opensearch.yml" file thus it erases all its content (resulting in a void file). The fact is that if I indicate another name for the file written by tee, it's all right: output is shown through screen and is written in final file; but if this final file is the same than the original, its content is destroyed.
Anyway, this behaviour happens in my functional container, so I don't know if this is specifically the reason why v.1.2.4 doesn't works...
Thanks a lot again!!

Does that mean you can start the 1.2.4 container?
We did change how the container updates the config file as there were reported issues with sed reading while tee was writing, but we might not have fixed this at all.  Checkout https://github.com/opensearch-project/opensearch-build/pull/1130 as there is more detail in that pull request.
Previous startup script:
https://github.com/opensearch-project/opensearch-build/blob/780c28d4d70dca10a2a775b672e192fdacdcd97e/docker/release/config/opensearch/opensearch-docker-entrypoint.sh#L71-L72

No, no, I can't start the v1.2.4 container. My tests have been done in the v1.2.3 one. That's why I say that I don't know to what extent this may or may not be the source of the error, but it is still an interesting investigation, anyway.
In fact, I've tried the previous startup script and I can tell you that it does respect the content on opensearch.yml file (that is, it doesn't void it). If this can help...
Thanks again!

@q2dg I'm out for the weekend, I'll check with some of our other folks on Monday that might have a better idea how to A) reproduce this and B) how to resolve this issue.  We might have some experimental docker images for you to try if you are willing.

https://github.com/opensearch-project/opensearch-build/pull/1458
This one fix an issue related to #1130 where tee is reportedly failing.
cat->sed->tee in #1458 should run without omitting the output like sed->tee in #1130.
Are you running on a embbed system with busybox?
Which might not have all the functionalities of a normal sed and tee.
I have seen similar issue before on a custom linux with busybox.
Will see if I can reproduce on my Rpi.
Thanks.

I am using Fedora 35 and then update the kernel to the latest, since 5.15.15 is not available I am using latest 5.15.16.
Installed Packages
kernel.x86_64                     5.14.10-300.fc35                     @anaconda
kernel.x86_64                     5.15.16-200.fc35                     @updates
Available Packages
kernel.x86_64                     5.14.10-300.fc35                     fedora
kernel.x86_64                     5.15.16-200.fc35                     updates

podman version 3.4.4

Podman allows me to choose from these images:
Please select an image:
    registry.fedoraproject.org/opensearchproject/opensearch:1.2.4
    registry.access.redhat.com/opensearchproject/opensearch:1.2.4
  ▸ docker.io/opensearchproject/opensearch:1.2.4
    quay.io/opensearchproject/opensearch:1.2.4

 test log 1.2.4
$ podman run --rm --name=puto -e "discovery.type=single-node" -p 9200:9200 opensearchproject/opensearch:1.2.4
✔ docker.io/opensearchproject/opensearch:1.2.4
Trying to pull docker.io/opensearchproject/opensearch:1.2.4...
Getting image source signatures
Copying blob 1682fbe93720 done
Copying blob 281f706dd97a done
Copying blob 3a461b3ae562 done
Copying blob 2f071fa29f89 done
Copying blob 906ed3bd695c done
Copying blob 4f11d5532c74 done
Copying config 9ae13ad440 done
Writing manifest to image destination
Storing signatures
Enabling execution of install_demo_configuration.sh for OpenSearch Security Plugin
OpenSearch Security Demo Installer
 ** Warning: Do not use on production or public reachable systems **
Basedir: /usr/share/opensearch
OpenSearch install type: rpm/deb on NAME="Amazon Linux"
OpenSearch config dir: /usr/share/opensearch/config
OpenSearch config file: /usr/share/opensearch/config/opensearch.yml
OpenSearch bin dir: /usr/share/opensearch/bin
OpenSearch plugins dir: /usr/share/opensearch/plugins
OpenSearch lib dir: /usr/share/opensearch/lib
Detected OpenSearch Version: x-content-1.2.4
Detected OpenSearch Security Version: <IP_ADDRESS>

### Success
### Execute this script now on all your nodes and then start all nodes
### OpenSearch Security will be automatically initialized.
### If you like to change the runtime configuration
### change the files in ../securityconfig and execute:
"/usr/share/opensearch/plugins/opensearch-security/tools/securityadmin.sh" -cd "/usr/share/opensearch/plugins/opensearch-security/securityconfig" -icl -key "/usr/share/opensearch/config/kirk-key.pem" -cert "/usr/share/opensearch/config/kirk.pem" -cacert "/usr/share/opensearch/config/root-ca.pem" -nhnv
### or run ./securityadmin_demo.sh
### To use the Security Plugin ConfigurationGUI
### To access your secured cluster open https://<hostname>:<HTTP port> and log in with admin/admin.
### (Ignore the SSL certificate warning because we installed self-signed demo certificates)
Enabling OpenSearch Security Plugin
cluster.name: docker-cluster

# Bind to all interfaces because we don't know what IP address Docker will assign to us.
network.host: <IP_ADDRESS>

# # minimum_master_nodes need to be explicitly set when bound on a public IP
# # set to 1 to allow single node clusters
# discovery.zen.minimum_master_nodes: 1

# Setting network.host to a non-loopback address enables the annoying bootstrap checks. "Single-node" mode disables them again.
#discovery.type: single-node

######## Start OpenSearch Security Demo Configuration ########
# WARNING: revise all the lines below before you go into production
plugins.security.ssl.transport.pemcert_filepath: esnode.pem
plugins.security.ssl.transport.pemkey_filepath: esnode-key.pem
plugins.security.ssl.transport.pemtrustedcas_filepath: root-ca.pem
plugins.security.ssl.transport.enforce_hostname_verification: false
plugins.security.ssl.http.enabled: true
plugins.security.ssl.http.pemcert_filepath: esnode.pem
plugins.security.ssl.http.pemkey_filepath: esnode-key.pem
plugins.security.ssl.http.pemtrustedcas_filepath: root-ca.pem
plugins.security.allow_unsafe_democertificates: true
plugins.security.allow_default_init_securityindex: true
plugins.security.authcz.admin_dn:
  - CN=kirk,OU=client,O=client,L=test, C=de

plugins.security.audit.type: internal_opensearch
plugins.security.enable_snapshot_restore_privilege: true
plugins.security.check_snapshot_restore_write_privileges: true
plugins.security.restapi.roles_enabled: ["all_access", "security_rest_api_access"]
plugins.security.system_indices.enabled: true
plugins.security.system_indices.indices: [".opendistro-alerting-config", ".opendistro-alerting-alert*", ".opendistro-anomaly-results*", ".opendistro-anomaly-detector*", ".opendistro-anomaly-checkpoints", ".opendistro-anomaly-detection-state", ".opendistro-reports-*", ".opendistro-notifications-*", ".opendistro-notebooks", ".opensearch-observability", ".opendistro-asynchronous-search-response*", ".replication-metadata-store"]
node.max_local_storage_nodes: 3
######## End OpenSearch Security Demo Configuration ########
[2022-01-22T19:54:01,193][INFO ][o.o.n.Node               ] [909e51802c36] version[1.2.4], pid[106], build[tar/e505b10357c03ae8d26d675172402f2f2144ef0f/2022-01-14T03:38:06.881862Z], OS[Linux/5.15.16-200.fc35.x86_64/amd64], JVM[AdoptOpenJDK/OpenJDK 64-Bit Server VM/15.0.1/15.0.1+9]
[2022-01-22T19:54:01,194][INFO ][o.o.n.Node               ] [909e51802c36] JVM home [/usr/share/opensearch/jdk], using bundled JDK [true]
[2022-01-22T19:54:01,194][INFO ][o.o.n.Node               ] [909e51802c36] JVM arguments [-Xshare:auto, -Dopensearch.networkaddress.cache.ttl=60, -Dopensearch.networkaddress.cache.negative.ttl=10, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -XX:+ShowCodeDetailsInExceptionMessages, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dio.netty.allocator.numDirectArenas=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Djava.locale.providers=SPI,COMPAT, -Xms1g, -Xmx1g, -XX:+UseG1GC, -XX:G1ReservePercent=25, -XX:InitiatingHeapOccupancyPercent=30, -Djava.io.tmpdir=/tmp/opensearch-6552299556529757446, -XX:+HeapDumpOnOutOfMemoryError, -XX:HeapDumpPath=data, -XX:ErrorFile=logs/hs_err_pid%p.log, -Xlog:gc*,gc+age=trace,safepoint:file=logs/gc.log:utctime,pid,tags:filecount=32,filesize=64m, -Dclk.tck=100, -Djdk.attach.allowAttachSelf=true, -Djava.security.policy=/usr/share/opensearch/plugins/opensearch-performance-analyzer/pa_config/opensearch_security.policy, -Dopensearch.cgroups.hierarchy.override=/, -XX:MaxDirectMemorySize=536870912, -Dopensearch.path.home=/usr/share/opensearch, -Dopensearch.path.conf=/usr/share/opensearch/config, -Dopensearch.distribution.type=tar, -Dopensearch.bundled_jdk=true]
[2022-01-22T19:54:01,876][INFO ][o.o.s.s.t.SSLConfig      ] [909e51802c36] SSL dual mode is disabled
[2022-01-22T19:54:01,876][INFO ][o.o.s.OpenSearchSecurityPlugin] [909e51802c36] OpenSearch Config path is /usr/share/opensearch/config
[2022-01-22T19:54:02,040][INFO ][o.o.s.s.DefaultSecurityKeyStore] [909e51802c36] JVM supports TLSv1.3
[2022-01-22T19:54:02,041][INFO ][o.o.s.s.DefaultSecurityKeyStore] [909e51802c36] Config directory is /usr/share/opensearch/config/, from there the key- and truststore files are resolved relatively
[2022-01-22T19:54:02,414][INFO ][o.o.s.s.DefaultSecurityKeyStore] [909e51802c36] TLS Transport Client Provider : JDK
[2022-01-22T19:54:02,414][INFO ][o.o.s.s.DefaultSecurityKeyStore] [909e51802c36] TLS Transport Server Provider : JDK
[2022-01-22T19:54:02,414][INFO ][o.o.s.s.DefaultSecurityKeyStore] [909e51802c36] TLS HTTP Provider             : JDK
[2022-01-22T19:54:02,414][INFO ][o.o.s.s.DefaultSecurityKeyStore] [909e51802c36] Enabled TLS protocols for transport layer : [TLSv1.3, TLSv1.2, TLSv1.1]
[2022-01-22T19:54:02,414][INFO ][o.o.s.s.DefaultSecurityKeyStore] [909e51802c36] Enabled TLS protocols for HTTP layer      : [TLSv1.3, TLSv1.2, TLSv1.1]
[2022-01-22T19:54:02,556][INFO ][o.o.s.OpenSearchSecurityPlugin] [909e51802c36] Clustername: docker-cluster
[2022-01-22T19:54:02,559][WARN ][o.o.s.OpenSearchSecurityPlugin] [909e51802c36] Directory /usr/share/opensearch/config has insecure file permissions (should be 0700)
[2022-01-22T19:54:02,559][WARN ][o.o.s.OpenSearchSecurityPlugin] [909e51802c36] File /usr/share/opensearch/config/kirk.pem has insecure file permissions (should be 0600)
[2022-01-22T19:54:02,560][WARN ][o.o.s.OpenSearchSecurityPlugin] [909e51802c36] File /usr/share/opensearch/config/esnode.pem has insecure file permissions (should be 0600)
[2022-01-22T19:54:02,560][WARN ][o.o.s.OpenSearchSecurityPlugin] [909e51802c36] File /usr/share/opensearch/config/root-ca.pem has insecure file permissions (should be 0600)
[2022-01-22T19:54:02,560][WARN ][o.o.s.OpenSearchSecurityPlugin] [909e51802c36] File /usr/share/opensearch/config/esnode-key.pem has insecure file permissions (should be 0600)
[2022-01-22T19:54:02,560][WARN ][o.o.s.OpenSearchSecurityPlugin] [909e51802c36] File /usr/share/opensearch/config/kirk-key.pem has insecure file permissions (should be 0600)
[2022-01-22T19:54:02,658][INFO ][o.o.p.c.PluginSettings   ] [909e51802c36] Config: metricsLocation: /dev/shm/performanceanalyzer/, metricsDeletionInterval: 1, httpsEnabled: false, cleanup-metrics-db-files: true, batch-metrics-retention-period-minutes: 7, rpc-port: 9650, webservice-port 9600
[2022-01-22T19:54:03,230][INFO ][o.o.i.r.ReindexPlugin    ] [909e51802c36] ReindexPlugin reloadSPI called
[2022-01-22T19:54:03,230][INFO ][o.o.i.r.ReindexPlugin    ] [909e51802c36] Unable to find any implementation for RemoteReindexExtension
[2022-01-22T19:54:03,239][INFO ][o.o.j.JobSchedulerPlugin ] [909e51802c36] Loaded scheduler extension: opendistro-index-management, index: .opendistro-ism-config
[2022-01-22T19:54:03,242][INFO ][o.o.j.JobSchedulerPlugin ] [909e51802c36] Loaded scheduler extension: opendistro_anomaly_detector, index: .opendistro-anomaly-detector-jobs
[2022-01-22T19:54:03,257][INFO ][o.o.j.JobSchedulerPlugin ] [909e51802c36] Loaded scheduler extension: reports-scheduler, index: .opendistro-reports-definitions
[2022-01-22T19:54:03,259][INFO ][o.o.p.PluginsService     ] [909e51802c36] loaded module [aggs-matrix-stats]
[2022-01-22T19:54:03,259][INFO ][o.o.p.PluginsService     ] [909e51802c36] loaded module [analysis-common]
[2022-01-22T19:54:03,259][INFO ][o.o.p.PluginsService     ] [909e51802c36] loaded module [geo]
[2022-01-22T19:54:03,259][INFO ][o.o.p.PluginsService     ] [909e51802c36] loaded module [ingest-common]
[2022-01-22T19:54:03,259][INFO ][o.o.p.PluginsService     ] [909e51802c36] loaded module [ingest-geoip]
[2022-01-22T19:54:03,259][INFO ][o.o.p.PluginsService     ] [909e51802c36] loaded module [ingest-user-agent]
[2022-01-22T19:54:03,259][INFO ][o.o.p.PluginsService     ] [909e51802c36] loaded module [lang-expression]
[2022-01-22T19:54:03,259][INFO ][o.o.p.PluginsService     ] [909e51802c36] loaded module [lang-mustache]
[2022-01-22T19:54:03,259][INFO ][o.o.p.PluginsService     ] [909e51802c36] loaded module [lang-painless]
[2022-01-22T19:54:03,259][INFO ][o.o.p.PluginsService     ] [909e51802c36] loaded module [mapper-extras]
[2022-01-22T19:54:03,259][INFO ][o.o.p.PluginsService     ] [909e51802c36] loaded module [opensearch-dashboards]
[2022-01-22T19:54:03,260][INFO ][o.o.p.PluginsService     ] [909e51802c36] loaded module [parent-join]
[2022-01-22T19:54:03,260][INFO ][o.o.p.PluginsService     ] [909e51802c36] loaded module [percolator]
[2022-01-22T19:54:03,260][INFO ][o.o.p.PluginsService     ] [909e51802c36] loaded module [rank-eval]
[2022-01-22T19:54:03,260][INFO ][o.o.p.PluginsService     ] [909e51802c36] loaded module [reindex]
[2022-01-22T19:54:03,260][INFO ][o.o.p.PluginsService     ] [909e51802c36] loaded module [repository-url]
[2022-01-22T19:54:03,260][INFO ][o.o.p.PluginsService     ] [909e51802c36] loaded module [transport-netty4]
[2022-01-22T19:54:03,260][INFO ][o.o.p.PluginsService     ] [909e51802c36] loaded plugin [opensearch-alerting]
[2022-01-22T19:54:03,260][INFO ][o.o.p.PluginsService     ] [909e51802c36] loaded plugin [opensearch-anomaly-detection]
[2022-01-22T19:54:03,260][INFO ][o.o.p.PluginsService     ] [909e51802c36] loaded plugin [opensearch-asynchronous-search]
[2022-01-22T19:54:03,260][INFO ][o.o.p.PluginsService     ] [909e51802c36] loaded plugin [opensearch-cross-cluster-replication]
[2022-01-22T19:54:03,260][INFO ][o.o.p.PluginsService     ] [909e51802c36] loaded plugin [opensearch-index-management]
[2022-01-22T19:54:03,261][INFO ][o.o.p.PluginsService     ] [909e51802c36] loaded plugin [opensearch-job-scheduler]
[2022-01-22T19:54:03,261][INFO ][o.o.p.PluginsService     ] [909e51802c36] loaded plugin [opensearch-knn]
[2022-01-22T19:54:03,261][INFO ][o.o.p.PluginsService     ] [909e51802c36] loaded plugin [opensearch-observability]
[2022-01-22T19:54:03,261][INFO ][o.o.p.PluginsService     ] [909e51802c36] loaded plugin [opensearch-performance-analyzer]
[2022-01-22T19:54:03,261][INFO ][o.o.p.PluginsService     ] [909e51802c36] loaded plugin [opensearch-reports-scheduler]
[2022-01-22T19:54:03,261][INFO ][o.o.p.PluginsService     ] [909e51802c36] loaded plugin [opensearch-security]
[2022-01-22T19:54:03,261][INFO ][o.o.p.PluginsService     ] [909e51802c36] loaded plugin [opensearch-sql]
[2022-01-22T19:54:03,272][INFO ][o.o.s.OpenSearchSecurityPlugin] [909e51802c36] Disabled https compression by default to mitigate BREACH attacks. You can enable it by setting 'http.compression: true' in opensearch.yml
[2022-01-22T19:54:03,279][DEPRECATION][o.o.d.c.s.Settings       ] [909e51802c36] [node.max_local_storage_nodes] setting was deprecated in OpenSearch and will be removed in a future release! See the breaking changes documentation for the next major version.
[2022-01-22T19:54:03,284][INFO ][o.o.e.NodeEnvironment    ] [909e51802c36] using [1] data paths, mounts [[/ (overlay)]], net usable_space [11.7gb], net total_space [14.9gb], types [overlay]
[2022-01-22T19:54:03,284][INFO ][o.o.e.NodeEnvironment    ] [909e51802c36] heap size [1gb], compressed ordinary object pointers [true]
[2022-01-22T19:54:03,306][INFO ][o.o.n.Node               ] [909e51802c36] node name [909e51802c36], node ID [A5kdLD3sQkqxxBrrbTu3fA], cluster name [docker-cluster], roles [master, remote_cluster_client, data, ingest]
[2022-01-22T19:54:04,491][DEPRECATION][o.o.d.c.s.Settings       ] [909e51802c36] [node.max_local_storage_nodes] setting was deprecated in OpenSearch and will be removed in a future release! See the breaking changes documentation for the next major version.
[2022-01-22T19:54:05,074][WARN ][o.o.s.c.Salt             ] [909e51802c36] If you plan to use field masking pls configure compliance salt e1ukloTsQlOgPquJ to be a random string of 16 chars length identical on all nodes
[2022-01-22T19:54:05,087][INFO ][o.o.s.a.i.AuditLogImpl   ] [909e51802c36] Message routing enabled: true
[2022-01-22T19:54:05,115][INFO ][o.o.s.f.SecurityFilter   ] [909e51802c36] <NONE> indices are made immutable.
[2022-01-22T19:54:05,278][INFO ][o.o.a.b.ADCircuitBreakerService] [909e51802c36] Registered memory breaker.
WARNING: An illegal reflective access operation has occurred
WARNING: Illegal reflective access by io.protostuff.runtime.PolymorphicThrowableSchema (file:/usr/share/opensearch/plugins/opensearch-anomaly-detection/protostuff-runtime-1.7.4.jar) to field java.lang.Throwable.cause
WARNING: Please consider reporting this to the maintainers of io.protostuff.runtime.PolymorphicThrowableSchema
WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations
WARNING: All illegal access operations will be denied in a future release
[2022-01-22T19:54:05,619][INFO ][o.o.t.NettyAllocator     ] [909e51802c36] creating NettyAllocator with the following configs: [name=unpooled, suggested_max_allocation_size=256kb, factors={opensearch.unsafe.use_unpooled_allocator=null, g1gc_enabled=true, g1gc_region_size=1mb, heap_size=1gb}]
[2022-01-22T19:54:05,687][INFO ][o.o.d.DiscoveryModule    ] [909e51802c36] using discovery type [single-node] and seed hosts providers [settings]
[2022-01-22T19:54:05,923][WARN ][o.o.g.DanglingIndicesState] [909e51802c36] gateway.auto_import_dangling_indices is disabled, dangling indices will not be automatically detected or imported and must be managed manually
[2022-01-22T19:54:06,146][INFO ][o.o.p.h.c.PerformanceAnalyzerConfigAction] [909e51802c36] PerformanceAnalyzer Enabled: false
[2022-01-22T19:54:06,177][INFO ][o.o.n.Node               ] [909e51802c36] initialized
[2022-01-22T19:54:06,178][INFO ][o.o.n.Node               ] [909e51802c36] starting ...
[2022-01-22T19:54:06,237][INFO ][o.o.t.TransportService   ] [909e51802c36] publish_address {<IP_ADDRESS>:9300}, bound_addresses {[::]:9300}
[2022-01-22T19:54:06,314][WARN ][o.o.b.BootstrapChecks    ] [909e51802c36] max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]
[2022-01-22T19:54:06,318][INFO ][o.o.c.c.Coordinator      ] [909e51802c36] setting initial configuration to VotingConfiguration{A5kdLD3sQkqxxBrrbTu3fA}
[2022-01-22T19:54:06,456][INFO ][o.o.c.s.MasterService    ] [909e51802c36] elected-as-master ([1] nodes joined)[{909e51802c36}{A5kdLD3sQkqxxBrrbTu3fA}{QMjf4KgdR7CIioPx2OsyKA}{<IP_ADDRESS>}{<IP_ADDRESS>:9300}{dimr}{shard_indexing_pressure_enabled=true} elect leader, _BECOME_MASTER_TASK_, _FINISH_ELECTION_], term: 1, version: 1, delta: master node changed {previous [], current [{909e51802c36}{A5kdLD3sQkqxxBrrbTu3fA}{QMjf4KgdR7CIioPx2OsyKA}{<IP_ADDRESS>}{<IP_ADDRESS>:9300}{dimr}{shard_indexing_pressure_enabled=true}]}
[2022-01-22T19:54:06,476][INFO ][o.o.c.c.CoordinationState] [909e51802c36] cluster UUID set to [hz3b0MvwQliuv_2gNT6yzg]
[2022-01-22T19:54:06,485][INFO ][o.o.c.s.ClusterApplierService] [909e51802c36] master node changed {previous [], current [{909e51802c36}{A5kdLD3sQkqxxBrrbTu3fA}{QMjf4KgdR7CIioPx2OsyKA}{<IP_ADDRESS>}{<IP_ADDRESS>:9300}{dimr}{shard_indexing_pressure_enabled=true}]}, term: 1, version: 1, reason: Publication{term=1, version=1}
[2022-01-22T19:54:06,496][WARN ][o.o.p.c.s.h.ConfigOverridesClusterSettingHandler] [909e51802c36] Config override setting update called with empty string. Ignoring.
[2022-01-22T19:54:06,497][INFO ][o.o.a.c.ADClusterEventListener] [909e51802c36] Cluster is not recovered yet.
[2022-01-22T19:54:06,506][INFO ][o.o.h.AbstractHttpServerTransport] [909e51802c36] publish_address {<IP_ADDRESS>:9200}, bound_addresses {[::]:9200}
[2022-01-22T19:54:06,506][INFO ][o.o.n.Node               ] [909e51802c36] started
[2022-01-22T19:54:06,506][INFO ][o.o.s.OpenSearchSecurityPlugin] [909e51802c36] Node started
[2022-01-22T19:54:06,506][INFO ][o.o.s.c.ConfigurationRepository] [909e51802c36] Will attempt to create index .opendistro_security and default configs if they are absent
[2022-01-22T19:54:06,508][INFO ][o.o.s.c.ConfigurationRepository] [909e51802c36] Background init thread started. Install default config?: true
[2022-01-22T19:54:06,509][INFO ][o.o.s.OpenSearchSecurityPlugin] [909e51802c36] 0 OpenSearch Security modules loaded so far: []
[2022-01-22T19:54:06,528][INFO ][o.o.a.c.HashRing         ] [909e51802c36] Node added: [A5kdLD3sQkqxxBrrbTu3fA]
[2022-01-22T19:54:06,530][INFO ][o.o.a.c.HashRing         ] [909e51802c36] Add data node to AD version hash ring: A5kdLD3sQkqxxBrrbTu3fA
[2022-01-22T19:54:06,532][INFO ][o.o.a.c.HashRing         ] [909e51802c36] All nodes with known AD version: {A5kdLD3sQkqxxBrrbTu3fA=ADNodeInfo{version=1.2.4, isEligibleDataNode=true}}
[2022-01-22T19:54:06,532][INFO ][o.o.a.c.HashRing         ] [909e51802c36] Rebuild AD hash ring for realtime AD with cooldown, nodeChangeEvents size 0
[2022-01-22T19:54:06,532][INFO ][o.o.a.c.HashRing         ] [909e51802c36] Build AD version hash ring successfully
[2022-01-22T19:54:06,533][INFO ][o.o.a.c.ADDataMigrator   ] [909e51802c36] Start migrating AD data
[2022-01-22T19:54:06,534][INFO ][o.o.a.c.ADDataMigrator   ] [909e51802c36] AD job index doesn't exist, no need to migrate
[2022-01-22T19:54:06,534][INFO ][o.o.a.c.ADClusterEventListener] [909e51802c36] Init AD version hash ring successfully
[2022-01-22T19:54:06,535][INFO ][o.o.g.GatewayService     ] [909e51802c36] recovered [0] indices into cluster_state
[2022-01-22T19:54:06,604][INFO ][o.o.c.m.MetadataCreateIndexService] [909e51802c36] [.opendistro_security] creating index, cause [api], templates [], shards [1]/[1]
[2022-01-22T19:54:06,609][INFO ][o.o.c.r.a.AllocationService] [909e51802c36] updating number_of_replicas to [0] for indices [.opendistro_security]
[2022-01-22T19:54:06,731][INFO ][o.o.c.r.a.AllocationService] [909e51802c36] Cluster health status changed from [YELLOW] to [GREEN] (reason: [shards started [[.opendistro_security][0]]]).
[2022-01-22T19:54:06,744][INFO ][o.o.s.c.ConfigurationRepository] [909e51802c36] Index .opendistro_security created?: true
[2022-01-22T19:54:06,745][INFO ][o.o.s.c.ConfigurationRepository] [909e51802c36] Node started, try to initialize it. Wait for at least yellow cluster state....
[2022-01-22T19:54:06,747][INFO ][o.o.s.s.ConfigHelper     ] [909e51802c36] Will update 'config' with /usr/share/opensearch/plugins/opensearch-security/securityconfig/config.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=false
[2022-01-22T19:54:06,798][INFO ][o.o.c.m.MetadataMappingService] [909e51802c36] [.opendistro_security/K4rBJkW9SfK5cpz5RkkUgA] create_mapping [_doc]
[2022-01-22T19:54:06,845][INFO ][o.o.s.s.ConfigHelper     ] [909e51802c36] Doc with id 'config' and version 2 is updated in .opendistro_security index.
[2022-01-22T19:54:06,846][INFO ][o.o.s.s.ConfigHelper     ] [909e51802c36] Will update 'roles' with /usr/share/opensearch/plugins/opensearch-security/securityconfig/roles.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=false
[2022-01-22T19:54:06,856][INFO ][o.o.c.m.MetadataMappingService] [909e51802c36] [.opendistro_security/K4rBJkW9SfK5cpz5RkkUgA] update_mapping [_doc]
[2022-01-22T19:54:06,876][INFO ][o.o.s.s.ConfigHelper     ] [909e51802c36] Doc with id 'roles' and version 2 is updated in .opendistro_security index.
[2022-01-22T19:54:06,876][INFO ][o.o.s.s.ConfigHelper     ] [909e51802c36] Will update 'rolesmapping' with /usr/share/opensearch/plugins/opensearch-security/securityconfig/roles_mapping.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=false
[2022-01-22T19:54:06,887][INFO ][o.o.c.m.MetadataMappingService] [909e51802c36] [.opendistro_security/K4rBJkW9SfK5cpz5RkkUgA] update_mapping [_doc]
[2022-01-22T19:54:06,905][INFO ][o.o.s.s.ConfigHelper     ] [909e51802c36] Doc with id 'rolesmapping' and version 2 is updated in .opendistro_security index.
[2022-01-22T19:54:06,905][INFO ][o.o.s.s.ConfigHelper     ] [909e51802c36] Will update 'internalusers' with /usr/share/opensearch/plugins/opensearch-security/securityconfig/internal_users.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=false
[2022-01-22T19:54:06,915][INFO ][o.o.c.m.MetadataMappingService] [909e51802c36] [.opendistro_security/K4rBJkW9SfK5cpz5RkkUgA] update_mapping [_doc]
[2022-01-22T19:54:06,944][INFO ][o.o.s.s.ConfigHelper     ] [909e51802c36] Doc with id 'internalusers' and version 2 is updated in .opendistro_security index.