OpenSearch as backend storage for Jaeger tracing

Security
,
1

Versions (relevant - OpenSearch/Dashboard/Server OS/Browser):
latest

Describe the issue: I am trying to use OpenSearch as backend storage for my Jaeger traces.
I am trying to run opensearch in AWS EKS using below manifest but getting error (org.opensearch.OpenSearchException: Empty file path for plugins.security.ssl.transport.truststore_filepath) My .pem and .cert file are in the same folder as my yaml file and running my kubectl apply command from same folder.

Configuration:

apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    name: opensearch
    namespace: telemetry
    labels:
      app: opensearch
  spec:
    serviceName: opensearch
    replicas: 1
    selector:
      matchLabels:
        app: opensearch
    template:
      metadata:
        labels:
          app: opensearch
      spec:
        securityContext:
          runAsUser: 1000
          runAsGroup: 1000
          fsGroup: 1000
        containers:
          - name: opensearch
            image: opensearchproject/opensearch:latest
            imagePullPolicy: Always
            command:
              - bin/opensearch
            args:
              - "-Ehttp.host=0.0.0.0"
              - "-Etransport.host=127.0.0.1"
              - "-Eplugins.security.ssl.transport.keystore_filepath=/usr/share/opensearch/config/certs/opensearch.key"
              - "-Eplugins.security.ssl.transport.pemcert_filepath=/usr/share/opensearch/config/certs/opensearch.crt"
              - "-Eplugins.security.ssl.transport.enabled=true"
            volumeMounts:
              - name: persistent-storage
                mountPath: /data
              - name: opensearch-certs
                mountPath: /usr/share/opensearch/config/certs
            readinessProbe:
              exec:
                command:
                - curl
                - --fail
                - --silent
                - --output
                - /dev/null
                - --user
                - admin:admin
                - localhost:9200
              initialDelaySeconds: 60
              periodSeconds: 600
              timeoutSeconds: 600
            resources:
              requests:
                memory: "10Gi"
                cpu: "2"
              limits:
                memory: "10Gi"
                cpu: "2"
        volumes:
        - name: persistent-storage
          persistentVolumeClaim:
            claimName: efs-claim
        - name: opensearch-certs
          secret:
            secretName: opensearch-certs

Relevant Logs or Screenshots:

Caused by: 

Caused by: org.opensearch.OpenSearchException: Empty file path for plugins.security.ssl.transport.truststore_filepath
        at org.opensearch.security.ssl.DefaultSecurityKeyStore.checkPath(DefaultSecurityKeyStore.java:1121) ~[?:?]
        at org.opensearch.security.ssl.DefaultSecurityKeyStore.resolve(DefaultSecurityKeyStore.java:274) ~[?:?]
        at org.opensearch.security.ssl.DefaultSecurityKeyStore.initTransportSSLConfig(DefaultSecurityKeyStore.java:334) ~[?:?]
        at org.opensearch.security.ssl.DefaultSecurityKeyStore.initSSLConfig(DefaultSecurityKeyStore.java:296) ~[?:?]
        at org.opensearch.security.ssl.DefaultSecurityKeyStore.<init>(DefaultSecurityKeyStore.java:202) ~[?:?]
        at org.opensearch.security.ssl.OpenSearchSecuritySSLPlugin.<init>(OpenSearchSecuritySSLPlugin.java:234) ~[?:?]
        at org.opensearch.security.OpenSearchSecurityPlugin.<init>(OpenSearchSecurityPlugin.java:277) ~[?:?]
        at jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) ~[?:?]
        at jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:77) ~[?:?]
        at jdk.internal.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) ~[?:?]
        at java.lang.reflect.Constructor.newInstanceWithCaller(Constructor.java:499) ~[?:?]
        at java.lang.reflect.Constructor.newInstance(Constructor.java:480) ~[?:?]
        at org.opensearch.plugins.PluginsService.loadPlugin(PluginsService.java:782) ~[opensearch-2.11.1.jar:2.11.1]
        at org.opensearch.plugins.PluginsService.loadBundle(PluginsService.java:731) ~[opensearch-2.11.1.jar:2.11.1]
        at org.opensearch.plugins.PluginsService.loadBundles(PluginsService.java:533) ~[opensearch-2.11.1.jar:2.11.1]
        at org.opensearch.plugins.PluginsService.<init>(PluginsService.java:195) ~[opensearch-2.11.1.jar:2.11.1]
        at org.opensearch.node.Node.<init>(Node.java:480) ~[opensearch-2.11.1.jar:2.11.1]
        at org.opensearch.node.Node.<init>(Node.java:407) ~[opensearch-2.11.1.jar:2.11.1]
        at org.opensearch.bootstrap.Bootstrap$5.<init>(Bootstrap.java:242) ~[opensearch-2.11.1.jar:2.11.1]
        at org.opensearch.bootstrap.Bootstrap.setup(Bootstrap.java:242) ~[opensearch-2.11.1.jar:2.11.1]
        at org.opensearch.bootstrap.Bootstrap.init(Bootstrap.java:404) ~[opensearch-2.11.1.jar:2.11.1]
        at org.opensearch.bootstrap.OpenSearch.init(OpenSearch.java:180) ~[opensearch-2.11.1.jar:2.11.1]
2

@atif All plugins.security options must be defined in the opensearch.yml file instead of the environmental variable.