opensearch-project/opensearch-k8s-operator

AI Summary: The OpenSearch Kubernetes Operator prevents OpenSearch from running with `securityContext.readOnlyRootFilesystem: true` because the application attempts to write temporary files, such as `opensearch.keystore.tmp`, to the read-only `/usr/share/opensearch/config` directory. A direct `emptyDir` mount for this path would overwrite essential default configurations. The issue requires a solution to make this specific directory writable for the keystore init container while preserving the default configuration.