use OPENSEARCH_PATH_CONF for tls config

Author: labrenbe

rust/operator-binary/src/controller/build/node_config.rs

@@ -183,15 +183,15 @@ impl NodeConfig {
         );
         config.insert(
             CONFIG_OPTION_PLUGINS_SECURITY_SSL_HTTP_PEMCERT_FILEPATH.to_owned(),
-            json!("${OPENSEARCH_HOME}/config/tls/tls.crt".to_string()),
+            json!("${OPENSEARCH_PATH_CONF}/tls/tls.crt".to_string()),
         );
         config.insert(
             CONFIG_OPTION_PLUGINS_SECURITY_SSL_HTTP_PEMKEY_FILEPATH.to_owned(),
-            json!("${OPENSEARCH_HOME}/config/tls/tls.key".to_string()),
+            json!("${OPENSEARCH_PATH_CONF}/tls/tls.key".to_string()),
         );
         config.insert(
             CONFIG_OPTION_PLUGINS_SECURITY_SSL_HTTP_PEMTRUSTEDCAS_FILEPATH.to_owned(),
-            json!("${OPENSEARCH_HOME}/config/tls/ca.crt".to_string()),
+            json!("${OPENSEARCH_PATH_CONF}/tls/ca.crt".to_string()),
         );
         // TLS config for TRANSPORT port
         config.insert(
@@ -200,15 +200,15 @@ impl NodeConfig {
         );
         config.insert(
             CONFIG_OPTION_PLUGINS_SECURITY_SSL_TRANSPORT_PEMCERT_FILEPATH.to_owned(),
-            json!("${OPENSEARCH_HOME}/config/tls/tls.crt".to_string()),
+            json!("${OPENSEARCH_PATH_CONF}/tls/tls.crt".to_string()),
         );
         config.insert(
             CONFIG_OPTION_PLUGINS_SECURITY_SSL_TRANSPORT_PEMKEY_FILEPATH.to_owned(),
-            json!("${OPENSEARCH_HOME}/config/tls/tls.key".to_string()),
+            json!("${OPENSEARCH_PATH_CONF}/tls/tls.key".to_string()),
         );
         config.insert(
             CONFIG_OPTION_PLUGINS_SECURITY_SSL_TRANSPORT_PEMTRUSTEDCAS_FILEPATH.to_owned(),
-            json!("${OPENSEARCH_HOME}/config/tls/ca.crt".to_string()),
+            json!("${OPENSEARCH_PATH_CONF}/tls/ca.crt".to_string()),
         );
 
         config

rust/operator-binary/src/controller/build/role_group_builder.rs

@@ -461,7 +461,7 @@ impl<'a> RoleGroupBuilder<'a> {
 
         if self.cluster.cluster_config.tls.secret_class.is_some() {
             volume_mounts.push(VolumeMount {
-                mount_path: format!("{opensearch_home}/config/tls"),
+                mount_path: format!("{opensearch_path_conf}/tls"),
                 name: TLS_VOLUME_NAME.to_string(),
                 ..VolumeMount::default()
             })