Fail to generate certs

Elastic Stack Elasticsearch
3

Ok perhaps, but so why the elasticsearch.yml base configuration file in the official docker image is this one :

cluster.name: "docker-cluster"
network.host: 0.0.0.0

#----------------------- BEGIN SECURITY AUTO CONFIGURATION -----------------------
#
# The following settings, TLS certificates, and keys have been automatically      
# generated to configure Elasticsearch security features on 31-03-2025 07:30:12
#
# --------------------------------------------------------------------------------

# Enable security features
xpack.security.enabled: true

xpack.security.enrollment.enabled: true

# Enable encryption for HTTP API client connections, such as Kibana, Logstash, and Agents
xpack.security.http.ssl:
  enabled: true
  keystore.path: certs/http.p12

# Enable encryption and mutual authentication between cluster nodes
xpack.security.transport.ssl:
  enabled: true
  verification_mode: certificate
  keystore.path: certs/transport.p12
  truststore.path: certs/transport.p12
# Create a new cluster with the current node only
# Additional nodes can still join the cluster later
cluster.initial_master_nodes: ["08ad56e9a6e0"]

#----------------------- END SECURITY AUTO CONFIGURATION -------------------------

Basically if I run (without docker-compose, directly in a terminal) :
docker run --name es01 --net elastic -p 9200:9200 -it -m 1GB docker.elastic.co/elasticsearch/elasticsearch:8.17.4

It install es and generate a certs directory with certificates files in the config directory, yet the default elasticsearch.yml file has the xpack.security.enabled: true ....