I was able to reproduce this and can confirm that it's real issue. I've opened #76586 to track it and I'll work on a fix.
For now a workaround should be to use cluster settings API instead of elasticsearch.yml
:
PUT _cluster/settings
{
"persistent": {
"ingest.geoip.downloader.enabled": true
}
}
PUT _cluster/settings
{
"persistent": {
"ingest.geoip.downloader.enabled": false
}
}
(it has to be enabled first for cluster to notice change, no need for restart between and after these calls)