Hello and welcome,
You have only one node with the master role, the discovery.seed_hosts is a list of master eligible nodes, so it needs to haver just the master eligible node, remove the non-eligible nodes from this list.
Did you manually generated the certificates? If true you need to remove this xpack.security.enrollment.enabled: true from the configuration file, the enrollment process only works if security is auto-configured.
Also, you have 3 nodes, why use just one as a master? Your cluster will not be resilient to failures.