- Upgrade from OpenSearch 2 to 3 (required for ML Commons pre-trained models) - Rename PLUGINS_SECURITY_DISABLED → DISABLE_SECURITY_PLUGIN (OS3 change) - Enable ML Commons plugin settings for on-data-node inference - Increase memory limits (2Gi) and JVM heap for neural model inference - Add fsGroup security context for volume permissions