Here is log from elasticsearch node.
+ /fsloader/run_sgadmin.sh
chown: /elasticsearch/plugins/search-guard-6/sgconfig/..data: Read-only file system
chown: /elasticsearch/plugins/search-guard-6/sgconfig/sg_roles.yml: Read-only file system
chown: /elasticsearch/plugins/search-guard-6/sgconfig/sg_internal_users.yml: Read-only file system
chown: /elasticsearch/plugins/search-guard-6/sgconfig/sg_config.yml: Read-only file system
chown: /elasticsearch/plugins/search-guard-6/sgconfig/sg_action_groups.yml: Read-only file system
chown: /elasticsearch/plugins/search-guard-6/sgconfig/READALL_PASSWORD: Read-only file system
chown: /elasticsearch/plugins/search-guard-6/sgconfig/ADMIN_PASSWORD: Read-only file system