diff --git a/bitnami/opensearch/3/debian-12/Dockerfile b/bitnami/opensearch/3/debian-12/Dockerfile
index ac8f8818d2bd..aa602defa7f8 100644
--- a/bitnami/opensearch/3/debian-12/Dockerfile
+++ b/bitnami/opensearch/3/debian-12/Dockerfile
@@ -9,13 +9,13 @@ ARG OPENSEARCH_PLUGINS
 ARG TARGETARCH
 
 LABEL org.opencontainers.image.base.name="docker.io/bitnami/minideb:bookworm" \
-      org.opencontainers.image.created="2026-08-14T18:47:10Z" \
+      org.opencontainers.image.created="2026-08-24T09:19:59Z" \
       org.opencontainers.image.description="Application packaged by Broadcom, Inc." \
       org.opencontainers.image.documentation="https://github.com/bitnami/containers/tree/main/bitnami/opensearch/README.md" \
       org.opencontainers.image.source="https://github.com/bitnami/containers/tree/main/bitnami/opensearch" \
       org.opencontainers.image.title="opensearch" \
       org.opencontainers.image.vendor="Broadcom, Inc." \
-      org.opencontainers.image.version="3.7.0"
+      org.opencontainers.image.version="3.8.0"
 
 ENV HOME="/" \
     OS_ARCH="${TARGETARCH:-amd64}" \
@@ -31,9 +31,9 @@ RUN --mount=type=secret,id=downloads_url,env=SECRET_DOWNLOADS_URL \
     DOWNLOADS_URL=${SECRET_DOWNLOADS_URL:-${DOWNLOADS_URL}} ; \
     mkdir -p /tmp/bitnami/pkg/cache/ ; cd /tmp/bitnami/pkg/cache/ || exit 1 ; \
     COMPONENTS=( \
-      "yq-4.53.3-3-linux-${OS_ARCH}-debian-12" \
+      "yq-4.53.6-1-linux-${OS_ARCH}-debian-12" \
       "jre-21.0.12-10-2-linux-${OS_ARCH}-debian-12" \
-      "opensearch-3.7.0-0-linux-${OS_ARCH}-debian-12" \
+      "opensearch-3.8.0-0-linux-${OS_ARCH}-debian-12" \
     ) ; \
     for COMPONENT in "${COMPONENTS[@]}"; do \
       if [ ! -f "${COMPONENT}.tar.gz" ]; then \
@@ -52,9 +52,9 @@ RUN find / -perm /6000 -type f -exec chmod a-s {} \; || true
 COPY rootfs /
 RUN /opt/bitnami/scripts/opensearch/postunpack.sh
 RUN /opt/bitnami/scripts/java/postunpack.sh
-ENV APP_VERSION="3.7.0" \
+ENV APP_VERSION="3.8.0" \
     BITNAMI_APP_NAME="opensearch" \
-    IMAGE_REVISION="3" \
+    IMAGE_REVISION="0" \
     JAVA_HOME="/opt/bitnami/java" \
     LD_LIBRARY_PATH="/opt/bitnami/opensearch/plugins/opensearch-knn/lib" \
     OPENSEARCH_JAVA_HOME="/opt/bitnami/java"
diff --git a/bitnami/opensearch/3/debian-12/prebuildfs/opt/bitnami/checksums/opensearch-3.7.0-0-linux-amd64-debian-12.tar.gz.sha256 b/bitnami/opensearch/3/debian-12/prebuildfs/opt/bitnami/checksums/opensearch-3.7.0-0-linux-amd64-debian-12.tar.gz.sha256
deleted file mode 100644
index a8e82aa490f5..000000000000
--- a/bitnami/opensearch/3/debian-12/prebuildfs/opt/bitnami/checksums/opensearch-3.7.0-0-linux-amd64-debian-12.tar.gz.sha256
+++ /dev/null
@@ -1 +0,0 @@
-fc1302cd5ad383c8ab357c1181ce6f74d587f845af6824458cb3f797b166cee9  opensearch-3.7.0-0-linux-amd64-debian-12.tar.gz
diff --git a/bitnami/opensearch/3/debian-12/prebuildfs/opt/bitnami/checksums/opensearch-3.7.0-0-linux-arm64-debian-12.tar.gz.sha256 b/bitnami/opensearch/3/debian-12/prebuildfs/opt/bitnami/checksums/opensearch-3.7.0-0-linux-arm64-debian-12.tar.gz.sha256
deleted file mode 100644
index 17163fac718b..000000000000
--- a/bitnami/opensearch/3/debian-12/prebuildfs/opt/bitnami/checksums/opensearch-3.7.0-0-linux-arm64-debian-12.tar.gz.sha256
+++ /dev/null
@@ -1 +0,0 @@
-5da3610c89fa41f34ebc0eb1359acbf4628424c2b8c4b74d2eee2782815d35a8  opensearch-3.7.0-0-linux-arm64-debian-12.tar.gz
diff --git a/bitnami/opensearch/3/debian-12/prebuildfs/opt/bitnami/checksums/opensearch-3.8.0-0-linux-amd64-debian-12.tar.gz.sha256 b/bitnami/opensearch/3/debian-12/prebuildfs/opt/bitnami/checksums/opensearch-3.8.0-0-linux-amd64-debian-12.tar.gz.sha256
new file mode 100644
index 000000000000..b5767511073b
--- /dev/null
+++ b/bitnami/opensearch/3/debian-12/prebuildfs/opt/bitnami/checksums/opensearch-3.8.0-0-linux-amd64-debian-12.tar.gz.sha256
@@ -0,0 +1 @@
+f160da33511af0ae317e5dbab4bbaac9056e66159ea7ee51c3f349a59cfc0ae7  opensearch-3.8.0-0-linux-amd64-debian-12.tar.gz
diff --git a/bitnami/opensearch/3/debian-12/prebuildfs/opt/bitnami/checksums/opensearch-3.8.0-0-linux-arm64-debian-12.tar.gz.sha256 b/bitnami/opensearch/3/debian-12/prebuildfs/opt/bitnami/checksums/opensearch-3.8.0-0-linux-arm64-debian-12.tar.gz.sha256
new file mode 100644
index 000000000000..bbf24113b32c
--- /dev/null
+++ b/bitnami/opensearch/3/debian-12/prebuildfs/opt/bitnami/checksums/opensearch-3.8.0-0-linux-arm64-debian-12.tar.gz.sha256
@@ -0,0 +1 @@
+b2ddd00f83805f16baa9988f90729fabd4fc6bcd90071b21e9bba796503490b6  opensearch-3.8.0-0-linux-arm64-debian-12.tar.gz
diff --git a/bitnami/opensearch/3/debian-12/prebuildfs/opt/bitnami/checksums/yq-4.53.3-3-linux-amd64-debian-12.tar.gz.sha256 b/bitnami/opensearch/3/debian-12/prebuildfs/opt/bitnami/checksums/yq-4.53.3-3-linux-amd64-debian-12.tar.gz.sha256
deleted file mode 100644
index f4a17ac678e6..000000000000
--- a/bitnami/opensearch/3/debian-12/prebuildfs/opt/bitnami/checksums/yq-4.53.3-3-linux-amd64-debian-12.tar.gz.sha256
+++ /dev/null
@@ -1 +0,0 @@
-629aa578b8aad3df67f2bd63cf90536bdbef09d104a861577e52fb6b860d954b  yq-4.53.3-3-linux-amd64-debian-12.tar.gz
diff --git a/bitnami/opensearch/3/debian-12/prebuildfs/opt/bitnami/checksums/yq-4.53.3-3-linux-arm64-debian-12.tar.gz.sha256 b/bitnami/opensearch/3/debian-12/prebuildfs/opt/bitnami/checksums/yq-4.53.3-3-linux-arm64-debian-12.tar.gz.sha256
deleted file mode 100644
index 7c159d347b9a..000000000000
--- a/bitnami/opensearch/3/debian-12/prebuildfs/opt/bitnami/checksums/yq-4.53.3-3-linux-arm64-debian-12.tar.gz.sha256
+++ /dev/null
@@ -1 +0,0 @@
-cd594154ab6853f508cfaefeed74676bc2f5c65efe910096ca3a664c050e67f5  yq-4.53.3-3-linux-arm64-debian-12.tar.gz
diff --git a/bitnami/opensearch/3/debian-12/prebuildfs/opt/bitnami/checksums/yq-4.53.6-1-linux-amd64-debian-12.tar.gz.sha256 b/bitnami/opensearch/3/debian-12/prebuildfs/opt/bitnami/checksums/yq-4.53.6-1-linux-amd64-debian-12.tar.gz.sha256
new file mode 100644
index 000000000000..4f5a48456d9d
--- /dev/null
+++ b/bitnami/opensearch/3/debian-12/prebuildfs/opt/bitnami/checksums/yq-4.53.6-1-linux-amd64-debian-12.tar.gz.sha256
@@ -0,0 +1 @@
+18ff4c3a38baf62c4040a5be1eb8f08dda085e6d8070566ff50fa71643854f71  yq-4.53.6-1-linux-amd64-debian-12.tar.gz
diff --git a/bitnami/opensearch/3/debian-12/prebuildfs/opt/bitnami/checksums/yq-4.53.6-1-linux-arm64-debian-12.tar.gz.sha256 b/bitnami/opensearch/3/debian-12/prebuildfs/opt/bitnami/checksums/yq-4.53.6-1-linux-arm64-debian-12.tar.gz.sha256
new file mode 100644
index 000000000000..49f7d1f9efcb
--- /dev/null
+++ b/bitnami/opensearch/3/debian-12/prebuildfs/opt/bitnami/checksums/yq-4.53.6-1-linux-arm64-debian-12.tar.gz.sha256
@@ -0,0 +1 @@
+268c46cc91c94285d3f5cd677ae65683f7caaa64b7e91bc6e1b5a2fa800b85f2  yq-4.53.6-1-linux-arm64-debian-12.tar.gz
diff --git a/bitnami/opensearch/3/debian-12/rootfs/opt/bitnami/scripts/opensearch-env.sh b/bitnami/opensearch/3/debian-12/rootfs/opt/bitnami/scripts/opensearch-env.sh
index 48be3d250b76..a5f530b17320 100644
--- a/bitnami/opensearch/3/debian-12/rootfs/opt/bitnami/scripts/opensearch-env.sh
+++ b/bitnami/opensearch/3/debian-12/rootfs/opt/bitnami/scripts/opensearch-env.sh
@@ -89,6 +89,7 @@ opensearch_env_vars=(
     OPENSEARCH_SECURITY_ADMIN_DN
     OPENSEARCH_SECURITY_ADMIN_CERT_LOCATION
     OPENSEARCH_SECURITY_ADMIN_KEY_LOCATION
+    OPENSEARCH_SECURE_SETTINGS_KEYSTORE_PASSWORD
     DB_MINIMUM_MANAGER_NODES
     KIBANA_PASSWORD
 )
@@ -272,5 +273,6 @@ export OPENSEARCH_SECURITY_NODES_DN="${OPENSEARCH_SECURITY_NODES_DN:-}"
 export OPENSEARCH_SECURITY_ADMIN_DN="${OPENSEARCH_SECURITY_ADMIN_DN:-}"
 export OPENSEARCH_SECURITY_ADMIN_CERT_LOCATION="${OPENSEARCH_SECURITY_ADMIN_CERT_LOCATION:-${DB_CERTS_DIR}/admin.crt}"
 export OPENSEARCH_SECURITY_ADMIN_KEY_LOCATION="${OPENSEARCH_SECURITY_ADMIN_KEY_LOCATION:-${DB_CERTS_DIR}/admin.key}"
+export OPENSEARCH_SECURE_SETTINGS_KEYSTORE_PASSWORD="${OPENSEARCH_SECURE_SETTINGS_KEYSTORE_PASSWORD:-FIPS_password_123!}"
 
 # Custom environment variables may be defined below
diff --git a/bitnami/opensearch/README.md b/bitnami/opensearch/README.md
index a2bb7761da97..2e2acbf225e7 100644
--- a/bitnami/opensearch/README.md
+++ b/bitnami/opensearch/README.md
@@ -145,6 +145,7 @@ The following tables list the main variables you can set.
 | `OPENSEARCH_SECURITY_ADMIN_DN`                 | Comma-separated list including the Opensearch Admin user allowed TLS DNs.                                           | `nil`                                       |
 | `OPENSEARCH_SECURITY_ADMIN_CERT_LOCATION`      | Path to the Opensearch Admin PEM certificate.                                                                       | `${DB_CERTS_DIR}/admin.crt`                 |
 | `OPENSEARCH_SECURITY_ADMIN_KEY_LOCATION`       | Path to the Opensearch Admin PEM key.                                                                               | `${DB_CERTS_DIR}/admin.key`                 |
+| `OPENSEARCH_SECURE_SETTINGS_KEYSTORE_PASSWORD` | Password used to create the FIPS keystore in restricted mode.                                                       | `FIPS_password_123!`                        |
 
 #### Read-only environment variables