Skip shard routing tests on OpenSearch < 2.2.0 with security

OpenSearch < 2.2.0 with the security plugin throws
java.io.OptionalDataException on shard-routed requests due to
non-thread-safe HashSet/HashMap in User serialization. Fixed in 2.2.0
by opensearch-project/security#1970 (50a94b47).

Widen the existing 2.1.0-only skip to cover all versions below 2.2.0.

Signed-off-by: Sean Chittenden <sean.chittenden@crowdstrike.com>

Author: sean-

CHANGELOG.md

@@ -145,7 +145,7 @@ Inspired from [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 
 ### Fixed
 
-- Fix connection lifecycle bug in multiServerPool.OnFailure where connections were scheduled for resurrection before being moved from ready to dead list, causing potential race conditions
+- Skip shard routing integration tests on OpenSearch < 2.2.0 with security plugin due to server-side `OptionalDataException` from non-thread-safe User serialization (opensearch-project/security#1970)
 - Fix flaky connection integration test by replacing arbitrary sleep times with proper server readiness polling
 - Fix cluster readiness checks in integration tests to handle HTTPS cold start delays (increase timeout to 15s)
 - Fix GitHub Actions workflow authentication for OpenSearch 2.12.0+ password changes (admin -> myStrongPassword123!)

opensearchtransport/shard_routing_integration_test.go

@@ -232,11 +232,12 @@ func TestShardExactRouting_FullPipeline_Integration(t *testing.T) {
 	testutil.WaitForCluster(t)
 	testutil.SkipIfSingleNode(t, 2) // 1 replica requires at least 2 nodes for green health
 
-	// OpenSearch 2.1.0 with the security plugin returns HTTP 500 on search
-	// requests routed to specific shard-hosting nodes. The insecure 2.1.0
-	// compat job passes; this is a server-side security plugin bug.
+	// OpenSearch < 2.2.0 with the security plugin returns HTTP 500 on
+	// shard-routed requests due to non-thread-safe User serialization
+	// (java.io.OptionalDataException). Fixed in 2.2.0 by
+	// opensearch-project/security#1970 (50a94b47).
 	if testutil.IsSecure(t) {
-		testutil.SkipIfVersion(t, "=", "2.1.0", "shard-exact pipeline (security plugin HTTP 500)")
+		testutil.SkipIfVersion(t, "<", "2.2.0", "shard-exact pipeline (security plugin OptionalDataException)")
 	}
 
 	u := testutil.GetTestURL(t)