anchor.diff:        - xpack.ssl.certificate=$CERTS_DIR/es02/es02.crt
         - xpack.ssl.key=$CERTS_DIR/es02/es02.key
       volumes: ['esdata_02:/usr/share/elasticsearch/data', './certs:$CERTS_DIR']
  +
     wait_until_ready:
  -    image: docker.elastic.co/elasticsearch/elasticsearch-platinum:{version}
  +    image: docker.elastic.co/elasticsearch/elasticsearch:{version}
       command: /usr/bin/true
       depends_on: {"es01": {"condition": "service_healthy"}}
  +
   volumes: {"esdata_01": {"driver": "local"}, "esdata_02": {"driver": "local"}}
   ----
   
  -<1> Bootstrap `elastic` with the password defined in `.env`. See 
  +<1> Bootstrap `elastic` with the password defined in `.env`. See
   {stack-ov}/built-in-users.html#bootstrap-elastic-passwords[the Elastic Bootstrap Password].
  -<2> Disable verification of authenticity for inter-node communication. Allows
  +<2> Automatically generate and apply a trial subscription, in order to enable
  +{security}.
  +<3> Disable verification of authenticity for inter-node communication. Allows
   creating self-signed certificates without having to pin specific internal IP addresses.
   endif::[]
   
  
positive.code: ["source","yaml",subs="attributes"]
  ----
  version: '2.2'
  services:
    create_certs:
      container_name: create_certs
  
negative.code:       interval: 30s
        timeout: 10s
        retries: 5
  
    es02:
      container_name: es02
      image: docker.elastic.co/elasticsearch/elasticsearch:{version}
      environment:
        - node.name=es02
        - discovery.zen.minimum_master_nodes=2
        - ELASTIC_PASSWORD=$ELASTIC_PASSWORD
        - discovery.zen.ping.unicast.hosts=es01
        - "ES_JAVA_OPTS=-Xms512m -Xmx512m"
        - xpack.license.self_generated.type=trial
        - xpack.security.enabled=true
        - xpack.security.http.ssl.enabled=true
        - xpack.security.transport.ssl.enabled=true
        - xpack.security.transport.ssl.verification_mode=certificate
  