anchor.diff:  secret].
   ====
   
  -By default, the Hawkular Metrics server uses self-signed certificates, which are
  -not trusted by a browser or other external services. If you want to provide your
  -own trusted certificate to be used for external access, you can do so using a
  -route with a
  -link:../architecture/core_concepts/routes.html#secured-routes[re-encryption
  -termination] after deploying the metrics components.
  +By default the Hawkular Metrics server uses an internally-signed certificate which is not
  +trusted by browsers or other external services. If you wish to provide your own trusted
  +certificate to be used for external access you can do so using a route with
  +link:../architecture/core_concepts/routes.html#secured-routes[re-encryption termination].
  +
  +Creating this new route requires deleting the default route that just passes through to
  +an internally-signed certificate:
   
   . First, delete the default route that uses the self-signed certificates:
   +
  
positive.code: All of the other parameters are optional and allow for greater customization.
  For instance, if you have a custom install in which the Kubernetes master is not
  available under `https://kubernetes.default.svc:443` you can specify the value
  to use instead with the `*HAWKULAR_METRICS_HOSTNAME*` parameter. If you wish to
  deploy a specific version of the metrics components, you can do so with the `*IMAGE_VERSION*` parameter.
  
  [[deploying-the-metrics-components]]
  
negative.code: $ oc delete route hawkular-metrics
  ----
  
  . A new route with link:../architecture/core_concepts/routes.html#secured-routes[re-encryption termination]
  will then need to be created.
  +
  ====
  ----
  $ oc create route reencrypt hawkular-metrics-reencrypt \
              --hostname hawkular-metrics.example.com \ <1>
              --key /path/to/key \ <2>
              --cert /path/to/cert \ <2>
              --ca-cert /path/to/ca.crt \ <2>
  ifdef::openshift-enterprise[]
              --service hawkular-metrics --port 8444 \
  endif::[]
  ifdef::openshift-origin[]
              --service hawkular-metrics --port 8443 \
  endif::[]
              --dest-ca-cert /path/to/internal-ca.crt <3>
  ----
  <1> The value specified in the *HAWKULAR_METRICS_HOSTNAME* template parameter.
  <2> These need to define the custom certificate you wish to provide.
  