anchor.diff:      image: {docker-image}
       environment:
         - node.name=es02
  -      - discovery.seed_hosts=es01
  +      - discovery.seed_hosts=es01,es02
         - cluster.initial_master_nodes=es01,es02
         - ELASTIC_PASSWORD=$ELASTIC_PASSWORD
         - "ES_JAVA_OPTS=-Xms512m -Xmx512m"
  
positive.code: --
  ["source","sh"]
  ----
  docker-compose -f create-certs.yml up
  ----
  --
  . Start two {es} nodes configured for SSL/TLS:
  
negative.code:     image: {docker-image}
      command: >
        bash -c '
          yum install -y -q -e 0 unzip;
          if [[ ! -f /certs/bundle.zip ]]; then
            bin/elasticsearch-certutil cert --silent --pem --in config/certificates/instances.yml -out /certs/bundle.zip;
            unzip /certs/bundle.zip -d /certs; <1>
          fi;
          chown -R 1000:0 /certs
        '
      user: "0"
      working_dir: /usr/share/elasticsearch
      volumes: ['certs:/certs', '.:/usr/share/elasticsearch/config/certificates']
  
  volumes: {"certs"}
  ----
  
  <1> The new node certificates and CA certificate+key are placed in a docker volume `es_certs`.
  endif::[]
  
  [[getting-starter-tls-create-docker-compose]]
  