anchor.diff:  ESPOD=$( oc get pods -l component=elasticsearch -o name | sed -e "s/pod\///" )
   ----
   
  -. Use the following command to extract CA certificate to a file:
  +. Use the following command to extract CA certificate from Elasticsearch:
   +
   ----
  -oc exec $ESPOD -- cat /etc/openshift/elasticsearch/secret/admin-ca > ./admin-ca
  +oc extract secret/elasticsearch --to=. --keys=admin-ca
   ----
   
   . Create the route object for the ElasticSearch service as an yaml file:
  
positive.code: oc create -f my_es_route.yaml
  ----
  
  . Check the ElasticSearch service is exposed:
  +
  ----
  curl --silent --insecure -H "Authorization: Bearer $( oc whoami -t )" "https://$( oc get route elasticsearch -o jsonpath='{.spec.host}' ):443/.operations.*/_search" | jq
  
negative.code:     kind: Service
      name: elasticsearch
    tls:
      termination: reencrypt <1>
      destinationCACertificate: |-   <2>
        -----BEGIN CERTIFICATE-----
        [...]
        -----END CERTIFICATE-----
  ----
  <1> Set the termination field to reencrypt.
  <2> Enter the CA certificate from ElasticSearch.
  
  . Use the following command to create the service:
  +
  