anchor.diff:  oc extract secret/elasticsearch --to=. --keys=admin-ca
   ----
   
  -. Create the route object for the ElasticSearch service as an yaml file:
  +. Create the re-encrypt route object for the ElasticSearch service as an yaml file:
   +
   ----
   apiVersion: route.openshift.io/v1
  
positive.code: = Exposing Elasticsearch as a route
  
  By default, Elasticsearch deployed with cluster logging is not
  accessible from outside the logging cluster. You can enable a route for external
  access to Elasticsearch for those tools that want to access its data.
  
  You have access to Elasticsearch using your {product-title} token, and
  you can provide the external Elasticsearch and Elasticsearch Ops
  hostnames when creating the server certificate (similar to Kibana).
  
  .Prerequisite
  
  
negative.code:       -----END CERTIFICATE-----
  ----
  <1> Set the termination field to reencrypt.
  <2> Add the contents of the *_admin-ca_* file.
  
  . Use the following command to create the service:
  +
  