anchor.diff:  ----
   ====
   
  -You may wish to create a route to reach Kibana externally:
  +Optionally, to create a link:../architecture/core_concepts/routes.html[route] to
  +reach *Kibana* externally:
   
   ====
   ----
  
positive.code: ----
  ====
  
  Add this to the `users` hash at the end (`default` is the project name):
  
  ----
  - system:serviceaccount:default:es-deploy
  ----
  
  Then save and exit. This account now has access to deploy privileged pods.
  
  The following is the manifest for the *ElasticSearch* cluster:
  
  ====
  
  
negative.code: controller], so you can link:../dev_guide/deployments.html#scaling[scale] the
  *Elasticsearch* cluster up and down as required.
  
  You will need a privileged link:service_accounts.html[service account] to launch
  the current *ElasticSearch* image, as it runs as root (which should be corrected
  in time). First, create a file with the following contents:
  
  ====
  
  