anchor.diff:  # Delete any existing secret (ignore "Not Exists" errors)
   oc delete secret _<ca-cert-secret>_
   # Create the new one
  -oc create secret generic _<ca-cert-secret>_ \
  -  --from-file=ca.crt=_<ca-cert-file>_ \
  -  && oc label secret _<ca-cert-secret>_ \
  -  strimzi.io/kind=Kafka \
  -  strimzi.io/cluster=_<my-cluster>_
  +oc create secret generic _<ca-cert-secret>_ --from-file=ca.crt=_<ca-cert-file>_
   ----
   
   . Put your CA key in the corresponding `Secret` (`_<cluster>_-cluster-ca` for the cluster CA or `_<cluster>_-clients-ca` for the clients CA)
  
positive.code: # Delete any existing secret (ignore "Not Exists" errors)
  kubectl delete secret _<ca-cert-secret>_
  # Create and label the new one
  kubectl create secret generic _<ca-cert-secret>_ \
    --from-file=ca.crt=_<ca-cert-file>_ \
    && kubectl label secret _<ca-cert-secret>_ \
    strimzi.io/kind=Kafka \
    strimzi.io/cluster=_<my-cluster>_
  ----
  endif::Kubernetes[]
  +
  
negative.code: # Delete the existing secret
  kubectl delete secret _<ca-key-secret>_
  # Create the new one
  kubectl create secret generic _<ca-key-secret>_ --from-file=ca.key=_<ca-key-file>_
  ----
  endif::Kubernetes[]
  +
  