anchor.diff:  
   [CAUTION]
   ====
  -If you are using self-signed certificates, remember that the Hawkular Metrics service is hosted under a different hostname and uses different certificates than the console. You may need to explicitly open a browser tab to the value
  +If you are using self-signed certificates, remember that the Hawkular Metrics
  +service is hosted under a different hostname and uses different certificates
  +than the console. You may need to explicitly open a browser tab to the value
   specified in `*metricsPublicURL*` and accept that certificate.
   
  -To avoid this issue, use certificates which are configured to be acceptable by your browser.
  -====
  +To avoid this issue, use certificates which are configured to be acceptable by
  +your browser.
  +====
  
positive.code: 
  |*_heapster_client_ca.cert_*
  |The certificate that generates *_heapster.cert_*. This is required if
  *_heapster.cert_* is specified.  Otherwise, the main CA for the OpenShift installation
  is used. In order for link:../dev_guide/pod_autoscaling.html[horizontal pod autoscaling]
  to function properly, this should not be overridden.
  
  |*_heapster_allowed_users_*
  |A file containing a comma-separated list of CN to accept from certificates
  signed with the specified CA. By default, this is set to allow the OpenShift service
  proxy to connect.  If you override this, make sure to add `system:master-proxy` to the
  list in order to allow link:../dev_guide/pod_autoscaling.html[horizontal pod autoscaling]
  to function properly.
  
  |===
  
  
negative.code: hawkular-metrics-ca.cert=/home/openshift/metrics/hm-ca.cert
  ----
  
  The Metrics Deployer can accept multiple certificates using secrets. If a
  certificate is not passed as a secret, the deployer will generate a self-signed
  certificate to be used instead. For the deployer to generate certificates for
  you, a secret is still required before it can be deployed. In this case, create
  a "dummy" secret that does not specify a certificate value:
  
  [options="nowrap"]
  ----
  $ oc secrets new metrics-deployer nothing=/dev/null
  ----
  
  The following table contains more advanced configuration options, detailing all
  the secrets which can be used by the deployer:
  
  [cols="2,4",options="header"]
  |===
  