diff --git a/docs/accessing-services.asciidoc b/docs/accessing-services.asciidoc
index 36ed44176d..940aa8e682 100644
--- a/docs/accessing-services.asciidoc
+++ b/docs/accessing-services.asciidoc
@@ -46,6 +46,7 @@ For each resource, `Elasticsearch`, `Kibana` or `ApmServer`, the operator manage
 > kubectl get svc
 
 NAME                TYPE           CLUSTER-IP      EXTERNAL-IP      PORT(S)          AGE
+hulk-apm-http       ClusterIP      10.19.212.105   <none>           8200:31000/TCP   1m
 hulk-es-http        ClusterIP      10.19.252.160   <none>           9200:31320/TCP   1m
 hulk-kb-http        ClusterIP      10.19.247.151   <none>           5601:31380/TCP   1m
 ----
@@ -76,6 +77,7 @@ spec:
 > kubectl get svc
 
 NAME                TYPE           CLUSTER-IP      EXTERNAL-IP      PORT(S)          AGE
+hulk-apm-http       ClusterIP      10.19.212.105   35.176.227.106   8200:31000/TCP   1m
 hulk-es-http        LoadBalancer   10.19.252.160   35.198.131.115   9200:31320/TCP   1m
 hulk-kb-http        LoadBalancer   10.19.247.151   35.242.197.228   5601:31380/TCP   1m
 ----
@@ -161,6 +163,23 @@ spec:
         secretName: my-cert
 ----
 
+[float]
+[id="{p}-disable-tls"]
+==== Disable TLS
+
+You can explicitly disable TLS for Kibana or APM Server if you want to.
+
+[source,yaml]
+----
+spec:
+  http:
+    tls:
+      selfSignedCertificate:
+        disabled: true
+----
+
+TLS cannot be disabled for Elasticsearch.
+
 [float]
 [id="{p}-request-elasticsearch-endpoint"]
 === Requesting the Elasticsearch endpoint