anchor.diff:    cf:
       scope: cloud_controller.read,&nbsp;[...]&nbsp;routing.router_groups.read,<strong>network.admin</strong></pre>
           <li><a name="uaa-secret"></a>Under <code>clients</code>, add a <code>network-policy</code> 
  -        client as follows and replace <code>REPLACE_WITH_UAA_CLIENT_SECRET</code> with a secure password of your choosing. 
  +        client as follows and replace <code>REPLACE-WITH-UAA-CLIENT-SECRET</code> with a secure password of your choosing. 
           <pre>
   clients:
     cf:
  
positive.code:         policy_server_url: https://policy-server.service.cf.internal:4003
          ca_cert: |
            -----BEGIN CERTIFICATE-----
            REPLACE_WITH_CA_CERT
            -----END CERTIFICATE-----
          client_cert: |
            -----BEGIN CERTIFICATE-----
            REPLACE_WITH_CLIENT_CERT
            -----END CERTIFICATE-----
          client_key: |
            -----BEGIN RSA PRIVATE KEY-----
            REPLACE_WITH_CLIENT_KEY
            -----END RSA PRIVATE KEY-----
        garden_external_networker:
          cni_plugin_dir: /var/vcap/packages/flannel/bin
  
negative.code:         etcd_ca_cert: (( config_from_cf.etcd.ca_cert ))
        policy_server:
          database:
            type: REPLACE-WITH-DB-TYPE
            username: REPLACE-WITH-USERNAME
            password: REPLACE-WITH-PASSWORD
            host: REPLACE-WITH-DB-HOSTNAME
            port: REPLACE-WITH-DB-PORT
            name: REPLACE-WITH-DB-NAME
          skip_ssl_validation: true
          uaa_client_secret: REPLACE-WITH-UAA-CLIENT-SECRET
          uaa_url: (( "https://uaa." config_from_cf.system_domain ))
          ca_cert: |
            -----BEGIN CERTIFICATE-----
            REPLACE-WITH-CA-CERTIFICATE
            -----END CERTIFICATE-----
          server_cert: |
            -----BEGIN CERTIFICATE-----
            REPLACE-WITH-SERVER-CERT
            -----END CERTIFICATE-----
          server_key: |
            -----BEGIN RSA PRIVATE KEY-----
            REPLACE-WITH-SERVER-KEY
            -----END RSA PRIVATE KEY-----
    garden_properties:
      network_plugin: /var/vcap/packages/runc-cni/bin/garden-external-networker
  