anchor.diff:  [id="csi-example-deployment_{context}"]
   = Example CSI deployment
   
  -Since {product-title} does not ship with any CSI driver installed, this 
  -example shows how to deploy a community driver for OpenStack Cinder in 
  +Since {product-title} does not ship with any CSI driver installed, this
  +example shows how to deploy a community driver for OpenStack Cinder in
   {product-title}.
   
   .Procedure
   
   . Create a new project where the CSI components will run, and then create
  -a new service account to run the components. An explicit node selector is 
  +a new service account to run the components. An explicit node selector is
   used to run the Daemonset with the CSI driver also on master nodes.
   +
   ----
   # oc adm new-project csi --node-selector=""
  -Now using project "csi" on server "https://example.com:8443".
  +Created project csi
   
   # oc create serviceaccount cinder-csi
   serviceaccount "cinder-csi" created
   
   # oc adm policy add-scc-to-user privileged system:serviceaccount:csi:cinder-csi
  -scc "privileged" added to: ["system:serviceaccount:csi:cinder-csi"]
  -----
  -
  -. Apply this YAML file to create the deployment with the external CSI 
  +securitycontextconstraints.security.openshift.io/privileged added to: ["system:serviceaccount:csi:cinder-csi"]
  +----
  +
  +. Apply this YAML file to create the deployment with the external CSI
   attacher and provisioner and DaemonSet with the CSI driver.
   +
   [source,yaml]
  
positive.code:             path: /dev
  ----
  <1> Replace with `cloud.conf` for your OpenStack deployment.
  For example, the Secret can be generated using the `oc create secret 
  generic cloudconfig --from-file cloud.conf --dry-run -o yaml`.
  <2> Optionally, add `nodeSelector` to the CSI driver pod template to 
  configure the nodes on which the CSI driver starts. Only nodes matching 
  the selector run pods that use volumes that are served by the CSI driver. 
  Without `nodeSelector`, the driver runs on all nodes in the cluster.
  
negative.code:       serviceAccount: cinder-csi
        containers:
          - name: csi-driver-registrar
            image: quay.io/k8scsi/csi-node-driver-registrar:v1.0.2
            securityContext:
              privileged: true
            args:
  