anchor.diff:  // - Router Service Account (enterprise)
   // and both of these have anchor ‘creating-the-router-service-account’.
   
  -Use of labels (e.g., to define xref:../install_config/router/default_haproxy_router.adoc#using-router-shards[router shards])
  +Use of labels (e.g., to define xref:../../install_config/router/default_haproxy_router.adoc#using-router-shards[router shards])
   requires `cluster-reader` permission.
   
   ----
  
positive.code: to use only the necessary SCC for running router.
  ====
  
  ====
  // See NB[1] below.
  endif::[]
  
  
negative.code: 
  To add a 'hostnetwork' SCC to the *router* service account in the *default* namespace:
  
  ----
  $ oadm policy add-scc-to-user hostnetwork system:serviceaccount:default:router
  ----
  