anchor.diff:  <4> The volume type being used, in this case the *nfs* plug-in.
   <5> The path that is exported by the NFS server.
   <6> The host name or IP address of the NFS server.
  -<7> Defines what happens to a volume when released from its claim. Valid options
  -are *Retain* (default) and *Recycle*. See
  +<7> The reclaim policy for the PV. This defines what happens to a volume when released
  +from its claim. Valid options are *Retain* (default) and *Recycle*. See
   link:#nfs-reclaiming-resources[Reclaiming Resources].
   ====
   
  
positive.code:     securityContext:
        runAsUser: 65534 <2>
  ----
  <1> Pods contain a `*securtityContext*` specific to each container (shown here)
  and a global `*securityContext*` which applies to all containers defined in the
  pod.
  <2> *nfsnobody* owner.
  ====
  
  Assuming the *default* project and the *restricted* SCC, the pod's requested
  
negative.code: 
  Because the group ID on the link:#nfs-export[example target NFS directory] shown
  above is 5555, the pod can define that group ID using `*supplementalGroups*`
  under the pod-level `*securityContext*` definition. For example:
  
  ====
  ----
  