anchor.diff:  
   ----
   $ oadm registry --config=/etc/origin/master/admin.kubeconfig \//<1>
  -    --credentials=/etc/origin/master/openshift-registry.kubeconfig \//<2>
  +    --service-account=registry \//<2>
       --images='registry.access.redhat.com/openshift3/ose-${component}:${version}' <3>
   ----
   endif::[]
  
positive.code: ----
  $ oadm registry --service-account=registry \
      --config=admin.kubeconfig \
      --credentials=openshift-registry.kubeconfig \
      --mount-host=<path>
  ----
  endif::[]
  
negative.code: link:../../cli_reference/manage_cli_profiles.html[CLI configuration file] for
  the link:../../architecture/additional_concepts/authorization.html#roles[cluster
  administrator].
  <2> `--service-account` is the service account used to run the registry's pod.
  endif::[]
  ifdef::openshift-enterprise[]
  <3> Required to pull the correct image for {product-title}.
  