anchor.diff:  can be revoked by deleting the secret. When the secret is deleted, a new one is
   automatically generated to take its place.
   
  +ifdef::openshift-online,openshift-origin,openshift-dedicated,openshift-enterprise[]
   [[managing-allowed-secrets]]
   == Managing Allowed Secrets
   
  
positive.code: == Overview
  
  When a person uses the {product-title} CLI or web console, their API token
  authenticates them to the {product-title} API. However, when a regular user's
  credentials are not available, it is common for components to make API calls
  independently. For example:
  
  * Replication controllers make API calls to create or delete pods.
  * Applications inside containers could make API calls for discovery purposes.
  * External applications could make API calls for monitoring or integration purposes.
  
  Service accounts provide a flexible way to control API access without sharing a
  regular user's credentials.
  
negative.code: serviceaccounts/robot
  ----
  ====
  endif::[]
  
  [[managing-service-account-credentials]]
  == Managing Service Account Credentials
  