anchor.diff:    - "system:serviceaccounts:top-secret"
   ----
   ====
  +endif::[]
   
   [[using-a-service-accounts-credentials-externally]]
   == Using a Service Account's Credentials Externally
  
positive.code: serviceaccounts/robot
  ----
  ====
  
  [[managing-service-account-credentials]]
  == Managing Service Account Credentials
  
negative.code: can be revoked by deleting the secret. When the secret is deleted, a new one is
  automatically generated to take its place.
  
  ifdef::openshift-online,openshift-origin,openshift-dedicated,openshift-enterprise[]
  [[managing-allowed-secrets]]
  == Managing Allowed Secrets
  
  