anchor.diff:  
   To add a 'hostnetwork' SCC to the *router* service account in the *default* namespace:
   
  -====
   ----
   $ oadm policy add-scc-to-user hostnetwork system:serviceaccount:default:router
   ----
  
positive.code: // - Router Service Account (enterprise)
  // and both of these have anchor ‘creating-the-router-service-account’.
  
  Use of labels (e.g., to define xref:../install_config/router/default_haproxy_router.adoc#using-router-shards[router shards])
  requires `cluster-reader` permission.
  
  ----
  
negative.code: ----
  
  ifdef::openshift-origin[]
  With a service account in place, you can proceed to installing
  xref:../../install_config/router/default_haproxy_router.adoc#install-config-router-default-haproxy[a
  default HAProxy Router],
  xref:../../install_config/router/customized_haproxy_router.adoc#install-config-router-customized-haproxy[a
  customized HAProxy Router] or
  xref:../../install_config/router/f5_router.adoc#install-config-router-f5[F5
  Router].
  endif::[]
  