anchor.diff:  This generates a JSON specification of the `*secret*` named *dockerhub* and
   creates the object.
   
  -. Once the `*secret*` is created, add it to the builder service account:
  +. Once the `*secret*` is created, add it to the builder service account. Each
  +build is run with `serviceaccount/builder` role, so you need to give it access
  +your secret with following command:
  +
   +
   ====
   ----
  
positive.code: ----
  ====
  
  . Add the `*secret*` to the builder service account:
  +
  ====
  ----
  
negative.code: ----
  ====
  
  . Add the `*secret*` to the builder service account. Each build is run with
  `serviceaccount/builder` role, so you need to give it access your secret with
  following command:
  
  +
  ====
  ----
  