anchor.diff:        type = types.attrs;
         default = {
           imageName = "k8s.gcr.io/kubernetes-dashboard-amd64";
  -        imageDigest = "sha256:dc4026c1b595435ef5527ca598e1e9c4343076926d7d62b365c44831395adbd0";
  +        imageDigest = "sha256:0ae6b69432e78069c5ce2bcde0fe409c5c4d6f0f4d9cd50a17974fea38898747";
           finalImageTag = cfg.version;
  -        sha256 = "18ajcg0q1vignfjk2sm4xj4wzphfz8wah69ps8dklqfvv0164mc8";
  +        sha256 = "01xrr4pwgr2hcjrjsi3d14ifpzdfbxzqpzxbk2fkbjb9zkv38zxy";
         };
       };
     };
  
positive.code: in {
    options.services.kubernetes.addons.dashboard = {
      enable = mkEnableOption "kubernetes dashboard addon";
  
      rbac = mkOption {
        description = "Role-based access control (RBAC) options";
  
negative.code:                     memory = "100Mi";
                    };
                  };
                  args = ["--auto-generate-certificates"] ++ cfg.extraArgs;
                  volumeMounts = [{
                    name = "tmp-volume";
                    mountPath = "/tmp";
  