anchor.diff:                };
                 annotations = {
                   "scheduler.alpha.kubernetes.io/critical-pod" = "";
  -                #"scheduler.alpha.kubernetes.io/tolerations" = ''[{"key":"CriticalAddonsOnly", "operator":"Exists"}]'';
                 };
               };
               spec = {
  +              priorityClassName = "system-cluster-critical";
                 containers = [{
                   name = "kubernetes-dashboard";
                   image = "${name}:${version}";
                   ports = [{
  -                  containerPort = 9090;
  +                  containerPort = 8443;
                     protocol = "TCP";
                   }];
                   resources = {
                     limits = {
                       cpu = "100m";
  -                    memory = "250Mi";
  +                    memory = "300Mi";
                     };
                     requests = {
                       cpu = "100m";
  -                    memory = "50Mi";
  +                    memory = "100Mi";
                     };
                   };
  +                args = ["--auto-generate-certificates"];
  +                volumeMounts = [{
  +                  name = "tmp-volume";
  +                  mountPath = "/tmp";
  +                } {
  +                  name = "kubernetes-dashboard-certs";
  +                  mountPath = "/certs";
  +                }];
                   livenessProbe = {
                     httpGet = {
  +                    scheme = "HTTPS";
                       path = "/";
  -                    port = 9090;
  +                    port = 8443;
                     };
                     initialDelaySeconds = 30;
                     timeoutSeconds = 30;
                   };
                 }];
  +              volumes = [{
  +                name = "kubernetes-dashboard-certs";
  +                secret = {
  +                  secretName = "kubernetes-dashboard-certs";
  +                };
  +              } {
  +                name = "tmp-volume";
  +                emptyDir = {};
  +              }];
                 serviceAccountName = "kubernetes-dashboard";
                 tolerations = [{
                   key = "node-role.kubernetes.io/master";
                   effect = "NoSchedule";
  +              } {
  +                key = "CriticalAddonsOnly";
  +                operator = "Exists";
                 }];
               };
             };
  
positive.code:           labels = {
              k8s-app = "kubernetes-dashboard";
              k8s-addon = "kubernetes-dashboard.addons.k8s.io";
  						"addonmanager.kubernetes.io/mode" = "Reconcile";
            };
            name = "kubernetes-dashboard";
            namespace = "kube-system";
          };
        };
      } // (optionalAttrs cfg.enableRBAC {
        kubernetes-dashboard-crb = {
          apiVersion = "rbac.authorization.k8s.io/v1beta1";
          kind = "ClusterRoleBinding";
          metadata = {
            name = "kubernetes-dashboard";
  
negative.code:         };
          spec = {
            ports = [{
              port = 443;
              targetPort = 8443;
            }];
            selector.k8s-app = "kubernetes-dashboard";
          };
  