anchor.diff:                "--pod-manifest-path=${manifests}"} \
               ${optionalString (taints != "")
                 "--register-with-taints=${taints}"} \
  -            --kubeconfig=${kubeconfig} \
  +            --kubeconfig=${mkKubeConfig "kubelet" cfg.kubelet.kubeconfig} \
               --require-kubeconfig \
               --address=${cfg.kubelet.address} \
               --port=${toString cfg.kubelet.port} \
  
positive.code:     config.Cmd = "/bin/pause";
    };
  
    kubeconfig = pkgs.writeText "kubeconfig" (builtins.toJSON {
      apiVersion = "v1";
      kind = "Config";
      clusters = [{
        name = "local";
        cluster.certificate-authority = cfg.kubeconfig.caFile;
        cluster.server = cfg.kubeconfig.server;
      }];
      users = [{
        name = "kubelet";
        user = {
          client-certificate = cfg.kubeconfig.certFile;
          client-key = cfg.kubeconfig.keyFile;
        };
      }];
      contexts = [{
  
negative.code:           Group = "kubernetes";
          };
        };
  
        services.kubernetes.scheduler.kubeconfig = kubeConfigDefaults;
      })
  
      (mkIf cfg.controllerManager.enable {
  