anchor.diff:          };
           type = "Opaque";
         };
  -      kubernetes-dashboard-cm = {
  -        apiVersion = "v1";
  -        kind = "ConfigMap";
  -        metadata = {
  -          labels = {
  -            k8s-app = "kubernetes-dashboard";
  -            # Allows editing resource and makes sure it is created first.
  -            "addonmanager.kubernetes.io/mode" = "EnsureExists";
  -          };
  -          name = "kubernetes-dashboard-settings";
  -          namespace = "kube-system";
  -        };
  -      };
  -    } // (optionalAttrs cfg.rbac.enable
  +    }
  +
  +    (optionalAttrs cfg.rbac.enable
         (let
           subjects = [{
             kind = "ServiceAccount";
  
positive.code:         };
        };
  
        kubernetes-dashboard-sa = {
          apiVersion = "v1";
          kind = "ServiceAccount";
  
negative.code:             inherit subjects;
            };
          })
      ))];
    };
  }
  