anchor.diff:  let
     cfg = config.services.kubernetes.addons.dashboard;
   
  -  name = "gcr.io/google_containers/kubernetes-dashboard-amd64";
  -	version = "v1.8.2";
  +  name = "k8s.gcr.io/kubernetes-dashboard-amd64";
  +  version = "v1.8.3";
   
     image = pkgs.dockerTools.pullImage {
       imageName = name;
  +    imageDigest = "sha256:dc4026c1b595435ef5527ca598e1e9c4343076926d7d62b365c44831395adbd0";
       finalImageTag = version;
  -    sha256 = "11h0fz3wxp0f10fsyqaxjm7l2qg7xws50dv5iwlck5gb1fjmajad";
  -    imageDigest = "sha256:e7984d10351601080bbc146635d51f0cfbea31ca6f0df323cf7a58cf2f6a68df";
  +    sha256 = "18ajcg0q1vignfjk2sm4xj4wzphfz8wah69ps8dklqfvv0164mc8";
     };
   in {
     options.services.kubernetes.addons.dashboard = {
  
positive.code:     services.kubernetes.addonManager.addons = {
        kubernetes-dashboard-deployment = {
          kind = "Deployment";
          apiVersion = "apps/v1beta1";
          metadata = {
            labels = {
              k8s-addon = "kubernetes-dashboard.addons.k8s.io";
  
negative.code:               };
                annotations = {
                  "scheduler.alpha.kubernetes.io/critical-pod" = "";
                };
              };
              spec = {
                priorityClassName = "system-cluster-critical";
                containers = [{
                  name = "kubernetes-dashboard";
                  image = "${name}:${version}";
                  ports = [{
                    containerPort = 8443;
                    protocol = "TCP";
                  }];
                  resources = {
                    limits = {
                      cpu = "100m";
                      memory = "300Mi";
                    };
                    requests = {
                      cpu = "100m";
                      memory = "100Mi";
                    };
                  };
                  args = ["--auto-generate-certificates"];
                  volumeMounts = [{
                    name = "tmp-volume";
                    mountPath = "/tmp";
                  } {
                    name = "kubernetes-dashboard-certs";
                    mountPath = "/certs";
                  }];
                  livenessProbe = {
                    httpGet = {
                      scheme = "HTTPS";
                      path = "/";
                      port = 8443;
                    };
                    initialDelaySeconds = 30;
                    timeoutSeconds = 30;
                  };
                }];
                volumes = [{
                  name = "kubernetes-dashboard-certs";
                  secret = {
                    secretName = "kubernetes-dashboard-certs";
                  };
                } {
                  name = "tmp-volume";
                  emptyDir = {};
                }];
                serviceAccountName = "kubernetes-dashboard";
                tolerations = [{
                  key = "node-role.kubernetes.io/master";
                  effect = "NoSchedule";
                } {
                  key = "CriticalAddonsOnly";
                  operator = "Exists";
                }];
              };
            };
  