anchor.diff:        basicAuthFile = mkOption {
           description = ''
             Kubernetes apiserver basic authentication file. See
  -          <link xlink:href="https://kubernetes.io/docs/admin/authentication.html"/>
  +          <link xlink:href="https://kubernetes.io/docs/reference/access-authn-authz/authentication"/>
           '';
           default = pkgs.writeText "users" ''
             kubernetes,admin,0
  
positive.code:       authorizationMode = mkOption {
          description = ''
            Kubernetes apiserver authorization mode (AlwaysAllow/AlwaysDeny/ABAC/RBAC). See
            <link xlink:href="https://kubernetes.io/docs/admin/authorization.html"/>
          '';
          default = ["RBAC" "Node"];
          type = types.listOf (types.enum ["AlwaysAllow" "AlwaysDeny" "ABAC" "RBAC" "Node"]);
  
negative.code:       tokenAuthFile = mkOption {
          description = ''
            Kubernetes apiserver token authentication file. See
            <link xlink:href="https://kubernetes.io/docs/reference/access-authn-authz/authentication"/>
          '';
          default = null;
          type = types.nullOr types.path;
  