anchor.diff:                labels.k8s-app = "kube-dns";
               };
               spec = {
  +              priorityClassName = "system-cluster-critical";
                 containers = [
                   {
                     name = "kubedns";
  -                  args = [
  -                    "--domain=${cfg.clusterDomain}"
  -                    "--dns-port=10053"
  -                    "--config-dir=/kube-dns-config"
  -                    "--v=2"
  -                  ];
  -                  env = [
  -                    {
  -                      name = "PROMETHEUS_PORT";
  -                      value = "10055";
  -                    }
  -                  ];
  -                  image = "gcr.io/google_containers/k8s-dns-kube-dns-amd64:${version}";
  +                  image = "k8s.gcr.io/k8s-dns-kube-dns-amd64:${version}";
  +                  resources = {
  +                    limits.memory = "170Mi";
  +                    requests = {
  +                      cpu = "100m";
  +                      memory = "70Mi";
  +                    };
  +                  };
                     livenessProbe = {
                       failureThreshold = 5;
                       httpGet = {
  
positive.code:                 }
                  {
                    name = "sidecar";
                    image = "gcr.io/google_containers/k8s-dns-sidecar-amd64:${version}";
                    args = [
                      "--v=2"
                      "--logtostderr"
                      "--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.${cfg.clusterDomain},5,A"
                      "--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.${cfg.clusterDomain},5,A"
                    ];
                    livenessProbe = {
                      failureThreshold = 5;
                      httpGet = {
                        path = "/metrics";
                        port = 10054;
                        scheme = "HTTP";
                      };
                      initialDelaySeconds = 60;
                      successThreshold = 1;
                      timeoutSeconds = 5;
                    };
                    ports = [
                      {
                        containerPort = 10054;
  
negative.code: 
      services.kubernetes.addonManager.addons = {
        kubedns-deployment = {
          apiVersion = "extensions/v1beta1";
          kind = "Deployment";
          metadata = {
            labels = {
  