anchor.diff:        authorizationPolicy = mkOption {
           description = ''
             Kubernetes apiserver authorization policy file. See
  -          <link xlink:href="https://github.com/GoogleCloudPlatform/kubernetes/blob/master/docs/authorization.md"/>
  +          <link xlink:href="http://kubernetes.io/v1.0/docs/admin/authorization.html"/>
           '';
           default = [];
           example = literalExample ''
  
positive.code:       };
  
        runtimeConfig = mkOption {
          description = "Api runtime configuration";
          default = "";
          example = "api/all=false,api/v1=true";
          type = types.str;
        };
  
        admissionControl = mkOption {
          description = "Kubernetes admission control plugins to use.";
          default = ["AlwaysAdmit"];
          type = types.listOf types.str;
        };
  
        extraOpts = mkOption {
  
negative.code:         type = types.str;
        };
  
        serviceAccountPrivateKey = mkOption {
          description = ''
            Kubernetes controller manager PEM-encoded private RSA key file used to
            sign service account tokens
          '';
          default = null;
          type = types.nullOr types.path;
        };
  
        rootCaFile = mkOption {
          description = ''
            Kubernetes controller manager certificate authority file included in
            service account's token secret.
          '';
          default = null;
          type = types.nullOr types.path;
        };
  
        extraOpts = mkOption {
          description = "Kubernetes controller manager extra command line options.";
          default = "";
          type = types.str;
        };
  