anchor.diff:            Kubernetes apiserver authorization mode (AlwaysAllow/AlwaysDeny/ABAC/RBAC). See
             <link xlink:href="http://kubernetes.io/docs/admin/authorization.html"/>
           '';
  -        default = ["ABAC" "RBAC"];
  +        default = ["RBAC"];
           type = types.listOf (types.enum ["AlwaysAllow" "AlwaysDeny" "ABAC" "RBAC"]);
         };
   
  
positive.code:           Kubernetes apiserver authorization policy file. See
            <link xlink:href="http://kubernetes.io/v1.0/docs/admin/authorization.html"/>
          '';
          default = defaultAuthorizationPolicy;
          type = types.listOf types.attrs;
        };
  
  
negative.code: 
    taints = concatMapStringsSep "," (v: "${v.key}=${v.value}:${v.effect}") (mapAttrsToList (n: v: v) cfg.kubelet.taints);
  
    # needed for flannel to pass options to docker
    mkDockerOpts = pkgs.runCommand "mk-docker-opts" {
      buildInputs = [ pkgs.makeWrapper ];
  