diff --git a/build/fietsje/deps_kubernetes.go b/build/fietsje/deps_kubernetes.go
index c6e24d1..bed7c81 100644
--- a/build/fietsje/deps_kubernetes.go
+++ b/build/fietsje/deps_kubernetes.go
@@ -19,7 +19,7 @@
 func depsKubernetes(p *planner) {
 	// containerd and its deps
 	p.collect(
-		"k8s.io/kubernetes", "v1.19.0-rc.0",
+		"k8s.io/kubernetes", "v1.19.7",
 		buildTags("providerless"),
 		disabledProtoBuild,
 		patches(
@@ -27,6 +27,7 @@
 			"k8s-kubernetes-build.patch",
 			"k8s-native-metrics.patch",
 			"k8s-use-native.patch",
+			"k8s-revert-seccomp-runtime-default.patch",
 		),
 		prePatches(
 			"k8s-e2e-tests-providerless.patch",
@@ -156,6 +157,7 @@
 		"go.uber.org/atomic",
 		"go.uber.org/multierr",
 		"go.uber.org/zap",
+		"golang.org/x/net",
 		"golang.org/x/xerrors",
 		"gonum.org/v1/gonum",
 		"gopkg.in/fsnotify.v1",
@@ -167,7 +169,7 @@
 		"k8s.io/kube-openapi",
 		"sigs.k8s.io/apiserver-network-proxy/konnectivity-client",
 		"sigs.k8s.io/kustomize",
-		"sigs.k8s.io/structured-merge-diff/v3",
+		"sigs.k8s.io/structured-merge-diff/v4",
 		"vbom.ml/util",
 	).use(
 		"github.com/google/cadvisor",
diff --git a/build/fietsje/main.go b/build/fietsje/main.go
index 247379a..6bd1e49 100644
--- a/build/fietsje/main.go
+++ b/build/fietsje/main.go
@@ -58,7 +58,6 @@
 	p.collect(
 		"google.golang.org/grpc", "v1.29.1",
 	).use(
-		"golang.org/x/net",
 		"golang.org/x/text",
 	)
 
diff --git a/build/print-workspace-status.sh b/build/print-workspace-status.sh
index 57138a4..291c8e8 100755
--- a/build/print-workspace-status.sh
+++ b/build/print-workspace-status.sh
@@ -16,7 +16,7 @@
 # TODO(q3k): unify with //third_party/go/repsitories.bzl.
 KUBERNETES_gitMajor="1"
 KUBERNETES_gitMinor="19"
-KUBERNETES_gitVersion="v1.19.0-rc.0+nxt"
+KUBERNETES_gitVersion="v1.19.7+mngn"
 
 cat <<EOF
 KUBERNETES_gitCommit $(git rev-parse "HEAD^{commit}")
diff --git a/metropolis/test/e2e/k8s_cts/BUILD.bazel b/metropolis/test/e2e/k8s_cts/BUILD.bazel
index afad6bc..e6e23de 100644
--- a/metropolis/test/e2e/k8s_cts/BUILD.bazel
+++ b/metropolis/test/e2e/k8s_cts/BUILD.bazel
@@ -20,7 +20,7 @@
 go_image(
     name = "k8s_cts_image",
     base = ":kubectl_in_path",
-    binary = "@io_k8s_kubernetes//test/e2e:_go_default_test-pure",
+    binary = "@io_k8s_kubernetes//test/e2e:e2e.test",
     pure = "on",
     visibility = ["//metropolis/node:__pkg__"],
 )
diff --git a/third_party/go/patches/k8s-e2e-tests-providerless.patch b/third_party/go/patches/k8s-e2e-tests-providerless.patch
index e4f7dab..b761257 100644
--- a/third_party/go/patches/k8s-e2e-tests-providerless.patch
+++ b/third_party/go/patches/k8s-e2e-tests-providerless.patch
@@ -13,7 +13,7 @@
 limitations under the License.
 
 
-From 43752b6c34f49080de3a66b79cbcd92b214c1f01 Mon Sep 17 00:00:00 2001
+From 65e40a970e3f33f44423653767c9ca8ff792bf70 Mon Sep 17 00:00:00 2001
 From: Lorenz Brun <lorenz@nexantic.com>
 Date: Mon, 20 Jul 2020 16:50:56 +0200
 Subject: [PATCH] POC Make e2e test suite support providerless
@@ -24,6 +24,7 @@
  test/e2e/e2e.go                               |  10 -
  test/e2e/e2e_providers.go                     |  32 +
  .../framework/providers/gce/firewall_test.go  |   2 +
+ test/e2e/instrumentation/logging/imports.go   |   2 +
  .../instrumentation/monitoring/accelerator.go |   2 +
  .../monitoring/custom_metrics_deployments.go  |   2 +
  .../monitoring/custom_metrics_stackdriver.go  |   4 +-
@@ -35,7 +36,7 @@
  test/e2e/network/network_tiers.go             |   2 +
  test/e2e/network/scale/ingress.go             |   2 +
  .../network/scale/localrun/ingress_scale.go   |   2 +-
- test/e2e/network/service.go                   | 912 ----------------
+ test/e2e/network/service.go                   | 955 -----------------
  test/e2e/network/service_providers.go         | 980 ++++++++++++++++++
  test/e2e/node/recreate_node.go                |   2 +
  test/e2e/scheduling/nvidia-gpus.go            |   2 +
@@ -46,12 +47,14 @@
  test/e2e/storage/in_tree_volumes_providers.go |  46 +
  .../nfs_persistent_volume-disruptive.go       |   2 +-
  test/e2e/storage/pd.go                        |   2 +
- test/e2e/storage/persistent_volumes-gce.go    |   3 +
+ test/e2e/storage/persistent_volumes-gce.go    |   2 +
  test/e2e/storage/regional_pd.go               |   3 +
+ test/e2e/storage/utils/BUILD                  |   3 -
+ test/e2e/storage/utils/ebs.go                 |   2 +
  test/e2e/storage/volume_provisioning.go       | 527 ----------
  .../storage/volume_provisioning_providers.go  | 577 +++++++++++
  test/e2e/upgrades/nvidia-gpu.go               |   2 +
- 32 files changed, 2432 insertions(+), 2190 deletions(-)
+ 35 files changed, 2435 insertions(+), 2236 deletions(-)
  create mode 100644 test/e2e/e2e_providers.go
  create mode 100644 test/e2e/network/service_providers.go
  create mode 100644 test/e2e/storage/drivers/in_tree_providers.go
@@ -147,6 +150,16 @@
  /*
  Copyright 2018 The Kubernetes Authors.
  
+diff --git a/test/e2e/instrumentation/logging/imports.go b/test/e2e/instrumentation/logging/imports.go
+index 5dd66717db1..fc15c04bfef 100644
+--- a/test/e2e/instrumentation/logging/imports.go
++++ b/test/e2e/instrumentation/logging/imports.go
+@@ -1,3 +1,5 @@
++// +build !providerless
++
+ /*
+ Copyright 2017 The Kubernetes Authors.
+ 
 diff --git a/test/e2e/instrumentation/monitoring/accelerator.go b/test/e2e/instrumentation/monitoring/accelerator.go
 index 90047e46ea1..6fa094e6a18 100644
 --- a/test/e2e/instrumentation/monitoring/accelerator.go
@@ -226,7 +239,7 @@
  Copyright 2016 The Kubernetes Authors.
  
 diff --git a/test/e2e/network/ingress.go b/test/e2e/network/ingress.go
-index f1bce918e8f..1a37badbd7b 100644
+index 6c3b09e41f2..8485f8ce50e 100644
 --- a/test/e2e/network/ingress.go
 +++ b/test/e2e/network/ingress.go
 @@ -1,3 +1,5 @@
@@ -279,30 +292,22 @@
  	clientset "k8s.io/client-go/kubernetes"
  	"k8s.io/client-go/tools/clientcmd"
 diff --git a/test/e2e/network/service.go b/test/e2e/network/service.go
-index cce449b5e8e..db7328efbe8 100644
+index 35ac43001d2..b458347a9f9 100644
 --- a/test/e2e/network/service.go
 +++ b/test/e2e/network/service.go
-@@ -17,7 +17,6 @@ limitations under the License.
- package network
- 
- import (
--	"bytes"
- 	"context"
- 	"encoding/json"
- 	"errors"
-@@ -32,8 +31,6 @@ import (
+@@ -31,8 +31,6 @@ import (
  
  	utilnet "k8s.io/apimachinery/pkg/util/net"
  
 -	compute "google.golang.org/api/compute/v1"
 -
+ 	"k8s.io/client-go/tools/cache"
+ 
  	appsv1 "k8s.io/api/apps/v1"
- 	v1 "k8s.io/api/core/v1"
- 	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
-@@ -47,11 +44,9 @@ import (
- 	"k8s.io/kubernetes/test/e2e/framework"
+@@ -52,11 +50,9 @@ import (
  	e2edeployment "k8s.io/kubernetes/test/e2e/framework/deployment"
  	e2eendpoints "k8s.io/kubernetes/test/e2e/framework/endpoints"
+ 	e2eendpointslice "k8s.io/kubernetes/test/e2e/framework/endpointslice"
 -	e2ekubesystem "k8s.io/kubernetes/test/e2e/framework/kubesystem"
  	e2enetwork "k8s.io/kubernetes/test/e2e/framework/network"
  	e2enode "k8s.io/kubernetes/test/e2e/framework/node"
@@ -311,7 +316,7 @@
  	e2erc "k8s.io/kubernetes/test/e2e/framework/rc"
  	e2eservice "k8s.io/kubernetes/test/e2e/framework/service"
  	e2eskipper "k8s.io/kubernetes/test/e2e/framework/skipper"
-@@ -59,7 +54,6 @@ import (
+@@ -64,7 +60,6 @@ import (
  	"k8s.io/kubernetes/test/e2e/storage/utils"
  	testutils "k8s.io/kubernetes/test/utils"
  	imageutils "k8s.io/kubernetes/test/utils/image"
@@ -319,7 +324,7 @@
  
  	"github.com/onsi/ginkgo"
  	"github.com/onsi/gomega"
-@@ -1191,375 +1185,6 @@ var _ = SIGDescribe("Services", func() {
+@@ -1242,375 +1237,6 @@ var _ = SIGDescribe("Services", func() {
  		framework.ExpectNoError(err)
  	})
  
@@ -695,7 +700,7 @@
  	/*
  		Testname: Service, update NodePort, same port different protocol
  		Description: Create a service to accept TCP requests. By default, created service MUST be of type ClusterIP and an ClusterIP MUST be assigned to the service.
-@@ -2202,199 +1827,6 @@ var _ = SIGDescribe("Services", func() {
+@@ -2253,199 +1879,6 @@ var _ = SIGDescribe("Services", func() {
  		checkReachabilityFromPod(true, normalReachabilityTimeout, namespace, dropPod.Name, svcIP)
  	})
  
@@ -895,7 +900,7 @@
  	/*
  		Release: v1.19
  		Testname: Service, ClusterIP type, session affinity to ClientIP
-@@ -2880,350 +2312,6 @@ var _ = SIGDescribe("Services", func() {
+@@ -2999,394 +2432,6 @@ var _ = SIGDescribe("Services", func() {
  	})
  })
  
@@ -943,11 +948,18 @@
 -			framework.ExpectNoError(err)
 -
 -			// Make sure we didn't leak the health check node port.
--			threshold := 2
--			nodes, err := jig.GetEndpointNodes()
+-			const threshold = 2
+-			nodes, err := getEndpointNodesWithInternalIP(jig)
 -			framework.ExpectNoError(err)
--			for _, ips := range nodes {
--				err := TestHTTPHealthCheckNodePort(ips[0], healthCheckNodePort, "/healthz", e2eservice.KubeProxyEndpointLagTimeout, false, threshold)
+-			config := e2enetwork.NewNetworkingTestConfig(f, false, false)
+-			for _, internalIP := range nodes {
+-				err := testHTTPHealthCheckNodePortFromTestContainer(
+-					config,
+-					internalIP,
+-					healthCheckNodePort,
+-					e2eservice.KubeProxyLagTimeout,
+-					false,
+-					threshold)
 -				framework.ExpectNoError(err)
 -			}
 -			err = cs.CoreV1().Services(svc.Namespace).Delete(context.TODO(), svc.Name, metav1.DeleteOptions{})
@@ -981,17 +993,20 @@
 -		}()
 -
 -		tcpNodePort := int(svc.Spec.Ports[0].NodePort)
--		endpointsNodeMap, err := jig.GetEndpointNodes()
--		framework.ExpectNoError(err)
--		path := "/clientip"
 -
--		for nodeName, nodeIPs := range endpointsNodeMap {
--			nodeIP := nodeIPs[0]
--			ginkgo.By(fmt.Sprintf("reading clientIP using the TCP service's NodePort, on node %v: %v%v%v", nodeName, nodeIP, tcpNodePort, path))
--			content := GetHTTPContent(nodeIP, tcpNodePort, e2eservice.KubeProxyLagTimeout, path)
--			clientIP := content.String()
--			framework.Logf("ClientIP detected by target pod using NodePort is %s", clientIP)
--			if strings.HasPrefix(clientIP, "10.") {
+-		endpointsNodeMap, err := getEndpointNodesWithInternalIP(jig)
+-		framework.ExpectNoError(err)
+-
+-		dialCmd := "clientip"
+-		config := e2enetwork.NewNetworkingTestConfig(f, false, false)
+-
+-		for nodeName, nodeIP := range endpointsNodeMap {
+-			ginkgo.By(fmt.Sprintf("reading clientIP using the TCP service's NodePort, on node %v: %v:%v/%v", nodeName, nodeIP, tcpNodePort, dialCmd))
+-			clientIP, err := GetHTTPContentFromTestContainer(config, nodeIP, tcpNodePort, e2eservice.KubeProxyLagTimeout, dialCmd)
+-			framework.ExpectNoError(err)
+-			framework.Logf("ClientIP detected by target pod using NodePort is %s, the ip of test container is %s", clientIP, config.TestContainerPod.Status.PodIP)
+-			// the clientIP returned by agnhost contains port
+-			if !strings.HasPrefix(clientIP, config.TestContainerPod.Status.PodIP) {
 -				framework.Failf("Source IP was NOT preserved")
 -			}
 -		}
@@ -1028,13 +1043,13 @@
 -			framework.Failf("Service HealthCheck NodePort was not allocated")
 -		}
 -
--		ips := e2enode.CollectAddresses(nodes, v1.NodeExternalIP)
+-		ips := e2enode.CollectAddresses(nodes, v1.NodeInternalIP)
 -
 -		ingressIP := e2eservice.GetIngressPoint(&svc.Status.LoadBalancer.Ingress[0])
 -		svcTCPPort := int(svc.Spec.Ports[0].Port)
 -
--		threshold := 2
--		path := "/healthz"
+-		const threshold = 2
+-		config := e2enetwork.NewNetworkingTestConfig(f, false, false)
 -		for i := 0; i < len(nodes.Items); i++ {
 -			endpointNodeName := nodes.Items[i].Name
 -
@@ -1053,15 +1068,21 @@
 -
 -			// HealthCheck should pass only on the node where num(endpoints) > 0
 -			// All other nodes should fail the healthcheck on the service healthCheckNodePort
--			for n, publicIP := range ips {
+-			for n, internalIP := range ips {
 -				// Make sure the loadbalancer picked up the health check change.
 -				// Confirm traffic can reach backend through LB before checking healthcheck nodeport.
 -				e2eservice.TestReachableHTTP(ingressIP, svcTCPPort, e2eservice.KubeProxyLagTimeout)
 -				expectedSuccess := nodes.Items[n].Name == endpointNodeName
 -				port := strconv.Itoa(healthCheckNodePort)
--				ipPort := net.JoinHostPort(publicIP, port)
--				framework.Logf("Health checking %s, http://%s%s, expectedSuccess %v", nodes.Items[n].Name, ipPort, path, expectedSuccess)
--				err := TestHTTPHealthCheckNodePort(publicIP, healthCheckNodePort, path, e2eservice.KubeProxyEndpointLagTimeout, expectedSuccess, threshold)
+-				ipPort := net.JoinHostPort(internalIP, port)
+-				framework.Logf("Health checking %s, http://%s/healthz, expectedSuccess %v", nodes.Items[n].Name, ipPort, expectedSuccess)
+-				err := testHTTPHealthCheckNodePortFromTestContainer(
+-					config,
+-					internalIP,
+-					healthCheckNodePort,
+-					e2eservice.KubeProxyEndpointLagTimeout,
+-					expectedSuccess,
+-					threshold)
 -				framework.ExpectNoError(err)
 -			}
 -			framework.ExpectNoError(e2erc.DeleteRCAndWaitForGC(f.ClientSet, namespace, serviceName))
@@ -1127,8 +1148,7 @@
 -		}
 -	})
 -
--	// TODO: Get rid of [DisabledForLargeClusters] tag when issue #90047 is fixed.
--	ginkgo.It("should handle updates to ExternalTrafficPolicy field [DisabledForLargeClusters]", func() {
+-	ginkgo.It("should handle updates to ExternalTrafficPolicy field", func() {
 -		namespace := f.Namespace.Name
 -		serviceName := "external-local-update"
 -		jig := e2eservice.NewTestJig(cs, namespace, serviceName)
@@ -1161,42 +1181,71 @@
 -			framework.Failf("Service HealthCheck NodePort still present")
 -		}
 -
--		endpointNodeMap, err := jig.GetEndpointNodes()
+-		epNodes, err := jig.ListNodesWithEndpoint()
 -		framework.ExpectNoError(err)
--		noEndpointNodeMap := map[string][]string{}
--		for _, n := range nodes.Items {
--			if _, ok := endpointNodeMap[n.Name]; ok {
--				continue
+-		// map from name of nodes with endpoint to internal ip
+-		// it is assumed that there is only a single node with the endpoint
+-		endpointNodeMap := make(map[string]string)
+-		// map from name of nodes without endpoint to internal ip
+-		noEndpointNodeMap := make(map[string]string)
+-		for _, node := range epNodes {
+-			ips := e2enode.GetAddresses(&node, v1.NodeInternalIP)
+-			if len(ips) < 1 {
+-				framework.Failf("No internal ip found for node %s", node.Name)
 -			}
--			noEndpointNodeMap[n.Name] = e2enode.GetAddresses(&n, v1.NodeExternalIP)
+-			endpointNodeMap[node.Name] = ips[0]
 -		}
+-		for _, n := range nodes.Items {
+-			ips := e2enode.GetAddresses(&n, v1.NodeInternalIP)
+-			if len(ips) < 1 {
+-				framework.Failf("No internal ip found for node %s", n.Name)
+-			}
+-			if _, ok := endpointNodeMap[n.Name]; !ok {
+-				noEndpointNodeMap[n.Name] = ips[0]
+-			}
+-		}
+-		framework.ExpectNotEqual(len(endpointNodeMap), 0)
+-		framework.ExpectNotEqual(len(noEndpointNodeMap), 0)
 -
 -		svcTCPPort := int(svc.Spec.Ports[0].Port)
 -		svcNodePort := int(svc.Spec.Ports[0].NodePort)
 -		ingressIP := e2eservice.GetIngressPoint(&svc.Status.LoadBalancer.Ingress[0])
 -		path := "/clientip"
+-		dialCmd := "clientip"
+-
+-		config := e2enetwork.NewNetworkingTestConfig(f, false, false)
 -
 -		ginkgo.By(fmt.Sprintf("endpoints present on nodes %v, absent on nodes %v", endpointNodeMap, noEndpointNodeMap))
--		for nodeName, nodeIPs := range noEndpointNodeMap {
--			ginkgo.By(fmt.Sprintf("Checking %v (%v:%v%v) proxies to endpoints on another node", nodeName, nodeIPs[0], svcNodePort, path))
--			GetHTTPContent(nodeIPs[0], svcNodePort, e2eservice.KubeProxyLagTimeout, path)
+-		for nodeName, nodeIP := range noEndpointNodeMap {
+-			ginkgo.By(fmt.Sprintf("Checking %v (%v:%v/%v) proxies to endpoints on another node", nodeName, nodeIP[0], svcNodePort, dialCmd))
+-			_, err := GetHTTPContentFromTestContainer(config, nodeIP, svcNodePort, e2eservice.KubeProxyLagTimeout, dialCmd)
+-			framework.ExpectNoError(err, "Could not reach HTTP service through %v:%v/%v after %v", nodeIP, svcNodePort, dialCmd, e2eservice.KubeProxyLagTimeout)
 -		}
 -
--		for nodeName, nodeIPs := range endpointNodeMap {
--			ginkgo.By(fmt.Sprintf("checking kube-proxy health check fails on node with endpoint (%s), public IP %s", nodeName, nodeIPs[0]))
--			var body bytes.Buffer
--			pollfn := func() (bool, error) {
--				result := e2enetwork.PokeHTTP(nodeIPs[0], healthCheckNodePort, "/healthz", nil)
--				if result.Code == 0 {
+-		for nodeName, nodeIP := range endpointNodeMap {
+-			ginkgo.By(fmt.Sprintf("checking kube-proxy health check fails on node with endpoint (%s), public IP %s", nodeName, nodeIP))
+-			var body string
+-			pollFn := func() (bool, error) {
+-				// we expect connection failure here, but not other errors
+-				resp, err := config.GetResponseFromTestContainer(
+-					"http",
+-					"healthz",
+-					nodeIP,
+-					healthCheckNodePort)
+-				if err != nil {
+-					return false, nil
+-				}
+-				if len(resp.Errors) > 0 {
 -					return true, nil
 -				}
--				body.Reset()
--				body.Write(result.Body)
+-				if len(resp.Responses) > 0 {
+-					body = resp.Responses[0]
+-				}
 -				return false, nil
 -			}
--			if pollErr := wait.PollImmediate(framework.Poll, e2eservice.TestTimeout, pollfn); pollErr != nil {
+-			if pollErr := wait.PollImmediate(framework.Poll, e2eservice.TestTimeout, pollFn); pollErr != nil {
 -				framework.Failf("Kube-proxy still exposing health check on node %v:%v, after ESIPP was turned off. body %s",
--					nodeName, healthCheckNodePort, body.String())
+-					nodeName, healthCheckNodePort, body)
 -			}
 -		}
 -
@@ -1243,9 +1292,9 @@
 -	})
 -})
 -
- func execSourceipTest(pausePod v1.Pod, serviceAddress string) (string, string) {
- 	var err error
- 	var stdout string
+ // execAffinityTestForSessionAffinityTimeout is a helper function that wrap the logic of
+ // affinity test for non-load-balancer services. Session afinity will be
+ // enabled when the service is created and a short timeout will be configured so
 diff --git a/test/e2e/network/service_providers.go b/test/e2e/network/service_providers.go
 new file mode 100644
 index 00000000000..b7eae6feb2c
@@ -2243,7 +2292,7 @@
  Copyright 2019 The Kubernetes Authors.
  
 diff --git a/test/e2e/scheduling/nvidia-gpus.go b/test/e2e/scheduling/nvidia-gpus.go
-index 334a6f5b9f6..59fbdee014b 100644
+index 313e773b8e2..bbf66b59aac 100644
 --- a/test/e2e/scheduling/nvidia-gpus.go
 +++ b/test/e2e/scheduling/nvidia-gpus.go
 @@ -1,3 +1,5 @@
@@ -2263,7 +2312,7 @@
  Copyright 2017 The Kubernetes Authors.
  
 diff --git a/test/e2e/storage/drivers/in_tree.go b/test/e2e/storage/drivers/in_tree.go
-index d5183f28081..de25e2cf007 100644
+index a866266c1f1..28e26a10c35 100644
 --- a/test/e2e/storage/drivers/in_tree.go
 +++ b/test/e2e/storage/drivers/in_tree.go
 @@ -38,10 +38,8 @@ package drivers
@@ -2291,7 +2340,7 @@
  	imageutils "k8s.io/kubernetes/test/utils/image"
  )
  
-@@ -1032,734 +1028,6 @@ func (e *emptydirDriver) PrepareTest(f *framework.Framework) (*testsuites.PerTes
+@@ -1044,734 +1040,6 @@ func (e *emptydirDriver) PrepareTest(f *framework.Framework) (*testsuites.PerTes
  	}, func() {}
  }
  
@@ -3865,7 +3914,7 @@
  
  		c = f.ClientSet
 diff --git a/test/e2e/storage/pd.go b/test/e2e/storage/pd.go
-index b6d720406aa..86fa0cae488 100644
+index f5b6060a834..addd304147c 100644
 --- a/test/e2e/storage/pd.go
 +++ b/test/e2e/storage/pd.go
 @@ -1,3 +1,5 @@
@@ -3875,7 +3924,7 @@
  Copyright 2015 The Kubernetes Authors.
  
 diff --git a/test/e2e/storage/persistent_volumes-gce.go b/test/e2e/storage/persistent_volumes-gce.go
-index 8b0343e4b58..76a80042811 100644
+index b8bc887384e..f572754c5e8 100644
 --- a/test/e2e/storage/persistent_volumes-gce.go
 +++ b/test/e2e/storage/persistent_volumes-gce.go
 @@ -1,3 +1,5 @@
@@ -3884,14 +3933,6 @@
  /*
  Copyright 2017 The Kubernetes Authors.
  
-@@ -18,6 +20,7 @@ package storage
- 
- import (
- 	"context"
-+
- 	"github.com/onsi/ginkgo"
- 	v1 "k8s.io/api/core/v1"
- 	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 diff --git a/test/e2e/storage/regional_pd.go b/test/e2e/storage/regional_pd.go
 index 7763afaf6b1..a042dcc9d4a 100644
 --- a/test/e2e/storage/regional_pd.go
@@ -3910,6 +3951,37 @@
  	"github.com/onsi/ginkgo"
  	"github.com/onsi/gomega"
  
+diff --git a/test/e2e/storage/utils/BUILD b/test/e2e/storage/utils/BUILD
+index bdc78982dcb..c57ff325f76 100644
+--- a/test/e2e/storage/utils/BUILD
++++ b/test/e2e/storage/utils/BUILD
+@@ -7,7 +7,6 @@ go_library(
+     srcs = [
+         "create.go",
+         "deployment.go",
+-        "ebs.go",
+         "framework.go",
+         "host_exec.go",
+         "local.go",
+@@ -37,8 +36,6 @@ go_library(
+         "//test/e2e/framework/ssh:go_default_library",
+         "//test/e2e/framework/testfiles:go_default_library",
+         "//test/utils/image:go_default_library",
+-        "//vendor/github.com/aws/aws-sdk-go/aws:go_default_library",
+-        "//vendor/github.com/aws/aws-sdk-go/service/ec2:go_default_library",
+         "//vendor/github.com/onsi/ginkgo:go_default_library",
+         "//vendor/github.com/onsi/gomega:go_default_library",
+         "//vendor/github.com/pkg/errors:go_default_library",
+diff --git a/test/e2e/storage/utils/ebs.go b/test/e2e/storage/utils/ebs.go
+index 39e223f36aa..55065ea07b7 100644
+--- a/test/e2e/storage/utils/ebs.go
++++ b/test/e2e/storage/utils/ebs.go
+@@ -1,3 +1,5 @@
++// +build !providerless
++
+ /*
+ Copyright 2020 The Kubernetes Authors.
+ 
 diff --git a/test/e2e/storage/volume_provisioning.go b/test/e2e/storage/volume_provisioning.go
 index a8b494eb3ac..c070a81283c 100644
 --- a/test/e2e/storage/volume_provisioning.go
@@ -5070,16 +5142,6 @@
  /*
  Copyright 2018 The Kubernetes Authors.
  
-diff --git a/test/e2e/instrumentation/logging/imports.go b/test/e2e/instrumentation/logging/imports.go
-index 5dd66717db1..fc15c04bfef 100644
---- a/test/e2e/instrumentation/logging/imports.go
-+++ b/test/e2e/instrumentation/logging/imports.go
-@@ -1,3 +1,5 @@
-+// +build !providerless
-+
- /*
- Copyright 2017 The Kubernetes Authors.
-
---
-2.25.1
+-- 
+2.26.2
 
diff --git a/third_party/go/patches/k8s-kubernetes.patch b/third_party/go/patches/k8s-kubernetes.patch
index 158dcd7..0efaa37 100644
--- a/third_party/go/patches/k8s-kubernetes.patch
+++ b/third_party/go/patches/k8s-kubernetes.patch
@@ -16,8 +16,8 @@
 This fixes OpenAPI codegen for when included from the Monogon workspace. It basically undoes vendorification.
 
 diff -ur io_k8s_kubernetes.orig/build/code_generation.bzl io_k8s_kubernetes/build/code_generation.bzl
---- io_k8s_kubernetes.orig/build/code_generation.bzl	2020-04-15 13:43:57.785669620 +0200
-+++ io_k8s_kubernetes/build/code_generation.bzl	2020-04-16 18:19:44.297531873 +0200
+--- io_k8s_kubernetes.orig/build/code_generation.bzl	2021-01-26 12:10:52.593725692 +0100
++++ io_k8s_kubernetes/build/code_generation.bzl	2021-01-26 12:11:04.571786562 +0100
 @@ -27,6 +27,12 @@
          ...
      )
@@ -29,7 +29,7 @@
 +        path = parts[4]
 +        return "@io_k8s_%s//%s:go_default_library" % (project, path)
      return "//%s:go_default_library" % pkg
-
+ 
  def go_pkg(pkg):
 @@ -42,6 +48,8 @@
          ...
@@ -41,7 +41,7 @@
          if pkg.startswith(prefix):
              return paths.relativize(pkg, prefix)
 @@ -49,8 +57,8 @@
-
+ 
  def openapi_deps():
      deps = [
 -        "//vendor/github.com/go-openapi/spec:go_default_library",
@@ -68,12 +68,9 @@
 +        tools = ["@io_k8s_kube_openapi//cmd/openapi-gen"],
          message = "GenOpenAPI",
      )
-
-The rest rips out a bunch of volume providers. We're only interested in CSI and hostpath/local.
-
 diff -ur io_k8s_kubernetes.orig/cmd/kube-apiserver/app/options/globalflags.go io_k8s_kubernetes/cmd/kube-apiserver/app/options/globalflags.go
---- io_k8s_kubernetes.orig/cmd/kube-apiserver/app/options/globalflags.go	2020-04-15 13:43:57.811669689 +0200
-+++ io_k8s_kubernetes/cmd/kube-apiserver/app/options/globalflags.go	2020-04-17 13:29:41.578264893 +0200
+--- io_k8s_kubernetes.orig/cmd/kube-apiserver/app/options/globalflags.go	2021-01-26 12:10:52.605725751 +0100
++++ io_k8s_kubernetes/cmd/kube-apiserver/app/options/globalflags.go	2021-01-26 12:11:04.572786567 +0100
 @@ -32,9 +32,6 @@
  func AddCustomGlobalFlags(fs *pflag.FlagSet) {
  	// Lookup flags in global flag set and re-register the values with our flagset.
@@ -85,9 +82,9 @@
  	globalflag.Register(fs, "default-not-ready-toleration-seconds")
  	globalflag.Register(fs, "default-unreachable-toleration-seconds")
 diff -ur io_k8s_kubernetes.orig/cmd/kube-controller-manager/app/controllermanager.go io_k8s_kubernetes/cmd/kube-controller-manager/app/controllermanager.go
---- io_k8s_kubernetes.orig/cmd/kube-controller-manager/app/controllermanager.go	2020-04-15 13:43:57.812669692 +0200
-+++ io_k8s_kubernetes/cmd/kube-controller-manager/app/controllermanager.go	2020-04-17 13:30:39.975397151 +0200
-@@ -126,7 +126,6 @@
+--- io_k8s_kubernetes.orig/cmd/kube-controller-manager/app/controllermanager.go	2021-01-26 12:10:52.605725751 +0100
++++ io_k8s_kubernetes/cmd/kube-controller-manager/app/controllermanager.go	2021-01-26 12:11:04.572786567 +0100
+@@ -140,7 +140,6 @@
  	namedFlagSets := s.Flags(KnownControllers(), ControllersDisabledByDefault.List())
  	verflag.AddFlags(namedFlagSets.FlagSet("global"))
  	globalflag.AddGlobalFlags(namedFlagSets.FlagSet("global"), cmd.Name())
@@ -95,9 +92,10 @@
  	for _, f := range namedFlagSets.FlagSets {
  		fs.AddFlagSet(f)
  	}
+Only in io_k8s_kubernetes/cmd/kube-controller-manager/app: controllermanager.go.orig
 diff -ur io_k8s_kubernetes.orig/cmd/kube-controller-manager/app/plugins.go io_k8s_kubernetes/cmd/kube-controller-manager/app/plugins.go
---- io_k8s_kubernetes.orig/cmd/kube-controller-manager/app/plugins.go	2020-04-15 13:43:57.813669694 +0200
-+++ io_k8s_kubernetes/cmd/kube-controller-manager/app/plugins.go	2020-04-17 13:34:19.393894095 +0200
+--- io_k8s_kubernetes.orig/cmd/kube-controller-manager/app/plugins.go	2021-01-26 12:10:52.606725757 +0100
++++ io_k8s_kubernetes/cmd/kube-controller-manager/app/plugins.go	2021-01-26 12:11:04.572786567 +0100
 @@ -32,19 +32,9 @@
  	// Volume plugins
  	"k8s.io/kubernetes/pkg/volume"
@@ -188,8 +186,8 @@
  	if utilfeature.DefaultFeatureGate.Enabled(features.CSIInlineVolume) {
  		allPlugins = append(allPlugins, csi.ProbeVolumePlugins()...)
 diff -ur io_k8s_kubernetes.orig/cmd/kubectl/BUILD io_k8s_kubernetes/cmd/kubectl/BUILD
---- io_k8s_kubernetes.orig/cmd/kubectl/BUILD	2020-04-20 14:58:52.573455879 +0200
-+++ io_k8s_kubernetes/cmd/kubectl/BUILD	2020-04-20 14:56:41.199032687 +0200
+--- io_k8s_kubernetes.orig/cmd/kubectl/BUILD	2021-01-26 12:10:52.616725807 +0100
++++ io_k8s_kubernetes/cmd/kubectl/BUILD	2021-01-26 12:11:04.572786567 +0100
 @@ -3,7 +3,7 @@
      "go_binary",
      "go_library",
@@ -199,13 +197,9 @@
  
  go_binary(
      name = "kubectl",
-
-
-We also take the opportunity to remove azure/gcp auth.
-
 diff -ur io_k8s_kubernetes.orig/cmd/kubelet/app/options/globalflags.go io_k8s_kubernetes/cmd/kubelet/app/options/globalflags.go
---- io_k8s_kubernetes.orig/cmd/kubelet/app/options/globalflags.go	2020-04-15 13:43:57.827669732 +0200
-+++ io_k8s_kubernetes/cmd/kubelet/app/options/globalflags.go	2020-04-16 15:58:30.964945445 +0200
+--- io_k8s_kubernetes.orig/cmd/kubelet/app/options/globalflags.go	2021-01-26 12:10:52.617725812 +0100
++++ io_k8s_kubernetes/cmd/kubelet/app/options/globalflags.go	2021-01-26 12:12:03.724087183 +0100
 @@ -28,10 +28,6 @@
  	"k8s.io/component-base/logs"
  	"k8s.io/component-base/version/verflag"
@@ -217,7 +211,7 @@
  )
  
  // AddGlobalFlags explicitly registers flags that libraries (glog, verflag, etc.) register
-@@ -80,14 +76,8 @@
+@@ -80,12 +76,8 @@
  
  // addCredentialProviderFlags adds flags from k8s.io/kubernetes/pkg/credentialprovider
  func addCredentialProviderFlags(fs *pflag.FlagSet) {
@@ -225,16 +219,14 @@
 -	global := pflag.CommandLine
  	local := pflag.NewFlagSet(os.Args[0], pflag.ExitOnError)
  
--	// TODO(#58034): This is not a static file, so it's not quite as straightforward as --google-json-key.
--	// We need to figure out how ACR users can dynamically provide pull credentials before we can deprecate this.
--	pflagRegister(global, local, "azure-container-registry-config")
+-	addLegacyCloudProviderCredentialProviderFlags(global, local)
 -
  	fs.AddFlagSet(local)
  }
  
 diff -ur io_k8s_kubernetes.orig/cmd/kubelet/app/plugins.go io_k8s_kubernetes/cmd/kubelet/app/plugins.go
---- io_k8s_kubernetes.orig/cmd/kubelet/app/plugins.go	2020-04-15 13:43:57.827669732 +0200
-+++ io_k8s_kubernetes/cmd/kubelet/app/plugins.go	2020-04-16 16:10:13.366081373 +0200
+--- io_k8s_kubernetes.orig/cmd/kubelet/app/plugins.go	2021-01-26 12:10:52.617725812 +0100
++++ io_k8s_kubernetes/cmd/kubelet/app/plugins.go	2021-01-26 12:11:04.573786572 +0100
 @@ -19,8 +19,6 @@
  // This file exists to force the desired plugin implementations to be linked.
  import (
@@ -272,7 +264,7 @@
  
  	// Cloud providers
  	_ "k8s.io/kubernetes/pkg/cloudprovider/providers"
-@@ -64,30 +48,13 @@
+@@ -64,30 +50,13 @@
  	//
  	// Kubelet does not currently need to configure volume plugins.
  	// If/when it does, see kube-controller-manager/app/plugins.go for example of using volume.VolumeConfig
@@ -304,8 +296,8 @@
  	return allPlugins, nil
  }
 diff -ur io_k8s_kubernetes.orig/cmd/kubelet/BUILD io_k8s_kubernetes/cmd/kubelet/BUILD
---- io_k8s_kubernetes.orig/cmd/kubelet/BUILD	2020-04-15 13:43:57.827669732 +0200
-+++ io_k8s_kubernetes/cmd/kubelet/BUILD	2020-04-20 14:56:20.446965836 +0200
+--- io_k8s_kubernetes.orig/cmd/kubelet/BUILD	2021-01-26 12:10:52.616725807 +0100
++++ io_k8s_kubernetes/cmd/kubelet/BUILD	2021-01-26 12:11:04.573786572 +0100
 @@ -5,7 +5,7 @@
      go_binary = "go_binary_conditional_pure",
  )
@@ -316,9 +308,9 @@
  go_binary(
      name = "kubelet",
 diff -ur io_k8s_kubernetes.orig/pkg/controller/nodeipam/ipam/cidr_allocator.go io_k8s_kubernetes/pkg/controller/nodeipam/ipam/cidr_allocator.go
---- io_k8s_kubernetes.orig/pkg/controller/nodeipam/ipam/cidr_allocator.go	2020-04-15 13:43:57.860669820 +0200
-+++ io_k8s_kubernetes/pkg/controller/nodeipam/ipam/cidr_allocator.go	2020-04-17 13:18:36.157842990 +0200
-@@ -111,8 +111,6 @@
+--- io_k8s_kubernetes.orig/pkg/controller/nodeipam/ipam/cidr_allocator.go	2021-01-26 12:10:52.664726051 +0100
++++ io_k8s_kubernetes/pkg/controller/nodeipam/ipam/cidr_allocator.go	2021-01-26 12:11:04.573786572 +0100
+@@ -112,8 +112,6 @@
  	switch allocatorType {
  	case RangeAllocatorType:
  		return NewCIDRRangeAllocator(kubeClient, nodeInformer, allocatorParams, nodeList)
@@ -327,9 +319,10 @@
  	default:
  		return nil, fmt.Errorf("invalid CIDR allocator type: %v", allocatorType)
  	}
+Only in io_k8s_kubernetes/pkg/controller/nodeipam/ipam: cidr_allocator.go.orig
 diff -ur io_k8s_kubernetes.orig/pkg/controller/nodeipam/nolegacyprovider.go io_k8s_kubernetes/pkg/controller/nodeipam/nolegacyprovider.go
---- io_k8s_kubernetes.orig/pkg/controller/nodeipam/nolegacyprovider.go	2020-04-15 13:43:57.860669820 +0200
-+++ io_k8s_kubernetes/pkg/controller/nodeipam/nolegacyprovider.go	2020-04-17 13:27:12.440927122 +0200
+--- io_k8s_kubernetes.orig/pkg/controller/nodeipam/nolegacyprovider.go	2021-01-26 12:10:52.665726056 +0100
++++ io_k8s_kubernetes/pkg/controller/nodeipam/nolegacyprovider.go	2021-01-26 12:11:04.573786572 +0100
 @@ -1,5 +1,3 @@
 -// +build providerless
 -
@@ -337,39 +330,40 @@
  Copyright 2019 The Kubernetes Authors.
  
 diff -ur io_k8s_kubernetes.orig/pkg/kubelet/cadvisor/cadvisor_linux.go io_k8s_kubernetes/pkg/kubelet/cadvisor/cadvisor_linux.go
---- io_k8s_kubernetes.orig/pkg/kubelet/cadvisor/cadvisor_linux.go	2020-04-15 13:43:57.875669859 +0200
-+++ io_k8s_kubernetes/pkg/kubelet/cadvisor/cadvisor_linux.go	2020-04-15 18:24:28.683551309 +0200
-@@ -34,8 +34,6 @@
-
+--- io_k8s_kubernetes.orig/pkg/kubelet/cadvisor/cadvisor_linux.go	2021-01-26 12:10:52.676726112 +0100
++++ io_k8s_kubernetes/pkg/kubelet/cadvisor/cadvisor_linux.go	2021-01-26 12:11:04.573786572 +0100
+@@ -33,8 +33,6 @@
+ 
  	// Register cloud info providers.
  	// TODO(#68522): Remove this in 1.20+ once the cAdvisor endpoints are removed.
 -	_ "github.com/google/cadvisor/utils/cloudinfo/aws"
 -	_ "github.com/google/cadvisor/utils/cloudinfo/azure"
  	_ "github.com/google/cadvisor/utils/cloudinfo/gce"
-
+ 
  	"github.com/google/cadvisor/cache/memory"
-
---- io_k8s_kubernetes.orig/test/e2e/BUILD 2020-07-22 10:51:20.277358305 +0200
-+++ io_k8s_kubernetes/test/e2e/BUILD   2020-07-22 10:56:43.451577495 +0200
+Only in io_k8s_kubernetes/pkg/kubelet/cadvisor: cadvisor_linux.go.orig
+diff -ur io_k8s_kubernetes.orig/test/e2e/BUILD io_k8s_kubernetes/test/e2e/BUILD
+--- io_k8s_kubernetes.orig/test/e2e/BUILD	2021-01-26 12:10:52.736726417 +0100
++++ io_k8s_kubernetes/test/e2e/BUILD	2021-01-26 12:11:04.573786572 +0100
 @@ -5,7 +5,7 @@
      go_test = "go_test_conditional_pure",
  )
  load("@io_bazel_rules_go//go:def.bzl", "go_library")
 -load("//staging/src/k8s.io/component-base/version:def.bzl", "version_x_defs")
 +load("@//third_party/go:kubernetes_version_def.bzl", "version_x_defs")
-
+ 
  go_test(
      name = "go_default_test",
-
---- io_k8s_kubernetes.orig/test/e2e/generated/BUILD
-+++ io_k8s_kubernetes/test/e2e/generated/BUILD
-@@ -4,23 +4,24 @@ load(
+diff -ur io_k8s_kubernetes.orig/test/e2e/generated/BUILD io_k8s_kubernetes/test/e2e/generated/BUILD
+--- io_k8s_kubernetes.orig/test/e2e/generated/BUILD	2021-01-26 12:10:52.743726453 +0100
++++ io_k8s_kubernetes/test/e2e/generated/BUILD	2021-01-26 12:11:04.573786572 +0100
+@@ -4,23 +4,24 @@
      "@io_bazel_rules_go//go:def.bzl",
      "go_library",
  )
 -load("//build:bindata.bzl", "go_bindata")
 +load("@dev_source_monogon//build/bindata:bindata.bzl", "bindata")
-
+ 
  go_library(
      name = "go_default_library",
      srcs = [
@@ -385,14 +379,14 @@
          "@io_k8s_klog_v2//:go_default_library",
      ],
  )
-
+ 
 -# IMPORTANT: if you make any changes here, you must also update hack/generate-bindata.sh.
 -go_bindata(
 +bindata(
      name = "bindata",
      srcs = [
          "//test/conformance/testdata:all-srcs",
-@@ -29,9 +30,7 @@ go_bindata(
+@@ -29,9 +30,7 @@
          "//test/fixtures:all-srcs",
          "//test/images:all-srcs",
      ],
@@ -401,5 +395,5 @@
 -    include_metadata = False,
 +    package = "generated",
  )
-
+ 
  filegroup(
diff --git a/third_party/go/patches/k8s-revert-seccomp-runtime-default.patch b/third_party/go/patches/k8s-revert-seccomp-runtime-default.patch
new file mode 100644
index 0000000..d8377b5
--- /dev/null
+++ b/third_party/go/patches/k8s-revert-seccomp-runtime-default.patch
@@ -0,0 +1,48 @@
+Copyright 2020 The Monogon Project Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+  http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+
+From 2adf4ec9796839014a708761b8fb6ad815306def Mon Sep 17 00:00:00 2001
+From: Serge Bazanski <serge@nexantic.com>
+Date: Tue, 26 Jan 2021 11:37:01 +0100
+Subject: [PATCH] Manually revert 
+ https://github.com/kubernetes/kubernetes/pull/90949
+
+This reverts PR 90494 which breaks runc within Metropolis. See T916.
+
+---
+ pkg/kubelet/kuberuntime/kuberuntime_sandbox.go | 7 ++-----
+ 1 file changed, 2 insertions(+), 5 deletions(-)
+
+diff --git a/pkg/kubelet/kuberuntime/kuberuntime_sandbox.go b/pkg/kubelet/kuberuntime/kuberuntime_sandbox.go
+index 0978044f753..c46436f2a41 100644
+--- a/pkg/kubelet/kuberuntime/kuberuntime_sandbox.go
++++ b/pkg/kubelet/kuberuntime/kuberuntime_sandbox.go
+@@ -148,11 +148,8 @@ func (m *kubeGenericRuntimeManager) generatePodSandboxLinuxConfig(pod *v1.Pod) (
+ 	lc := &runtimeapi.LinuxPodSandboxConfig{
+ 		CgroupParent: cgroupParent,
+ 		SecurityContext: &runtimeapi.LinuxSandboxSecurityContext{
+-			Privileged: kubecontainer.HasPrivilegedContainer(pod),
+-
+-			// Forcing sandbox to run as `runtime/default` allow users to
+-			// use least privileged seccomp profiles at pod level. Issue #84623
+-			SeccompProfilePath: v1.SeccompProfileRuntimeDefault,
++			Privileged:         kubecontainer.HasPrivilegedContainer(pod),
++			SeccompProfilePath: m.getSeccompProfile(pod.Annotations, "", pod.Spec.SecurityContext, nil),
+ 		},
+ 	}
+ 
+-- 
+2.26.2
+
diff --git a/third_party/go/repositories.bzl b/third_party/go/repositories.bzl
index 08c7416..a517fe1 100644
--- a/third_party/go/repositories.bzl
+++ b/third_party/go/repositories.bzl
@@ -675,8 +675,8 @@
     go_repository(
         name = "com_github_evanphx_json_patch",
         importpath = "github.com/evanphx/json-patch",
-        version = "v0.0.0-20190815234213-e83c0a1c26c8",
-        sum = "h1:DM7gHzQfHwIj+St8zaPOI6iQEPAxOwIkskvw6s9rDaM=",
+        version = "v4.9.0+incompatible",
+        sum = "h1:kLcOMZeuLAJvL2BPWLMIj5oaZQobrkAqrL+WFZwQses=",
         build_extra_args = [
             "-go_naming_convention=go_default_library",
             "-go_naming_convention_external=go_default_library",
@@ -946,8 +946,8 @@
     go_repository(
         name = "com_github_google_cadvisor",
         importpath = "github.com/google/cadvisor",
-        version = "v0.36.1-0.20200623171404-8450c56c21bc",
-        sum = "h1:il4pi2iOP5NRkBgnZH3n0GDqSCNEJ/QIRJrCAfU5h38=",
+        version = "v0.37.3",
+        sum = "h1:qsH/np74sg1/tEe+bn+e2JIPFxrw6En3gCVuQdolc74=",
         build_extra_args = [
             "-go_naming_convention=go_default_library",
             "-go_naming_convention_external=go_default_library",
@@ -2051,8 +2051,8 @@
     go_repository(
         name = "io_etcd_go_etcd",
         importpath = "go.etcd.io/etcd",
-        version = "v0.5.0-alpha.5.0.20200520232829-54ba9589114f",
-        sum = "h1:pBCD+Z7cy5WPTq+R6MmJJvDRpn88cp7bmTypBsn91g4=",
+        version = "v0.5.0-alpha.5.0.20200819165624-17cef6e3e9d5",
+        sum = "h1:Gqga3zA9tdAcfqobUGjSoCob5L3f8Dt5EuOp3ihNZko=",
         build_file_proto_mode = "disable",
         build_extra_args = [
             "-go_naming_convention=go_default_library",
@@ -2152,8 +2152,8 @@
     go_repository(
         name = "org_golang_x_net",
         importpath = "golang.org/x/net",
-        version = "v0.0.0-20190311183353-d8887717615a",
-        sum = "h1:oWX7TPOiFAMXLq8o0ikBYfCJVlRHBcsciT5bXOrH628=",
+        version = "v0.0.0-20201110031124-69a78807bb2b",
+        sum = "h1:uwuIcX0g4Yl1NC5XAz37xsr2lTtcqevgzYNVt49waME=",
         build_extra_args = [
             "-go_naming_convention=go_default_library",
             "-go_naming_convention_external=go_default_library",
@@ -2332,8 +2332,8 @@
     go_repository(
         name = "io_k8s_api",
         importpath = "k8s.io/api",
-        version = "v0.19.0-rc.0",
-        sum = "h1:K+xi+F3RNAxpFyS1f7uHekMNprjFX7WVZDx2lJE+A3A=",
+        version = "v0.19.7",
+        sum = "h1:MpHhls03C2pyzoYcpbe4QqYiiZjdvW+tuWq6TbjV14Y=",
         build_file_proto_mode = "disable",
         build_extra_args = [
             "-go_naming_convention=go_default_library",
@@ -2343,8 +2343,8 @@
     go_repository(
         name = "io_k8s_apiextensions_apiserver",
         importpath = "k8s.io/apiextensions-apiserver",
-        version = "v0.19.0-rc.0",
-        sum = "h1:XGNmUwNvh5gt6sYwCzaxLU6Dr461DVKWlGiaCSKZzyw=",
+        version = "v0.19.7",
+        sum = "h1:aV9DANMSCCYBEMbtoT/5oesrtcciQrjy9yqWVtZZL5A=",
         build_file_proto_mode = "disable",
         build_extra_args = [
             "-go_naming_convention=go_default_library",
@@ -2354,8 +2354,8 @@
     go_repository(
         name = "io_k8s_apimachinery",
         importpath = "k8s.io/apimachinery",
-        version = "v0.20.0-alpha.0",
-        sum = "h1:XCZhrYfFYSC8GBpI4OUJFTH1s5euLMYdoIDQ7u2aDPM=",
+        version = "v0.19.8-rc.0",
+        sum = "h1:/vt04+wL+Y79Qsu8hAo2K4QJA+AKGkJCYmoTTVrUiPQ=",
         build_file_proto_mode = "disable",
         build_extra_args = [
             "-go_naming_convention=go_default_library",
@@ -2365,8 +2365,8 @@
     go_repository(
         name = "io_k8s_apiserver",
         importpath = "k8s.io/apiserver",
-        version = "v0.19.0-rc.0",
-        sum = "h1:SaF/gMgUeDPbQDKHTMvB2yynBUZpp6s4HYQIOx/LdDQ=",
+        version = "v0.19.7",
+        sum = "h1:fOOELJ9TNC6DgKL3GUkQLE/EBMLjwBseTstx2eRP61o=",
         build_file_proto_mode = "disable",
         build_extra_args = [
             "-go_naming_convention=go_default_library",
@@ -2376,8 +2376,8 @@
     go_repository(
         name = "io_k8s_cli_runtime",
         importpath = "k8s.io/cli-runtime",
-        version = "v0.19.0-rc.0",
-        sum = "h1:amuzfqubksp5ooo99cpiu6hYe6ua1bGEqw59vZKyRqA=",
+        version = "v0.19.7",
+        sum = "h1:VkHsqrQYCD6+yBm2k9lOxLJtfo1tmb/TdYIHQ2RSCsY=",
         build_extra_args = [
             "-go_naming_convention=go_default_library",
             "-go_naming_convention_external=go_default_library",
@@ -2386,8 +2386,8 @@
     go_repository(
         name = "io_k8s_client_go",
         importpath = "k8s.io/client-go",
-        version = "v0.19.0-rc.0",
-        sum = "h1:6WW8MElhoLeYcLiN4ky1159XG5E39KYdmLCrV/6lNiE=",
+        version = "v0.19.7",
+        sum = "h1:SoJ4mzZ9LyXBGDe8MmpMznw0CwQ1ITWgsmG7GixvhUU=",
         pre_patches = [
             "//third_party/go/patches:k8s-client-go.patch",
         ],
@@ -2400,8 +2400,8 @@
     go_repository(
         name = "io_k8s_cloud_provider",
         importpath = "k8s.io/cloud-provider",
-        version = "v0.19.0-rc.0",
-        sum = "h1:W1YV1XhdklzoGFZcYmzJnm3D4O6uWaoEAFRF1X4h7uw=",
+        version = "v0.19.7",
+        sum = "h1:01fiPTLkTU/MNKZBcMmeYQ5DWqRS4d3GhYGGGlkjgOw=",
         build_extra_args = [
             "-go_naming_convention=go_default_library",
             "-go_naming_convention_external=go_default_library",
@@ -2410,8 +2410,8 @@
     go_repository(
         name = "io_k8s_cluster_bootstrap",
         importpath = "k8s.io/cluster-bootstrap",
-        version = "v0.19.0-rc.0",
-        sum = "h1:2OCD/1YLoWlBisd7MPfPM35ZXFct/eA94TkRs/uAuhg=",
+        version = "v0.19.7",
+        sum = "h1:xlI+YfeS5gOVa33WVh1viiPZMDN9j7BAiY0iJkg2LwI=",
         build_extra_args = [
             "-go_naming_convention=go_default_library",
             "-go_naming_convention_external=go_default_library",
@@ -2420,8 +2420,8 @@
     go_repository(
         name = "io_k8s_component_base",
         importpath = "k8s.io/component-base",
-        version = "v0.19.0-rc.0",
-        sum = "h1:S/jt6xey1Wg5i5A9/BCkPYekpjJ5zlfuSCCVlNSJ/Yc=",
+        version = "v0.19.7",
+        sum = "h1:ZXS2VRWOWBOc2fTd1zjzhi/b/mkqFT9FDqiNsn1cH30=",
         build_extra_args = [
             "-go_naming_convention=go_default_library",
             "-go_naming_convention_external=go_default_library",
@@ -2430,8 +2430,8 @@
     go_repository(
         name = "io_k8s_cri_api",
         importpath = "k8s.io/cri-api",
-        version = "v0.19.0-rc.0",
-        sum = "h1:vXd1YUBZcQkkDb2jYdtaCm+XFA2euMVGVU08EKsN40k=",
+        version = "v0.19.8-rc.0",
+        sum = "h1:aXNNIIoVcmIB/mlz/otcULQOgnErxnLB4uaWENHKblA=",
         build_file_proto_mode = "disable",
         build_extra_args = [
             "-go_naming_convention=go_default_library",
@@ -2441,8 +2441,8 @@
     go_repository(
         name = "io_k8s_csi_translation_lib",
         importpath = "k8s.io/csi-translation-lib",
-        version = "v0.19.0-rc.0",
-        sum = "h1:2xvrVxnNKtbhilsj/gcD60P9r2PGT+zAEhBWNynySgk=",
+        version = "v0.19.7",
+        sum = "h1:Spr0XWqXufEUQA47axmPTm1xOabdMYG9MUbJVaRRb0g=",
         build_extra_args = [
             "-go_naming_convention=go_default_library",
             "-go_naming_convention_external=go_default_library",
@@ -2481,8 +2481,8 @@
     go_repository(
         name = "io_k8s_kube_aggregator",
         importpath = "k8s.io/kube-aggregator",
-        version = "v0.19.0-rc.0",
-        sum = "h1:+u9y1c0R2GF8fuaEnlJrdUtxoEmQOON98oatycSquOA=",
+        version = "v0.19.7",
+        sum = "h1:Eol5vPNFKaDScdVuTh0AofhuSr4cJxP5Vfv8JXW8OAQ=",
         build_file_proto_mode = "disable",
         build_extra_args = [
             "-go_naming_convention=go_default_library",
@@ -2492,8 +2492,8 @@
     go_repository(
         name = "io_k8s_kube_controller_manager",
         importpath = "k8s.io/kube-controller-manager",
-        version = "v0.19.0-rc.0",
-        sum = "h1:b78T0fHLtRqOEe/70UzdTI0mN2hOph/krz9B5yI/DN4=",
+        version = "v0.19.7",
+        sum = "h1:3rNXjHM5LHcv2HiO2JjdV4yW3EN+2tCPaKXWL/Cl8TM=",
         build_extra_args = [
             "-go_naming_convention=go_default_library",
             "-go_naming_convention_external=go_default_library",
@@ -2502,8 +2502,8 @@
     go_repository(
         name = "io_k8s_kube_openapi",
         importpath = "k8s.io/kube-openapi",
-        version = "v0.0.0-20200427153329-656914f816f9",
-        sum = "h1:5NC2ITmvg8RoxoH0wgmL4zn4VZqXGsKbxrikjaQx6s4=",
+        version = "v0.0.0-20200805222855-6aeccd4b50c6",
+        sum = "h1:+WnxoVtG8TMiudHBSEtrVL1egv36TkkJm+bA8AxicmQ=",
         build_extra_args = [
             "-go_naming_convention=go_default_library",
             "-go_naming_convention_external=go_default_library",
@@ -2512,8 +2512,8 @@
     go_repository(
         name = "io_k8s_kube_proxy",
         importpath = "k8s.io/kube-proxy",
-        version = "v0.19.0-rc.0",
-        sum = "h1:eYzuS4rtUGH8Nglk40WIWSNQyMSTj8pKcGB14BKVhHg=",
+        version = "v0.19.7",
+        sum = "h1:QQUwEnHA1jawodclndlmK/6Ifc9XVNlUaQ4Vq5RVbI8=",
         build_extra_args = [
             "-go_naming_convention=go_default_library",
             "-go_naming_convention_external=go_default_library",
@@ -2522,8 +2522,8 @@
     go_repository(
         name = "io_k8s_kube_scheduler",
         importpath = "k8s.io/kube-scheduler",
-        version = "v0.19.0-rc.0",
-        sum = "h1:KiKDepusDaex8fJj2R0F1y2zNj/oPaCzziC7JiuU09o=",
+        version = "v0.19.7",
+        sum = "h1:TlQFoH7rATVqU7myNZ4FBgnXdGIwR7iBBNk3ir8Y9WM=",
         build_extra_args = [
             "-go_naming_convention=go_default_library",
             "-go_naming_convention_external=go_default_library",
@@ -2532,8 +2532,8 @@
     go_repository(
         name = "io_k8s_kubectl",
         importpath = "k8s.io/kubectl",
-        version = "v0.19.0-rc.0",
-        sum = "h1:JcCGByIwsglw1eQKUpTfYuxSjvQ5NUQTyxoGp1P/Bx4=",
+        version = "v0.19.7",
+        sum = "h1:pSsha+MBr9KLhn0IKrRikeAZ7g2oeShIGHLgqAzE3Ak=",
         build_extra_args = [
             "-go_naming_convention=go_default_library",
             "-go_naming_convention_external=go_default_library",
@@ -2542,8 +2542,8 @@
     go_repository(
         name = "io_k8s_kubelet",
         importpath = "k8s.io/kubelet",
-        version = "v0.19.0-rc.0",
-        sum = "h1:Eii9aWFKr4MtrRSlhxnaLkGZ0WkSb2p6sPyDuMul/Tc=",
+        version = "v0.19.7",
+        sum = "h1:cPp0fXN99cxyXeoI3nG2ZBORUvR0liT+bg6ofCybJzw=",
         build_file_proto_mode = "disable",
         build_extra_args = [
             "-go_naming_convention=go_default_library",
@@ -2553,8 +2553,8 @@
     go_repository(
         name = "io_k8s_kubernetes",
         importpath = "k8s.io/kubernetes",
-        version = "v1.19.0-rc.0",
-        sum = "h1:vKA6/0biZ/LJUPuWWzn1lfqIQrjfuJBVAtHn7AYScTs=",
+        version = "v1.19.7",
+        sum = "h1:Yk9W5SL1KR2mwy0nNZwjFXNImfK7ihrbKhXttidNTiE=",
         build_file_proto_mode = "disable",
         build_tags = [
             "providerless",
@@ -2564,6 +2564,7 @@
             "//third_party/go/patches:k8s-kubernetes-build.patch",
             "//third_party/go/patches:k8s-native-metrics.patch",
             "//third_party/go/patches:k8s-use-native.patch",
+            "//third_party/go/patches:k8s-revert-seccomp-runtime-default.patch",
         ],
         pre_patches = [
             "//third_party/go/patches:k8s-e2e-tests-providerless.patch",
@@ -2579,8 +2580,8 @@
     go_repository(
         name = "io_k8s_legacy_cloud_providers",
         importpath = "k8s.io/legacy-cloud-providers",
-        version = "v0.19.0-rc.0",
-        sum = "h1:cyf6e9AnQL/ATzZHXDqdwlD+lmRhtKCYPcfeFqb8wn0=",
+        version = "v0.19.7",
+        sum = "h1:YJ/l/8/Hn56I9m1cudK8aNypRA/NvI/hYhg8fo/CTus=",
         build_extra_args = [
             "-go_naming_convention=go_default_library",
             "-go_naming_convention_external=go_default_library",
@@ -2589,8 +2590,8 @@
     go_repository(
         name = "io_k8s_metrics",
         importpath = "k8s.io/metrics",
-        version = "v0.19.0-rc.0",
-        sum = "h1:hPBuMVgXakpnLBLe0K9SZxF8T7mH9VaNTY/pKsU/958=",
+        version = "v0.19.7",
+        sum = "h1:fpTtFhNtS0DwJiYGGsL4YoSjHlLw8qugkgw3EXSWaUA=",
         build_file_proto_mode = "disable",
         build_extra_args = [
             "-go_naming_convention=go_default_library",
@@ -2610,8 +2611,8 @@
     go_repository(
         name = "io_k8s_sample_apiserver",
         importpath = "k8s.io/sample-apiserver",
-        version = "v0.19.0-rc.0",
-        sum = "h1:ZsO1AWW9k79zA+tU1nu7nGMGT7XidiA1jDrfBvMZmzg=",
+        version = "v0.19.7",
+        sum = "h1:ZWD6dsvqpqhWj3jKRb19/m/bo/0r+TRgjkX+h5m7f4g=",
         build_extra_args = [
             "-go_naming_convention=go_default_library",
             "-go_naming_convention_external=go_default_library",
@@ -2620,8 +2621,8 @@
     go_repository(
         name = "io_k8s_utils",
         importpath = "k8s.io/utils",
-        version = "v0.0.0-20200619165400-6e3d28b6ed19",
-        sum = "h1:7Nu2dTj82c6IaWvL7hImJzcXoTPz1MsSCH7r+0m6rfo=",
+        version = "v0.0.0-20200729134348-d5654de09c73",
+        sum = "h1:uJmqzgNWG7XyClnU/mLPBWwfKKF1K8Hf8whTseBgJcg=",
         patches = [
             "//third_party/go/patches:k8s-native-mounter.patch",
         ],
@@ -2652,10 +2653,10 @@
         ],
     )
     go_repository(
-        name = "io_k8s_sigs_structured_merge_diff_v3",
-        importpath = "sigs.k8s.io/structured-merge-diff/v3",
-        version = "v3.0.0",
-        sum = "h1:dOmIZBMfhcHS09XZkMyUgkq5trg3/jRyJYFZUiaOp8E=",
+        name = "io_k8s_sigs_structured_merge_diff_v4",
+        importpath = "sigs.k8s.io/structured-merge-diff/v4",
+        version = "v4.0.1",
+        sum = "h1:YXTMot5Qz/X1iBRJhAt+vI+HVttY0WkSqqhKxQ0xVbA=",
         build_extra_args = [
             "-go_naming_convention=go_default_library",
             "-go_naming_convention_external=go_default_library",
diff --git a/third_party/go/shelf.pb.text b/third_party/go/shelf.pb.text
index 0fdaced..19a0f05 100644
--- a/third_party/go/shelf.pb.text
+++ b/third_party/go/shelf.pb.text
@@ -853,6 +853,13 @@
   semver: "v4.2.0+incompatible"
 >
 entry: <
+  import_path: "github.com/evanphx/json-patch"
+  version: "v4.9.0+incompatible"
+  bazel_name: "com_github_evanphx_json_patch"
+  sum: "h1:kLcOMZeuLAJvL2BPWLMIj5oaZQobrkAqrL+WFZwQses="
+  semver: "v4.9.0+incompatible"
+>
+entry: <
   import_path: "github.com/exponent-io/jsonpath"
   version: "v0.0.0-20151013193312-d6023ce2651d"
   bazel_name: "com_github_exponent_io_jsonpath"
@@ -1098,6 +1105,20 @@
   semver: "v0.36.1-0.20200623171404-8450c56c21bc"
 >
 entry: <
+  import_path: "github.com/google/cadvisor"
+  version: "v0.37.0"
+  bazel_name: "com_github_google_cadvisor"
+  sum: "h1:t3txV4zNZZGTuwuA/Onm3HToPhg16GjigAHZHEVIz+c="
+  semver: "v0.37.0"
+>
+entry: <
+  import_path: "github.com/google/cadvisor"
+  version: "v0.37.3"
+  bazel_name: "com_github_google_cadvisor"
+  sum: "h1:qsH/np74sg1/tEe+bn+e2JIPFxrw6En3gCVuQdolc74="
+  semver: "v0.37.3"
+>
+entry: <
   import_path: "github.com/google/certificate-transparency-go"
   version: "v1.1.0"
   bazel_name: "com_github_google_certificate_transparency_go"
@@ -2414,6 +2435,20 @@
   semver: "v0.5.0-alpha.5.0.20200520232829-54ba9589114f"
 >
 entry: <
+  import_path: "go.etcd.io/etcd"
+  version: "v0.5.0-alpha.5.0.20200716221620-18dfb9cca345"
+  bazel_name: "io_etcd_go_etcd"
+  sum: "h1:2gOG36vt1BhUqpzxwZLZJxUim2dHB05vw+RAn4Q6YOU="
+  semver: "v0.5.0-alpha.5.0.20200716221620-18dfb9cca345"
+>
+entry: <
+  import_path: "go.etcd.io/etcd"
+  version: "v0.5.0-alpha.5.0.20200819165624-17cef6e3e9d5"
+  bazel_name: "io_etcd_go_etcd"
+  sum: "h1:Gqga3zA9tdAcfqobUGjSoCob5L3f8Dt5EuOp3ihNZko="
+  semver: "v0.5.0-alpha.5.0.20200819165624-17cef6e3e9d5"
+>
+entry: <
   import_path: "go.mongodb.org/mongo-driver"
   version: "v1.1.2"
   bazel_name: "org_mongodb_go_mongo_driver"
@@ -2526,6 +2561,13 @@
   semver: "v0.0.0-20190311183353-d8887717615a"
 >
 entry: <
+  import_path: "golang.org/x/net"
+  version: "v0.0.0-20201110031124-69a78807bb2b"
+  bazel_name: "org_golang_x_net"
+  sum: "h1:uwuIcX0g4Yl1NC5XAz37xsr2lTtcqevgzYNVt49waME="
+  semver: "v0.0.0-20201110031124-69a78807bb2b"
+>
+entry: <
   import_path: "golang.org/x/oauth2"
   version: "0f29369cfe4552d0e4bcddc57cc75f4d7e672a33"
   bazel_name: "org_golang_x_oauth2"
@@ -2736,6 +2778,27 @@
   semver: "v0.19.0-rc.0"
 >
 entry: <
+  import_path: "k8s.io/api"
+  version: "kubernetes-1.19.0-rc.1"
+  bazel_name: "io_k8s_api"
+  sum: "h1:aZ3pinA/83K1i80AH+cbrHUi/HkZ1AaToKB3q6ROZtc="
+  semver: "v0.19.0-rc.1"
+>
+entry: <
+  import_path: "k8s.io/api"
+  version: "kubernetes-1.19.0-rc.2"
+  bazel_name: "io_k8s_api"
+  sum: "h1:Lq0owhvgpWXmMtz+t2AT/JJpIAPX9X8lK3oE2qslYCU="
+  semver: "v0.19.0-rc.2"
+>
+entry: <
+  import_path: "k8s.io/api"
+  version: "kubernetes-1.19.7"
+  bazel_name: "io_k8s_api"
+  sum: "h1:MpHhls03C2pyzoYcpbe4QqYiiZjdvW+tuWq6TbjV14Y="
+  semver: "v0.19.7"
+>
+entry: <
   import_path: "k8s.io/apiextensions-apiserver"
   version: "kubernetes-1.19.0-alpha.2"
   bazel_name: "io_k8s_apiextensions_apiserver"
@@ -2750,6 +2813,27 @@
   semver: "v0.19.0-rc.0"
 >
 entry: <
+  import_path: "k8s.io/apiextensions-apiserver"
+  version: "kubernetes-1.19.0-rc.1"
+  bazel_name: "io_k8s_apiextensions_apiserver"
+  sum: "h1:FyzZGZok+v8PPs6oOF5wJj6u8zKH1VTlNNtWeAgkUMc="
+  semver: "v0.19.0-rc.1"
+>
+entry: <
+  import_path: "k8s.io/apiextensions-apiserver"
+  version: "kubernetes-1.19.0-rc.2"
+  bazel_name: "io_k8s_apiextensions_apiserver"
+  sum: "h1:K57jvXQhrmyr58vEBWlO2eaTpDdtTOOnSIL2cnDc9Oc="
+  semver: "v0.19.0-rc.2"
+>
+entry: <
+  import_path: "k8s.io/apiextensions-apiserver"
+  version: "kubernetes-1.19.7"
+  bazel_name: "io_k8s_apiextensions_apiserver"
+  sum: "h1:aV9DANMSCCYBEMbtoT/5oesrtcciQrjy9yqWVtZZL5A="
+  semver: "v0.19.7"
+>
+entry: <
   import_path: "k8s.io/apimachinery"
   version: "kubernetes-1.19.0-alpha.2"
   bazel_name: "io_k8s_apimachinery"
@@ -2764,6 +2848,27 @@
   semver: "v0.20.0-alpha.0"
 >
 entry: <
+  import_path: "k8s.io/apimachinery"
+  version: "kubernetes-1.19.0-rc.1"
+  bazel_name: "io_k8s_apimachinery"
+  sum: "h1:JScnJRuwKHT8RmdrsFMkE4Oi+SVI/QIWFGOOhNZJe/M="
+  semver: "v0.19.0-rc.2"
+>
+entry: <
+  import_path: "k8s.io/apimachinery"
+  version: "kubernetes-1.19.0-rc.2"
+  bazel_name: "io_k8s_apimachinery"
+  sum: "h1:JScnJRuwKHT8RmdrsFMkE4Oi+SVI/QIWFGOOhNZJe/M="
+  semver: "v0.19.0-rc.2"
+>
+entry: <
+  import_path: "k8s.io/apimachinery"
+  version: "kubernetes-1.19.7"
+  bazel_name: "io_k8s_apimachinery"
+  sum: "h1:/vt04+wL+Y79Qsu8hAo2K4QJA+AKGkJCYmoTTVrUiPQ="
+  semver: "v0.19.8-rc.0"
+>
+entry: <
   import_path: "k8s.io/apiserver"
   version: "kubernetes-1.19.0-alpha.2"
   bazel_name: "io_k8s_apiserver"
@@ -2778,6 +2883,27 @@
   semver: "v0.19.0-rc.0"
 >
 entry: <
+  import_path: "k8s.io/apiserver"
+  version: "kubernetes-1.19.0-rc.1"
+  bazel_name: "io_k8s_apiserver"
+  sum: "h1:DVZoL0PHSuU5W74vXlzC/QRHQf3Cm4jzCCi7nH+6vEg="
+  semver: "v0.19.0-rc.1"
+>
+entry: <
+  import_path: "k8s.io/apiserver"
+  version: "kubernetes-1.19.0-rc.2"
+  bazel_name: "io_k8s_apiserver"
+  sum: "h1:ZTpOyPbd0wNC4DQDRyEtLRiWxjVnrSFfO7FdQBuEhe0="
+  semver: "v0.19.0-rc.2"
+>
+entry: <
+  import_path: "k8s.io/apiserver"
+  version: "kubernetes-1.19.7"
+  bazel_name: "io_k8s_apiserver"
+  sum: "h1:fOOELJ9TNC6DgKL3GUkQLE/EBMLjwBseTstx2eRP61o="
+  semver: "v0.19.7"
+>
+entry: <
   import_path: "k8s.io/cli-runtime"
   version: "kubernetes-1.19.0-alpha.2"
   bazel_name: "io_k8s_cli_runtime"
@@ -2792,6 +2918,27 @@
   semver: "v0.19.0-rc.0"
 >
 entry: <
+  import_path: "k8s.io/cli-runtime"
+  version: "kubernetes-1.19.0-rc.1"
+  bazel_name: "io_k8s_cli_runtime"
+  sum: "h1:864MEeG6kED29lCbCjaG6xcw1ehTG8X7LMP/HZ4V8mc="
+  semver: "v0.19.0-rc.1"
+>
+entry: <
+  import_path: "k8s.io/cli-runtime"
+  version: "kubernetes-1.19.0-rc.2"
+  bazel_name: "io_k8s_cli_runtime"
+  sum: "h1:ZDOPbruwfBYGnXcYpxVKqpU1LTLM/A4GdSGS0HpNgD0="
+  semver: "v0.19.0-rc.2"
+>
+entry: <
+  import_path: "k8s.io/cli-runtime"
+  version: "kubernetes-1.19.7"
+  bazel_name: "io_k8s_cli_runtime"
+  sum: "h1:VkHsqrQYCD6+yBm2k9lOxLJtfo1tmb/TdYIHQ2RSCsY="
+  semver: "v0.19.7"
+>
+entry: <
   import_path: "k8s.io/client-go"
   version: "kubernetes-1.19.0-alpha.2"
   bazel_name: "io_k8s_client_go"
@@ -2806,6 +2953,27 @@
   semver: "v0.19.0-rc.0"
 >
 entry: <
+  import_path: "k8s.io/client-go"
+  version: "kubernetes-1.19.0-rc.1"
+  bazel_name: "io_k8s_client_go"
+  sum: "h1:QLpp+y4c9MG34l9CC2rS81rn0zZu1CAovFtLUauBLZk="
+  semver: "v0.19.0-rc.1"
+>
+entry: <
+  import_path: "k8s.io/client-go"
+  version: "kubernetes-1.19.0-rc.2"
+  bazel_name: "io_k8s_client_go"
+  sum: "h1:ttUSnt95lsdRvw1MIIMppozF7BA4KMVzIxduU973h3M="
+  semver: "v0.19.0-rc.2"
+>
+entry: <
+  import_path: "k8s.io/client-go"
+  version: "kubernetes-1.19.7"
+  bazel_name: "io_k8s_client_go"
+  sum: "h1:SoJ4mzZ9LyXBGDe8MmpMznw0CwQ1ITWgsmG7GixvhUU="
+  semver: "v0.19.7"
+>
+entry: <
   import_path: "k8s.io/cloud-provider"
   version: "kubernetes-1.19.0-alpha.2"
   bazel_name: "io_k8s_cloud_provider"
@@ -2820,6 +2988,27 @@
   semver: "v0.19.0-rc.0"
 >
 entry: <
+  import_path: "k8s.io/cloud-provider"
+  version: "kubernetes-1.19.0-rc.1"
+  bazel_name: "io_k8s_cloud_provider"
+  sum: "h1:MxRGwiHl4yGyDEKmn2FNXouENA/A6RkeI95rFT/5WSY="
+  semver: "v0.19.0-rc.1"
+>
+entry: <
+  import_path: "k8s.io/cloud-provider"
+  version: "kubernetes-1.19.0-rc.2"
+  bazel_name: "io_k8s_cloud_provider"
+  sum: "h1:Y0ErTXKY/Ia1o3yukW6RRci4BR2VW7haWro7XA2+AK8="
+  semver: "v0.19.0-rc.2"
+>
+entry: <
+  import_path: "k8s.io/cloud-provider"
+  version: "kubernetes-1.19.7"
+  bazel_name: "io_k8s_cloud_provider"
+  sum: "h1:01fiPTLkTU/MNKZBcMmeYQ5DWqRS4d3GhYGGGlkjgOw="
+  semver: "v0.19.7"
+>
+entry: <
   import_path: "k8s.io/cluster-bootstrap"
   version: "kubernetes-1.19.0-alpha.2"
   bazel_name: "io_k8s_cluster_bootstrap"
@@ -2834,6 +3023,27 @@
   semver: "v0.19.0-rc.0"
 >
 entry: <
+  import_path: "k8s.io/cluster-bootstrap"
+  version: "kubernetes-1.19.0-rc.1"
+  bazel_name: "io_k8s_cluster_bootstrap"
+  sum: "h1:N3a0r4ozsPfm9Q7pjDQnyQVd4lAn2RWhZ3uPt2X7dak="
+  semver: "v0.19.0-rc.1"
+>
+entry: <
+  import_path: "k8s.io/cluster-bootstrap"
+  version: "kubernetes-1.19.0-rc.2"
+  bazel_name: "io_k8s_cluster_bootstrap"
+  sum: "h1:xE7k984EcuimERJQWUSnojf/WzK5X2ZLmtf8+staa/k="
+  semver: "v0.19.0-rc.2"
+>
+entry: <
+  import_path: "k8s.io/cluster-bootstrap"
+  version: "kubernetes-1.19.7"
+  bazel_name: "io_k8s_cluster_bootstrap"
+  sum: "h1:xlI+YfeS5gOVa33WVh1viiPZMDN9j7BAiY0iJkg2LwI="
+  semver: "v0.19.7"
+>
+entry: <
   import_path: "k8s.io/component-base"
   version: "kubernetes-1.19.0-alpha.2"
   bazel_name: "io_k8s_component_base"
@@ -2848,6 +3058,27 @@
   semver: "v0.19.0-rc.0"
 >
 entry: <
+  import_path: "k8s.io/component-base"
+  version: "kubernetes-1.19.0-rc.1"
+  bazel_name: "io_k8s_component_base"
+  sum: "h1:OjW3b9Az+hX6B/5+Htu/UWKR0xRpZc77OujYiH5eUOc="
+  semver: "v0.19.0-rc.1"
+>
+entry: <
+  import_path: "k8s.io/component-base"
+  version: "kubernetes-1.19.0-rc.2"
+  bazel_name: "io_k8s_component_base"
+  sum: "h1:pJponI+sSso1sx+frQqJYWn/QhxoqpufVbQp+SOazRg="
+  semver: "v0.19.0-rc.2"
+>
+entry: <
+  import_path: "k8s.io/component-base"
+  version: "kubernetes-1.19.7"
+  bazel_name: "io_k8s_component_base"
+  sum: "h1:ZXS2VRWOWBOc2fTd1zjzhi/b/mkqFT9FDqiNsn1cH30="
+  semver: "v0.19.7"
+>
+entry: <
   import_path: "k8s.io/cri-api"
   version: "kubernetes-1.19.0-alpha.2"
   bazel_name: "io_k8s_cri_api"
@@ -2862,6 +3093,27 @@
   semver: "v0.19.0-rc.0"
 >
 entry: <
+  import_path: "k8s.io/cri-api"
+  version: "kubernetes-1.19.0-rc.1"
+  bazel_name: "io_k8s_cri_api"
+  sum: "h1:PissGgjQNgEN34/PTwzfjej40ugly6Xto83nua48fQI="
+  semver: "v0.19.0-rc.2"
+>
+entry: <
+  import_path: "k8s.io/cri-api"
+  version: "kubernetes-1.19.0-rc.2"
+  bazel_name: "io_k8s_cri_api"
+  sum: "h1:PissGgjQNgEN34/PTwzfjej40ugly6Xto83nua48fQI="
+  semver: "v0.19.0-rc.2"
+>
+entry: <
+  import_path: "k8s.io/cri-api"
+  version: "kubernetes-1.19.7"
+  bazel_name: "io_k8s_cri_api"
+  sum: "h1:aXNNIIoVcmIB/mlz/otcULQOgnErxnLB4uaWENHKblA="
+  semver: "v0.19.8-rc.0"
+>
+entry: <
   import_path: "k8s.io/csi-translation-lib"
   version: "kubernetes-1.19.0-alpha.2"
   bazel_name: "io_k8s_csi_translation_lib"
@@ -2876,6 +3128,27 @@
   semver: "v0.19.0-rc.0"
 >
 entry: <
+  import_path: "k8s.io/csi-translation-lib"
+  version: "kubernetes-1.19.0-rc.1"
+  bazel_name: "io_k8s_csi_translation_lib"
+  sum: "h1:pfArnZDYBLj6clbUrnr4/Nxr4kYbril6YfgnpWSa4Ro="
+  semver: "v0.19.0-rc.1"
+>
+entry: <
+  import_path: "k8s.io/csi-translation-lib"
+  version: "kubernetes-1.19.0-rc.2"
+  bazel_name: "io_k8s_csi_translation_lib"
+  sum: "h1:bQQGrBWdA6m1E2jC+N7H74/EPEedfCrzpMPV6NZLPn4="
+  semver: "v0.19.0-rc.2"
+>
+entry: <
+  import_path: "k8s.io/csi-translation-lib"
+  version: "kubernetes-1.19.7"
+  bazel_name: "io_k8s_csi_translation_lib"
+  sum: "h1:Spr0XWqXufEUQA47axmPTm1xOabdMYG9MUbJVaRRb0g="
+  semver: "v0.19.7"
+>
+entry: <
   import_path: "k8s.io/gengo"
   version: "v0.0.0-20200205140755-e0e292d8aa12"
   bazel_name: "io_k8s_gengo"
@@ -2932,6 +3205,27 @@
   semver: "v0.19.0-rc.0"
 >
 entry: <
+  import_path: "k8s.io/kube-aggregator"
+  version: "kubernetes-1.19.0-rc.1"
+  bazel_name: "io_k8s_kube_aggregator"
+  sum: "h1:4cUxyctDROvPdzIh7Rf1I6raxVo8UvgG8cT1MaKRu9M="
+  semver: "v0.19.0-rc.1"
+>
+entry: <
+  import_path: "k8s.io/kube-aggregator"
+  version: "kubernetes-1.19.0-rc.2"
+  bazel_name: "io_k8s_kube_aggregator"
+  sum: "h1:vio1J9d+UHUA/ChBeYgBKVlvzOlG4Jztz1Qw+EIGtFg="
+  semver: "v0.19.0-rc.2"
+>
+entry: <
+  import_path: "k8s.io/kube-aggregator"
+  version: "kubernetes-1.19.7"
+  bazel_name: "io_k8s_kube_aggregator"
+  sum: "h1:Eol5vPNFKaDScdVuTh0AofhuSr4cJxP5Vfv8JXW8OAQ="
+  semver: "v0.19.7"
+>
+entry: <
   import_path: "k8s.io/kube-controller-manager"
   version: "kubernetes-1.19.0-alpha.2"
   bazel_name: "io_k8s_kube_controller_manager"
@@ -2946,6 +3240,27 @@
   semver: "v0.19.0-rc.0"
 >
 entry: <
+  import_path: "k8s.io/kube-controller-manager"
+  version: "kubernetes-1.19.0-rc.1"
+  bazel_name: "io_k8s_kube_controller_manager"
+  sum: "h1:0WY5AmdHZ+yUjpqVd1c0gdBGbNq27YAFz5gVbghTLCI="
+  semver: "v0.19.0-rc.1"
+>
+entry: <
+  import_path: "k8s.io/kube-controller-manager"
+  version: "kubernetes-1.19.0-rc.2"
+  bazel_name: "io_k8s_kube_controller_manager"
+  sum: "h1:InTHaA8D5Uh98PEw+Uu4J42c+MXLv12EDUxy5VhRkNQ="
+  semver: "v0.19.0-rc.2"
+>
+entry: <
+  import_path: "k8s.io/kube-controller-manager"
+  version: "kubernetes-1.19.7"
+  bazel_name: "io_k8s_kube_controller_manager"
+  sum: "h1:3rNXjHM5LHcv2HiO2JjdV4yW3EN+2tCPaKXWL/Cl8TM="
+  semver: "v0.19.7"
+>
+entry: <
   import_path: "k8s.io/kube-openapi"
   version: "v0.0.0-20200403204345-e1beb1bd0f35"
   bazel_name: "io_k8s_kube_openapi"
@@ -2960,6 +3275,13 @@
   semver: "v0.0.0-20200427153329-656914f816f9"
 >
 entry: <
+  import_path: "k8s.io/kube-openapi"
+  version: "v0.0.0-20200805222855-6aeccd4b50c6"
+  bazel_name: "io_k8s_kube_openapi"
+  sum: "h1:+WnxoVtG8TMiudHBSEtrVL1egv36TkkJm+bA8AxicmQ="
+  semver: "v0.0.0-20200805222855-6aeccd4b50c6"
+>
+entry: <
   import_path: "k8s.io/kube-proxy"
   version: "kubernetes-1.19.0-alpha.2"
   bazel_name: "io_k8s_kube_proxy"
@@ -2974,6 +3296,27 @@
   semver: "v0.19.0-rc.0"
 >
 entry: <
+  import_path: "k8s.io/kube-proxy"
+  version: "kubernetes-1.19.0-rc.1"
+  bazel_name: "io_k8s_kube_proxy"
+  sum: "h1:mZrjpm2A+dSqfFaD1B4J/UAKqRcOkJXkCAFJk2VR/eI="
+  semver: "v0.19.0-rc.1"
+>
+entry: <
+  import_path: "k8s.io/kube-proxy"
+  version: "kubernetes-1.19.0-rc.2"
+  bazel_name: "io_k8s_kube_proxy"
+  sum: "h1:LUbz06HRHVbwDdfF1U1GfiUUvI8kcnI1rDCwPd8DWYo="
+  semver: "v0.19.0-rc.2"
+>
+entry: <
+  import_path: "k8s.io/kube-proxy"
+  version: "kubernetes-1.19.7"
+  bazel_name: "io_k8s_kube_proxy"
+  sum: "h1:QQUwEnHA1jawodclndlmK/6Ifc9XVNlUaQ4Vq5RVbI8="
+  semver: "v0.19.7"
+>
+entry: <
   import_path: "k8s.io/kube-scheduler"
   version: "kubernetes-1.19.0-alpha.2"
   bazel_name: "io_k8s_kube_scheduler"
@@ -2988,6 +3331,27 @@
   semver: "v0.19.0-rc.0"
 >
 entry: <
+  import_path: "k8s.io/kube-scheduler"
+  version: "kubernetes-1.19.0-rc.1"
+  bazel_name: "io_k8s_kube_scheduler"
+  sum: "h1:VRWuwvXy3Jiu77g/jbjDLhSZbBnsAHQDT1Z+zPb3yK8="
+  semver: "v0.19.0-rc.1"
+>
+entry: <
+  import_path: "k8s.io/kube-scheduler"
+  version: "kubernetes-1.19.0-rc.2"
+  bazel_name: "io_k8s_kube_scheduler"
+  sum: "h1:G7ngD0v3MwjnMMqSwO952y1CmaMepGQZ+L2dCJxAdZY="
+  semver: "v0.19.0-rc.2"
+>
+entry: <
+  import_path: "k8s.io/kube-scheduler"
+  version: "kubernetes-1.19.7"
+  bazel_name: "io_k8s_kube_scheduler"
+  sum: "h1:TlQFoH7rATVqU7myNZ4FBgnXdGIwR7iBBNk3ir8Y9WM="
+  semver: "v0.19.7"
+>
+entry: <
   import_path: "k8s.io/kubectl"
   version: "kubernetes-1.19.0-alpha.2"
   bazel_name: "io_k8s_kubectl"
@@ -3002,6 +3366,27 @@
   semver: "v0.19.0-rc.0"
 >
 entry: <
+  import_path: "k8s.io/kubectl"
+  version: "kubernetes-1.19.0-rc.1"
+  bazel_name: "io_k8s_kubectl"
+  sum: "h1:bFQBga+JazXR7mHtvReQBdNr+HukIhl8chbFX1uJGOc="
+  semver: "v0.19.0-rc.1"
+>
+entry: <
+  import_path: "k8s.io/kubectl"
+  version: "kubernetes-1.19.0-rc.2"
+  bazel_name: "io_k8s_kubectl"
+  sum: "h1:8T613eeOp+iYMVSUtIDd9whgtmbBbXi5ypWwHNPeyxA="
+  semver: "v0.19.0-rc.2"
+>
+entry: <
+  import_path: "k8s.io/kubectl"
+  version: "kubernetes-1.19.7"
+  bazel_name: "io_k8s_kubectl"
+  sum: "h1:pSsha+MBr9KLhn0IKrRikeAZ7g2oeShIGHLgqAzE3Ak="
+  semver: "v0.19.7"
+>
+entry: <
   import_path: "k8s.io/kubelet"
   version: "kubernetes-1.19.0-alpha.2"
   bazel_name: "io_k8s_kubelet"
@@ -3016,6 +3401,27 @@
   semver: "v0.19.0-rc.0"
 >
 entry: <
+  import_path: "k8s.io/kubelet"
+  version: "kubernetes-1.19.0-rc.1"
+  bazel_name: "io_k8s_kubelet"
+  sum: "h1:/5FBG/mD+cJJLVcO8d62UGHi9vQN/XwcJxCGX/CyymE="
+  semver: "v0.19.0-rc.1"
+>
+entry: <
+  import_path: "k8s.io/kubelet"
+  version: "kubernetes-1.19.0-rc.2"
+  bazel_name: "io_k8s_kubelet"
+  sum: "h1:FI1PqAwIL5Z3IxG6cN/EAZ+PsPQNYKfRAALJUuW5Vxc="
+  semver: "v0.19.0-rc.2"
+>
+entry: <
+  import_path: "k8s.io/kubelet"
+  version: "kubernetes-1.19.7"
+  bazel_name: "io_k8s_kubelet"
+  sum: "h1:cPp0fXN99cxyXeoI3nG2ZBORUvR0liT+bg6ofCybJzw="
+  semver: "v0.19.7"
+>
+entry: <
   import_path: "k8s.io/kubernetes"
   version: "v1.19.0-alpha.2"
   bazel_name: "io_k8s_kubernetes"
@@ -3030,6 +3436,27 @@
   semver: "v1.19.0-rc.0"
 >
 entry: <
+  import_path: "k8s.io/kubernetes"
+  version: "v1.19.0-rc.1"
+  bazel_name: "io_k8s_kubernetes"
+  sum: "h1:U4Q6mYCq/fRvRGJGUXSYpJPmN/3xiwe/fgSEHQIFLn4="
+  semver: "v1.19.0-rc.1"
+>
+entry: <
+  import_path: "k8s.io/kubernetes"
+  version: "v1.19.0-rc.2"
+  bazel_name: "io_k8s_kubernetes"
+  sum: "h1:DfihKjoW5xkyvu8zkve5HqzDpocBGlU27qJASEefaqs="
+  semver: "v1.19.0-rc.2"
+>
+entry: <
+  import_path: "k8s.io/kubernetes"
+  version: "v1.19.7"
+  bazel_name: "io_k8s_kubernetes"
+  sum: "h1:Yk9W5SL1KR2mwy0nNZwjFXNImfK7ihrbKhXttidNTiE="
+  semver: "v1.19.7"
+>
+entry: <
   import_path: "k8s.io/legacy-cloud-providers"
   version: "kubernetes-1.19.0-alpha.2"
   bazel_name: "io_k8s_legacy_cloud_providers"
@@ -3044,6 +3471,27 @@
   semver: "v0.19.0-rc.0"
 >
 entry: <
+  import_path: "k8s.io/legacy-cloud-providers"
+  version: "kubernetes-1.19.0-rc.1"
+  bazel_name: "io_k8s_legacy_cloud_providers"
+  sum: "h1:cwwvtZzO/7NpVyssIF1aYZfsePs2Gw30RcZNZS8V8/I="
+  semver: "v0.19.0-rc.1"
+>
+entry: <
+  import_path: "k8s.io/legacy-cloud-providers"
+  version: "kubernetes-1.19.0-rc.2"
+  bazel_name: "io_k8s_legacy_cloud_providers"
+  sum: "h1:b5JtSiH6nHQFdiDcyxMZtnEVGaigU2TVKUt5Dm2sqTs="
+  semver: "v0.19.0-rc.2"
+>
+entry: <
+  import_path: "k8s.io/legacy-cloud-providers"
+  version: "kubernetes-1.19.7"
+  bazel_name: "io_k8s_legacy_cloud_providers"
+  sum: "h1:YJ/l/8/Hn56I9m1cudK8aNypRA/NvI/hYhg8fo/CTus="
+  semver: "v0.19.7"
+>
+entry: <
   import_path: "k8s.io/metrics"
   version: "kubernetes-1.19.0-alpha.2"
   bazel_name: "io_k8s_metrics"
@@ -3058,6 +3506,27 @@
   semver: "v0.19.0-rc.0"
 >
 entry: <
+  import_path: "k8s.io/metrics"
+  version: "kubernetes-1.19.0-rc.1"
+  bazel_name: "io_k8s_metrics"
+  sum: "h1:nezt6kfjpukkUKtCpjEGiRCQDfb43GWSeEwSh8GrFig="
+  semver: "v0.19.0-rc.1"
+>
+entry: <
+  import_path: "k8s.io/metrics"
+  version: "kubernetes-1.19.0-rc.2"
+  bazel_name: "io_k8s_metrics"
+  sum: "h1:GOBf/09ako/0jS7GO3OdCRp0VZ7hpCxMGLOrDnV3C1s="
+  semver: "v0.19.0-rc.2"
+>
+entry: <
+  import_path: "k8s.io/metrics"
+  version: "kubernetes-1.19.7"
+  bazel_name: "io_k8s_metrics"
+  sum: "h1:fpTtFhNtS0DwJiYGGsL4YoSjHlLw8qugkgw3EXSWaUA="
+  semver: "v0.19.7"
+>
+entry: <
   import_path: "k8s.io/repo-infra"
   version: "a3483874bd37251c629c92df6d82a226b0e6ad92"
   bazel_name: "io_k8s_repo_infra"
@@ -3086,6 +3555,27 @@
   semver: "v0.19.0-rc.0"
 >
 entry: <
+  import_path: "k8s.io/sample-apiserver"
+  version: "kubernetes-1.19.0-rc.1"
+  bazel_name: "io_k8s_sample_apiserver"
+  sum: "h1:qLx5iy1os8gWxv7V0tBJkM6Iw4UsEDBvMVy0KsMF/YI="
+  semver: "v0.19.0-rc.1"
+>
+entry: <
+  import_path: "k8s.io/sample-apiserver"
+  version: "kubernetes-1.19.0-rc.2"
+  bazel_name: "io_k8s_sample_apiserver"
+  sum: "h1:FXQ7X5gGhAHOFbRqVqnZyiqa9Tm1RKCspLa9VARU3ng="
+  semver: "v0.19.0-rc.2"
+>
+entry: <
+  import_path: "k8s.io/sample-apiserver"
+  version: "kubernetes-1.19.7"
+  bazel_name: "io_k8s_sample_apiserver"
+  sum: "h1:ZWD6dsvqpqhWj3jKRb19/m/bo/0r+TRgjkX+h5m7f4g="
+  semver: "v0.19.7"
+>
+entry: <
   import_path: "k8s.io/utils"
   version: "v0.0.0-20200324210504-a9aa75ae1b89"
   bazel_name: "io_k8s_utils"
@@ -3100,6 +3590,20 @@
   semver: "v0.0.0-20200619165400-6e3d28b6ed19"
 >
 entry: <
+  import_path: "k8s.io/utils"
+  version: "v0.0.0-20200720150651-0bdb4ca86cbc"
+  bazel_name: "io_k8s_utils"
+  sum: "h1:GiXZzevctVRRBh56shqcqB9s9ReWMU6GTsFyE2RCFJQ="
+  semver: "v0.0.0-20200720150651-0bdb4ca86cbc"
+>
+entry: <
+  import_path: "k8s.io/utils"
+  version: "v0.0.0-20200729134348-d5654de09c73"
+  bazel_name: "io_k8s_utils"
+  sum: "h1:uJmqzgNWG7XyClnU/mLPBWwfKKF1K8Hf8whTseBgJcg="
+  semver: "v0.0.0-20200729134348-d5654de09c73"
+>
+entry: <
   import_path: "sigs.k8s.io/apiserver-network-proxy/konnectivity-client"
   version: "v0.0.7"
   bazel_name: "io_k8s_sigs_apiserver_network_proxy_konnectivity_client"
@@ -3128,6 +3632,20 @@
   semver: "v3.0.0"
 >
 entry: <
+  import_path: "sigs.k8s.io/structured-merge-diff/v3"
+  version: "v3.0.1-0.20200706213357-43c19bbb7fba"
+  bazel_name: "io_k8s_sigs_structured_merge_diff_v3"
+  sum: "h1:AAbnc5KQuTWKuh2QSnyghKIOTFzB0Jayv7/OFDn3Cy4="
+  semver: "v3.0.1-0.20200706213357-43c19bbb7fba"
+>
+entry: <
+  import_path: "sigs.k8s.io/structured-merge-diff/v4"
+  version: "v4.0.1"
+  bazel_name: "io_k8s_sigs_structured_merge_diff_v4"
+  sum: "h1:YXTMot5Qz/X1iBRJhAt+vI+HVttY0WkSqqhKxQ0xVbA="
+  semver: "v4.0.1"
+>
+entry: <
   import_path: "sigs.k8s.io/yaml"
   version: "fd68e9863619f6ec2fdd8625fe1f02e7c877e480"
   bazel_name: "io_k8s_sigs_yaml"